eCHO news is your bi-weekly wrap up of all things eBPF and Cilium. If you want to keep up on the latest in cloud native networking, observability, and security this is your quelle

28th July 2026

The eBPF Company Landscape launched this week, and it maps a market that is continuing to consolidate across the infrastructure software and hardware stack. Over the past decade there have been 24 acquisitions, and DoiT's purchase of Attribute is the first eBPF acquisition entirely outside networking, observability, profiling, and security.

Security still leads the landscape at 43 companies and looks set to keep leading as enterprises need deeper, kernel-level security in the age of AI. The rest of this issue shows real world examples from the landscape including Meta scheduling ad workloads in the kernel with sched_ext, Cloudflare running DDoS mitigation with eBPF at scale, and Michelin, after swapping two CNIs for Cilium, saying "What impressed us most was how smooth the migration was. There was no outage at all, and because of that our customers had no idea the network change was even happening."

In case you missed it last week, this will be the last edition of the newsletter I'll be sending out. Katie is taking over for me so be sure to sign up on LinkedIn. I'm about to head out on my eBPF World Tour so let’s 🐝 -gin.

The Technical

Shielding running kernels against exploits with BPF

Tetragon records the process and network activity that flags exploited CVEs

Cilium’s IPsec performance on Azure Kubernetes Service BYOCNI

IPsec roughly halves throughput, and ztunnel is the fastest encrypted option

Actually Maintaining an eBPF Program

72 kernel, LLVM, and architecture combinations to keep one eBPF tracer working

The Cilium state kubectl will never see

Surfacing Cilium's runtime state without per-node CLI session

BPF Tokens: Fine grained permissions for ebpf workloads

Granting eBPF access without granting host-level tracing power

Using eBPF as Behavioural Ground Truth for Threat Research & Detection Engineering

Closing the gap between workload behaviour and observable telemetry

aibudaevv/sip-exporter

eBPF-based monitoring for SIP telephony infrastructure

erwin-kok/sarena

Rebuilding Cilium's datapath in Rust with Aya

🐝

The Ecosystem

Consolidating on Cilium: How Michelin replaced two CNIs and gained network visibility at scale

“The biggest value for us is that Cilium simply works, and works well”

Cloudflare Uses eBPF to Power Security, Networking & Observability at Global Scale

Cloudflare’s XDP-based L4Drop system can drop 10m+ packets per second 

Unveiling the eBPF Company Landscape: Mapping the Businesses Powering the eBPF Ecosystem

24 eBPF acquisitions in 10 years, and counting. Add your company today!

eBPF Foundation Accelerates Growth with Meta, Toyota Membership, and New Strategic Board Leadership

Toyota and Meta join the Foundation at Silver and Platinum

Modernizing the Meta Ads Service With an Open-Source Kernel Scheduler

A BPF scheduler cut ads-retrieval p99 latency by 28%

🐝

The How To

The Video

eBPF for Security Engineers

Blocking an exploit at the network and runtime layer with Cilium and Tetragon

🐝

The Events

KubeCon + CloudNativeCon Japan

Starting today in Yokohama

SIGCOMM 2026

August 17-21 in Denver, CO

ACM SOSP'26 Workshop on eBPF and Kernel Extensions

September 29th in Prague

Linux Plumbers Conference

October 5-7th in Prague

CiliumCon

November 9 in Salt Lake City

🐝 

The Livestreams

eCHO Episode 212: Let's explore Securing OpenClaw with Tetragon

eCHO Episode 213: What's New in Cilium 1.20

The Post of the Week

As always, if you’ve seen a blog post, a tool, or anything else eBPF or Cilium related that you think the rest of the community should hear about, send them my way. You can either hit reply or join the #echo-news channel on Cilium Slack. You can also find all of the past episodes on the website.

🐝

To make sure you keep getting these emails, please add bill@isovalent.com to your address book or otherwise mark me as a permitted sender.

Know a friend that needs to be in the know? Forward this to them

Was this forwarded to you? Sign up today!

Written and sent by Bill Mulligan and Katie Meinders. Any feedback is welcome!