Designing and Securing Multi-Tenant Runtime Environment at The New York Times
Explore how The New York Times designed a secure, isolated environment for engineering teams using Kubernetes, OPA Gatekeeper, and Cilium, solving multi-tenancy challenges at scale.
From Eventual to Strict Encryption - Securing Cilium's WireGuard Encryption
Explore Cilium's WireGuard strict mode, enhancing Pod-to-Pod traffic encryption in Kubernetes clusters. Learn about identity-based routing and how to mitigate unencrypted data transmission risks.
Why KVStoreMesh? Lessons Learned from Scale Testing Cluster Mesh with 50k Nodes Across 255 Clusters
Explore Cilium Cluster Mesh's scalability limits, challenges in syncing 50k nodes across 255 clusters, and how KVStoreMesh addresses these issues for improved stability in large-scale deployments.
Beyond the Cluster: Harnessing the Power of Kubernetes Namespaces
Explore Adobe's journey in building a cross-cloud, multi-tenant Kubernetes platform. Learn about tools, challenges, and lessons for balancing velocity and reliability in modern developer ecosystems.
Istio and Cilium - Pushing the Boundaries of Zero-Trust Security
Explore innovative zero-trust network solutions using Istio ambient mesh and Cilium. Learn to secure Kubernetes services with defense-in-depth strategies and policy enforcement points for optimal performance and protection.
BPF Programmable Netdevice - Introduction to Netkit
Explore BPF networking advancements, including tcx fast path and the new "netkit" programmable netdevice. Learn about its integration with Cilium and its potential impact on network infrastructure.
All Your Queues Are Belong to Us - The Hunt for a Network Bug in the Kernel
Dive into a complex Kubernetes network performance issue, exploring debugging steps, kernel tracing, and the discovery of a bug. Learn about eBPF-based mitigation and upstream fixes.
Reshaping Network Traffic with eBPF and XDP - An Interactive Tutorial
Interactive tutorial on using eBPF and XDP to reshape network traffic, apply routing policies, and enhance security in Kubernetes clusters. Hands-on experience with cutting-edge kernel-level programming techniques.
Cilium - BPF and XDP for Container Networking
Explore Cilium's use of BPF and XDP for container networking, covering integration, performance, and security aspects in modern orchestration systems.
Proxyful or Proxyless: Digging into Istio with Cilium
Explore Cilium and Istio integration for robust application networking, covering connectivity, performance, security, and observability in cloud-native environments.
Level 7 Egress Control in Kubernetes: Current Solutions and Future Standards - SREcon23
Explores FQDN-based egress control in Kubernetes, discussing current solutions, recent developments, and ongoing standardization efforts for improved network security and traffic management.
Kubernetes Node Firewalling from the Inside Out
Explore advanced host network firewalling in Kubernetes using declarative resources. Learn about contemporary implementations in Talos and Cilium for enhanced cluster security.
Securing Your Cluster with Cilium Network Policies
Explore Cilium Network Policies for robust Kubernetes cluster security. Learn implementation strategies and best practices to enhance your cloud-native infrastructure protection.
Simplifying Multi-Cluster and Multi-Cloud Deployments with Cilium
Explore Cilium's ClusterMesh for seamless multi-cluster Kubernetes deployments. Learn secure connectivity, service distribution, load balancing, and cross-cluster network policies through live demos.
eBPF's Abilities and Limitations - The Truth
Explore eBPF's capabilities in cloud native infrastructure, debunking myths about its limitations through demonstrations of looping, state management, and Turing completeness.
Running PCI-DSS Certified Kubernetes Workloads in the Public Cloud
Discover strategies for running PCI-DSS certified Kubernetes workloads in AWS. Learn about GitOps, network policies, image scanning, policy as code, and runtime security using open-source tools like ArgoCD, Cilium, and OPA Gatekeeper.
Connecting Millions of Containers Spanning Dozens of Clusters - Service Discovery Challenges
Explore service discovery challenges in large-scale Kubernetes environments and learn solutions for efficient multi-cluster communication, including global DNS architecture and native VPC IP allocation using Cilium.
Cilium ClusterMesh - Strengthening Security Across Distributed Kubernetes Clusters
Explore Cilium ClusterMesh implementation for securing distributed Kubernetes clusters, featuring Sicredi's evaluation process, comparison with other service meshes, and practical application of security policies.
Speedrun Through Splicing Sockets with Sockmap
Explore sockmap API for efficient data transfer between sockets in Linux, its evolution, features, and role in Cilium for L7 filtering and policy enforcement in Kubernetes clusters.
Cilium Beyond Linux: Extending eBPF to Windows Infrastructure
Explore Cilium eBPF's extension to Windows, covering current capabilities, future roadmap, and challenges in adapting Linux-based features for enhanced network performance and security on Windows infrastructure.
Supercharge Kubernetes Networking with Cilium and IPv6
Explore Cilium's IPv6 capabilities for Kubernetes, including BIG TCP for high throughput and NAT46/64 transition mechanisms, to enhance your application's networking performance.