XDP Gaining Access to NIC Hardware Hints via BTF
Explore how XDP can access NIC hardware hints through BTF, enhancing network performance and efficiency in Linux systems.
eBPF Standardization
Explore eBPF standardization efforts, challenges, and future directions with industry expert Dave Thaler in this insightful Linux Plumbers Conference talk.
Performance Insights into eBPF Step by Step
Explore eBPF performance insights through a step-by-step analysis, uncovering optimization techniques and best practices for efficient system-level programming.
eBPF Kernel Scheduling with Ghost
Explore eBPF kernel scheduling using Ghost, a framework for custom schedulers. Learn about innovative approaches to CPU resource management and task scheduling in Linux systems.
Intro to Falco - Intrusion Detection for Containers
Learn to deploy Falco for container intrusion detection, modify rules, and manage alerts. Discover real-world use cases and best practices from Shopify's experience in securing high-volume cloud environments.
Help! My Cluster Is On The Internet - Container Security Fundamentals
Explore container and Kubernetes security fundamentals, covering supply chain and runtime security. Learn practical strategies to protect clusters and prevent vulnerabilities using real-world examples and essential tools.
Open Source Intrusion Detection for Containers at Shopify
Explore Shopify's open-source intrusion detection system for containers using Falco, a CNCF project. Learn implementation tips, improvement areas, and use cases for detecting compromises.
EBPF and Kubernetes - Little Helper Minions for Scaling Microservices
Explore eBPF's evolution and its impact on Kubernetes, covering networking, tracing, and security. Learn how this technology is revolutionizing Linux kernel customization and benefiting cloud-native environments.
Deep Dive - Runtime Security With Falco in Userspace
Explore runtime security with Falco in userspace, covering eBPF, kernel modules, and ptrace. Learn about tradeoffs, performance impacts, and alternative approaches for cloud-native security.
Bypassing Conntrack - Optimizing K8s Service by Enhancing IPVS with EBPF
Optimizing Kubernetes Service performance with IPVS-eBPF: a novel load balancer that bypasses Netfilter, achieving significant throughput gains for TCP connections.
Deep Dive into Service Mesh Data Plane Performance and Tuning
Explore service mesh data plane performance optimization techniques, including eBPF SOCKMAP for kernel bypassing and Envoy task scheduling for improved resource allocation and traffic forwarding prioritization.
Dynamic Image Scanning Through System Tracing
Explore dynamic scanning for detecting sophisticated malware through system tracing. Learn about behavioral patterns, open-source tools, and comparisons with static scanning and runtime security.
Detecting Security Policies Violation Using Falco - A Practical Introduction
Practical introduction to Falco for detecting security policy violations. Learn to create custom rules for runtime security in cloud-native environments. Hands-on demo included.
Scalable and Multitenant Networking in XDP and Kubernetes Operators
Explore scalable multi-tenant networking in Kubernetes using XDP and custom operators. Learn design techniques for traffic isolation and fast provisioning in large-scale cloud environments.
Bypass Falco
Explore techniques to bypass Falco's runtime detection capabilities, challenging its effectiveness as a security tool. Learn potential vulnerabilities and improve your cloud-native defense strategies.
Lives on the Line - Learning Disaster Response From the Coronavirus Pandemic
Exploring disaster response in cloud-native through the lens of the COVID-19 pandemic, comparing incident response in medicine and software, and highlighting open source's role in saving lives.
Security Kill Chain Stages in a 100k+ Daily Container Environment with Falco
Explore how MathWorks uses Falco to detect security threats in a large-scale container environment, covering implementation strategies, rule creation, and mapping to the Security Kill Chain.
A High-Schooler's Guide to Kubernetes Network Observability
Explore Kubernetes network observability with kube-netc, a project combining eBPF and Prometheus for enhanced system awareness, presented by a high school intern's journey into distributed systems.
Deep Dive - Falco
Explore Falco's extended capabilities for ingesting and analyzing diverse event streams, including Kubernetes audit events, to enhance security monitoring and create custom rules for threat detection.
eBPF on the Rise - Getting Started
Explore eBPF's potential for Linux and container observability and networking. Learn core architecture, tools, and cloud-native benefits to enhance your cluster instrumentation skills.
FalcOMG That's AWESOME - New Things, Fixed Things, and YOU Panel
Explore Falco's latest updates, driver donation impact, and future roadmap with key maintainers. Learn about this cloud-native runtime security project and its role in Kubernetes threat detection.