eBPF for Creating Least Privileged Policies - Implementing Security Through Kernel Monitoring
Discover how eBPF enables least privileged policies through kernel code injection, monitoring system calls, and process execution to enhance security against CVEs with minimal application overhead.
Building a Scalable Multi-Protocol API Gateway with Envoy
Discover how to leverage Envoy as a robust edge proxy for multi-protocol API gateway implementation, focusing on TCP-based protocols and enterprise security integration with SPIRE.
How to Rollout an Update for a CNI Without Breaking the World Wide Web
Discover how Project Calico implements feature flagging for safe CNI updates, exploring real-world examples like the Reddit Pi Day incident and best practices for maintaining stable cloud networking operations.
Securing Outgoing Traffic: Building a Powerful Internet Egress Gateway for Reliable Connectivity
Master the implementation of secure Internet Egress gateways using Istio and Envoy, focusing on fine-grained access policies, multi-tenant architecture, and robust traffic monitoring for enhanced network security.
Live Migrating Production Clusters From Calico to Cilium
Discover how to perform live migrations of Container Networking Interface (CNI) from Calico to Cilium in production environments, exploring methodologies, procedures, and valuable lessons learned.
Scaling Network Policy Enforcement Beyond the Cluster Boundary with Cilium
Dive into advanced network policy enforcement across Kubernetes clusters using Cilium, exploring solutions like Clustermesh and KVstoremesh for efficient multi-cluster management and scalability.
How to Use XDP and eBPF to Accelerate IPSec Throughput by 400%
Discover how to dramatically boost IPSec network performance using XDP and eBPF techniques, with practical implementation steps and benchmark analysis for achieving up to 400% throughput improvement.
Hubble Beyond Cilium - Network Observability for Any Kubernetes CNI
Discover how to leverage Hubble as a versatile observability platform independent of Cilium, enabling network monitoring and metrics collection with any custom data plane or CNI in Kubernetes environments.
Confluent's Multi-Cloud Journey to Cilium - Pitfalls and Lessons Learned
Discover the challenges and solutions in migrating Kubernetes clusters to Cilium across multiple cloud providers, focusing on security features, performance optimization, and maintaining connectivity during transition.
Making Envoy Resilient to Sudden Increases in Load
Discover practical strategies for protecting Envoy against load spikes and DDoS attacks, including HTTP/2 'Rapid Reset' mitigation and advanced overload management techniques for enhanced system resilience.
Building Zero Trust with Envoy - Implementing Enterprise-Grade ZTNA Proxy
Discover how to build enterprise-grade Zero Trust Network Access using Envoy, covering implementation challenges, architecture decisions, and scaling strategies for handling multiple data centers and high-bandwidth connections.
7 Common Cyber Attacks and How to Prevent Them
Explore seven major cyber attack methods and learn effective defense strategies for authentication systems, from credential stuffing to injection attacks and real-world prevention techniques.
Deploy Laravel to Shared Hosting with DreamHost - Using Composer and Git
Master the process of deploying Laravel applications to shared hosting platforms using DreamHost, with practical guidance on SSH, Composer, Git integration, and essential server configurations.
Router on a Stick: Setting Up OpenWrt on Raspberry Pi for Home Network Management
Discover how to transform a Raspberry Pi 5 into a powerful network router using OpenWrt and VLAN configurations, while learning essential concepts about Router-on-a-Stick architecture for home networking.
CISSP 2024 - Complete Exam Guide and Domain Overview
Discover the essential components of CISSP certification, including exam structure, eight domains, eligibility criteria, and preparation strategies for cybersecurity career advancement.
Leveraging GenAI for Advanced Threat Response and Security Defense
Discover how to leverage GenAI and Microsoft Copilot for Security to enhance threat detection, implement real-time defensive policies, and strengthen network security against AI-powered cyber attacks.
Extending Network Security to Microsoft Azure Cloud with Next-Generation Firewalls
Discover how to implement robust cloud security using Palo Alto Networks' solutions for Azure, including VM-Series Firewall, Cloud NGFW, and AI Runtime Security for comprehensive protection.
Harnessing AI for Malevolence: A Hackers Guide to Network Vulnerabilities
Explore how AI can be manipulated for malicious purposes through live demonstrations, from transforming helpful AI assistants into harmful agents to using AI models for network exploitation.
Securing Outgoing Traffic: Building a Powerful Internet Egress Gateway for Reliable Connectivity
Master the implementation of secure Internet Egress gateways using Istio and Envoy, focusing on fine-grained access policies, multi-tenant capabilities, and robust traffic monitoring for enhanced network security.
Ground Control to Major Threat - Hacking the Space Link Extension Protocol
Dive into space communication vulnerabilities and learn how to analyze the Space Link Extension protocol, exploring potential security weaknesses in satellite ground control systems.
Web Timing Attacks That Actually Work - Practical Techniques and Tools
Discover practical web timing attack techniques to uncover server secrets, masked vulnerabilities, and hidden attack surfaces using efficient, real-world methods and open-source tools.