Closing the BPF Map Permission Loophole
Explore a security vulnerability in BPF map permissions and its impact on access control. Learn about proposed solutions to enhance the integrity of BPF map operations in Linux systems.
SwiftyPi
Explore Swift development on Raspberry Pi: setup, challenges, and opportunities. Learn to create LED circuits and integrate with Vapor for server-side applications.
Intro to Falco - Intrusion Detection for Containers
Learn to deploy Falco for container intrusion detection, modify rules, and manage alerts. Discover real-world use cases and best practices from Shopify's experience in securing high-volume cloud environments.
Using BPF in Cloud Native Environments
Explore BPF tools for debugging Kubernetes: Inspektor Gadget and kubectl-trace. Learn to inspect low-level details, trace system calls, and analyze network packets in cloud-native environments.
Help! My Cluster Is On The Internet - Container Security Fundamentals
Explore container and Kubernetes security fundamentals, covering supply chain and runtime security. Learn practical strategies to protect clusters and prevent vulnerabilities using real-world examples and essential tools.
Open Source Intrusion Detection for Containers at Shopify
Explore Shopify's open-source intrusion detection system for containers using Falco, a CNCF project. Learn implementation tips, improvement areas, and use cases for detecting compromises.
Intro + Deep Dive - Provider IBM Cloud
Overview of IBM Cloud Provider subproject, recent developments, and activities in cloud-native computing, including CCM, ManageIQ, and multi-cluster management.
Go? Bash! Meet the Shell-operator
Explore Shell-operator for automating Kubernetes tasks using bash and jq. Learn to create simple operators, subscribe to resource changes, and extend Kubernetes functionality efficiently.
EBPF and Kubernetes - Little Helper Minions for Scaling Microservices
Explore eBPF's evolution and its impact on Kubernetes, covering networking, tracing, and security. Learn how this technology is revolutionizing Linux kernel customization and benefiting cloud-native environments.
Deep Dive - Inside ChubaoFS – The Storage Engine
Explore ChubaoFS, a distributed file system for cloud-native applications. Learn its architecture, development, and key features like dynamic expansion and optimized performance for both small and large files.
Deep Dive - Runtime Security With Falco in Userspace
Explore runtime security with Falco in userspace, covering eBPF, kernel modules, and ptrace. Learn about tradeoffs, performance impacts, and alternative approaches for cloud-native security.
Bypassing Conntrack - Optimizing K8s Service by Enhancing IPVS with EBPF
Optimizing Kubernetes Service performance with IPVS-eBPF: a novel load balancer that bypasses Netfilter, achieving significant throughput gains for TCP connections.
Deep Dive into Service Mesh Data Plane Performance and Tuning
Explore service mesh data plane performance optimization techniques, including eBPF SOCKMAP for kernel bypassing and Envoy task scheduling for improved resource allocation and traffic forwarding prioritization.
Dynamic Image Scanning Through System Tracing
Explore dynamic scanning for detecting sophisticated malware through system tracing. Learn about behavioral patterns, open-source tools, and comparisons with static scanning and runtime security.
Detecting Security Policies Violation Using Falco - A Practical Introduction
Practical introduction to Falco for detecting security policy violations. Learn to create custom rules for runtime security in cloud-native environments. Hands-on demo included.
Scalable and Multitenant Networking in XDP and Kubernetes Operators
Explore scalable multi-tenant networking in Kubernetes using XDP and custom operators. Learn design techniques for traffic isolation and fast provisioning in large-scale cloud environments.
Linux in the Kubernetes Era - Does The OS Still Matter?
Experts discuss the relevance of Linux in Kubernetes deployments, exploring container-optimized distros, kernel features, and distribution approaches for cloud-native workloads.
Bypass Falco
Explore techniques to bypass Falco's runtime detection capabilities, challenging its effectiveness as a security tool. Learn potential vulnerabilities and improve your cloud-native defense strategies.
Practice of Fine-grained Cgroups Resources Scheduling in Kubernetes
Explore fine-grained Cgroups resource scheduling in Kubernetes, focusing on dynamic resource management, NUMA awareness, and CPU core binding for improved performance in large-scale container environments.
Lives on the Line - Learning Disaster Response From the Coronavirus Pandemic
Exploring disaster response in cloud-native through the lens of the COVID-19 pandemic, comparing incident response in medicine and software, and highlighting open source's role in saving lives.
Image-Builder Deep Dive
Explore Image-Builder: a tool for creating VM images across infrastructures. Learn its goals, tools, and future plans for building Kubernetes-conformant clusters consistently and securely.