eCHO News 13

eCHO news in your bi-weekly wrap up of all things eBPF and Cilium . If you want to keep up on the latest in cloud native networking, observability, and security this is your quelle

While this does seem to be a light news cycle because everyone is on vacation in August, there has been a lot happening around eBPF Summit . While I can't reveal the full schedule yet, as readers of this newsletter, I will give you a little sneak peak into what there will be.

Besides the keynotes, which you can already find on the website, topics will be broken down into four areas: eBPF in the Real World, eBPF for Networking, eBPF for Security, and eBPF Programming & Internals. I'm most looking forward to the eBPF in the Real World section because it will highlight the impact eBPF (and Cilium) are having in production today. Watch for the full schedule to be coming out later this week, let's ?? gin!

The Technical

Cilium Paid Mentorship Opportunity - Help improve the release security of Cilium and get paid to work on open source! Apply by August 25th

redhat-et/bpfd - "A system daemon for managing eBPF programs"

Process behaviour anomaly detection using eBPF and unsupervised learning Autoencoders - eBPF and ML, just waiting for the VC money to roll in ?? Quite an interesting way to improve performance and I wonder where it will go. Github repo

eeriedusk/knockles - "a port knocking tool based on eBPF ??. It allows you to remotely open a TCP connection while being completely invisible to port scanners"

Gui774ume/krie - "a research project that aims to detect Linux Kernel exploits with eBPF with the goal of the project to make attackers' lives harder and ultimately prevent out-of-the-box exploits from working on a vulnerable kernel"

Decrypting SSL at Scale with eBPF, libbpf & K8s - "capture all HTTP, MySQL, and PostgreSQL requests and queries within a K8s cluster, without the need for a reverse proxy, a service mesh, or sidecar container"

??

The Ecosystem

Episode 30 Thomas Graf and Cilium - Podcast diving into eBPF, the origins of Cilium, the lessons learned while creating it in the open, and insights on kernel development. My favorite in a while

Tanzu Service Mesh Acceleration using eBPF - When even VMware is in on the party, you know it is Enterprise?? "with this capability enabled the results are impressive, both in terms of latency and QPS"

eBPF or Not, Sidecars are the Future of the Service Mesh - "eBPF has a future in the service mesh work" getting closer and closer every day ??

Groundcover aims to improve observability and monitoring with eBPF and microservices - "instead of collecting and analyzing every bit of data available or sampling it randomly, developers can intelligently sample it"

??

The How To

Getting started with Cilium for Kubernetes networking and observability - Learn how to spin up Cilium on a k3s cluster. "The most popular networking plugin for Kubernetes"

How to monitor Cilium on your Civo k3s cluster with Prometheus - Quickly set up Prometheus metrics and Grafana dashboards to monitor Cilium

Build a managed Kubernetes cluster from scratch — part 4 - Learn how to install BGP routing and upgrade Cilium

Build a managed Kubernetes cluster from scratch — part 5 - Deploy the Hubble adaptor for OpenTelemetry

??

The Events

eBPF Summit - Back for the third year and we are putting together a great program (Two eBPF maintainers will be speaking) Schedule coming soon so register today!

Cilium and eBPF @ Open Source Summit - A broad variety of talks from a Cilium workshops and talk on service mesh to eBPF for beginners and privilege escalation September 13-16th in Dublin

How the Hive Came to Bee: A technical deep dive - A technical deep dive of eBPF and how it works on a low level on August 31st

eBPF-based Security Observability & Runtime Enforcement with Cilium Tetragon - Join Rapha?l Pinson at Cloud Native Computing Zurich on August 25th

Pimp Your Kubernetes Cluster With Cilium, eBPF-based Networking and Observability - Learn how to deploy Cilium CNI with Hubble on any cloud-provider supported by KKP including IPv4 / IPv6 dual-stack networking today!

??

Tweet of the Week