eCHO News 22

10th January 2023

Kicking off the new year of eCHO but instead of looking forward, I want to take a quick look back on 2022. Cilium is now 7 years old, but 2022 was finally the year where it became the de-facto standard CNI.

All major cloud providers and many of the most popular Kubernetes distributions are using Cilium in some form. This standardization on Cilium is bringing the benefits of eBPF everywhere, giving companies a consistent connectivity experience wherever they need to deploy Kubernetes, in or across clouds, on-prem, or even on extreme edge use cases such as running Kubernetes on a ship. Based on the feedback from our user survey, this consistent connectivity is crucial because most people are running multiple clusters with different tenants across disparate infrastructure. Having Cilium as the CNI everywhere creates a seamless user experience anywhere you need to connect an application - and in distributed computing everything goes over the network.

With that as the starting point for 2023, what do you think will happen this year? Reply back and I might feature your answer in one of the next newsletters. Let's ?? gin!

The Technical

Video: Pod Traffic Rate Limiting with Cilium Bandwidth Manager - A quick walk through on how to address potential contention issues

Return to Sender - Detecting Kernel Exploits with eBPF - Black Hat video, be careful clicking on this link

eBPF and its capabilities - A quick intro to eBPF and how Exness is using Tetragon

eBPF: A new frontier for malware - Sees how eBPF can be used for malware and how to defend against it

ShubhamPalriwala/NetWorth - "eBPF based Network Monitoring using Prometheus and Grafana"

boratanrikulu/durdur - "eBPF-powered L4 package dropper"

groundcover-com/caretta - "a lightweight eBPF-based network tracing map, visualized through Grafana to expose all of your K8s production inter-dependencies"

keisku/execve-printer - "The eBPF program will execute and print a message when the `execve()` system call is invoked"

??

The Ecosystem

“How the Hive Came To Bee” – a story of eBPF and Cilium so far - Review the history, deep dive, and use cases of eBPF in this short blog with links to the full videos

eBPF Part One — Next Gen Linux Kernel DevOps Tool - I like the timeline of eBPF at the end of this article

groundcover 2023 Predictions: The Rise of eBPF - "The rise of eBPF frictionless instrumentation will cause a major shift in the industry towards solutions that offer immediate time-to-value"

Using eBPF and predefined inspections to minimize "observability tax" - Might have to start using "observability tax" more ??

The Power of eBPF for Cloud Native Systems - I like the diagram of how the use cases overlap and the table of advantages

Kafka Monitoring with eBPF: It’s a Whole New Perspective - Use eBPF otherwise your monitoring might be Kafkaesque

Why a DevOps/SRE or Network Engineer should know about eBPF and how it is going to make a revolution? - Plz send this to your favorite DevOps

Meet Groundcover - The Startup That’s Building The Next-Gen Observability Stack - eBPF has made it to Forbes, what is next The Wall Street Journal?

Badges for Cilium Labs: Catch ‘em over the holidays! - Now that Twitter is over, it's time to spruce up your LinkedIn with some badges

eBPF – JavaScript für den Kernel einfach erkl?rt - A podcast in German discussing what eBPF is

C2C 2Chat: Switzerland and Austria - Introduction to Cilium - Key Takeaways - A quick highlights blog post of Thomas Graf's meetup presentation on Cilium

Simplifying kubernetes network policies with cilium - Learn about the free Cilium Network Policy Editor if you don't already do

??

The How To

KubeLift getting started (Part 3): Observing ingress and pod-to-pod traffic with Cilium Hubble - Get Hubble up and running on Azure

Configura??o de rede Cilium para Kubernetes - Learn how to set up Cilium in Portuguese

Zebra BPF DPlane Demo - "FRRouting meets eBPF"

Network Observability Deep Dive in Kubernetes with NetObserv Operator - Learn how to get the NetObserv eBPF agent up and running on OpenShift

EKS Series Part 2. All That eBPF: Operationalizing EKS with Cilium, Karpenter and Flux - Use Pulumi to set up Cilium on EKS

??

The Events

Kubernetes & Cloud Native Berlin Meetup New Year Edition - Hear about Connecting Clusters on the Edge with Cilium Cluster Mesh in Berlin on January 12th

Fireside chat with Liz Rice on her upcoming O’Reilly book: Learning eBPF - Join this online chat on January 26th to hear about Liz Rice's new book on eBPF

??

The Tweet of the Week