eCHO News 73

eCHO news is your bi-weekly wrap up of all things eBPF and Cilium. If you want to keep up on the latest in cloud native networking, observability, and security this is your quelle

14th January 2025

One of the reasons I love working in open source is the Cambrian explosion of ideas and interests it enables. It’s awesome to see how people take inspiration from projects or proposals and channel it into their own unique passions. Take this week’s highlights for example, eBPF programs can now be written in .NET and ebpf.io was translated in Japanese. Both of these make eBPF more accessible and brings it to whole new populations of people and perspectives.

Open source also encourages collaboration by allowing us to build on each other’s work. The eBPF Verifier Project, for instance, allows developers to learn from the mistakes (and cursing at the verifier) of other programers while a new website cataloging eBPF Research Papers makes it easier to discover and share knowledge within and across the community. Its only the second week of the year and I can't wait to see all the different ways the community will collaborate and push things forward in the year ahead! I have to go finalize the schedule for CiliumCon so let’s ?? -gin.

The Technical

kubezonnet: Monitor Cross-Zone Network Traffic in Kubernetes - Getting your cloud bill under control with Cilium and eBPF, its also open source

Tracepoints, Kprobes, or Fprobes: Which One Should You Choose? - Find out what the superior choice really is

Ebpf For Tls Traffic Tracing: Secure & Efficient Observability - Overcome the challenges of proxying, decryption, and logging

eBPF to monitor heap usage of Java app - "allows getting basic observability of JVM-based apps to be provided on Platform level instead of being responsibility of a developer"

kubernetes-sigs/ingress2gateway - Now with support for Cilium, go spin the wheels on Gateway API

KallDrexx/DotnetEbpf - "(wip) Write Linux eBPF applications in .net"

parttimenerd/ebpf-verifier-errors - "A project to collect eBPF verifier errors and how they can be resolved"

antitree/seccomp-diff - "Analyze binaries and containers to extract and disassemble seccomp-bpf profiles"

AdityaSeth777/ShieldK8s - "A privacy-focused, local-only security dashboard for monitoring Kubernetes cluster security using eBPF and Cilium" launch blog here

kunai-project/kunai - "Threat-hunting tool for Linux leveraging eBPF with kernel-level probes that capture critical events"

??

The Ecosystem

eBPF in 2025: Bigger Than the CrowdStrike Outage - "Because eBPF allows us to rewrite so many things better, in 2025, we will see a Cambrian explosion of use cases. eBPF is coming for so many different parts of infrastructure technology"

The O11ys 2024 - The Winners! - Cilium wins for Best Kubernetes Tooling: Policy and Configuration

2025 observability predictions and trends from Grafana Labs - "Moving forward we’ll see more opportunities for eBPF to create a seamless bridge between system-level data and application telemetry while standardizing how platforms collect and process observability data"

Tetragon Configuration Gotchas - Quick blog on why Reddit chose Tetragon

The eBPF Verifier Errors Project - "Verifier errors can be cryptic and frustrating, but we can change that"

eBPF Research Papers - "Database" of eBPF related research papers to ease discoverability

The Future of Secure Code Execution: Embracing Collaborative eBPF Approaches - "As the industry evolves, using models like eBPF that encourage collaboration, and standardization can help create stronger and safer systems"

Unlocking cloud native security with Cilium and eBPF - Intro on the CNCF blog

0xCAFE - Keep up with tech news, articles, and GitHub projects in just 15 minutes per day

GenAI to Advanced Microsegmentation: Secure Workload 3.10 Has It All! - "The shift to eBPF not only enhances data collection accuracy but also reduces agent resource consumption by over 10%"

??

?

The How To

Overcoming Kubernetes IP Address Exhaustion with Cilium - Learn the multiple IPAM modes that Cilium supports

??

?

The Video

Robotics Platform empowered by Cloud-Native Technologies | Tomoya Fujita | Cloud Robotics WG - See Cilium on the edge

??

?

The Events

DNS Troubleshooting Made Simple: Real-World Solutions with Isovalent and Cilium - January 14th, online webinar

Hybrid Cloud Security: Cilium-Powered Micro-Segmentation for VMs and Containers - January 21st, online webinar

eBPF Dev Room at FOSDEM - February 1st in Brussels

Cilium and Cisco ACI: Best of Both Worlds - February 25th, online webinar

bpfconf - CfP now open for the invite only event on March 24-26 in Montreal

CiliumCon EU - April 1st in London, this is not a joke!

???

The Post of the Week

As always, if you’ve seen a blog post, a tool, or anything else eBPF or Cilium related that you think the rest of the community should hear about, send them my way. You can either hit reply or join the #echo-news channel on Cilium Slack. You can also find all of the past episodes on the website.

??