Cilium - Bringing the BPF Revolution to Kubernetes Networking and Security
•
12 likes•2,803 views
BPF is one of the fastest emerging technologies of the Linux kernel. The talk provides an introduction to Cilium which brings the powers of BPF to Kubernetes and other orchestration systems to provide highly scalable and efficient networking, security and load balancing for containers and microservices. The talk will provide an introduction to the capabilities of Cilium today but also deep dives into the emerging roadmap involving networking at the socket layer and service mesh datapath capabilities to provide highly efficient connectivity between cloud native apps and sidecar proxies.
1 of 32
Download to read offline
More Related Content
Cilium - Bringing the BPF Revolution to Kubernetes Networking and Security
18. Pod barL3/L4
GET /healthz
GET /jobs/{id}
GET /applicants/{job-id}
POST /jobs
API
exposed
exposed
exposed
GET /jobs/331
Traditional API Unaware Security
Pod foo
GET /jobs/{id}
TLS
Allow foo to bar on
port 80
19. L3/L4
GET /healthz
GET /jobs/{id}
GET /applicants/{job-id}
POST /jobs
API
GET /jobs/331
API Aware Security
GET /jobs/{id}
Allow GET /jobs/.* from
identity foo
TLS Pod barPod foo
20. Identity based security
1.1.1.1 1.1.1.2
1.1.1.3
1.1.1.4
1.1.1.5
1.1.1.6
1.1.1.5
1.1.1.6
1.1.1.1
1.1.1.2
1.1.1.3
1.1.1.4
Allow ToAllow To