radical memory, defragmentation, VMAP, and vmalloc significantly improve the memory application efficiency. Enhanced memory maintenance and test features, including KASAN, kmemleak, slub_debug, and huge pages to provide them with contiguous physical memory pages, improving the memory access efficiency on lightweight VMs. • I/O subsystem enhancement: StratoVirt provides the multi-channel concurrent pkgship helps developers quickly identify the scope of dependencies to improve the introduction efficiency. Application scenario 3: upgrading and deleting software packages Before upgrading or deleting

quickly develop and deploy AI applications to the edge, and improving the training and deployment efficiency. Application Scenarios Edge computing can be used to shorten the gap between edge and cloud for Using the existing A-OPS fault tree or adding fault trees can effectively improve the maintenance efficiency and reduce potential downtime. secPaver: Security Policy Configuration Tool secPaver is an SELinux to mask mechanism details for policy developers, simplifying policy development and improving efficiency. It can be used to develop and simplify SELinux policies, and can be extended to other security

eBPF is enabling visibility into and control over systems and applications at a granularity and efficiency that was not possible before. It does so in a completely transparent way, without requiring the identity management is performed using a key-value store. Secure access to and from external services Label based security is the tool of choice for cluster internal access control. In order to secure access tool doesn’t just report the source and destination IP of the packet, the tool provides the full label information of both the sender and receiver among a lot of other information. Policy decision tracing:

eBPF is enabling visibility into and control over systems and applications at a granularity and efficiency that was not possible before. It does so in a completely transparent way, without requiring the identity management is performed using a key-value store. Secure access to and from external services Label based security is the tool of choice for cluster internal access control. In order to secure access tool doesn’t just report the source and destination IP of the packet, the tool provides the full label information of both the sender and receiver among a lot of other information. Metrics export via Prometheus:

iden�ty management is performed using a key-value store. Secure access to and from external services Label based security is the tool of choice for cluster internal access control. In order to secure access the tool doesn’t just report the source and des�na�on IP of the packet, the tool provides the full label informa�on of both the sender and receiver among a lot of other informa�on. Policy decision tracing: framework allows to trace the policy decision process for both, running workloads and based on arbitrary label defini�ons. Metrics export via Prometheus: Key metrics are exported via Prometheus for integra�on

selling points Highly dynamic, built-in service discovery No hierarchical model, n-dimensional label set PromQL: for processing, graphing, alerting, and export Simple operation Highly efficient Richard @TwitchiH & @fredbrancz Intro to Prometheus Introduction Background Operations & observability Outro Efficiency 1,000,000+ samples/second no problem on currect hardware 200,000 samples/second/core 16 bytes/sample labels...], \ rate(errors.value, 5m) / rate(total.value, 5m) \ FROM errors JOIN total ON [...all label equalities...] \ WHERE errors.job=" foo" AND total.job=" foo" Richard Hartmann & Frederic Branczyk

identity management is performed using a key-value store. Secure access to and from external services Label based security is the tool of choice for cluster internal access control. In order to secure access tool doesn’t just report the source and destination IP of the packet, the tool provides the full label information of both the sender and receiver among a lot of other information. Policy decision tracing: framework allows to trace the policy decision process for both, running workloads and based on arbitrary label definitions. Metrics export via Prometheus: Key metrics are exported via Prometheus for integration

BPF is enabling visibility into and control over systems and applications at a granularity and efficiency that was not possible before. It does so in a completely transparent way, without requiring the identity management is performed using a key-value store. Secure access to and from external services Label based security is the tool of choice for cluster internal access control. In order to secure access tool doesn’t just report the source and destination IP of the packet, the tool provides the full label information of both the sender and receiver among a lot of other information. Policy decision tracing:

eBPF is enabling visibility into and control over systems and applications at a granularity and efficiency that was not possible before. It does so in a completely transparent way, without requiring the identity management is performed using a key-value store. Secure access to and from external services Label based security is the tool of choice for cluster internal access control. In order to secure access tool doesn’t just report the source and destination IP of the packet, the tool provides the full label information of both the sender and receiver among a lot of other information. Policy decision tracing:

identity management is performed using a key-value store. Secure access to and from external services Label based security is the tool of choice for cluster internal access control. In order to secure access tool doesn’t just report the source and destination IP of the packet, the tool provides the full label information of both the sender and receiver among a lot of other information. Policy decision tracing: framework allows to trace the policy decision process for both, running workloads and based on arbitrary label definitions. Metrics export via Prometheus: Key metrics are exported via Prometheus for integration