Contributor Guide Setting up the development environment Development process End-To-End Testing Framework How to contribute Pull request review process Building Container Images Documentation Developer’s Cilium? Cilium is open source software for transparently securing the network connectivity between application services deployed using Linux container management platforms like Docker and Kubernetes. At the the Linux kernel, Cilium security policies can be applied and updated without any changes to the application code or container configuration. Why Cilium? The development of modern datacenter applications

for testing CI Failure Triage Infrastructure details Documentation Building End-To-End Testing Framework Introduction Running End-To-End Tests Test Reports Best Practices for Writing Tests Ginkgo Extensions Cilium? Cilium is open source software for transparently securing the network connectivity between application services deployed using Linux container management platforms like Docker and Kubernetes. At the the Linux kernel, Cilium security policies can be applied and updated without any changes to the application code or container configuration. Why Cilium? The development of modern datacenter applications

Jenkins for testing CI Failure Triage Infrastructure details Documentation End-To-End Testing Framework Introduction Running End-To-End Tests Test Reports Best Practices for Writing Tests Ginkgo Extensions Cilium? Cilium is open source software for transparently securing the network connectivity between application services deployed using Linux container management platforms like Docker and Kubernetes. At the the Linux kernel, Cilium security policies can be applied and updated without any changes to the application code or container configuration. What is Hubble? Hubble is a fully distributed networking and

Jenkins for testing CI Failure Triage Infrastructure details Documentation End-To-End Testing Framework Introduction Running End-To-End Tests Test Reports Best Practices for Writing Tests Ginkgo Extensions Cilium? Cilium is open source software for transparently securing the network connectivity between application services deployed using Linux container management platforms like Docker and Kubernetes. At the the Linux kernel, Cilium security policies can be applied and updated without any changes to the application code or container configuration. What is Hubble? Hubble is a fully distributed networking and

Jenkins for testing CI Failure Triage Infrastructure details Documentation End-To-End Testing Framework Introduction Running End-To-End Tests Test Reports Best Practices for Writing Tests Ginkgo Extensions Cilium? Cilium is open source software for transparently securing the network connectivity between application services deployed using Linux container management platforms like Docker and Kubernetes. At the the Linux kernel, Cilium security policies can be applied and updated without any changes to the application code or container configuration. What is Hubble? Hubble is a fully distributed networking and

Jenkins for testing CI Failure Triage Infrastructure details Documentation End-To-End Testing Framework Introduction Running End-To-End Tests Test Reports Best Practices for Writing Tests Ginkgo Extensions Cilium? Cilium is open source software for transparently securing the network connectivity between application services deployed using Linux container management platforms like Docker and Kubernetes. At the the Linux kernel, Cilium security policies can be applied and updated without any changes to the application code or container configuration. What is Hubble? Hubble is a fully distributed networking and

/ Contributor Guide Se�ng up the development environment Development process End-To-End Tes�ng Framework How to contribute Pull request review process Building Container Images Documenta�on CI / Jenkins Policy decision tracing: Why is a packet being dropped or a request rejected. The policy tracing framework allows to trace the policy decision process for both, running workloads and based on arbitrary label kube-system You should see that nodes are in Ready state and Cilium pods are in Running state Demo Application Follow this link [h�ps://cilium.readthedocs.io/en/stable/ge�ngstarted/minikube/#step-2- deplo

Glance ▶ bpfbox is a novel process confinement mechanism for Linux using eBPF ▶ Users write per-application policy in a simple policy language ▶ Policy is enforced by attaching BPF programs to LSM hooks confinement from the ground up. 3 / 7 bpfbox Implementation ▶ Userspace daemon using the Python3 bcc framework ▶ Kernelspace components are all eBPF ▶ LSM probes (KRSI), kprobes, uprobes, tracepoints ▶ Under Borkmann (creators of eBPF) ▶ K.P. Singh (creator of KRSI) ▶ Fellow bcc contributors (an awesome eBPF framework) This work was supported by NSERC through a Discovery Grant. github.com/willfindlay/bpfbox Check

Co-Founder/CEO Pixie (@pixie_run) & Adjunct Professor of CS @ Stanford DEVELOPER PROBLEM You’re an application developer, and your program is misbehaving. ● No problem. You have logs! Right? ● Uh-oh, not fact *= float64(i) res += 1 / fact } return res } Let’s look at test application Use Case GET /e?iters={iterations} // computeE computes the approximation of e by running a

system. eBPF is an event-driven architecture that runs specific programs when the kernel or an application passes a certain hook point. For example, kernel probes (kprobe) or user probes (uprobe) can be having to export samples. Attaching eBPF programs to trace points as well as kernel and user application probe points gives powerful introspection abilities for the kernel and user space applications