Kubernetes Integration Multi-Cluster (Cluster Mesh) Getting Help FAQ Slack GitHub Training Enterprise support Security Bugs Operations System Requirements Summary Linux Distribution Compatibility & Considerations Container Images Developer images Official release images Experimental Docker BuildKit and Buildx support Official Cilium repositories Update cilium-builder and cilium-runtime images Nightly Docker image the final release Testing CI / Jenkins Jobs Overview Triggering Pull-Request Builds With Jenkins Testing with race condition detection enabled Using Jenkins for testing CI Failure Triage Infrastructure

Mesh) Getting Help FAQ Slack GitHub Training Enterprise support Security Bugs Operations System Requirements Summary Architecture Support Linux Distribution Compatibility & Considerations Linux Kernel Container Images Developer images Official release images Experimental Docker BuildKit and Buildx support Official Cilium repositories Update cilium-builder and cilium-runtime images Nightly Docker image the final release Testing CI / Jenkins Jobs Overview Triggering Pull-Request Builds With Jenkins Testing with race condition detection enabled Using Jenkins for testing CI Failure Triage Infrastructure

Kubernetes Integration Multi-Cluster (Cluster Mesh) Getting Help FAQ Slack GitHub Training Enterprise support Security Bugs Operations System Requirements Summary Linux Distribution Compatibility Matrix Linux the final release Testing CI / Jenkins Jobs Overview Triggering Pull-Request Builds With Jenkins Testing with race condition detection enabled Using Jenkins for testing CI Failure Triage Infrastructure environment Self-Managed Kubernetes Managed Kubernetes Installer Integrations CNI Chaining Setting up Support for External Workloads (beta) Network Policy Security Tutorials Identity-Aware and HTTP-Aware Policy

Process On Freeze date For the final release Testing CI / Jenkins Jobs Overview Triggering Pull-Request Builds With Jenkins Using Jenkins for testing CI Failure Triage Infrastructure details Documentation cilium-test Deploy the check with: kubectl apply -n cilium-test -f https://raw.githubusercontent.com/cilium/ci It will deploy a series of deployments which will use various connectivity paths to connect to each with ARM support planned [https://github.com/cilium/cilium/issues/9898] for a future release. Install a Master Node The first step is to install a K3s master node making sure to disable support for the

Process On Freeze date For the final release Testing CI / Jenkins Jobs Overview Triggering Pull-Request Builds With Jenkins Using Jenkins for testing CI Failure Triage Infrastructure details Documentation with ARM support planned [https://github.com/cilium/cilium/issues/9898] for a future release. Install a Master Node The first step is to install a K3s master node making sure to disable support for the in the same cluster, there should be no issue as both version are mutually compatible in order to support gradual migration [https://helm.sh/docs/topics/v2_v3_migration/]. Cilium chart is targeting Helm

Tes�ng Framework How to contribute Pull request review process Building Container Images Documenta�on CI / Jenkins Release Management Developer’s Cer�ficate of Origin BPF and XDP Reference Guide BPF Architecture environment running on your machine. It is designed to take 15-30 minutes. NOTE: Cassandra-aware policy support is s�ll in beta phase. It is not yet ready for produc�on use. Addi�onally, the Cassandra-specific environment running on your machine. It is designed to take 15-30 minutes. NOTE: memcached-aware policy support is s�ll in beta. It is not yet ready for produc�on use. Addi�onally, the memcached-specific policy

template Minor Release Process Backporting process CI / Jenkins Jobs Overview Triggering Pull-Request Builds With Jenkins Using Jenkins for testing CI Failure Triage Infrastructure details BPF and XDP documentation [https://kubernetes.io/docs/concepts/extend-kubernetes/compute-storage-net/network-plugins/#support-hostport]. Note Before using HostPort, read the Kubernetes Configuration Best Practices [https://kubernetes environment running on your machine. It is designed to take 15-30 minutes. NOTE: Cassandra-aware policy support is still in beta phase. It is not yet ready for production use. Additionally, the Cassandra-specific

of CNI Support Arm64 • Cilium enable on aarch64 • https://github.com/cilium/cilium/issues/9898 • Fix compiling and runtime issue on Arm64; • Multi-arch support for cilium-related images • CI/CD • • Travis • Unit test Travis CI • Arm64 Full VM • arm64-graviton2 • Refer to: • https://docs.travis-ci.com/user/multi-cpu-architectures • https://github.com/cilium/cilium/pull/13033 Docker Images

Overhead of eBPF Programs Bryce Kahle, Datadog October 28, 2020 Why should I profile eBPF programs? CI variance tracking Tools kernel.bpf_stats_enabled kernel.bpf_stats_enabled sysctl – Added in kernel collection for all eBPF programs – exposes total run_time_ns and run_cnt – Use cases: – Benchmarking + CI/CD – Sampling profiler in production How does it work? – Adds ~20ns of overhead per run Two ways G6LOCAL ✔ ✔ ✔ ✔ ✔ BPF_PROG_TYPE_XDP ✔ ? ✔ ? ✔ BPF_PROG_TYPE_FLOW_DISSECTOR ✔ ✔ ✔ ✔ ✔ Feature Support ebpfbench - Go library for eBPF benchmarking https://github.com/DataDog/ebpfbench ebpfbench

original packets • `tc` can actually control packets! And use BPF! • Let’s add support for it in RedBPF `tc` Support in RedBPF • BPF programs are all the “same” • “Type” really depends on the input still a worthy tradeoff, especially in preventing misuse More on RedBPF • Plan to make RedBPF support more (all) program types - make it a generic compiler (BCC) • Add utility functions to help dealing