Building a Secure and Maintainable PaaS Leveraging eBPF to Scale Security and Improve Platform Support Bradley Whitfield October 28, 2020 2 Dragon - Internal Platform as a Service TIP: To change

Problems Policy Troubleshoo�ng Automa�c Diagnosis Symptom Library Useful Scripts Repor�ng a problem Community Special Interest Groups All SIGs How to create a SIG Slack Slack channels For Developers Developer environment Development process End-To-End Tes�ng Framework How to contribute Pull request review process Building Container Images Documenta�on CI / Jenkins Release Management Developer’s Cer�ficate of Origin BPF Key-Value Store Layout Leases Debugging Further Reading Related Material Presenta�ons Podcasts Community blog posts Glossary Introduction to Cilium What is Cilium? Cilium is open source so�ware for

(kvstore) Cluster Mesh Troubleshooting Symptom Library Useful Scripts Reporting a problem Community Weekly Community Meeting Slack Slack channels Special Interest Groups All SIGs How to create a SIG For Add/update a golang dependency Add/update a new Kubernetes version Optional: Docker and IPv6 Debugging Building Container Images Developer images Official release images Experimental Docker BuildKit and Buildx Official Cilium repositories Update cilium-builder and cilium-runtime images Nightly Docker image Image Building Process Code Overview High-level Cilium Hubble Important common packages Debugging toFQDNs

Connectivity Problems Policy Troubleshooting Symptom Library Useful Scripts Reporting a problem Community Special Interest Groups All SIGs How to create a SIG Slack Slack channels For Developers Developer environment Development process End-To-End Testing Framework How to contribute Pull request review process Building Container Images Documentation Developer’s Certificate of Origin Release Management Release Cadence Key-Value Store Layout Leases Debugging Further Reading Related Material Presentations Podcasts Community blog posts Glossary Introduction to Cilium What is Cilium? Cilium is open source software for

Connectivity Problems Policy Troubleshooting Symptom Library Useful Scripts Reporting a problem Community Special Interest Groups All SIGs How to create a SIG Slack Slack channels For Developers Getting Setup Local Development in Vagrant Box Making Changes Add/update a golang dependency Debugging Building Container Images Developer images Official release images Update cilium-builder and cilium-runtime With Jenkins Using Jenkins for testing CI Failure Triage Infrastructure details Documentation Building End-To-End Testing Framework Introduction Running End-To-End Tests Test Reports Best Practices

(kvstore) Cluster Mesh Troubleshooting Symptom Library Useful Scripts Reporting a problem Community Weekly Community Meeting Slack Slack channels Special Interest Groups All SIGs How to create a SIG For Add/update a golang dependency Add/update a new Kubernetes version Optional: Docker and IPv6 Debugging Building Container Images Developer images Official release images Experimental Docker BuildKit and Buildx Key-Value Store Layout Leases Debugging Further Reading Related Material Presentations Podcasts Community blog posts Glossary Helm Reference Introduction to Cilium & Hubble What is Cilium? Cilium is

Policy Troubleshooting etcd (kvstore) Symptom Library Useful Scripts Reporting a problem Community Weekly Community Meeting Slack Slack channels Special Interest Groups All SIGs How to create a SIG For Vagrant Box Making Changes Add/update a golang dependency Optional: Docker and IPv6 Debugging Building Container Images Developer images Official release images Update cilium-builder and cilium-runtime Key-Value Store Layout Leases Debugging Further Reading Related Material Presentations Podcasts Community blog posts Glossary Introduction to Cilium & Hubble What is Cilium? Cilium is open source software

Policy Troubleshooting etcd (kvstore) Symptom Library Useful Scripts Reporting a problem Community Weekly Community Meeting Slack Slack channels Special Interest Groups All SIGs How to create a SIG For Add/update a golang dependency Add/update a new Kubernetes version Optional: Docker and IPv6 Debugging Building Container Images Developer images Official release images Official Cilium repositories Update cilium-builder Key-Value Store Layout Leases Debugging Further Reading Related Material Presentations Podcasts Community blog posts Glossary Helm Reference Introduction to Cilium & Hubble What is Cilium? Cilium is

space travels, and about little bees who helped run the biggest vessels and benefited their entire community. Even the smallest and youngest have a role to play. This is why education for all, and particularly other privileged execution contexts. The eBPF Foundation now brings together a cross-platform community of eBPF-related projects. Part of the Foundation, the BPF Steering Committee is responsible for Liz Rice, and Joe Stringer for their reviews and precious feedback. And kudos to the whole eBPF community, this is all thanks to you! ❤ The eBPF for WIndows logo (puzzle pieces) is copyright Microsoft

NetworkPolicies ○ feature-rich CNI implementation ○ actively maintained project ○ healthy, supportive community ● Today, all O(10000) DOKS clusters run on Cilium digitalocean.com ● cilium-agent managed as