the loadbalancing operation is not performed on the source host. Note: load balancing requires connection tracking to be enabled. This is the default. Monitoring and Troubleshooting The ability to gain Kafka cluster How to secure gRPC Getting Started Securing Elasticsearch How to Secure a Cassandra Database Getting Started Securing Memcached Locking down external access using AWS metadata Advanced Networking call authorization Locking down external access with DNS-based policies How to Secure a Cassandra Database Securing a Kafka cluster Getting Started Using MicroK8s This guide uses microk8s [https://microk8s

the loadbalancing operation is not performed on the source host. Note: load balancing requires connection tracking to be enabled. This is the default. Monitoring and Troubleshooting The ability to gain Kafka cluster How to secure gRPC Getting Started Securing Elasticsearch How to Secure a Cassandra Database Getting Started Securing Memcached Locking down external access using AWS metadata Advanced Networking Policy Enforcement Locking down external access with DNS-based policies How to Secure a Cassandra Database Securing a Kafka cluster Getting Started Using MicroK8s This guide uses microk8s [https://microk8s

DNS resolution problem in the last 5 minutes? Which services have experienced an interrupted TCP connection recently or have seen connections timing out? What is the rate of unanswered TCP SYN requests? the loadbalancing operation is not performed on the source host. Note: load balancing requires connection tracking to be enabled. This is the default. Monitoring and Troubleshooting The ability to gain Kafka cluster How to secure gRPC Getting Started Securing Elasticsearch How to Secure a Cassandra Database Getting Started Securing Memcached Locking down external access using AWS metadata Creating policies

DNS resolution problem in the last 5 minutes? Which services have experienced an interrupted TCP connection recently or have seen connections timing out? What is the rate of unanswered TCP SYN requests? Kafka cluster How to secure gRPC Getting Started Securing Elasticsearch How to Secure a Cassandra Database Getting Started Securing Memcached Locking down external access using AWS metadata Creating policies Policy Enforcement Locking down external access with DNS-based policies How to Secure a Cassandra Database Securing a Kafka cluster Getting Started Using MicroK8s This guide uses microk8s [https://microk8s

DNS resolution problem in the last 5 minutes? Which services have experienced an interrupted TCP connection recently or have seen connections timing out? What is the rate of unanswered TCP SYN requests? Kafka cluster How to secure gRPC Getting Started Securing Elasticsearch How to Secure a Cassandra Database Getting Started Securing Memcached Locking down external access using AWS metadata Creating policies to contact k8s api-server In the Cilium agent logs you will see: level=info msg="Establishing connection to apiserver" host="https://10.96.0.1:443" subsys=k8s level=error msg="Unable to contact k8s api-server"

DNS resolution problem in the last 5 minutes? Which services have experienced an interrupted TCP connection recently or have seen connections timing out? What is the rate of unanswered TCP SYN requests? Kafka cluster How to secure gRPC Getting Started Securing Elasticsearch How to Secure a Cassandra Database Getting Started Securing Memcached Locking down external access using AWS metadata Creating policies to contact k8s api-server In the Cilium agent logs you will see: level=info msg="Establishing connection to apiserver" host="https://10.96.0.1:443" subsys=k8s level=error msg="Unable to contact k8s api-server"

a Ka�a cluster How to secure gRPC Ge�ng Started Securing Elas�csearch How to Secure a Cassandra Database Ge�ng Started Securing Memcached Locking down external access using AWS metadata Advanced Networking call authoriza�on Locking down external access with DNS-based policies How to Secure a Cassandra Database Securing a Ka�a cluster Getting Started Using MicroK8s This guide uses microk8s [h�ps://microk8s call authoriza�on Locking down external access with DNS-based policies How to Secure a Cassandra Database Securing a Ka�a cluster Self-Managed Kubernetes Installa�on using kubeadm Standard Installa�on

Let’s use BPF to get a quick win! • Track how many “AMQP consumers” have been declared for each connection • Drop further consumer declare packets once the limit is hit RedBPF • Most frameworks require key • Map is a counter for consumers per connection Use BPF Maps • Using the source IP & port as map key • Map is a counter for consumers per connection • Increase when declare Use BPF Maps • consumers per connection • Increase when declare • Decrease when cancel Use BPF Maps • Using the source IP & port as map key • Map is a counter for consumers per connection • Increase when

BPF_CGROUP_INET6_CONNECT and BPF_CGROUP_SOCK_OPS programs → ● In proxy on accept(2) learn orig_dst by connection’s src IP and port from BPF map. ● Encrypt, see [0] for details on proxy itself. [0] https://atscaleconference