cilium-agent cilium-operator Troubleshooting Component & Cluster Health Connectivity Problems Policy Troubleshooting Symptom Library Useful Scripts Reporting a problem Community Special Interest Groups Command examples: Kubernetes examples: Command Reference cilium-agent cilium cilium-health cilium-operator Key-Value Store Key-Value Store Layout Leases Debugging Further Reading Related Material Presentations distributed system. While we learned to love tools like tcpdump and ping and while they will always find a special place in our hearts, we strive to provide better tooling for troubleshooting. This includes tooling

Library Useful Scripts Reporting a problem Community Weekly Community Meeting Slack Slack channels Special Interest Groups All SIGs How to create a SIG For Developers Governance Cilium Committer Grant/Revocation Guarantees API Reference Internals Hubble internals Hubble Architecture Cilium Operator Highly Available Cilium Operator CRD Registration IPAM KVStore operations Identity garbage collection CiliumEndpoint examples: Command Reference cilium-agent cilium cilium-health cilium-operator cilium-operator-aws cilium-operator-azure cilium-operator-generic Key-Value Store Key-Value Store Layout Leases Debugging

cilium-agent cilium-operator Troubleshooting Component & Cluster Health Connectivity Problems Policy Troubleshooting Symptom Library Useful Scripts Reporting a problem Community Special Interest Groups Command examples: Kubernetes examples: Command Reference cilium-agent cilium cilium-health cilium-operator Key-Value Store Key-Value Store Layout Leases Debugging Further Reading Related Material Presentations distributed system. While we learned to love tools like tcpdump and ping and while they will always find a special place in our hearts, we strive to provide better tooling for troubleshooting. This includes tooling

Library Useful Scripts Reporting a problem Community Weekly Community Meeting Slack Slack channels Special Interest Groups All SIGs How to create a SIG For Developers Governance Cilium Committer Grant/Revocation Guarantees API Reference Internals Hubble internals Hubble Architecture Cilium Operator Highly Available Cilium Operator CRD Registration IPAM KVStore operations Identity garbage collection CiliumEndpoint examples: Command Reference cilium-agent cilium cilium-health cilium-operator cilium-operator-aws cilium-operator-azure cilium-operator-generic Key-Value Store Key-Value Store Layout Leases Debugging

Library Useful Scripts Reporting a problem Community Weekly Community Meeting Slack Slack channels Special Interest Groups All SIGs How to create a SIG For Developers Development Guide How To Contribute examples: Command Reference cilium-agent cilium cilium-health cilium-operator cilium-operator-aws cilium-operator-azure cilium-operator-generic Key-Value Store Key-Value Store Layout Leases Debugging distributed system. While we learned to love tools like tcpdump and ping and while they will always find a special place in our hearts, we strive to provide better tooling for troubleshooting. This includes tooling

Library Useful Scripts Reporting a problem Community Weekly Community Meeting Slack Slack channels Special Interest Groups All SIGs How to create a SIG For Developers Development Guide How To Contribute examples: Command Reference cilium-agent cilium cilium-health cilium-operator cilium-operator-aws cilium-operator-azure cilium-operator-generic Key-Value Store Key-Value Store Layout Leases Debugging distributed system. While we learned to love tools like tcpdump and ping and while they will always find a special place in our hearts, we strive to provide better tooling for troubleshooting. This includes tooling

Troubleshoo�ng Automa�c Diagnosis Symptom Library Useful Scripts Repor�ng a problem Community Special Interest Groups All SIGs How to create a SIG Slack Slack channels For Developers Developer / Contributor system. While we learned to love tools like tcpdump and ping and while they will always find a special place in our hearts, we strive to provide be�er tooling for troubleshoo�ng. This includes tooling using the cilium-etcd-operator. The cilium-etcd-operator replaces the requirement for an external kvstore. You can learn more about it in the sec�on What is the cilium-etcd-operator? It is suitable for small

on Cilium digitalocean.com ● cilium-agent managed as DaemonSet on each worker node ● cilium-operator managed as Deployment (2 replicas / HA mode in latest releases) on workers ● cilium-agent running Architecture Data Plane Node #1 cilium-agent Node #1 cilium-agent cilium-operator Node #1 cilium-agent cilium-operator Control Plane kube-api-server cilium-agent kube-controller- manager scheduler

fs("/etc/passwd", read|append) fs("/etc/shadow", read|append) } /* ... */ 6 / 7 Acknowledgements Special thanks to: ▶ Alexei Starovoitov and Daniel Borkmann (creators of eBPF) ▶ K.P. Singh (creator of

everywhere ● Programs and their combinations are heavily tested, incl. multi-kernel VM tests (qemu) ● Resource usage (CPU cycles, memlock) monitored across the fleet by bpf_tax tool → ● Alerts on program load