Integration Multi-Cluster (Cluster Mesh) Getting Help FAQ Slack GitHub Security Bugs Operations System Requirements Summary Linux Distribution Compatibility Matrix Linux Kernel Required Kernel Versions changes to the application code or container configuration. What is Hubble? Hubble is a fully distributed networking and security observability platform. It is built on top of Cilium and BPF to enable examples on how to use it. Secure service to service communication based on identities Modern distributed applications rely on technologies such as application containers to facilitate agility in deployment

Docker & libnetwork Mesos Cilium with Mesos/Marathon Envoy Envoy Go Extensions Administration System Requirements Summary Linux Distribution Compatibility Matrix Linux Kernel Advanced Features and examples on how to use it. Secure service to service communication based on identities Modern distributed applications rely on technologies such as application containers to facilitate agility in deployment conjunction with cloud network routers If you are already running routing daemons Load balancing Distributed load balancing for traffic between application containers and to external services. The loadbalancing

with Docker & libnetwork Mesos Cilium with Mesos/Marathon Envoy Envoy Go Extensions Administra�on System Requirements Summary Linux Distribu�on Compa�bility Matrix Linux Kernel Key-Value store clang+LLVM examples on how to use it. Secure service to service communication based on identities Modern distributed applica�ons rely on technologies such as applica�on containers to facilitate agility in deployment conjunc�on with cloud network routers If you are already running rou�ng daemons Load balancing Distributed load balancing for traffic between applica�on containers and to external services. The loadbalancing

Docker & libnetwork Mesos Cilium with Mesos/Marathon Envoy Envoy Go Extensions Administration System Requirements Summary Linux Distribution Compatibility Matrix Linux Kernel Advanced Features and examples on how to use it. Secure service to service communication based on identities Modern distributed applications rely on technologies such as application containers to facilitate agility in deployment conjunction with cloud network routers If you are already running routing daemons Load balancing Distributed load balancing for traffic between application containers and to external services. The loadbalancing

(Cluster Mesh) Getting Help FAQ Slack GitHub Training Enterprise support Security Bugs Operations System Requirements Summary Linux Distribution Compatibility Matrix Linux Kernel Required Kernel Versions changes to the application code or container configuration. What is Hubble? Hubble is a fully distributed networking and security observability platform. It is built on top of Cilium and eBPF to enable examples on how to use it. Secure service to service communication based on identities Modern distributed applications rely on technologies such as application containers to facilitate agility in deployment

(Cluster Mesh) Getting Help FAQ Slack GitHub Training Enterprise support Security Bugs Operations System Requirements Summary Linux Distribution Compatibility & Considerations Linux Kernel Required Kernel changes to the application code or container configuration. What is Hubble? Hubble is a fully distributed networking and security observability platform. It is built on top of Cilium and eBPF to enable examples on how to use it. Secure service to service communication based on identities Modern distributed applications rely on technologies such as application containers to facilitate agility in deployment

(Cluster Mesh) Getting Help FAQ Slack GitHub Training Enterprise support Security Bugs Operations System Requirements Summary Architecture Support Linux Distribution Compatibility & Considerations Linux changes to the application code or container configuration. What is Hubble? Hubble is a fully distributed networking and security observability platform. It is built on top of Cilium and eBPF to enable examples on how to use it. Secure service to service communication based on identities Modern distributed applications rely on technologies such as application containers to facilitate agility in deployment

cramped engine room, Its critical systems of metal and fire. eBPF originates from Linux, an operating system that runs on billions of devices around the world and is divided into user space (where most applications entire system and is highly performant, but needs to provide a stable interface to applications, so it lacks the flexibility of user space programming. Applications User space Kernel System calls constant adjustments to adapt to the evolution of the kernel. Applications User space Kernel System calls Files Networking Process Module Memory One day, a concerned Captain Tux reviewed the crew

AppArmor TOMOYO ▶ Can we do any better? 2 / 7 eBPF Changes the Game eBPF enables: ▶ Fine-grained system introspection ▶ Integration of cross-layer state (kprobes, uprobes, etc.) with policy enforcement vanilla Linux kernel ≥ 5.8 4 / 7 Our Policy Language Rules and Directives Rules specify access to system objects: ▶ fs(file, access) ▶ net(socket, access) ▶ signal(prog, sig) ▶ etc. Directives augment

eBPF Compiler Collection bpftrace BCC high-level tracing language for eBPF Performance Co-Pilot system performance analysis toolkit Performance Co-Pilot 3 Toolkit for collecting, analyzing, visualizing