provide better tooling for troubleshooting. This includes tooling to provide: Event monitoring with metadata: When a packet is dropped, the tool doesn’t just report the source and destination IP of the packet Secure a Cassandra Database Getting Started Securing Memcached Locking down external access using AWS metadata Advanced Networking Setting up Cilium in AWS ENI mode Using kube-router to run BGP Using BIRD transparent manner. Visit Hubble Github page [https://github.com/cilium/hubble]. Generate the deployment files using Helm and deploy it: git clone https://github.com/cilium/hubble.git --branch v0.5 cd hubble/install/kubernetes

provide better tooling for troubleshooting. This includes tooling to provide: Event monitoring with metadata: When a packet is dropped, the tool doesn’t just report the source and destination IP of the packet Secure a Cassandra Database Getting Started Securing Memcached Locking down external access using AWS metadata Advanced Networking Setting up Cilium in AWS ENI mode Using kube-router to run BGP Setting up prepare generating the deployment artifacts based on the Helm templates. Generate the required YAML files and deploy them: helm template cilium \ --namespace cilium \ --set global.nodeinit.enabled=true

provide be�er tooling for troubleshoo�ng. This includes tooling to provide: Event monitoring with metadata: When a packet is dropped, the tool doesn’t just report the source and des�na�on IP of the packet Secure a Cassandra Database Ge�ng Started Securing Memcached Locking down external access using AWS metadata Advanced Networking Using kube-router to run BGP Se�ng up Cluster Mesh Cilium integra�on with Flannel CiliumNetworkPolicy description: "L3-L4 policy to restrict deathstar access to empire ships on metadata: name: "rule1" spec: endpointSelector: matchLabels: org: empire class: deathstar

provide better tooling for troubleshooting. This includes tooling to provide: Event monitoring with metadata: When a packet is dropped, the tool doesn’t just report the source and destination IP of the packet Secure a Cassandra Database Getting Started Securing Memcached Locking down external access using AWS metadata Creating policies from verdicts Host Firewall (beta when using kube-proxy) Advanced Networking NAME="$(whoami)-$RANDOM" cat <eks-config.yaml apiVersion: eksctl.io/v1alpha5 kind: ClusterConfig metadata: name: ${NAME} region: eu-west-1 managedNodeGroups: - name: ng-1 desiredCapacity: 2 privateNetworking:

provide better tooling for troubleshooting. This includes tooling to provide: Event monitoring with metadata: When a packet is dropped, the tool doesn’t just report the source and destination IP of the packet Secure a Cassandra Database Getting Started Securing Memcached Locking down external access using AWS metadata Creating policies from verdicts Host Firewall Advanced Networking Setting Up Cilium in AlibabaCloud NAME="$(whoami)-$RANDOM" cat <eks-config.yaml apiVersion: eksctl.io/v1alpha5 kind: ClusterConfig metadata: name: ${NAME} region: eu-west-1 managedNodeGroups: - name: ng-1 desiredCapacity: 2 privateNetworking:

provide better tooling for troubleshooting. This includes tooling to provide: Event monitoring with metadata: When a packet is dropped, the tool doesn’t just report the source and destination IP of the packet Secure a Cassandra Database Getting Started Securing Memcached Locking down external access using AWS metadata Creating policies from verdicts Host Firewall (beta) Advanced Networking Setting up Cilium in NetworkPolicy applies to them: kubectl get pods --all-namespaces -o custom- columns=NAMESPACE:.metadata.namespace,NAME:.metadata.name,HOSTNETWORK:. spec.hostNetwork --no-headers=true | grep '' | awk '{print

provide better tooling for troubleshooting. This includes tooling to provide: Event monitoring with metadata: When a packet is dropped, the tool doesn’t just report the source and destination IP of the packet Secure a Cassandra Database Getting Started Securing Memcached Locking down external access using AWS metadata Creating policies from verdicts Host Firewall (beta) Advanced Networking Setting up Cilium in NetworkPolicy applies to them: kubectl get pods --all-namespaces -o custom- columns=NAMESPACE:.metadata.namespace,NAME:.metadata.name,HOSTNETWORK:. spec.hostNetwork --no-headers=true | grep '' | awk '{print

services (e.g. PostgreSQL) and other instrumented applications Metrics Metrics have associated metadata: Semantics: instant, counter, discrete Unit: Kilobytes, bits/sec, etc. Type: float, (un)signed

General Networking Receive path for local delivery Service dispatch with BPF socket lookup packet metadata BPF program lookup result 010 101 010 struct bpf_sk_lookup { __u32 family; __u32 protocol;

lacks the flexibility of user space programming. Applications User space Kernel System calls Files Networking Process Memory Flying for years across the galaxy and back, The crew learned to modify adjustments to adapt to the evolution of the kernel. Applications User space Kernel System calls Files Networking Process Module Memory One day, a concerned Captain Tux reviewed the crew And remembered