Welcome to Cilium’s documentation! The documenta�on is divided into the following sec�ons: Ge�ng Started Guides: Provides a simple tutorial for running a small Cilium setup on your laptop. Intended as how these components integrate with exis�ng architectures, such as Kubernetes. Installa�on : Details instruc�ons for installing, configuring, and troubleshoo�ng Cilium in different deployment modes. Policy formats. Monitoring & Metrics : Instruc�ons for configuring metrics collec�on from Cilium. Troubleshoo�ng : Describes how to troubleshoot Cilium in different deployment modes. BPF and XDP Reference Guide

Linux container management platforms like Docker and Kubernetes. At the foundation of Cilium is a new Linux kernel technology called BPF, which enables the dynamic insertion of powerful security visibility such as securing clusters, connecting multiple clusters, monitoring, and troubleshooting. If you are new to Cilium it is recommended to read the Introduction to Cilium section first to learn about the basic Cilium as DaemonSet [https://kubernetes.io/docs/concepts/workloads/controllers/daemonset/] into your new Kubernetes cluster. The DaemonSet will automatically install itself as Kubernetes CNI plugin. kubectl

Linux container management platforms like Docker and Kubernetes. At the foundation of Cilium is a new Linux kernel technology called BPF, which enables the dynamic insertion of powerful security visibility such as securing clusters, connecting multiple clusters, monitoring, and troubleshooting. If you are new to Cilium it is recommended to read the Introduction to Cilium section first to learn about the basic Cilium as DaemonSet [https://kubernetes.io/docs/concepts/workloads/controllers/daemonset/] into your new Kubernetes cluster. The DaemonSet will automatically install itself as Kubernetes CNI plugin. kubectl

Setup Local Development in Vagrant Box Making Changes Add/update a golang dependency Add/update a new Kubernetes version Optional: Docker and IPv6 Debugging Building Container Images Developer images Linux container management platforms like Docker and Kubernetes. At the foundation of Cilium is a new Linux kernel technology called eBPF, which enables the dynamic insertion of powerful security visibility as required by users. Hubble has been created and specifically designed to make best use of these new eBPF powers. Hubble can answer questions such as: Service dependencies & communication map What

Setup Local Development in Vagrant Box Making Changes Add/update a golang dependency Add/update a new Kubernetes version Optional: Docker and IPv6 Debugging Building Container Images Developer images Linux container management platforms like Docker and Kubernetes. At the foundation of Cilium is a new Linux kernel technology called eBPF, which enables the dynamic insertion of powerful security visibility as required by users. Hubble has been created and specifically designed to make best use of these new eBPF powers. Hubble can answer questions such as: Service dependencies & communication map What

Linux container management platforms like Docker and Kubernetes. At the foundation of Cilium is a new Linux kernel technology called BPF, which enables the dynamic insertion of powerful security visibility as required by users. Hubble has been created and specifically designed to make best use of these new BPF powers. Hubble can answer questions such as: Service dependencies & communication map What services such as securing clusters, connecting multiple clusters, monitoring, and troubleshooting. If you are new to Cilium it is recommended to read the Introduction to Cilium & Hubble section first to learn about

Setup Local Development in Vagrant Box Making Changes Add/update a golang dependency Add/update a new Kubernetes version Optional: Docker and IPv6 Debugging Building Container Images Developer images Linux container management platforms like Docker and Kubernetes. At the foundation of Cilium is a new Linux kernel technology called eBPF, which enables the dynamic insertion of powerful security visibility as required by users. Hubble has been created and specifically designed to make best use of these new eBPF powers. Hubble can answer questions such as: Service dependencies & communication map What

module. Linux supports JIT compilation towards all widespread architectures. System calls Acquiring a new taste for engine room hacking, The bees developed their activities more and more. In the narrow spaces messages in their own encoding. When the bees jumped on the case, it marked the beginning Of a whole new era for data sharing and messaging. Mail was still slow to go through the ship’s processors, But the How would the bees make them fit into the engines? And then what about the quantic guidance units? New versions all had a completely different shape. eBee’s friends couldn’t fly between the narrower bits

? ? In This Talk… • Different “types” of BPF programs • Write BPF programs in Rust • Add new feature in RedBPF • Use BPF maps to make stateful decisions • Load the program and protect the Rabbit(MQ) Software Engineer @ CCP Games • @aquarhead on GitHub, Twitter… • Rust (and Elixir) • Disclaimer: new to BPF & kernel networking, pardon my mistake and welcome corrections! Sad Rabbit Has No Memory

uprobes, etc.) with policy enforcement (LSM probes) ▶ Rapid prototyping ▶ Safe production deployment of new security solutions We have an opportunity to rethink process confinement from the ground up. 3 /