Debugging Mutexes / Locks and Data Races Hubble Bumping the vendored Cilium dependency Release Management Organization Release tracking Release Cadence Backporting process Backport Criteria Backporting transparently securing the network connectivity between application services deployed using Linux container management platforms like Docker and Kubernetes. At the foundation of Cilium is a new Linux kernel technology application containers, allowing to validate the identity at the receiving node. Security identity management is performed using a key-value store. Secure access to and from external services Label based

Networking Operations Istio Other Orchestrators Concepts Component Overview Terminology Address Management Multi Host Networking Security Datapath Failure Behavior Architecture Datapath Scale Kubernetes review process Building Container Images Documentation Developer’s Certificate of Origin Release Management Release Cadence Stable releases LTS Generic Release Process GitHub template process Reference transparently securing the network connectivity between application services deployed using Linux container management platforms like Docker and Kubernetes. At the foundation of Cilium is a new Linux kernel technology

Networking Opera�ons Is�o Other Orchestrators Concepts Component Overview Assurances Terminology Address Management Mul� Host Networking Security Architecture Datapath Scale Kubernetes Integra�on Ge�ng Help FAQ contribute Pull request review process Building Container Images Documenta�on CI / Jenkins Release Management Developer’s Cer�ficate of Origin BPF and XDP Reference Guide BPF Architecture Toolchain Program transparently securing the network connec�vity between applica�on services deployed using Linux container management pla�orms like Docker and Kubernetes. At the founda�on of Cilium is a new Linux kernel technology

Cilium dependency Documentation Style Header Titles Body Code Blocks Links Lists Roles Release Management Organization Release tracking Release Cadence Backporting process Backport Criteria Backporting transparently securing the network connectivity between application services deployed using Linux container management platforms like Docker and Kubernetes. At the foundation of Cilium is a new Linux kernel technology application containers, allowing to validate the identity at the receiving node. Security identity management is performed using a key-value store. Secure access to and from external services Label based

Debugging Mutexes / Locks and Data Races Hubble Bumping the vendored Cilium dependency Release Management Organization Release tracking Release Cadence Backporting process Backport Criteria Backporting transparently securing the network connectivity between application services deployed using Linux container management platforms like Docker and Kubernetes. At the foundation of Cilium is a new Linux kernel technology application containers, allowing to validate the identity at the receiving node. Security identity management is performed using a key-value store. Secure access to and from external services Label based

Networking Operations Istio Other Orchestrators Concepts Component Overview Terminology Address Management Multi Host Networking Security Datapath Failure Behavior Architecture Datapath Scale Kubernetes Official release images Update cilium-builder and cilium-runtime images Nightly Docker image Release Management Organization Release tracking Release Cadence Backporting process Backport Criteria Backporting transparently securing the network connectivity between application services deployed using Linux container management platforms like Docker and Kubernetes. At the foundation of Cilium is a new Linux kernel technology

Important common packages Debugging toFQDNs and DNS Debugging Mutexes / Locks and Data Races Release Management Organization Release tracking Release Cadence Backporting process Backport Criteria Backporting transparently securing the network connectivity between application services deployed using Linux container management platforms like Docker and Kubernetes. At the foundation of Cilium is a new Linux kernel technology application containers, allowing to validate the identity at the receiving node. Security identity management is performed using a key-value store. Secure access to and from external services Label based

picture:Right click on image > Replace image > Select file ❏ Durable log storage and enterprise Security Information and Event Management (SIEM) integration ❏ hubble observe command to help with troubleshooting exported to logging stack ❏ Tracking network traffic to specific binaries 16 Durable Audit Log Storage 17 Hubble Observe Command 18 Network Visibility for Teams 19 Searchable Logs and Which Binary

2020 1 The data deluge on modern storage 2 Compute node CPU Network Storage node Flash The data deluge on modern storage 3 Compute node 3 CPU Network Storage node Flash 16-lane PCIe, 16GB/s research group ● Work with eBPF for storage! 5 eBPF and DoS 6 Compute node CPU Network Storage node Flash eBPF and DoS 7 Compute node CPU Network Storage node Flash DoS eBPF and DoS 8 Compute node CPU Network Storage node Flash DoS DoS in reverse! 9 Compute node CPU Network Storage node Flash DoS in reverse! 10 Compute node CPU Network Storage node Flash Data DoS in

exceptions, e.g., SMTP) ○ allow connectivity to needed infrastructure (DNS) and between our own management services ● Feature wish list for Cilium: ? ○ specifying port ranges ○ traffic shaping (resorting