code changes BPF and XDP Reference Guide BPF Architecture Instruction Set Helper Functions Maps Object Pinning Tail Calls BPF to BPF Calls JIT Hardening Offloads Toolchain Development Environment LLVM enables CNI chaining on top of any CNI plugin that is using a veth device model. The majority of CNI plugins use such a model. Validate that the current CNI plugin is using veth 1. Log into one of the is not suitable. In that case, a full CNI chaining plugin is required which understands the device model of the underlying plugin. Writing such a plugin is trivial, contact us on Slack for more details.

enables CNI chaining on top of any CNI plugin that is using a veth device model. The majority of CNI plugins use such a model. Validate that the current CNI plugin is using veth 1. Log into one of the is not suitable. In that case, a full CNI chaining plugin is required which understands the device model of the underlying plugin. Writing such a plugin is trivial, contact us on Slack for more details. [https://cilium.herokuapp.com] with any questions! Locking down external access with DNS-based policies This document serves as an introduction for using Cilium to enforce DNS-based security policies for Kubernetes

code changes BPF and XDP Reference Guide BPF Architecture Instruction Set Helper Functions Maps Object Pinning Tail Calls BPF to BPF Calls JIT Hardening Offloads Toolchain Development Environment LLVM It is also possible to update Helm values once the cluster is running by changing the CiliumConfig object, e.g. with kubectl edit ciliumconfig -n cilium cilium. You may need to restart the Cilium agent for Cilium connectivity test pods to run on OpenShift, a simple custom SecurityContextConstraints object is required. It will to allow hostPort/hostNetwork that some of the connectivity test pods rely on

code changes BPF and XDP Reference Guide BPF Architecture Instruction Set Helper Functions Maps Object Pinning Tail Calls BPF to BPF Calls JIT Hardening Offloads Toolchain Development Environment LLVM for Cilium connectivity test pods to run on OpenShift, a simple custom SecurityContextConstraints object is required. It will to allow hostPort/hostNetwork that some of the connectivity test pods rely on enables CNI chaining on top of any CNI plugin that is using a veth device model. The majority of CNI plugins use such a model. Note Some advanced Cilium features may be limited when chaining with other

code changes BPF and XDP Reference Guide BPF Architecture Instruction Set Helper Functions Maps Object Pinning Tail Calls BPF to BPF Calls JIT Hardening Offloads Toolchain Development Environment LLVM It is also possible to update Helm values once the cluster is running by changing the CiliumConfig object, e.g. with kubectl edit ciliumconfig -n cilium cilium. You may need to restart the Cilium agent for Cilium connectivity test pods to run on OpenShift, a simple custom SecurityContextConstraints object is required. It will to allow hostPort/hostNetwork that some of the connectivity test pods rely on

[h�ps://cilium.herokuapp.com] with any ques�ons! Locking down external access with DNS-based policies This document serves as an introduc�on for using Cilium to enforce DNS- based security policies for Kubernetes githubusercontent.com/cilium/cilium/v1.5/ex $ kubectl delete cnp fqdn Securing a Kafka cluster This document serves as an introduc�on to using Cilium to enforce Ka�a- aware security policies. It is a detailed $ minikube delete A�er this, you can re-run the tutorial from Step 1. How to secure gRPC This document serves as an introduc�on to using Cilium to enforce gRPC- aware security policies. It is a detailed

code changes BPF and XDP Reference Guide BPF Architecture Instruction Set Helper Functions Maps Object Pinning Tail Calls BPF to BPF Calls JIT Hardening Offloads Toolchain Development Environment LLVM for Cilium connectivity test pods to run on OpenShift, a simple custom SecurityContextConstraints object is required. It will to allow hostPort/hostNetwork that some of the connectivity test pods rely on enables CNI chaining on top of any CNI plugin that is using a veth device model. The majority of CNI plugins use such a model. Note Some advanced Cilium features may be limited when chaining with other