Development process End-To-End Tes�ng Framework How to contribute Pull request review process Building Container Images Documenta�on CI / Jenkins Release Management Developer’s Cer�ficate of Origin BPF and XDP transparently securing the network connec�vity between applica�on services deployed using Linux container management pla�orms like Docker and Kubernetes. At the founda�on of Cilium is a new Linux kernel without any changes to the applica�on code or container configura�on. Why Cilium? The development of modern datacenter applica�ons has shi�ed to a service- oriented architecture o�en referred to as microservices

Development process End-To-End Testing Framework How to contribute Pull request review process Building Container Images Documentation Developer’s Certificate of Origin Release Management Release Cadence Stable transparently securing the network connectivity between application services deployed using Linux container management platforms like Docker and Kubernetes. At the foundation of Cilium is a new Linux kernel without any changes to the application code or container configuration. Why Cilium? The development of modern datacenter applications has shifted to a service-oriented architecture often referred to as microservices

Local Development in Vagrant Box Making Changes Add/update a golang dependency Debugging Building Container Images Developer images Official release images Update cilium-builder and cilium-runtime images transparently securing the network connectivity between application services deployed using Linux container management platforms like Docker and Kubernetes. At the foundation of Cilium is a new Linux kernel without any changes to the application code or container configuration. Why Cilium? The development of modern datacenter applications has shifted to a service-oriented architecture often referred to as microservices

golang dependency Add/update a new Kubernetes version Optional: Docker and IPv6 Debugging Building Container Images Developer images Official release images Official Cilium repositories Update cilium-builder transparently securing the network connectivity between application services deployed using Linux container management platforms like Docker and Kubernetes. At the foundation of Cilium is a new Linux kernel Cilium security policies can be applied and updated without any changes to the application code or container configuration. What is Hubble? Hubble is a fully distributed networking and security observability

golang dependency Add/update a new Kubernetes version Optional: Docker and IPv6 Debugging Building Container Images Developer images Official release images Experimental Docker BuildKit and Buildx support transparently securing the network connectivity between application services deployed using Linux container management platforms like Docker and Kubernetes. At the foundation of Cilium is a new Linux kernel Cilium security policies can be applied and updated without any changes to the application code or container configuration. What is Hubble? Hubble is a fully distributed networking and security observability

Box Making Changes Add/update a golang dependency Optional: Docker and IPv6 Debugging Building Container Images Developer images Official release images Update cilium-builder and cilium-runtime images transparently securing the network connectivity between application services deployed using Linux container management platforms like Docker and Kubernetes. At the foundation of Cilium is a new Linux kernel Cilium security policies can be applied and updated without any changes to the application code or container configuration. What is Hubble? Hubble is a fully distributed networking and security observability

golang dependency Add/update a new Kubernetes version Optional: Docker and IPv6 Debugging Building Container Images Developer images Official release images Experimental Docker BuildKit and Buildx support transparently securing the network connectivity between application services deployed using Linux container management platforms like Docker and Kubernetes. At the foundation of Cilium is a new Linux kernel Cilium security policies can be applied and updated without any changes to the application code or container configuration. What is Hubble? Hubble is a fully distributed networking and security observability

TC 处实现数据包转发、负载均衡、过滤 • xdp 。cilium在内核 XDP 处实现数据包的转发、负载均衡、过滤 • cgroup_sock_addr 。cilium在 cgroup 中实现对service解析 • sock_ops + sk_msg。记录本地应用之间通信的socket，实现本地数据包的加速转发 加速同节点pod间通信 cilium 使用 eBPF 程序，借助 bpf_redirect() egress veth pod 2 veth process kernel < 5.10 tailCall-> to-container: redirect kernel >= 5.10 redirect_peer routing veth veth kernel network stack node 加速跨节点pod间通信 stack netfilter 加速东西向 nodePort 访问 �������������������� ������� request to nodeport 32000 of service pod3 worker node1 10.6.0.10 ������ ������������� ���������������������� worker node 3 10