## Kubernetes Community Days ## cilium的网络加速秘诀 蓝维洲 2021.10.16 Kubernetes Community Days ## 演讲人 ## 手 Kubernetes Community Days ![Image](/uploads/documents/c/3/f/4/c3f4f2152433e1071cd29634fd0a87a7/p3_1 网络组研发负责人 ## cilium介绍 https://cilium.io https://github.com/cilium cilium是 kubernetes 的 CNI 网络解决方案，创新采用了 eBPF datapath，为 kubernetes 网络和 linux 社区的 eBPF 发展，启动了最要的推动作用。 截止 2021.10 ， cilium github 项目已有 star，Contributors 316位 cilium的特色功能： • 网络功能 • 负载均衡 • 网络安全 • 可观察性 • 多集群连通 注：本 PPT 其干 cilium v1.10.4 进行分析 2016 cilium项目发布 初始目标是docker解决方案 2018.4 cilium 1.0 发布 成为 kubernetes 网络解决方案 2019.8 cilium 1.6 发布 kube

Lorenz Bauer eBPF Summit ## Goal • Count the number of packets on lo • Print the count to the console • From a single Go binary #### github.com/lmb/ship-bpf-with-go github.com/cilium/ebpf

## Accelerate Service Mesh Network with ebpf Luyao Zhong ## Agenda • TCP/IP stack overhead in service mesh • Background knowledge of eBPF - Independent solution to bypass TCP/IP stack • Performance jpg) ## ebpf Background Knowledge ## Loader & Verification Architecture  https://ebpf.io/what-is-ebpf/ ## ebpf Background Background Knowledge map • Share collected information • Accessed from eBPF programs as well as from applications in user space • Map type O HASHMAP O SOCKHASH: Hold socket as value Istio Meetup China

### From Managed Kubernetes to App Platform: 1.5 Years of Cilium Usage at DigitalOcean eBPF Summit ## History / Context - DigitalOcean Kubernetes Service aka DOKS: our managed Kubernetes offering - - Started out using Flannel but decided to move to Cilium in late 2018 for a couple of reasons: o support for NetworkPolicies ☐ feature-rich CNI implementation ☐ actively maintained project o healthy community ● Today, all O(10000) DOKS clusters run on Cilium ## Cilium in the DOKS Architecture - cilium-agent managed as DaemonSet on each worker node - cilium-operator managed as Deployment (2 replicas / HA

Welcome to Cilium’s documentation! The documentation is divided into the following sections: Getting Started Guides: Provides a simple tutorial for running a small Cilium setup on your laptop. Intended to get your hands dirty applying Cilium security policies between containers. Concepts: Describes the components of Cilium, and the different models for deploying Cilium. Provides the high-level understanding understanding required to run a full Cilium deployment and understand its behavior. Installation : Details instructions for installing, configuring, and troubleshooting Cilium in different deployment modes.

Welcome to Cilium’s documentation! The documentation is divided into the following sections: Getting Started Guides: Provides a simple tutorial for running a small Cilium setup on your laptop. Intended to get your hands dirty applying Cilium security policies between containers. Concepts: Describes the components of Cilium, and the different models for deploying Cilium. Provides the high-level understanding understanding required to run a full Cilium deployment and understand its behavior. Installation : Details instructions for installing, configuring, and troubleshooting Cilium in different deployment modes.

Welcome to Cilium’s documentation! The documentation is divided into the following sections: Getting Started Guides: Provides a simple tutorial for running a small Cilium setup on your laptop. Intended to get your hands dirty applying Cilium security policies between containers. Concepts: Describes the components of Cilium, and the different models for deploying Cilium. Provides the high-level understanding understanding required to run a full Cilium deployment and understand its behavior. Installation : Details instructions for installing, configuring, and troubleshooting Cilium in different deployment modes.

Welcome to Cilium’s documentation! The documentation is divided into the following sections: Getting Started Guides: Provides a simple tutorial for running a small Cilium setup on your laptop. Intended to get your hands dirty applying Cilium security policies between containers. Concepts: Describes the components of Cilium, and the different models for deploying Cilium. Provides the high-level understanding understanding required to run a full Cilium deployment and understand its behavior. Architecture: Describes the components of the Cilium architecture and how these components integrate with existing architectures

# Welcome to Cilium's documentation! The documentation is divided into the following sections: - Getting Started Guides: Provides a simple tutorial for running a small Cilium setup on your laptop get your hands dirty applying Cilium security policies between containers. • Concepts: Describes the components of Cilium, and the different models for deploying Cilium. Provides the high-level understanding understanding required to run a full Cilium deployment and understand its behavior. - Installation : Details instructions for installing, configuring, and troubleshooting Cilium in different deployment modes