# Handle Edge Cloud Network with KubeBus Yulin Sun, yulin.sun@huawei.com Seattle Cloud Lab, Huawei R&D USA, Bellevue WA ## Agenda • Edge sample user scenarios • Edge network characteristics • Related [Image](/uploads/documents/0/1/1/e/011e7729ea9b3552e0d5b44619014a60/p3_3.jpg) Edge Area Private Network ## Campus surveillance Campus Surveillance System • Model training • AI execution • AI algorithm/model management • ... Private Network ## Edge network characteristics  ## • Edge Nodes running at private network • Connect to Cloud

# Handle Edge Cloud Network with KubeBus Yulin Sun, yulin.sun@huawei.com Seattle Cloud Lab, Huawei R&D USA, Bellevue WA ## Agenda • Edge sample user scenarios • Edge network characteristics • Related [Image](/uploads/documents/0/1/1/e/011e7729ea9b3552e0d5b44619014a60/p3_3.jpg) Edge Area Private Network ## Campus surveillance Campus Surveillance System • Model training • AI execution • AI algorithm/model management • ... Private Network ## Edge network characteristics  ## • Edge Nodes running at private network • Connect to Cloud

Detection and Network Monitoring by using eBPF Natalia Reka Ivanko, Isovalent eBPF Summit ## I ntroduction ● Wide variety of eBPF use cases (logging, CPU over overhead) • Today: ☐ Network Monitoring [Image](/uploads/documents/c/7/4/d/c74d82edc22d50cbdea681f7475bb901/p2_1.jpg) ## Problem ● Traditional network-layer tools are based on IPs and ports ● K8s workloads are containerized IPs are dynamically changing

that will download and extract all of the platform-specific binaries you will need to set up your network and place them into the cloned repo you created above. It retrieves four platform-specific binaries: names for each image; these are the components that will ultimately comprise our Hyperledger Fabric network. You will also notice that you have two instances of the same image ID - one tagged as "x86_64-1 to generate the certificates and key material to configure and manage identity in your blockchain network. However, any CA that can generate ECDSA certificates may be used. # Key Concepts ### 2.1 Introduction

# A Blockchain Platform for the Enterprise ## HYPERLEDGER FABRIC Enterprise grade permissioned distributed ledger platform that offers modularity and versatility for a broad set of industry use cases general terms, a blockchain is an immutable transaction ledger, maintained within a distributed network of peer nodes. These nodes each maintain a copy of the ledger by applying transactions that have following requirements: • Participants must be identified/identifiable • Networks need to be permissioned • High transaction throughput performance • Low latency of transaction confirmation - Privacy

navigation panel. # A Blockchain Platform for the Enterprise ## HYPERLEDGER FABRIC Enterprise grade permissioned distributed ledger platform that offers modularity and versatility for a broad set of industry Key Concepts • Getting Started • Developing Applications • Tutorials • Deploying a production network • Operations Guides • Upgrading to the latest release • Commands Reference • Architecture Reference general terms, a blockchain is an immutable transaction ledger, maintained within a distributed network of peer nodes. These nodes each maintain a copy of the ledger by applying transactions that have

액티비티다이어그램 · 컴포넌트다이어그램 · 배치다이어그램 · 상태다이어그램 • 타이밍다이어그램 다음의 UML 이외의다이어그램도지원함: • JSON Data • Network diagram (nwd) • Wireframe graphical interface • Archimate diagram • Specification and Description d59f1/p195_1.jpg) [Adapted from QA-13123] ## 12 Network diagram (nwdig) nwdig has been created by Takeshi Komiya and allows to quickly draw network diagrams. So we thank him for his creation! Since @startuml nwdiag { network dmz { address = "210.x.x.x/24" web01 [address = "210.x.x.1"); web02 [address = "210.x.x.2"); } network internal {

ments/1/5/0/4/150419098dfaf556635346574c520955/p36_1.jpg) ## app ## ↓ Istio RBAC Kubernetes Network Policy ## naiscar ## Lessons learned ## What's next? ## @nais_io @linemoseng @j_hrv

instructions for installing, configuring, and troubleshooting Cilium in different deployment modes. Network Policy : Detailed walkthrough of the policy language structure and the supported formats. Monitoring Guides Installation Observability Network Policy Security Tutorials Advanced Networking Cluster Mesh Operations Istio Concepts Component Overview Terminology Networking Network Security eBPF Datapath Observability pre-flight check (Required) Upgrading Cilium Version Specific Notes Advanced Configuration Core Agent Network Policy Policy Enforcement Modes Rule Basics Layer 3 Examples Layer 4 Examples Layer 7 Examples

Kernel Runtime Parameters 3 Configure etcd user and group 4 Ensure that all Namespaces have Network Policies defined 5 Reference Hardened RKE cluster.yml configuration 6 Reference Hardened RKE Namespaces have Network Policies defined Running different applications on the same Kubernetes cluster creates a risk of one compromised application attacking a neighboring application. Network segmentation supposed to. A network policy is a specification of how selections of pods are allowed to communicate with each other and other network endpoints. Network Policies are namespace scoped. When a network policy