tcpdump and ping and while they will always find a special place in our hearts, we strive to provide better tooling for troubleshooting. This includes tooling to provide: Event monitoring with metadata: When prometheus :9153 proxy . /etc/resolv.conf cache 30 } The contents can look different than the above. The specific configuration that matters is to make sure that in-addr.arpa and ip6.arpa required to set up Cilium on Kubernetes using an external etcd. Use of an external etcd provides better performance and is suitable for larger environments. If you are looking for a simple installation

tcpdump and ping and while they will always find a special place in our hearts, we strive to provide better tooling for troubleshooting. This includes tooling to provide: Event monitoring with metadata: When Cilium is currently only enabled for IPv4. If you want to use IPv6, use a datapath/IPAM mode other than ENI. Install Cilium: Install Cilium into the EKS cluster. cilium install cilium status --wait Cilium is currently only enabled for IPv4. If you want to use IPv6, use a datapath/IPAM mode other than ENI. Patch VPC CNI (aws-node DaemonSet) Cilium will manage ENIs instead of VPC CNI, so the aws-node

tcpdump and ping and while they will always find a special place in our hearts, we strive to provide better tooling for troubleshooting. This includes tooling to provide: Event monitoring with metadata: When prometheus :9153 proxy . /etc/resolv.conf cache 30 } The contents can look different than the above. The specific configuration that matters is to make sure that in-addr.arpa and ip6.arpa required to set up Cilium on Kubernetes using an external etcd. Use of an external etcd provides better performance and is suitable for larger environments. If you are looking for a simple installation

tcpdump and ping and while they will always find a special place in our hearts, we strive to provide better tooling for troubleshooting. This includes tooling to provide: Event monitoring with metadata: When Cilium is currently only enabled for IPv4. If you want to use IPv6, use a datapath/IPAM mode other than ENI. Install Cilium: Install Cilium into the EKS cluster. cilium install --version 1.11.20 cilium Cilium is currently only enabled for IPv4. If you want to use IPv6, use a datapath/IPAM mode other than ENI. Patch VPC CNI (aws-node DaemonSet) Cilium will manage ENIs instead of VPC CNI, so the aws-node

tcpdump and ping and while they will always find a special place in our hearts, we strive to provide better tooling for troubleshooting. This includes tooling to provide: Event monitoring with metadata: When prometheus :9153 proxy . /etc/resolv.conf cache 30 } The contents can look different than the above. The specific configuration that matters is to make sure that in-addr.arpa and ip6.arpa required to set up Cilium on Kubernetes using an external etcd. Use of an external etcd provides better performance and is suitable for larger environments. If you are looking for a simple installation

tcpdump and ping and while they will always find a special place in our hearts, we strive to provide better tooling for troubleshooting. This includes tooling to provide: Event monitoring with metadata: When prometheus :9153 proxy . /etc/resolv.conf cache 30 } The contents can look different than the above. The specific configuration that matters is to make sure that in-addr.arpa and ip6.arpa required to set up Cilium on Kubernetes using an external etcd. Use of an external etcd provides better performance and is suitable for larger environments. If you are looking for a simple installation

a bit of copper, Captain Tux built a sturdy translator droid, And the buzzing bees worked swifter than ever. They organized as teams, and eBee took the lead. SLOW 0 0 0 0 1 1 1 1 0 1 1 1 0 0 1 1 purposes. The team flew and traveled, becoming so prosperous That the news spread around, even faster than light, Making dark and terrible entities jealous. Hold on tight: the Silver Lining was under attack view of all networking. This creates security systems operating with richer context and a better level of control than traditional solutions. Projects using eBPF for security purposes include Falco, Tetragon

breakpoint hits ● We can use it in bpf/verifier.c to do printf based debugging ● Sometimes it’s better than messing around with pointers in gdb verbose(void *, const char *, ...) Thank you!

Integrate in Facebook’s profiling infra - Rewrite OSS driver program - Make the OSS version awesome - Better documentation (including how to measure overhead) - Add more output formats - Open source GDB

Existing process confinement mechanisms are difficult to use SELinux AppArmor TOMOYO ▶ Can we do any better? 2 / 7 eBPF Changes the Game eBPF enables: ▶ Fine-grained system introspection ▶ Integration