are baked in but all encapsula�on formats supported by Linux can be enabled. When to use this mode: This mode has minimal infrastructure and integra�on requirements. It works on almost any network infrastructure applica�on containers. When to use this mode: This mode is for advanced users and requires some awareness of the underlying networking infrastructure. This mode works well with: Na�ve IPv6 networks environment is mee�ng the requirements: Kubernetes >= 1.9 Linux kernel >= 4.9 Kubernetes in CNI mode Running kube-dns/coredns (When using the etcd-operator installa�on method) Mounted BPF filesystem

baked in but all encapsulation formats supported by Linux can be enabled. When to use this mode: This mode has minimal infrastructure and integration requirements. It works on almost any network infrastructure application containers. When to use this mode: This mode is for advanced users and requires some awareness of the underlying networking infrastructure. This mode works well with: Native IPv6 networks In Locking down external access using AWS metadata Advanced Networking Setting up Cilium in AWS ENI mode Using kube-router to run BGP Setting up Cluster Mesh Cilium integration with Flannel (beta) IPVLAN

baked in but all encapsulation formats supported by Linux can be enabled. When to use this mode: This mode has minimal infrastructure and integration requirements. It works on almost any network infrastructure application containers. When to use this mode: This mode is for advanced users and requires some awareness of the underlying networking infrastructure. This mode works well with: Native IPv6 networks In Locking down external access using AWS metadata Advanced Networking Setting up Cilium in AWS ENI mode Using kube-router to run BGP Using BIRD to run BGP Setting up Cluster Mesh Cilium integration with

baked in but all encapsulation formats supported by Linux can be enabled. When to use this mode: This mode has minimal infrastructure and integration requirements. It works on almost any network infrastructure application containers. When to use this mode: This mode is for advanced users and requires some awareness of the underlying networking infrastructure. This mode works well with: Native IPv6 networks In Creating policies from verdicts Host Firewall (beta) Advanced Networking Setting up Cilium in AWS ENI mode Using kube-router to run BGP Using BIRD to run BGP Setting up Cluster Mesh Cilium integration with

baked in but all encapsulation formats supported by Linux can be enabled. When to use this mode: This mode has minimal infrastructure and integration requirements. It works on almost any network infrastructure application containers. When to use this mode: This mode is for advanced users and requires some awareness of the underlying networking infrastructure. This mode works well with: Native IPv6 networks In Firewall (beta when using kube-proxy) Advanced Networking Setting Up Cilium in AlibabaCloud ENI Mode (beta) Using kube-router to run BGP Using BIRD to run BGP IPVLAN based Networking (beta) Transparent

baked in but all encapsulation formats supported by Linux can be enabled. When to use this mode: This mode has minimal infrastructure and integration requirements. It works on almost any network infrastructure application containers. When to use this mode: This mode is for advanced users and requires some awareness of the underlying networking infrastructure. This mode works well with: Native IPv6 networks In Creating policies from verdicts Host Firewall Advanced Networking Setting Up Cilium in AlibabaCloud ENI Mode (beta) Using kube-router to run BGP Using BIRD to run BGP Transparent Encryption Host-Reachable Services

baked in but all encapsulation formats supported by Linux can be enabled. When to use this mode: This mode has minimal infrastructure and integration requirements. It works on almost any network infrastructure application containers. When to use this mode: This mode is for advanced users and requires some awareness of the underlying networking infrastructure. This mode works well with: Native IPv6 networks In Creating policies from verdicts Host Firewall (beta) Advanced Networking Setting up Cilium in AWS ENI mode Using kube-router to run BGP Using BIRD to run BGP Setting up Cluster Mesh Cilium integration with

nux-next.git /source/linux cd linux mkdir build make O=$PWD/build ARCH=x86_64 x86_64_defconfig make O=$PWD/build ARCH=x86_64 menuconfig make O=$PWD/build ARCH=x86_64 -j16 Kernel image Remember to: filesystem image - Enable networking - Enable the SSH daemon cd /source/linux qemu-system-x86_64 -kernel build/arch/x86/boot/bzImage \ --enable-kvm \ -nic user,hostfwd=tcp::2222-:22 \ -boot c -m 2049M -hda /s 115200 acpi=off nokaslr" \ -serial stdio -display none Start the test VM cd /source/linux gdb build/vmlinux (gdb) target remote localhost:1234 (gdb) bpf/syscall.c:4180 (gdb) bpf/syscall.c:796 (gdb)

managed as DaemonSet on each worker node ● cilium-operator managed as Deployment (2 replicas / HA mode in latest releases) on workers ● cilium-agent running on control plane to enable control/data plane

limit the number of consumers • But adding such a feature in RabbitMQ could be a long process… Build a Limiter in BPF • Let’s use BPF to get a quick win! • Track how many “AMQP consumers” have been