Troubleshooting : Describes how to troubleshoot Cilium in different deployment modes. BPF and XDP Reference Guide : Provides a technical deep dive of eBPF and XDP technology, primarily focused at developers. API Reference : Details the Cilium agent API for interacting with a local Cilium instance. Development Guide : Gives background to those looking to develop and contribute modifications to the Cilium code or Features Key-Value store clang+LLVM iproute2 Firewall Rules Mounted eBPF filesystem Privileges Upgrade Guide Running pre-flight check (Required) Upgrading Cilium Version Specific Notes Advanced Configuration

Troubleshooting : Describes how to troubleshoot Cilium in different deployment modes. BPF and XDP Reference Guide : Provides a technical deep dive of eBPF and XDP technology, primarily focused at developers. API Reference : Details the Cilium agent API for interacting with a local Cilium instance. Development Guide : Gives background to those looking to develop and contribute modifications to the Cilium code or Features Key-Value store clang+LLVM iproute2 Firewall Rules Mounted eBPF filesystem Privileges Upgrade Guide Running pre-flight check (Required) Upgrading Cilium Version Specific Notes Advanced Configuration

Troubleshooting : Describes how to troubleshoot Cilium in different deployment modes. BPF and XDP Reference Guide : Provides a technical deep dive of eBPF and XDP technology, primarily focused at developers. API Reference : Details the Cilium agent API for interacting with a local Cilium instance. Development Guide : Gives background to those looking to develop and contribute modifications to the Cilium code or Features Key-Value store clang+LLVM iproute2 Firewall Rules Mounted eBPF filesystem Privileges Upgrade Guide Running pre-flight check (Required) Upgrading Cilium Version Specific Notes Advanced Configuration

Troubleshooting : Describes how to troubleshoot Cilium in different deployment modes. BPF and XDP Reference Guide : Provides a technical deep dive of BPF and XDP technology, primarily focused at developers. API Reference Details the Cilium agent API for interacting with a local Cilium instance. Developer / Contributor Guide : Gives background to those looking to develop and contribute modifications to the Cilium code or and Required Kernel Version Key-Value store clang+LLVM iproute2 Firewall Rules Privileges Upgrade Guide Running pre-flight check (Required) Upgrading Micro Versions Upgrading Minor Versions Step 3: Rolling

Troubleshooting : Describes how to troubleshoot Cilium in different deployment modes. BPF and XDP Reference Guide : Provides a technical deep dive of BPF and XDP technology, primarily focused at developers. API Reference and Required Kernel Version Key-Value store clang+LLVM iproute2 Firewall Rules Privileges Upgrade Guide Running pre-flight check (Required) Upgrading Cilium Step 3: Rolling Back Version Specific Notes Organization Release tracking Release Cadence Backporting process Backport Criteria Backporting guide Generic Release Process Release Candidate Process Feature Release Process On Freeze date For the

Troubleshooting : Describes how to troubleshoot Cilium in different deployment modes. BPF and XDP Reference Guide : Provides a technical deep dive of BPF and XDP technology, primarily focused at developers. API Reference Reference : Details the Cilium agent API for interacting with a local Cilium instance. Development Guide : Gives background to those looking to develop and contribute modifications to the Cilium code or Features Key-Value store clang+LLVM iproute2 Firewall Rules Mounted eBPF filesystem Privileges Upgrade Guide Running pre-flight check (Required) Upgrading Cilium Version Specific Notes Advanced Configuration

Troubleshoo�ng : Describes how to troubleshoot Cilium in different deployment modes. BPF and XDP Reference Guide : Provides a technical deep dive of BPF and XDP technology, primarily focused at developers. API Details the Cilium agent API for interac�ng with a local Cilium instance. Developer / Contributor Guide : Gives background to those looking to develop and contribute modifica�ons to the Cilium code or documenta�on Compa�bility Matrix Linux Kernel Key-Value store clang+LLVM iproute2 Firewall Rules Privileges Upgrade Guide Running a pre-flight DaemonSet Upgrading Micro Versions Upgrading Minor Versions Rolling Back Version

Buzzing Across Space The Illustrated Children’s Guide to eBPF Written by: Quentin Monnet & Bill Mulligan Illustrated by: Dacil C. Designed by: Quentin Monnet Here's a story about starships, about Linux, an operating system that runs on billions of devices around the world and is divided into user space (where most applications run) and kernel space (which provides an interface for applications to provide a stable interface to applications, so it lacks the flexibility of user space programming. Applications User space Kernel System calls Files Networking Process Memory Flying for years

pdf twagent Container (aka “task”): ● namespaces: cgroup, mount, pid and optionally: ipc, net, user, uts ● cgroup v2 ● ... other usual building blocks ... ● cgroup-bpf programs 2 Vast majority BPF_PROG_TYPE_CGROUP_SOCK_ADDR and BPF_CGROUP_SOCK_OPS programs Move TCP/UDP servers to task IP: ● bind(2): ctx.user_ip6 = task_ip Make TCP/UDP clients use task IP as source IP: ● connect(2): bpf_bind(task_ip) ● BPF_CGROUP_INET6_CONNECT: ● orig_dst.ip = ctx->user_ip6 ● orig_dst.port = ctx->user_port ● Save in a map ● ctx->user_ip6 = proxy.ip ● ctx->user_port = proxy.port BPF_SOCK_OPS_TCP_CONNECT_CB:

#include #include struct stack_key_t { int pid; char name[16]; int user_stack_id; int kernel_stack_id; }; BPF_STACK_TRACE(stack_traces, 16384); BPF_HASH(counts, struct stack_key_t sizeof(key.name)); key.kernel_stack_id = stack_traces.get_stackid(ctx, 0); key.user_stack_id = stack_traces.get_stackid(ctx, BPF_F_USER_STACK); u64 zero = 0, *val; val = counts.lookup_or_init(&key, &zero); kmemleak_scan kmemleak_scan_thread kthread ret_from_fork User Stack : - kmemleak (161) 04 Output ● Incorporate comments ○ Add len as part of user parameter ○ Test check_on_each_cpu() is required or not