The development of modern datacenter applica�ons has shi�ed to a service- oriented architecture o�en referred to as microservices, wherein a large applica�on is split into small independent services that operates at Layer 3 and 4. A protocol running on a par�cular port is either completely trusted or blocked en�rely. Cilium provides the ability to filter on individual applica�on protocol requests such as: Allow X-Token: [0-9]+ to be present in all REST calls. See the sec�on Layer 7 Policy [h�p://docs.cilium.io/en/stable/policy/#layer-7] in our documenta�on for the latest list of supported protocols and examples

X-Token: [0-9]+ to be present in all REST calls. See the section Layer 7 Policy [http://docs.cilium.io/en/stable/policy/#layer-7] in our documentation for the latest list of supported protocols and examples Kubernetes Service [https://docs.microsoft.com/en-us/azure/aks/] with no CNI plugin pre-installed (BYOCNI). See Azure Cloud CLI [https://docs.microsoft.com/en-us/cli/azure/install-azure-cli? view=azure-cli-latest] install az and prepare your account, and the Bring your own CNI documentation [https://docs.microsoft.com/en-us/azure/aks/use-byo-cni? tabs=azure-cli] for more details about BYOCNI prerequisites / implications

X-Token: [0-9]+ to be present in all REST calls. See the section Layer 7 Policy [http://docs.cilium.io/en/stable/policy/#layer-7] in our documentation for the latest list of supported protocols and examples Kubernetes Service [https://docs.microsoft.com/en-us/azure/aks/] with no CNI plugin pre-installed (BYOCNI). See Azure Cloud CLI [https://docs.microsoft.com/en-us/cli/azure/install-azure-cli? view=azure-cli-latest] install az and prepare your account, and the Bring your own CNI documentation [https://docs.microsoft.com/en-us/azure/aks/use-byo-cni? tabs=azure-cli] for more details about BYOCNI prerequisites / implications

X-Token: [0-9]+ to be present in all REST calls. See the section Layer 7 Policy [http://docs.cilium.io/en/stable/policy/#layer-7] in our documentation for the latest list of supported protocols and examples complete... Next, firewall configuration must be updated to allow Cilium ports [https://docs.cilium.io/en/v1.8/install/system_requirements/#firewall-rules]. Please note that openshift-install doesn’t support managed AKS cluster: Prerequisites Ensure that you have the Azure Cloud CLI [https://docs.microsoft.com/en-us/cli/azure/install- azure-cli?view=azure-cli-latest] installed. To verify, confirm that the following

X-Token: [0-9]+ to be present in all REST calls. See the section Layer 7 Policy [http://docs.cilium.io/en/stable/policy/#layer-7] in our documentation for the latest list of supported protocols and examples complete... Next, firewall configuration must be updated to allow Cilium ports [https://docs.cilium.io/en/v1.8/install/system_requirements/#firewall-rules]. Please note that openshift-install doesn’t support up AKS in both Basic [https://docs.microsoft.com/en-us/azure/aks/concepts- network#kubenet-basic-networking] and Advanced [https://docs.microsoft.com/en-us/azure/aks/concepts- network#azure-cni-advanced-networking]

X-Token: [0-9]+ to be present in all REST calls. See the section Layer 7 Policy [http://docs.cilium.io/en/stable/policy/#layer-7] in our documentation for the latest list of supported protocols and examples up AKS in both Basic [https://docs.microsoft.com/en-us/azure/aks/concepts- network#kubenet-basic-networking] and Advanced [https://docs.microsoft.com/en-us/azure/aks/concepts- network#azure-cni-advanced-networking] and clustermesh. Prerequisites Ensure that you have the Azure Cloud CLI [https://docs.microsoft.com/en-us/cli/azure/install- azure-cli?view=azure-cli-latest] installed. To verify, confirm that the following

X-Token: [0-9]+ to be present in all REST calls. See the section Layer 7 Policy [http://docs.cilium.io/en/stable/policy/#layer-7] in our documentation for the latest list of supported protocols and examples up AKS in both Basic [https://docs.microsoft.com/en-us/azure/aks/concepts- network#kubenet-basic-networking] and Advanced [https://docs.microsoft.com/en-us/azure/aks/concepts- network#azure-cni-advanced-networking] and clustermesh. Prerequisites Ensure that you have the Azure Cloud CLI [https://docs.microsoft.com/en-us/cli/azure/install- azure-cli?view=azure-cli-latest] installed. To verify, confirm that the following

(dash board) To Backends User For More Information • Our motivation, detailed architecture, etc… (en) • https://www.youtube.com/watch?v=UE6rPA1Js2s&fe ature=emb_title • https://speakerdeck.com/line + iptables Security Policy VRF VRF VRF For More Information • Our SRv6 DC network architecture (en) • https://speakerdeck.com/line_developers/line-data-center- networking-with-srv6 • Detailed investigation