Component Overview Terminology Networking Network Security eBPF Datapath Observability Kubernetes Integration Multi-Cluster (Cluster Mesh) Getting Help FAQ Slack GitHub Training Enterprise support Security Environments via SSH VMs for Testing VM images Known Issues and Workarounds Further Assistance Integration Testing Prerequisites Running all tests Testing individual packages Running individual tests Automatically supported by Linux can be enabled. When to use this mode: This mode has minimal infrastructure and integration requirements. It works on almost any network infrastructure as the only requirement is IP connectivity

Component Overview Terminology Networking Network Security eBPF Datapath Observability Kubernetes Integration Multi-Cluster (Cluster Mesh) Getting Help FAQ Slack GitHub Training Enterprise support Security supported by Linux can be enabled. When to use this mode: This mode has minimal infrastructure and integration requirements. It works on almost any network infrastructure as the only requirement is IP connectivity label definitions. Metrics export via Prometheus: Key metrics are exported via Prometheus for integration with your existing dashboards. Hubble [https://github.com/cilium/hubble/]: An observability platform

Component Overview Terminology Networking Network Security eBPF Datapath Observability Kubernetes Integration Multi-Cluster (Cluster Mesh) Getting Help FAQ Slack GitHub Training Enterprise support Security supported by Linux can be enabled. When to use this mode: This mode has minimal infrastructure and integration requirements. It works on almost any network infrastructure as the only requirement is IP connectivity label definitions. Metrics export via Prometheus: Key metrics are exported via Prometheus for integration with your existing dashboards. Hubble [https://github.com/cilium/hubble/]: An observability platform

Multi Host Networking Security Datapath Failure Behavior Architecture Datapath Scale Kubernetes Integration Getting Help FAQ Slack GitHub Security Bugs Integrations Kubernetes Introduction Concepts supported by Linux can be enabled. When to use this mode: This mode has minimal infrastructure and integration requirements. It works on almost any network infrastructure as the only requirement is IP connectivity label definitions. Metrics export via Prometheus: Key metrics are exported via Prometheus for integration with your existing dashboards. Hubble [https://github.com/cilium/hubble/]: An observability platform

Concepts Component Overview Terminology Networking Network Security eBPF Datapath Kubernetes Integration Multi-Cluster (Cluster Mesh) Getting Help FAQ Slack GitHub Security Bugs Operations System supported by Linux can be enabled. When to use this mode: This mode has minimal infrastructure and integration requirements. It works on almost any network infrastructure as the only requirement is IP connectivity label definitions. Metrics export via Prometheus: Key metrics are exported via Prometheus for integration with your existing dashboards. Hubble [https://github.com/cilium/hubble/]: An observability platform

Multi Host Networking Security Datapath Failure Behavior Architecture Datapath Scale Kubernetes Integration Getting Help FAQ Slack GitHub Security Bugs Integrations Kubernetes Introduction Concepts supported by Linux can be enabled. When to use this mode: This mode has minimal infrastructure and integration requirements. It works on almost any network infrastructure as the only requirement is IP connectivity label definitions. Metrics export via Prometheus: Key metrics are exported via Prometheus for integration with your existing dashboards. Integrations Network plugin integrations: CNI [https://github

com/kubernetes- incubator/kubespray#requirements] and Cilium System Requirements. Installing Kubespray $ git clone --branch v2.6.0 https://github.com/kubernetes-incubator/kubesp Install dependencies from requirements extracts the secrets and generate a Kubernetes secret in form of a YAML file: git clone https://github.com/cilium/clustermesh-tools.git cd clustermesh-tools Ensure that the kubectl context is poin�ng to the allow to use more than 8 bits for the cluster-id and thus support more than 256 clusters. Cilium integration with Flannel (beta) This guide contains the necessary steps to run Cilium on top of your Flannel

eBPF program that doesn’t work ● gdb First - The environment git clone https://git.kernel.org/pub/scm/linux/kernel/git/next/linux-next.git /source/linux cd linux mkdir build make O=$PWD/build ARCH=x86_64 Kernel image Remember to: - Enable debugging symbols under Kernel Hacking -> compile options git clone git://git.buildroot.net/buildroot /source/buildroot cd buildroot make menuconfig make -j16 Rootfs

file ❏ Durable log storage and enterprise Security Information and Event Management (SIEM) integration ❏ hubble observe command to help with troubleshooting ❏ Features to expose network traffic flows

any better? 2 / 7 eBPF Changes the Game eBPF enables: ▶ Fine-grained system introspection ▶ Integration of cross-layer state (kprobes, uprobes, etc.) with policy enforcement (LSM probes) ▶ Rapid prototyping