Presentations Podcasts Community blog posts Glossary Introduction to Cilium What is Cilium? Cilium is open source software for transparently securing the network connectivity between application services deployed $ cd contrib/terraform/aws $ cp contrib/terraform/aws/terraform.tfvars.example terraform.tfvars` Open the file and change any defaults particularly, the number of master, etcd, and worker nodes. You can version [https://github.com/cilium/cilium/releases] by editing roles/download/defaults/main.yml. Open the file, search for cilium_version, and replace the version with the latest released. As an example

Presentations Podcasts Community blog posts Glossary Introduction to Cilium What is Cilium? Cilium is open source software for transparently securing the network connectivity between application services deployed $ cd contrib/terraform/aws $ cp contrib/terraform/aws/terraform.tfvars.example terraform.tfvars` Open the file and change any defaults particularly, the number of master, etcd, and worker nodes. You can version [https://github.com/cilium/cilium/releases] by editing roles/download/defaults/main.yml. Open the file, search for cilium_version, and replace the version with the latest released. As an example

Presenta�ons Podcasts Community blog posts Glossary Introduction to Cilium What is Cilium? Cilium is open source so�ware for transparently securing the network connec�vity between applica�on services deployed 5/examples/kubernet wget https://raw.githubusercontent.com/cilium/cilium/v1.5/examples/kubernet Open cilium-external-etcd.yaml and find the cilium-config ConfigMap and edit the endpoints: to include $ cd contrib/terraform/aws $ cp contrib/terraform/aws/terraform.tfvars.example terraform.tfvars` Open the file and change any defaults par�cularly, the number of master, etcd, and worker nodes. You can

Podcasts Community blog posts Glossary Introduction to Cilium & Hubble What is Cilium? Cilium is open source software for transparently securing the network connectivity between application services deployed for hubble-ui service: kubectl port-forward -n $CILIUM_NAMESPACE svc/hubble-ui 12000:80 and then open http://localhost:12000/. Next steps Now that you have a Kubernetes cluster with Cilium up and running for hubble-ui service: kubectl port-forward -n $CILIUM_NAMESPACE svc/hubble-ui 12000:80 and then open http://localhost:12000/. Limitations All VMs and VM scale sets used in a cluster must belong to

Community blog posts Glossary Helm Reference Introduction to Cilium & Hubble What is Cilium? Cilium is open source software for transparently securing the network connectivity between application services deployed port-forward -n $CILIUM_NAMESPACE svc/hubble-ui --address 0.0.0.0 --address :: 12000:80 And then open http://localhost:12000/ to access the UI. Hubble UI is not the only way to get access to Hubble data port-forward -n $CILIUM_NAMESPACE svc/hubble-ui --address 0.0.0.0 --address :: 12000:80 And then open http://localhost:12000/ to access the UI. Hubble UI is not the only way to get access to Hubble data

Community blog posts Glossary Helm Reference Introduction to Cilium & Hubble What is Cilium? Cilium is open source software for transparently securing the network connectivity between application services deployed $ cd contrib/terraform/aws $ cp contrib/terraform/aws/terraform.tfvars.example terraform.tfvars` Open the file and change any defaults particularly, the number of master, etcd, and worker nodes. You can the Cluster Options section click the box to Edit as YAML. The configuration for the cluster will open up in an editor in the window. Remove all configuration pertaining to the default network plugin:

Community blog posts Glossary Helm Reference Introduction to Cilium & Hubble What is Cilium? Cilium is open source software for transparently securing the network connectivity between application services deployed $ cd contrib/terraform/aws $ cp contrib/terraform/aws/terraform.tfvars.example terraform.tfvars` Open the file and change any defaults particularly, the number of master, etcd, and worker nodes. You can the Cluster Options section click the box to Edit as YAML. The configuration for the cluster will open up in an editor in the window. Remove all configuration pertaining to the default network plugin:

users:(("nc",pid=1289,fd=3)) $ nc -4 127.0.0.1 7777 hello⏎ hello ^D Netcat + /bin/cat Test it! Check open ports on VM external IP vm $ ip -4 addr show eth0 2: eth0: mtu $ nmap -sT -p 1-1000 192.168.122.221 … Not shown: 999 closed ports PORT STATE SERVICE 22/tcp open ssh Nmap done: 1 IP address (1 host up) scanned in 0.07 seconds scan first 1000 ports 7, 77, 777 .h 7 77 777 echo_ports BPF HASH map Ncat socket echo_socket BPF SOCKMAP (2) is local port open? (3) pick echo service socket Ncat socket (1) (4) echo_dispatch.bpf.c - BPF sk_lookup program

program, re-compile and re-deploy. ○ This can be simple log statements, or ○ More comprehensive like Open tracing. Option 2: Debugger ○ GDB ○ Delve Option 3: Linux tracing utility ○ strace/ftrace ○ et Some related projects https://github.com/draios/sysdig/wiki/eBPF Checkout out repo/blog for open source examples https://blog.pixielabs.ai/ebpf

developer gets to their own k8s namespace About Okteto A few months ago... GCP was not thrilled Open Source to the rescue! ● Installed Falco in the clusters ● Configured it with the default rules plus