your hands dirty applying Cilium security policies between containers. Concepts: Describes the components of Cilium, and the different models for deploying Cilium. Provides the high-level understanding for traffic between application containers and to external services and is able to fully replace components such as kube-proxy. The load balancing is implemented in eBPF using efficient hashtables allowing com/cilium/cilium/v1.9/inst Validate the Installation You can monitor as Cilium and all required components are being installed: kubectl -n kube-system get pods --watch NAME

your hands dirty applying Cilium security policies between containers. Concepts: Describes the components of Cilium, and the different models for deploying Cilium. Provides the high-level understanding for traffic between application containers and to external services and is able to fully replace components such as kube-proxy. The load balancing is implemented in eBPF using efficient hashtables allowing Observability Setting up Hubble Observability Inspecting Network Flows with the CLI Service Map & Hubble UI Network Policy Security Tutorials Identity-Aware and HTTP-Aware Policy Enforcement Locking down external

your hands dirty applying Cilium security policies between containers. Concepts: Describes the components of Cilium, and the different models for deploying Cilium. Provides the high-level understanding for traffic between application containers and to external services and is able to fully replace components such as kube-proxy. The load balancing is implemented in eBPF using efficient hashtables allowing Observability Setting up Hubble Observability Inspecting Network Flows with the CLI Service Map & Hubble UI Network Policy Security Tutorials Identity-Aware and HTTP-Aware Policy Enforcement Locking down external

your hands dirty applying Cilium security policies between containers. Concepts: Describes the components of Cilium, and the different models for deploying Cilium. Provides the high-level understanding com/cilium/cilium/v1.8/inst Validate the Installation You can monitor as Cilium and all required components are being installed: kubectl -n kube-system get pods --watch NAME 0/1 ContainerCreating 0 8m57s It may take a couple of minutes for all components to come up: cilium-operator-cb4578bc5-q52qk 1/1 Running 0 4m13s cilium-s8w5m

your hands dirty applying Cilium security policies between containers. Concepts: Describes the components of Cilium, and the different models for deploying Cilium. Provides the high-level understanding Cilium deployment and understand its behavior. Architecture: Describes the components of the Cilium architecture and how these components integrate with existing architectures, such as Kubernetes. Installation com/cilium/cilium/v1.7/inst Validate the Installation You can monitor as Cilium and all required components are being installed: kubectl -n kube-system get pods --watch NAME

your hands dirty applying Cilium security policies between containers. Concepts: Describes the components of Cilium, and the different models for deploying Cilium. Provides the high-level understanding Cilium deployment and understand its behavior. Architecture: Describes the components of the Cilium architecture and how these components integrate with existing architectures, such as Kubernetes. Installation com/cilium/cilium/v1.6/inst Validate the Installation You can monitor as Cilium and all required components are being installed: kubectl -n kube-system get pods --watch NAME

your hands dirty applying Cilium security policies between containers. Concepts: Describes the components of Cilium, and the different models for deploying Cilium. Provides the high-level understanding deployment and understand its behavior. Architecture: Describes the components of the Cilium architecture and how these components integrate with exis�ng architectures, such as Kubernetes. Installa�on cilium Deploy Cilium + cilium-etcd-operator The following all-in-one YAML will deploy all required components to bring up Cilium including an etcd cluster managed by the cilium-etcd-operator. Note It is

command to help with troubleshooting ❏ Features to expose network traffic flows to teams ❏ Hubble UI ❏ Network flow logs exported to logging stack ❏ Tracking network traffic to specific binaries 16

3 / 7 bpfbox Implementation ▶ Userspace daemon using the Python3 bcc framework ▶ Kernelspace components are all eBPF ▶ LSM probes (KRSI), kprobes, uprobes, tracepoints ▶ Under 2000 source lines of kernelspace