eBPF at LINE’s Private Cloud Yutaro Hayakawa October 28, 2020 • Messaging & many family services • 185 million global MAU • 3Tbps+ network traffic in total LINE Verda: LINE’s Private Cloud Service com/watch?v=UE6rPA1Js2s&fe ature=emb_title • https://speakerdeck.com/line_devday2019/software- engineering-that-supports-line-original-lbaas ipftrace // Trace the TCP packets with destination 10.0 VRF For More Information • Our SRv6 DC network architecture (en) • https://speakerdeck.com/line_developers/line-data-center- networking-with-srv6 • Detailed investigation of SRv6 TSO/GSO issue (jp) •

the API Compatibility Guarantees API Reference Reference Command Cheatsheet Command utilities: Command examples: Kubernetes examples: Command Reference cilium-agent cilium cilium-health cilium-operator Kubernetes version, the --kubernetes- version vx.y.z parameter can be appended to the minikube start command for bootstrapping the local cluster. By default, minikube will install the most recent version of com/en-us/cli/azure/install- azure-cli?view=azure-cli-latest] installed. To verify, confirm that the following command displays the set of available Kubernetes versions. az aks get-versions -l westus -o table Create

Package Compatibility Guarantees API Reference Reference Command Cheatsheet Command utilities: Command examples: Kubernetes examples: Command Reference cilium-agent cilium cilium-health cilium-operator Kubernetes version, the --kubernetes- version vx.y.z parameter can be appended to the minikube start command for bootstrapping the local cluster. By default, minikube will install the most recent version of requests to the current kind-control-plane container. Recreating the kind cluster and using the helm command Install Cilium will detach the inaccurate eBPF programs. Cluster Mesh With Kind we can simulate

Hubble Architecture Hubble server Hubble Relay Reference Command Cheatsheet Command utilities: Command examples: Kubernetes examples: Command Reference cilium-agent cilium cilium-health cilium-operator networking plugin can be enabled directly with -- network-plugin=cilium parameter in minikube start command. With this flag enabled, minikube will not only mount eBPF file system but also deploy quick- install Kubernetes version, the --kubernetes- version vx.y.z parameter can be appended to the minikube start command for bootstrapping the local cluster. By default, minikube will install the most recent version of

Hubble Architecture Hubble server Hubble Relay Reference Command Cheatsheet Command utilities: Command examples: Kubernetes examples: Command Reference cilium-agent cilium cilium-health cilium-operator cilium networking plugin can be enabled directly with -- cni=cilium parameter in minikube start command. With this flag enabled, minikube will not only mount eBPF file system but also deploy quick- install Kubernetes version, the --kubernetes- version vx.y.z parameter can be appended to the minikube start command for bootstrapping the local cluster. By default, minikube will install the most recent version of

collection Derivative network policy creation Reference Command Cheatsheet Command utilities: Command examples: Kubernetes examples: Command Reference cilium-agent cilium cilium-health cilium-operator to create a Kubernetes cluster locally or using a managed Kubernetes service: GKE The following command creates a Kubernetes cluster using Google Kubernetes Engine [https://cloud.google.com/kubernetes-engine] require Azure IPAM, we recommend you to switch to the AKS (BYOCNI) installation. The following command creates a Kubernetes cluster using Azure Kubernetes Service [https://docs.microsoft.com/en-us/azure/aks/]

network policy creation Security Identities Reference Command Cheatsheet Command utilities: Command examples: Kubernetes examples: Command Reference cilium-agent cilium cilium-health cilium-operator documentation: Install Minikube [https://kubernetes.io/docs/tasks/tools/install-minikube/]. The following command will bring up a single node minikube cluster prepared for installing cilium. minikube start --network-plugin=cni cilium networking plugin can be enabled directly with -- cni=cilium parameter in minikube start command. However, this may not install the latest version of cilium. Install the Cilium CLI Install the

access the API Compa�bility Guarantees API Reference Reference Command Cheatsheet Command u�li�es: Command examples: Kubernetes examples: Command Reference cilium-agent cilium cilium-health Key-Value Store Kubernetes version, the --kubernetes-version vx.y.z parameter can be appended to the minikube start command for bootstrapping the local cluster. By default, minikube will install the most recent version of referring to the key loca�ons like this: # In case you want to use TLS in etcd, uncomment the 'ca-file' line # and create a kubernetes secret by following the tutorial in # https://cilium.link/etcd-config

and enterprise Security Information and Event Management (SIEM) integration ❏ hubble observe command to help with troubleshooting ❏ Features to expose network traffic flows to teams ❏ Hubble UI ❏ Network Tracking network traffic to specific binaries 16 Durable Audit Log Storage 17 Hubble Observe Command 18 Network Visibility for Teams 19 Searchable Logs and Which Binary 20 eBPF Powers All of