Cilium Tetragon 1.0 has arrived! marking a significant stride in Kubernetes security and observability, offering low-overhead, eBPF-driven runtime enforcement and monitoring
Learn how DB Schneker migrated their Kubernetes platform CNI from Calico to Cilium
Explore the reasons why Trendyol chose Cilium and the value they received from it
This is issue 09 of the regular newsletter around BPF written by Alexander Alemayhu. It summarizes ongoing development, presentations, videos and other information related to BPF and XDP. It is released roughly once a week.
Linux 4.12 was released and net-next is closed. The Kernel Newbies release notes is still under construction but worth checking out for the BPF commits in 4.12.
This blog post focuses on Layer 7 (HTTP) policy rules and how to apply them for both outgoing and incoming connections in the context of a Kubernetes cluster using a ThirdPartyResource. This is a first step in integrating L7 policies into the Kubernetes world, next steps will involve integration with Istio and the Envoy proxy. We will talk about our plans and the details how Cilium empowers both of them in one of the next blog posts.
Linux 4.12-rc5 was recently released. No BPF changes where included, but a usual [GIT] Networking pull request was made afterwards. You can see the changes in 15th June.
Linux 4.12-rc4 was released this week. No new BPF changes were in this release, but several patches were applied on netdev.
Linux 4.12-rc3 was released last week. One usual [GIT] Networking pull request with some BPF fixes made it in. You can read all the highlights in 26th May. Also the release email briefly mentions BPF. Anyway, rc3 has a little bit of everything. The biggest single change is actually just a documentation update (the intel pstate docs were converted to rst format), so the diffstat actually looks a bit odd with a wuarter just being documentation. There's also some tooling updates (perf and some bpf selftest).More interesting highlights
The team is excited to announce the v0.9 release of Cilium.We've received a lot of great feedback since we released Cilium v0.8 at the end of March with support for L7 HTTP-aware network security. By far the biggest requests have been:1) Making it easier to deploy and use Cilium in Kubernetes environments 2) Testing and hardening Cilium to enable production deployments.
Linux 4.12-rc2 was released last week. One usual [GIT] Networking pull request made it in which includes two BPF fixes. See 18th May for the details.
The Cilium team is excited to be at GlueCon 2017 Wed + Thurs this week, just outside Denver, CO. GlueCon is a great developer-focused conference focused on APIs, containers, microservices, serverless, etc. We've enjoyed attending as individuals in the past, and are excited to be sponsoring this year!
For live conversation and quick questions, join the Cilium Slack workspace. Don’t forget to say hi!
Join slack workspace
