Lightning Talk: Unveiling 5 Essential Insights from Cilium Implementation in a...
summary
Platform runs across three clouds hosting 1 million pods in 42,000 namespaces and uses namespace profile templates (Namespace, RBAC, Quota, LimitRange, NetworkPolicy) to provide isolation. Cilium as CNI leverages Cilium + eBPF and removes kube-proxy/huge iptables rules for better latency and scale, enforces selective L3–L7 policies and XDP filtering for embargoed IPs, and uses Hubble observability to pinpoint policy blocks and debug cross-namespace connectivity failures.
AI-written summary · about
related talks
20mTackling Container Networking at Scale
24mThe Cilium Story - Why We Created Cilium
10mLightning Talk: Connecting Klusters on the Edge with Deep Dive into Cilium Cluster Mesh
35mNext-level Kubernetes Networking with Cilium - Nico Meisenzahl and Philip Welz
44mCilium - Container Security and Networking Using BPF and XDP
16mCilium Wars: Scaling Up Your Network with Jedi-like Cilium Handling Techniques - Yash Tandon
29mThe Swiss Army Knife of Cloud Native Networking
24mConfluent's Multi-Cloud Journey to Cilium: Pitfalls and Lessons Learned