Cilium + eBPF Day Europe 2024
2024-03-19
Paris, France
who it's for
cloud native engineers, platform engineers, kubernetes operators, network engineers, site reliability engineers, security engineers, observability engineers
topics
eBPF based network policy; Cilium resilient architecture; Hubble observability from BPF; Envoy on DPU offload; cluster mesh scaling; identity based selector cache; AF_XDP high performance networking; IPv6 native routing with Cilium IPAM; eBPF runtime security tooling; JVM TLS extraction via agent; in memory StateDB snapshots; migrating Istio to Cilium
| title | author | length |
|---|---|---|
| Connecting Cloud Native: Cilium + eBPF Day | Laurent Bernaille, Bill Mulligan | 07m |
Opening remarks announce Cilium 1.15 with concrete features: Gateway API support, GP session authentication, expanded Hubble observability, and a Terraform and… | ||
| Deep Dive Into Cilium Resilient Architecture | Jussi Mäki, Martynas Pumputis | 20m |
Cilium documents 680 contributors, ~470k lines of Go and ~35k lines of eBPF and introduces an in‑memory StateDB that stores immutable revisioned snapshots with… | ||
| Lessons from Building Scalable Network Policy Enforcement with eBPF | Hemanth Malla, Joe Stringer | 28m |
Cilium uses eBPF to enforce identity based network policy at cluster scale (examples cite 5k+ nodes and hundreds of thousands of pods) by converting label… | ||
| The Cilium Vision | Thomas Graf | 07m |
Cilium claims four core pillars: scalability, identity‑based policy decoupled from addressing, kernel extensibility via eBPF, and simplicity with high… | ||
| Evolving Cilium with insights from Kubernetes | Idit Levine | 08m |
Cilium is positioned as the de-facto CNI for Kubernetes and Solo.io reports concrete work: an insight engine that surfaces common misconfigurations and… | ||
| Lightning Talk: Falco, Tracee and Tetragon: eBPF Runtime Observability and Security... | Kyle Quest | 07m |
Falco targets IDS use cases with an advanced rule engine and a modern eBPF probe that uses ring buffers and BTF-enabled raw tracepoints (requires ~5.8); Tracee… | ||
| Lightning Talk: Optimizing Cluster Workloads: Cilium Envoy on DPU | Shatakshi Mishra | 05m |
A proof of concept deploys Envoy as a DaemonSet on an OCTEON10 DPU and implements a cni offload layer plus plugins to present pods with virtual function pairs… | ||
| Bee-Lieve in the Metadata: Pollenating Build Attestations on Kubernetes with... | Tom Meadows | 23m |
Build metadata becomes cryptographically verifiable attestations by capturing real runtime events with Tetragon + eBPF, condensing them in a Kubernetes… | ||
| Meshing It up Securely: How Roche Manages Network Connectivity for... | Hector Monsalve, Edgar Pardo | 27m |
Roche explains how a cloud‑native edge platform for 1000+ edge clusters replaces dozens of lab devices by routing pod traffic with Cilium Service Mesh (eBPF)… | ||
| Revolutionizing Mesh Layers: Transitioning from Istio to Cilium at... | Ahmed Bebars, Pete Saia | 22m |
New York Times migrates much of its mesh from Istio to Cilium/eBPF, cutting sidecar proliferation and simplifying cross‑region traffic by removing extra load… | ||
| Supercharge Kubernetes Networking with Cilium and IPv6 | Daneyon Hansen | 26m |
Cilium runs on a kind two-node IPv6-only Kubernetes cluster using Cilium IPAM to assign pod /128s and native routing to program host routes instead of… | ||
| JVM & TLS: eBPF's Out-of-Comfort Zone | Valeri Pliskin | 27m |
eBPF kprobes and uprobes fail to extract TLS plaintext from JVMs because JITted code and dynamic memory layout remove stable userland symbols, so Datadog… | ||
| Migrating from DPDK to AF_XDP for High-Performance Networking in... | Maryam Tahhan, Dave Tucker | 23m |
Claim: existing DPDK apps run on AF_XDP with no application code changes by using the --vdev switch to select the AF_XDP PMD, and orchestrate eBPF lifecycle… | ||
| Cilium Beyond Linux: Extending eBPF to Windows... | Chandan Aggarwal, Tamilmani Manoharan | 21m |
Microsoft ports Cilium eBPF to Windows and runs real L4 load balancer demos with working observability and a roadmap for network policy by year end. Approach… | ||
| Curveballs: Learnings from Instrumenting Managed Runtime... | Nikola Grcevski, Mario Macías | 29m |
A production agent called Grafana BAA uses eBPF to attach uprobe/uretprobe pairs and store per-call state in BPF maps, and it successfully auto-instruments… | ||
| Speedrun Through Splicing Sockets with Sockmap | Jakub Sitnicki | 24m |
Shows how kernel-side socket splicing using eBPF actually cuts RPC latency from about 5.8 μs → 4.7 μs by bypassing the full network stack, with working… | ||
| Lightning Talk: Taming Noisy Network Neigbours with Cilium and eBPF | Anton Ippolitov | 07m |
Cilium’s Bandwidth Manager injects eBPF into pod interfaces to enforce egress rate limits using an EDT algorithm plus the kernel FQ qdisc; example limit 10… | ||
| Lightning Talk: Unveiling 5 Essential Insights from Cilium Implementation in a... | Victor Varza | 05m |
Platform runs across three clouds hosting 1 million pods in 42,000 namespaces and uses namespace profile templates (Namespace, RBAC, Quota, LimitRange… | ||
| Defending the Future: Cilium + eBPF Day Closing | Bill Mulligan, Laurent Bernaille | 05m |
Event recap states growth from 28 submissions at the first meetup to 60+ submissions now with only 11 talk slots available and a program committee of about… | ||
| nothing matches | ||