Unlocking Next-Gen Networking and Security with Cilium Service Mesh
summary
Cilium Service Mesh uses eBPF to implement high-performance, fine-grained service-to-service security and networking while bypassing sidecars, cutting CPU/memory footprint roughly in half versus Envoy-based meshes, and avoiding extra control planes. It wires into existing Ingress controllers and the Gateway API, enforces L3–L7 policies in-kernel, and claims to bypass traditional kernel TCP routing for lower latency. The demo is a multi-cluster proof-of-concept that works without Envoy and shows reduced operational complexity and cost.
AI-written summary · about
related talks
43mA Guided Tour of Cilium Service Mesh
37mService MESH without the MESS - Raymond de Jong
35mNext-level Kubernetes Networking with Cilium - Nico Meisenzahl and Philip Welz
43mService MESH without the MESS
27mCilium Cluster Mesh: The eBPF-Powered Multicluster Solution for Kubernetes
36mCilium: Welcome, Vision and Updates
31mCilium Mesh
44mCilium - Container Security and Networking Using BPF and XDP