Tutorial: Zoom on Cilium: An Interactive Tutorial to Learn How to Reshape the Traffic...
summary
Hands-on demo of eBPF + XDP that builds and runs real kernel programs: compiles C eBPF code, attaches it to eth0, and shows three concrete effects — drop IPv6 at driver level, block a specific IP via XDP maps, and XDP load‑balancer redirecting to two backends — with live tests from Docker containers. Shows packaging with Bumblebee into OCI images, explains user→kernel maps for dynamic rules, cites real-world gains (Meta ~10×, Cilium docs up to ~20×) and the exact syscall/attach workflow used.
AI-written summary · about
chapters (14)
- 0:00Workshop introduction
- 1:29What is eBPF and why it matters
- 9:12Understanding XDP
- 13:06Security with XDP examples
- 16:00XDP at Meta and Cloudflare
- 18:07Cilium vs traditional tools
- 19:51Workshop setup
- 25:39Lab: IPv6 traffic filtering
- 37:57Hands-on lab: Restricting traffic from specific IPs
- 46:13Lab: XDP load balancing
- 54:26User vs kernel space challenges
- 1:00:06eBPF with Bumblebee
- 1:07:49Demo: TCP monitoring with Bumblebee
- 1:10:42Q&A
related talks
38mUnderstanding and Troubleshooting the eBPF Datapath in Cilium
44mCilium - Container Security and Networking Using BPF and XDP
30mA Beginner's Guide to eBPF Programming for Networking
21mCilium Beyond Linux: Extending eBPF to Windows...
24mThe Cilium Story - Why We Created Cilium
56mHands-on Workshop: Network Policies - The Not-So-Hard Way
28mLessons from Building Scalable Network Policy Enforcement with eBPF
35mNext-level Kubernetes Networking with Cilium - Nico Meisenzahl and Philip Welz