eCHO News 63

eCHO news is your bi-weekly wrap up of all things eBPF and Cilium. If you want to keep up on the latest in cloud native networking, observability, and security this is your quelle

27th August 2024

In case you missed it, the eBPF Summit schedule is now live! Every year I'm excited to see what talks we get and I think we have put together another world class set of talks. The keynotes cover, what would the world look like without eBPF, the eBPF innovation roadmap, and writing a Linux scheduler in Java.

I'm also looking forward to two talks about some of the work that will be coming out of the eBPF Foundation shortly including an eBPF threat model and an audit of the verifier. Both of these projects are important for giving companies confidence when they are deploying eBPF (or eBPF based tools) into production. After all, who doesn't love a "free" third party audit to put on their CTO's desk? The schedule for Cilium + eBPF Day is coming out tomorrow too and I've got to put finishing touches on it so let’s 🐝 -gin.

The Technical

eBPF for Anything! - Showing that eBPF is Turing Complete

eBPF TLS tracing: The Past, Present and Future - How to beat unstable user space library interfaces

Hello eBPF: Building a Lightning Fast Firewall with Java & eBPF (14) - "Can I still call it a firewall? I would say yes, but please help me filter the outgoing packets if you disagree" love the honesty

Hubble for Network Observability and Security (Part 2): Utilizing Hubble for Network Observability - Learn how to use different features in Hubble

Unleash the Forbidden - Enabling eBPF/XDP for Kernel Tinkering on WSL2 - "feels forbidden. And yet, that's the entire premise of this blog" 🤣

Cilium 運用で遭遇した問題とその対応 - Lessons learned from Cybozu running Cilium at scale

eunomia-bpf/llvmbpf - "Userspace eBPF VM with llvm JIT/AOT compiler"

mizzy/ebpf-go-playground - "playground to try ebpf-go.dev/guides/getting-started"

miekg/ebpf - "ebpf compiler in Go; Write Go, get ebpf" with launch blog

🐝

The Ecosystem

How the CrowdStrike Tech Outage Reignited a Battle Over the Heart of Microsoft Systems - eBPF in the Wall Street Journal! "CrowdStrike agrees. [eBPF]'s a “super revolutionary technology,” the company’s president, Michael Sentonas, said"

Case Study: Alibaba Cloud - "The performance improvement is one of the biggest advantages that we’ve gotten from Cilium and it is great for our business"

Proactive Incident Management: Achieving SLA and SLO Success with Tetragon in Kubernetes - "Tetragon is a powerful ally in maintaining and improving the reliability of your services"

Parca + OpenTelemetry = Bright Future - Two eBPF based profilers are merging development

Want to Stop Kernel Panics? Use eBPF - "Trust me on this one"

eBPF for Security - "While eBPF has evolved over the past decade, it is revolutionizing security"

eBPFの現状 - State of eBPF Report now available in Japanese

eBPF Runtime Security at Scale: Top Tetragon Use Cases (Part 2) - Correlate network and runtime events is a strong combo

Hubble for Network Observability and Security (Part 1): Introduction to Cilium and Hubble - Get re-introduced to many users' favorite part of Cilium

🐝

The How To

Unleashing the power of frame pointers for profiling pt.2 - Writing a simple profiler - Write a low-overhead eBPF-assisted CPU time continuous Profiler, code here

Monitoring Inter-Pod Traffic at the AZ Level with Retina (an eBPF based tool) - (based on Hubble) with a Github repo

OpenTofu: RKE2 Cluster with Cilium on Azure - no sveltos this time though

🐝

The Video

eBPF in 120 seconds - Reminds me of putting together my National History Day documentaries

🐝

The Events

eBPF Summit - September 11th, Schedule is out now!

Tetragon: Cloud Native Security Workshop with Copebit & AWS in Zurich - In-person event on September 17

Cilium + eBPF Day - See you in Salt Lake! Schedule is out tomorrow!

🐝 

=

The Tweet of the Week

As always, if you’ve seen a blog post, a tool, or anything else eBPF or Cilium related that you think the rest of the community should hear about, send them my way. You can either hit reply or join the #echo-news channel on Cilium Slack. You can also find all of the past episodes on the website.

🐝