eCHO News 64

Bill Mulligan

Community @ Isovalent working on Cilium and eBPF

Published Sep 10, 2024

eCHO news is your bi-weekly wrap up of all things eBPF and Cilium. If you want to keep up on the latest in cloud native networking, observability, and security this is your quelle

10th September 2024

In case you haven't heard, eBPF Summit is tomorrow. I'm always excited for this event because it showcases all of the new and exciting ways that eBPF is being used. Tune in from 8:30AM-13:00PM PST / 5:30PM-10:00PM CEST.

Speaking of cutting edge eBPF work, the eBPF Foundation awarded $250k to 5 academic projects, here is what they do:

✔ Increasing the security of the verifier with formal verification 🧠 Using eBPF for memory management 🔐 Leveraging hardware isolation instead of the verifier for security 🔬 Making an eBPF runtime for hosting μs-scale applications 😴 Lazy abstraction to enhance the precision of the eBPF verifier

In more conference news, the schedule for Cilium + eBPF Day is also out and I'm excited to be co-chairing the event again. We have end user talks covering edge, multi-cloud, and scaling to zero along with deep dives into the data path like accelerating IPSec 400% and scaling out network policy enforcement. You won't want to miss it. Finally, I'll be heading to the first KubeCon India this fall and I'm looking for an end user company to join me for the Cilium maintainers track session. Just hit reply to this email if you want to help out the community and join me on stage to talk about how you use Cilium. We still have a few more videos to edit before eBPF Summit so let’s 🐝 -gin.

The Technical

Building High-Performance Userspace eBPF VMs with LLVM - "a powerful tool for developers looking to leverage eBPF outside the kernel"

The magic of eBPF III: Development playground - Set up your dev environment and "Who knows, maybe you end up contributing to Cilium"

Hubble for Network Observability and Security (Part 3): Leveraging Hubble Data for Network Security - Policy verdicts, DNS queries, and more

eBPF in practice – PID concealment (Part 2) - What the user doesn't know can't hurt them, also in French and code

What is BTF (BPF Type Format)? - Learn what makes CO-RE possible

eBPF-Powered Load Balancing for SO_REUSEPORT - "Implementing Hot Standby Load Balancing"

eBPF command line tools - Quick blogs on filetop and runqlat and runqslower

Transparent Proxy Implementation using eBPF and Go - "the average CPU load introduced by each hook is basically, nothing"

pythops/oryx - "TUI for sniffing network traffic using eBPF on Linux"

zmaril/bpfquery - "Zack's experimental tool for querying BPF with SQL"

yuta-imai/tap-house - "An ebpf based packet analyser. You can tap packets using Soracom Junction"

anoushk1234/zig-ebpf - "Zig virtual machine for eBPF programs" Why - Short answer: I was bored

🐝

The Ecosystem

eBPF Foundation Announces $250,000 in Grant Awards for Five eBPF Academic Research Projects - From formal verification to learning to manage virtual memory with coverage from SDTimes, TFIR, and TMCnet

Odigos Raised $13M to Bring Distributed Traces to the Masses - "leveraging eBPF to automate the implementation of distributed tracing, eliminating the need for code changes and ensuring zero performance overhead"

Hello eBPF: Collection of Resources for eBPF (14.5) - Links to write your own eBPF library