Trendy cloud-native programs are constructed on extremely dynamic, distributed infrastructure the place containers spin up and down continuously, providers talk throughout clusters, and conventional networking assumptions break down. Linux networking was designed a long time in the past round static IPs and linear rule processing, which makes it more and more tough to attain scale in Kubernetes environments. On the similar time, modifying the Linux kernel to maintain up with these calls for is gradual, dangerous, and impractical for many organizations.
The Prolonged Berkeley Packet Filter, or eBPF, is a Linux kernel know-how that permits sandboxed packages to run safely contained in the kernel with out modifying kernel supply code or loading kernel modules. Cilium is an open-source, cloud-native networking platform that’s constructed on eBPF, and offers, secures, and observes connectivity between workloads in Kubernetes and different distributed environments.
Invoice Mulligan is a maintainer within the Cilium ecosystem and a member of the group at Isovalent, the corporate behind Cilium. He joins the present with Gregor Vand to debate how eBPF works below the hood, why Cilium has turn into one of the crucial extensively adopted Kubernetes networking tasks, and the way the way forward for cloud-native infrastructure is being reshaped by programmable kernels.
Gregor Vand is a security-focused technologist, having beforehand been a CTO throughout cybersecurity, cyber insurance coverage and basic software program engineering firms. He’s primarily based in Singapore and might be discovered by way of his profile at vand.hk or on LinkedIn.
Please click on right here to see the transcript of this episode.
Sponsorship inquiries: [email protected]
