CiliumCon North America 2025
2025-11-10
Atlanta, United States
as the organisers put it
CiliumCon North America 2025 has officially wrapped! Thank you to all the attendees who joined us. Watch keynotes and all breakout sessions on the CNCF YouTube Channel. Review session slides from…
who it's for
Cilium operators, platform engineers, site reliability engineers, network engineers, kubernetes operators, security engineers, open-source maintainers, observability engineers
topics
operator-managed endpoint slices; eBPF DNS over TCP parsing; BPF LRU SNAT eviction fix; IPv6-only Kubernetes with Cilium; Gateway API and load balancer redesign; Hubble free-form logs and dashboards; multicluster cluster mesh quarantine controller; Tetragon runtime detection; BGP route aggregation and IPAM
| title | author | length |
|---|---|---|
| Welcome + Opening Remarks | Bill Mulligan, Hemanth Malla | 07m |
Cilium 1.18 ships with IPv6 native support for encapsulation, kube-proxy replacement, clusterIP load balancing and gateway features, plus a redesigned load… | ||
| Rewiring Cilium: Operator-Driven Scale and Security With CiliumEndpointSlice | Shreya Jayaraman, Tamilmani Manoharan | 24m |
CiliumEndpointSlice batches per-pod CiliumEndpoints into namespace-scoped slices (default max 100), moving identity and slice management into the operator so… | ||
| Can We Really Parse DNS in eBPF? Improving Cilium ToFQDN With In-kernel Policy Upda... | Hemanth Malla | 29m |
Claims DNS can be fully parsed in-kernel to make Cilium ToFQDN policy proxyless: implementation uses eBPF SKSKB-based sock ops to capture TCP sockets, a stream… | ||
| Breaking News from the Cilium News Network | Liz Rice | 05m |
Cilium crosses 1,000 contributors as it nears its 10th anniversary, and the eBPF Summit runs as a hackathon with 400+ participants and early submissions on… | ||
| Containing Wildfires in a Sprawling Multi-Cluster Network: The Network's Immune System | Anmol Krishan Sachdeva, Paras Mamgain | 26m |
Claims a closed loop that detects and contains lateral movement across a two‑cluster Cilium cluster mesh (US‑west and US‑east) by piping Tetragon trace events… | ||
| Closing Remarks | Bill Mulligan, Hemanth Malla | 04m |
New SIG community joins existing SIG scalability and SIG policy and holds weekly Wednesday meetings; GitHub Discussions and a design CFPs repo now centralize… | ||
| Taming the BPF LRU: Eliminating TCP Resets in Cilium | Gyu Tae Bae | 10m |
At scale Cilium’s BPF SNAT plus an approximate LRU eviction policy is dropping active NAT entries and injecting wrong source ports, causing TCP RSTs; diagnosis… | ||
| IPv6 First, Not Just Ready: Kubernetes Without IPv4 Using Cilium | Kapil Agrawal | 26m |
ESnet runs an IPv6‑only on‑prem Kubernetes cluster using K3s + Cilium and proves production traffic works but needs specific underlay and Cilium features… | ||
| 10 Years of Cilium: AMA with Thomas Graf | Thomas Graf | 27m |
Project begins in 2015 to replace Docker-era container networking with an eBPF-based stack and later targets Kubernetes; claims production scale with runs at… | ||
| nothing matches | ||