Next-level Kubernetes Networking with Cilium - Nico Meisenzahl and Philip Welz
summary
Cilium uses eBPF to replace iptables latency with identity‑based network security and implements CNI, Hubble observability, and Envoy-based L7 proxying; demo shows DNS‑aware and layer‑7 HTTP path allow POST /request-landing policies blocking X‑Wing but allowing Tie Fighter to land on the Death Star. Cluster Mesh provides global services, traffic affinity and transparent failover across clusters with live 50/50 traffic shifting; Service Mesh supports both sidecar and sidecar‑free Envoy data plane. Transit Gateway (an Enterprise feature) links VMs, serverless and on‑prem workloads.
AI-written summary · about
chapters (14)
- 0:00Introduction and speakers
- 1:05Talk agenda overview
- 2:11What is eBPF
- 4:03Cilium components overview
- 5:28CNI and Hubble introduction
- 10:00Demo: Network policies with Hubble
- 14:00Demo: Layer 3 and 4 policies
- 16:35Demo: Layer 7 policies
- 20:28Cluster Mesh explained
- 22:39Demo: Cluster Mesh
- 25:02Application-centric networking
- 28:52Demo: Service mesh with Gateway API
- 31:48Cilium Mesh and integration
- 33:15Summary and resources
related talks
05mUnlocking Next-Gen Networking and Security with Cilium Service Mesh
43mA Guided Tour of Cilium Service Mesh
31mCilium Mesh
24mThe Cilium Story - Why We Created Cilium
27mCilium Cluster Mesh: The eBPF-Powered Multicluster Solution for Kubernetes
36mCilium: Welcome, Vision and Updates
05mLightning Talk: Unveiling 5 Essential Insights from Cilium Implementation in a...
43mService MESH without the MESS