Service MESH without the MESS - Raymond de Jong
summary
Cilium Service Mesh uses eBPF to remove sidecars by shortcutting sockets to a per-node Envoy proxy, cutting triple TCP traversals and claiming 3–4x latency improvement for L3/L4 flows. It integrates Prometheus, Grafana and OpenTelemetry for golden metrics, implements Mutual TLS via simple Cilium network policies (triggering a Spire agent) and supports Gateway API features: HTTPRoute path and header matches, weighted traffic splits, TLS passthrough, WireGuard encryption and BGP on kernels ≥4.9.
AI-written summary · about
chapters (10)
- 0:00Introduction to Cilium Service Mesh
- 1:25What is eBPF?
- 4:34Cilium Service Mesh vs others
- 7:25eBPF shortcuts for performance
- 9:55Service Mesh features overview
- 12:25Gateway API basics
- 16:18Demo HTTP routing
- 20:59Demo shared Gateway
- 26:21Demo TLS pass-through
- 30:56Q&A session
related talks
43mService MESH without the MESS
05mUnlocking Next-Gen Networking and Security with Cilium Service Mesh
43mA Guided Tour of Cilium Service Mesh
31mCilium Mesh
27mCilium Cluster Mesh: The eBPF-Powered Multicluster Solution for Kubernetes
22mOne Project, Different Angles: How to Secure and Observe with Cilium
33mCNI or Service Mesh? Comparing Security Policies Across Providers
34mService Mess to Service Mesh