Cloud Native Superpowers with eBPF
summary
eBPF runs programmable code inside the Linux kernel to trace exec, file-open and packet events and to modify packet paths, letting tools like openSnoop, Inspector Gadget, Pixie and Falco observe every pod on a node without injecting sidecars. CNI/psyllium uses eBPF plus Hubble to build service mesh and observability, replacing per-pod proxies with a single instance per node (Envoy kept per node) and achieving layer‑7 parsing performance that is “almost as fast as no parsing,” plus transparent encryption and injected next‑gen mTLS.
AI-written summary · about
chapters (5)
- 0:00Start
- 20:24Sidecar model evolution
- 23:12Reduce resource usage
- 23:52Removing sidecars from Service Mesh
- 26:52Transparent encryption
related talks
24mCloud Native Superpowers with eBPF
29mBuzzing Across the Cloud Native Landscape with eBPF
35mAn Introduction to eBPF - Superpowers for Networking, Observability & Security
51mCloud Native Superpowers with eBPF
40mPanel Discussion: eBPF: A New Era in Cloud Infrastructure Tools
36mPanel: Exploring eBPF Use Cases in Cloud-Native Security
33mThe Future of eBPF in Cloud Native
43meBPF Superpowers for SRE