Revolutionizing Sidecarless Service Mesh With eBPF
Talkat KubeCon + CloudNativeCon China 2025 · on Tuesday, 2025-06-10· at 15:30· Level 19 | Crystal Court II·
summary
Compares Istio, Ambient and Cilium implementations and their trade-offs—highlighting that they rely on a userspace proxy per node which can create single points of failure and more connections per hop. Describes using eBPF and programmable kernel modules as a sidecarless alternative to reduce CPU/memory overhead and lifecycle coupling with workloads. Presents use cases showing how this eBPF-based approach can improve microservice performance and minimize application disruption during infrastructure upgrades.
AI-written summary · about
related talks
39mSecurity & Observability For All Apps - Combining The User/Kernel Powers
18mThe Negatives to a Per-Host Service Mesh, the Sidecar Model Being a More Ideal Solution for Providing a More Robust Security Boundary
05mUnlocking Next-Gen Networking and Security with Cilium Service Mesh
35mSidecarless Mesh Monitoring with eBPF and Grafana
11mIstio Ambient Mesh: Sidecar vs Sidecar-less, Explained Simply
43mA Guided Tour of Cilium Service Mesh
05mLightning Talk: Back to the Future with eBPF
40mPanel Discussion: eBPF: A New Era in Cloud Infrastructure Tools