Transparent Chaos Testing with Envoy , Cilium and BPF
summary
Demonstrates a working stack that injects faults into live Kubernetes traffic by combining Envoy Go extensions with Cilium + eBPF transparent injection. The demo rewrites HTTP responses to 504, delays replies by configurable durations (example: 2s), and applies probability rules (examples: 100%, 50%, 10%) without changing pods. Cilium starts Envoy on policy apply; Go extensions implement HTTP parsing and control with about a ~10% overhead versus native C++; examples and configs are published.
AI-written summary · about
chapters (6)
- 0:00Start
- 3:17What is Fault Injection? cilium
- 3:58Fault Injection Example
- 9:10Envoy Go Extensions cilium
- 10:45A simple Envoy Example
- 26:30Getting Started
related talks
43mA Guided Tour of Cilium Service Mesh
42mAccelerating Envoy with the Linux Kernel
46mStop reinventing the wheel with Istio
05mUnlocking Next-Gen Networking and Security with Cilium Service Mesh
44mCilium - Container Security and Networking Using BPF and XDP
42mPanel - Klustered: eBPF Edition
33mDetecting Compromised CI With eBPF and Cilium Tetragon
22mTales from an eBPF Program’s Murder Mystery