Let Them Eat CAKES: A Sweet Dive Into a Modern Cloud Networking Stack
summary
Presents a concrete CAKES stack built from OSS: Cilium for eBPF-based CNI with label‑based identity caveats, Ambient mode (Istio) delivering sidecar‑less mTLS via an Hbone overlay so apps never need restarting, and Ztunnel daemonset (Rust) plus Envoy waypoints for L4/L7 and Gateway API integration. Describes Glue Gateway OSS, workshops that reproduce the setup, cost wins at tens of thousands of pods, and tradeoffs where envoy handles L7 policies while Cilium covers L3/L4.
AI-written summary · about
chapters (17)
- 0:00Introduction
- 1:47What is Solo.io
- 3:12Why platform engineering matters
- 9:12Cloud migrations challenges
- 12:47Platform engineering solution
- 14:56Introducing CAKES stack
- 16:42Kubernetes foundation
- 19:05Cilium CNI layer
- 23:20SPIFFE/SPIRE identity
- 25:04Istio Ambient Mode
- 30:23Layer four in Istio
- 32:49Layer seven with Waypoints
- 34:34Envoy proxy
- 37:04Glue Gateway API
- 41:59Unifying app networking
- 43:21Summary
- 45:00Q&A
related talks
45mLet Them Eat CAKES: A Sweet Dive Into a Modern Cloud Networking Stack
35mNext-level Kubernetes Networking with Cilium - Nico Meisenzahl and Philip Welz
31m10 Years of Cilium: Connecting, Securing, and Simplifying the Cloud Nat...
05mUnlocking Next-Gen Networking and Security with Cilium Service Mesh
43mService MESH without the MESS
40mCloud, Kubernetes, and Service Networking - Taming the Turtles
34mCilium Updates, News And Roadmap
43mA Guided Tour of Cilium Service Mesh