Trendy cloud-native programs are constructed on extremely dynamic, distributed infrastructure the place containers spin up and down continuously, companies talk throughout clusters, and conventional networking assumptions break down. Linux networking was designed a long time in the past round static IPs and linear rule processing, which makes it more and more troublesome to attain scale in Kubernetes environments. On the similar time, modifying the Linux kernel to maintain up with these calls for is sluggish, dangerous, and impractical for many organizations.
The Prolonged Berkeley Packet Filter, or eBPF, is a Linux kernel expertise that enables sandboxed applications to run safely contained in the kernel with out modifying kernel supply code or loading kernel modules. Cilium is an open-source, cloud-native networking platform that’s constructed on eBPF, and offers, secures, and observes connectivity between workloads in Kubernetes and different distributed environments.
Invoice Mulligan is a maintainer within the Cilium ecosystem and a member of the workforce at Isovalent, the corporate behind Cilium. He joins the present with Gregor Vand to debate how eBPF works beneath the hood, why Cilium has turn into some of the broadly adopted Kubernetes networking tasks, and the way the way forward for cloud-native infrastructure is being reshaped by programmable kernels.
Gregor Vand is a security-focused technologist, having beforehand been a CTO throughout cybersecurity, cyber insurance coverage and normal software program engineering corporations. He’s based mostly in Singapore and might be discovered by way of his profile at vand.hk or on LinkedIn.
Please click on right here to see the transcript of this episode.
Sponsorship inquiries: [email protected]