October 28, 2022

Cilium and eBPF with Liz Rice

55 minutes

😇 My new GitHub Security workshop has launched! A free 2-hour workshop with hands-on labs to harden your repos and your workflows from common supply chain attacks. I'll cover how attackers are getting in, and then we'll lock down a sample repo so you know what needs to be done to protect your code. You'll leave with a deep understanding of risks and mitigations as well as a list of helpful tools to keep your repos safe, including my new "gasa" tool for scanning your repos and orgs.

Bret is joined by Liz Rice, Chief Open Source Officer at Isovalent, the makers of Cilium, to discuss Cilium and eBPF.

Liz Rice is back to give us more insight into eBPF and the Cilium project. Isovalent is the company that created and manages the Cilium Project, which does an increasing number of things for Kubernetes, including networking, CNI support, security, advanced networking stuff, and observability, as well as other things like load balancing. Liz is one of my go-to experts on how low-level Linux internals work. She's been speaking about container internals since the early days of Docker.

Streamed live on YouTube on September 8, 2022.

Unedited live recording of this show on YouTube (Ep #183)

★Topics★
Cilium website
Isovalent website
eBPF
Network Policy Editor

★Liz Rice★
Liz Rice on Twitter
Liz Rice's website
Books on Containers, eBPF, Kubernetes and Go

★Join my Community★
Best coupons for my Docker and Kubernetes courses
Chat with us and fellow students on our Discord Server DevOps Fans

Homepage bretfisher.com

(00:00) - DDT MAIN

(00:04) - Intro

(00:53) - Bret intro

(01:41) - Main interview

(01:44) - The merch store

(02:39) - More merch talk

(04:19) - Introductions

(05:16) - What else Liz does

(05:26) - Liz's books

(06:22) - Brief history of EBPF

(07:41) - Kernel modules before EBPF

(08:46) - EBPF vs Kernel Modules

(09:57) - EBFP is dynamically loaded

(11:23) - Performance and Data Transfer

(12:35) - Isovalent and Cilium

(14:12) - How Cilium started

(16:18) - Specific versions of the kernel?

(17:32) - Where do we use EBPF in Kubernetes?

(18:12) - CNI

(20:02) - Question: Where can you start learning EBPF?

(23:04) - Question

(30:22) - All open source?

(31:08) - Question Cilium as a service mesh

(32:32) - Enabling certain features

(33:39) - Question

(34:11) - Question

(35:20) - Question

(37:21) - Wrapping up Cilium in cloud

(38:22) - Offloading programs XDP

(40:16) - Question about GUI

(42:41) - Question

(49:29) - Question

(52:10) - EBPF on Windows?

(53:13) - How is it implemented?

(54:02) - Wrapping up

You can also support this podcast by subscribing to my YouTube channel and my monthly newsletter at bret.news!

Grab the best coupons for my GitHub, Agents, Docker, and Kubernetes courses.
Join my cloud native DevOps community on Discord.
Grab some merch at Bret's Loot Box
Homepage bretfisher.com

...more