Episode 87 of The Linux Podcast explores Cilium, the open-source CNI plugin that uses eBPF to replace legacy kube-proxy and iptables-based networking. Lucas and Luna break down how Cilium attaches eBPF programs directly to the network interface to enforce security policies, load-balance service traffic, and provide observability without sidecars. They discuss a real-world migration at a mid-sized fintech that cut latency by 40% and reduced pod startup time from 8 seconds to under 1 second. The hosts explain the Hubble observability layer, Cilium's integration with Kubernetes NetworkPolicy, and why the Cloud Native Computing Foundation recently promoted Cilium to graduated status. They also touch on the trade-offs: initial complexity, the need for kernel 5.10+, and the learning curve for ops teams. The episode closes with a practical verdict on when Cilium makes sense versus simpler CNIs like Flannel or Calico.

#Cilium #eBPF #Kubernetes #CNI #Linux #Networking #CloudNative #CNCF #Hubble #ServiceMesh #kubeproxy #NetworkPolicy #Observability #Containers #DevOps #Technology #FexingoTechnology #TechnologyPodcast

Keep every episode free: buymeacoffee.com/fexingo