Tag: #cilium
Writing on GPUs, LLMs, MLOps, Kubernetes — and mindset · 28 posts
28 posts are tagged #cilium; the most recent was published on 2026-08-20.
Often tagged together: #ebpf 19 #kubernetes 15 #networking 11 #observability 8 #security 7
Most read in the last 90 days:
Building a Hands-On Learning Platform on a Home Server — Putting Kubernetes Inside an Unprivileged Pod
A write-up of putting a learning platform on a 7-node Kubernetes cluster at home: a learner presses a button, a dedicated container comes up, a browser terminal attaches to a real Linux shell, and at every step the serve
2026-08-20 · 16 min read #kubernetes#cilium#security#homelab#kwokHubble and ClusterMesh — Cilium Observability and Multi-Cluster Operations
Covers the architecture of Hubble, the observability layer of Cilium, with practical CLI queries, Prometheus metrics, and long-term flow log retention, then walks through configuring ClusterMesh for multi-cluster service
2026-06-13 · 13 min read #cilium#hubble#clustermesh#observability#multi-clusterCilium Datapath Architecture — Inside a Cluster Without kube-proxy
A deep dive into the eBPF datapath of Cilium, the CNCF graduated CNI, following a packet on its journey. We cover how kube-proxy replacement works, the identity-based security model, tunneling versus native routing, and
2026-06-13 · 16 min read #cilium#ebpf#kubernetes#cni#networkingCilium Network Policy in Practice — Zero Trust from L3 to L7 and DNS
A hands-on guide to going beyond the limits of Kubernetes NetworkPolicy with CiliumNetworkPolicy, controlling L3/L4/L7 and DNS-based egress. Covers a four-stage default-deny rollout roadmap, a Hubble-driven policy author
2026-06-13 · 14 min read #cilium#network-policy#zero-trust#kubernetes#securityService Mesh in 2026 — Istio Ambient / Linkerd 3 / Cilium Mesh / Consul Connect / Kuma Deep Dive (Is the Sidecar Dead?) ♪ Listenable
Service mesh went through a turbulent 2024-2026 after the sidecar golden age of 2018-2020. Istio Ambient went GA, making sidecar-free Istio real. Linkerd 3 moved some features to a paid edition, sparking community contro
2026-05-16 · 20 min read #service-mesh#istio#linkerd#cilium#consulNetworking 2026 Complete Guide - Cilium, WireGuard, Tailscale, Nebula, Istio, Envoy, Cloudflare Tunnel Deep Dive
A complete look at the 2026 production networking stack. eBPF-based K8s networking (Cilium, Calico eBPF, Antrea), overlay VPNs (WireGuard, Tailscale, Nebula, ZeroTier, Twingate, OpenZiti), service meshes (Istio ambient,
2026-05-16 · 18 min read #networking#cilium#ebpf#wireguard#tailscaleKubestronaut Path 2026 Deep-Dive - CKA, CKAD, CKS, KCNA, KCSA and the CNCF Certification Ladder (Prometheus, Istio, Cilium, OpenTelemetry, Argo) ♪ Listenable
A thorough 2026 guide to the Kubestronaut program and the CNCF certification ladder. We cover the five core exams (CKA, CKAD, CKS, KCNA, KCSA) in depth — domains, exam format, passing scores, pass rates, Killer Shell moc
2026-05-16 · 20 min read #kubestronaut#cncf#kubernetes#cka#ckadeBPF Observability 2026 — Pixie / Parca / Cilium Hubble / Tetragon / Beyla / Coroot / Falco Deep Dive ♪ Listenable
A complete map of the eBPF ecosystem as of 2026. Compares Pixie, Parca, Cilium Hubble, Tetragon, BCC/bpftrace, OpenTelemetry eBPF Collector, Grafana Beyla, Coroot, Inspektor Gadget, Kepler and Falco — plus the CO-RE revo
2026-05-15 · 24 min read #ebpf#observability#pixie#parca#ciliumService Mesh Deep Dive — Envoy, Istio, Linkerd, Cilium eBPF, Ambient Mesh, xDS/mTLS
Why sidecar proxies appeared — and why they are being abandoned. Envoy internals, xDS API flow, mTLS handshake, Ambient Meshs Ztunnel, and Ciliums sidecar-less eBPF mesh, all in one place.
2026-04-15 · 10 min read #service-mesh#envoy#istio#linkerd#ciliumeBPF Deep Dive — The VM, Verifier, XDP, and CO-RE That Made the Linux Kernel Programmable (2025)
Injecting safe code into the kernel — that is the eBPF revolution. This post dissects eBPF from internals to practice: the VM and bytecode, the Verifier that enforces safety, maps (Hash/Array/Ring Buffer/Perf), program t
2026-04-15 · 15 min read #ebpf#linux#kernel#xdp#observabilityeBPF Complete Guide — A Tiny VM Inside the Kernel: Verifier, JIT, CO-RE, Maps, Attach Points, XDP, LSM, sched_ext (2025) ♪ Listenable
Everything about eBPF — from cBPF in 1992 to eBPF in 2014 to schedext in 2024. The 11-register virtual machine ISA, the verifier's static analysis, JIT compilation, BTF and CO-RE, 17+ BPF map types, 200+ helper functions
2026-04-15 · 31 min read #linux#kernel#ebpf#bpf#xdpKubernetes Networking Deep Dive Guide 2025: CNI, Service, Ingress, DNS, Network Policy ♪ Listenable
Everything about K8s networking! Pod networking model, CNI plugins (Calico/Cilium/Flannel), Service (ClusterIP/NodePort/LoadBalancer), Ingress vs Gateway API, CoreDNS, Network Policy, eBPF-based networking, and traffic f
2026-04-14 · 24 min read #kubernetes#networking#cni#service#ingresseBPF Complete Guide 2025: Kernel Programming Revolution for Observability, Networking, Security
Everything about eBPF! Safe Linux kernel programming, BCC vs libbpf vs bpftrace, Cilium (networking), Falco (security), Pixie (observability), Tetragon, CO-RE, real-world tracing, performance optimization, production cas
2026-04-14 · 11 min read #ebpf#kernel#observability#networking#security[Golden Kubestronaut] CCA Practice Exam 80 Questions - Cilium Certified Associate ♪ Listenable
80 practice questions for achieving Golden Kubestronaut via CCA. Covers all domains: eBPF, Cilium networking, security, service mesh, and Hubble observability.
2026-03-20 · 27 min read #kubernetes#golden-kubestronaut#cilium#ebpf#ccaCilium Network Policy Engine: L3/L4/L7 Filtering Implementation
Analysis of the Cilium network policy engine covering policy repository, Identity-based enforcement, L3/L4 eBPF enforcement, L7 Envoy proxy, FQDN policies, audit mode, and endpoint regeneration.
2026-03-20 · 9 min read #cilium#ebpf#networking#open-source-internalsCilium Hubble Observability Platform Internal Analysis
Internal analysis of the Cilium Hubble observability platform covering architecture, Relay, UI, L3/L4/L7 flows, Prometheus metrics, CLI, gRPC API, and performance tuning.
2026-03-20 · 9 min read #cilium#ebpf#networking#open-source-internalsCilium ClusterMesh: Multi-Cluster Networking Internal Implementation
Analysis of Cilium ClusterMesh internals covering etcd architecture, global services, cross-cluster policies, Identity synchronization, KVStoreMesh, and external workloads.
2026-03-20 · 7 min read #cilium#ebpf#networking#open-source-internalsCilium Architecture Internals: The Core of eBPF-Based Networking
Deep analysis of Cilium internals including the Cilium Agent, Operator, eBPF datapath, BPF maps, Identity allocation, and endpoint lifecycle.
2026-03-20 · 10 min read #cilium#ebpf#networking#open-source-internalsCilium eBPF Datapath Deep Dive: Packet Processing Pipeline
Deep analysis of the Cilium eBPF datapath covering packet flow, BPF program chaining, connection tracking, NAT engine, DSR mode, and socket-level load balancing.
2026-03-20 · 11 min read #cilium#ebpf#networking#open-source-internalsObservability 2026: eBPF and OpenTelemetry Revolutionizing Monitoring
The convergence of eBPF technology and OpenTelemetry standardization is fundamentally transforming observability in 2026. Zero-instrumentation tracing, AI-powered root cause analysis, and cost-optimized stacks have becom
2026-03-16 · 7 min read #ebpf#observability#opentelemetry#cilium#distributed-systems