Cilium’s new BGP Auto-Discovery feature automates the process of discovering and establishing BGP peers, significantly reducing the operational complexity for large-scale environments.
Learn how to setup Cilium in EKS environments
Learn how Canopus uses eBPF Tetragon & AI Agents to find top 1% of vulnerabilities
Linux 4.12 was released and net-next is closed. The Kernel Newbies release notes is still under construction but worth checking out for the BPF commits in 4.12.
This blog post focuses on Layer 7 (HTTP) policy rules and how to apply them for both outgoing and incoming connections in the context of a Kubernetes cluster using a ThirdPartyResource. This is a first step in integrating L7 policies into the Kubernetes world, next steps will involve integration with Istio and the Envoy proxy. We will talk about our plans and the details how Cilium empowers both of them in one of the next blog posts.
Linux 4.12-rc5 was recently released. No BPF changes where included, but a usual [GIT] Networking pull request was made afterwards. You can see the changes in 15th June.
Linux 4.12-rc4 was released this week. No new BPF changes were in this release, but several patches were applied on netdev.
Linux 4.12-rc3 was released last week. One usual [GIT] Networking pull request with some BPF fixes made it in. You can read all the highlights in 26th May. Also the release email briefly mentions BPF. Anyway, rc3 has a little bit of everything. The biggest single change is actually just a documentation update (the intel pstate docs were converted to rst format), so the diffstat actually looks a bit odd with a wuarter just being documentation. There's also some tooling updates (perf and some bpf selftest).More interesting highlights
The team is excited to announce the v0.9 release of Cilium.We've received a lot of great feedback since we released Cilium v0.8 at the end of March with support for L7 HTTP-aware network security. By far the biggest requests have been:1) Making it easier to deploy and use Cilium in Kubernetes environments 2) Testing and hardening Cilium to enable production deployments.
Linux 4.12-rc2 was released last week. One usual [GIT] Networking pull request made it in which includes two BPF fixes. See 18th May for the details.
The Cilium team is excited to be at GlueCon 2017 Wed + Thurs this week, just outside Denver, CO. GlueCon is a great developer-focused conference focused on APIs, containers, microservices, serverless, etc. We've enjoyed attending as individuals in the past, and are excited to be sponsoring this year!
The Linux kernel merge window closed up last week and v4.12-rc1 was released. One usual [GIT] Networking pull request was sent before the rc and one the day after. The are some BPF related fixes, see dates for all the highlights
For live conversation and quick questions, join the Cilium Slack workspace. Don’t forget to say hi!
Join slack workspace
