Identity Aware Threat Detection and Network Monitoring by using eBPF Natalia Reka Ivanko, Isovalent October 28, 2020 ● ● ○ ● ○ ○ ○ ○ ● ● ● ● ● ● ● ● ○ ● ○ ○ ○ ● ● ● ○ ● ○ ○ ● ●

and modify the state of your computer and applications. ⌃List of status menus and what they do Network menu Connect to wired, wireless, mobile, and VPN networks. Input source menu Select keyboard Hidden networks, Edit connection settings, Disconnecting… Chat & Social Networking Chat on any network using Empathy, make video calls, install skype, social networking apps Connect to mobile broadband Keeping safe on the internet Antivirus software, basic firewalls… Network problems Troubleshooting wireless connections, finding your wifi network… Networking terms & tips Find your IP address, WEP & WPA security

......................................................................................... 39 1. Network Configuration .................................................................................. ........................................................................................ 110 7. Network Authentication ................................................................................. ........................................................................................ 249 2. Network File System (NFS) ..............................................................................

workstation authentication 3 service-kerberos-with-openldap-backend Kerberos with OpenLDAP backend 2 Network user authentication with SSSD 3 service-sssd Introduction 3 service-sssd-ad Active Directory 3 4 containers-lxc LXC 4 containers-lxd LXD 4 docker-for-system-admins Docker for sysadmins 2 Network 3 how-to-install-and-configure-isc-kea Install isc-kea 3 how-to-install-and-configure-isc-dhcp-server r Install isc-dhcp-server 3 use-timedatectl-and-timesyncd Synchronise time 3 how-to-serve-the-network-time-protocol-with-chrony Serve the NTP 3 openvswitch-dpdk Use Open vSwitch with DPDK 2 Samba 3

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7 2.1.6.1 Wireless Network Cards . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7 2.1.7 Braille Displays . . . . 26 5.1.4.1 支援 PXE 的網卡或者主機板 . . . . . . . . . . . . . . . . . . . . . . . . . . 26 5.1.4.2 採用 Network BootROM 的網卡 . . . . . . . . . . . . . . . . . . . . . . . . 26 5.1.4.3 Etherboot . . . . . . . Configuring the Network . . . . . . . . . . . . . . . . . . . . . . . . . . . . 42 6.3.1.5.1 Automatic network configuration . . . . . . . . . . . . . . . . . . 42 6.3.1.5.2 Manual network configuration

instructions for installing, configuring, and troubleshooting Cilium in different deployment modes. Network Policy : Detailed walkthrough of the policy language structure and the supported formats. Monitoring Installation Observability Network Policy Security Tutorials Advanced Networking Cluster Mesh Operations Istio Concepts Component Overview Terminology Networking Network Security eBPF Datapath Observability pre-flight check (Required) Upgrading Cilium Version Specific Notes Advanced Configuration Core Agent Network Policy Policy Enforcement Modes Rule Basics Layer 3 Examples Layer 4 Examples Layer 7 Examples

instructions for installing, configuring, and troubleshooting Cilium in different deployment modes. Network Policy : Detailed walkthrough of the policy language structure and the supported formats. Monitoring Installation Observability Network Policy Security Tutorials Advanced Networking Cluster Mesh Operations Istio Concepts Component Overview Terminology Networking Network Security eBPF Datapath Observability pre-flight check (Required) Upgrading Cilium Version Specific Notes Advanced Configuration Core Agent Network Policy Policy Enforcement Modes Rule Basics Layer 3 Examples Layer 4 Examples Layer 7 Examples

instructions for installing, configuring, and troubleshooting Cilium in different deployment modes. Network Policy : Detailed walkthrough of the policy language structure and the supported formats. Monitoring Started Guides Installation Network Policy Security Tutorials Advanced Networking Operations Istio Other Orchestrators Concepts Component Overview Terminology Networking Network Security eBPF Datapath Kubernetes pre-flight check (Required) Upgrading Cilium Version Specific Notes Advanced Configuration Core Agent Network Policy Policy Enforcement Modes Rule Basics Layer 3 Examples Layer 4 Examples Layer 7 Examples Host

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 86 3.7.3 Network interface initialization . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 98 Debian Reference ix 5 Network setup 99 5.1 The basic network infrastructure . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 99 5.1.2 The network interface name . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 101 5.1.3 The network address range for the LAN . . . . .

Cilium What is Cilium? Why Cilium? Functionality Overview Getting Started Guides Installation Network Policy Security Tutorials Advanced Networking Operations Istio Other Orchestrators Concepts Component GitHub Security Bugs Integrations Kubernetes Introduction Concepts Requirements Configuration Network Policy Endpoint CRD Kubernetes Compatibility Cilium CRD schema validation Troubleshooting Istio (Required) Upgrading Cilium Step 3: Rolling Back Version Specific Notes Advanced Configuration Network Policy Policy Enforcement Modes Rule Basics Layer 3 Examples Layer 4 Examples Layer 7 Examples Kubernetes