Networking Cluster Mesh Operations Istio Concepts Component Overview Terminology Networking Network Security eBPF Datapath Observability Kubernetes Integration Multi-Cluster (Cluster Mesh) Getting Help Observing flows with Hubble Relay Connectivity Problems Policy Troubleshooting etcd (kvstore) Cluster Mesh Troubleshooting Symptom Library Useful Scripts Reporting a problem Community Weekly Community Meeting Kafka cluster How to secure gRPC Getting Started Securing Elasticsearch How to Secure a Cassandra Database Getting Started Securing Memcached Locking down external access using AWS metadata Creating policies

Secure a Cassandra Database Ge�ng Started Securing Memcached Locking down external access using AWS metadata Advanced Networking Using kube-router to run BGP Se�ng up Cluster Mesh Cilium integra�on with call authoriza�on Locking down external access with DNS-based policies How to Secure a Cassandra Database Securing a Ka�a cluster Getting Started Using MicroK8s This guide uses microk8s [h�ps://microk8s call authoriza�on Locking down external access with DNS-based policies How to Secure a Cassandra Database Securing a Ka�a cluster Self-Managed Kubernetes Installa�on using kubeadm Standard Installa�on

Networking Cluster Mesh Operations Istio Concepts Component Overview Terminology Networking Network Security eBPF Datapath Observability Kubernetes Integration Multi-Cluster (Cluster Mesh) Getting Help Observing flows with Hubble Relay Connectivity Problems Policy Troubleshooting etcd (kvstore) Cluster Mesh Troubleshooting Symptom Library Useful Scripts Reporting a problem Community Weekly Community Meeting Kafka cluster How to secure gRPC Getting Started Securing Elasticsearch How to Secure a Cassandra Database Getting Started Securing Memcached Locking down external access using AWS metadata Creating policies

Kafka cluster How to secure gRPC Getting Started Securing Elasticsearch How to Secure a Cassandra Database Getting Started Securing Memcached Locking down external access using AWS metadata Advanced Networking Networking Setting up Cilium in AWS ENI mode Using kube-router to run BGP Setting up Cluster Mesh Cilium integration with Flannel (beta) IPVLAN based Networking (beta) Transparent Encryption (beta) Host-Reachable call authorization Locking down external access with DNS-based policies How to Secure a Cassandra Database Securing a Kafka cluster Getting Started Using MicroK8s This guide uses microk8s [https://microk8s

Kafka cluster How to secure gRPC Getting Started Securing Elasticsearch How to Secure a Cassandra Database Getting Started Securing Memcached Locking down external access using AWS metadata Advanced Networking Setting up Cilium in AWS ENI mode Using kube-router to run BGP Using BIRD to run BGP Setting up Cluster Mesh Cilium integration with Flannel (beta) IPVLAN based Networking (beta) Transparent Encryption (stable/beta) Policy Enforcement Locking down external access with DNS-based policies How to Secure a Cassandra Database Securing a Kafka cluster Getting Started Using MicroK8s This guide uses microk8s [https://microk8s

Scenario enablement Linux kernel x86, Arm, RISC-V GPU NPU Real-time kernel Security kernel Database Big data Resource orchestration Desktop system Industrial application ... ... openEuler OpenHarmony Cloud Cloud node Cloud node Local Controller Task mgmt & coordination Edge KubeEdge Model/Database mgmt Messaging over KubeEdge Lib Model Global Manager Worker GM Common Worker Edge node A-Tune client (atune-adm) A-Tune server (atuned/Golang) gRPC service Configuration Analysis Tuning Database Backend server (HTTP/Python 3) MPI/CPI Data sampling System parameter configuration Classification

Networking Network Security eBPF Datapath Observability Kubernetes Integration Multi-Cluster (Cluster Mesh) Getting Help FAQ Slack GitHub Training Enterprise support Security Bugs Operations System Requirements Kafka cluster How to secure gRPC Getting Started Securing Elasticsearch How to Secure a Cassandra Database Getting Started Securing Memcached Locking down external access using AWS metadata Creating policies Setting up Cilium in AWS ENI mode Using kube-router to run BGP Using BIRD to run BGP Setting up Cluster Mesh Cilium integration with Flannel (beta) IPVLAN based Networking (beta) Transparent Encryption (stable/beta)

Terminology Networking Network Security eBPF Datapath Kubernetes Integration Multi-Cluster (Cluster Mesh) Getting Help FAQ Slack GitHub Security Bugs Operations System Requirements Summary Linux Distribution Kafka cluster How to secure gRPC Getting Started Securing Elasticsearch How to Secure a Cassandra Database Getting Started Securing Memcached Locking down external access using AWS metadata Creating policies Setting up Cilium in AWS ENI mode Using kube-router to run BGP Using BIRD to run BGP Setting up Cluster Mesh Cilium integration with Flannel (beta) IPVLAN based Networking (beta) Transparent Encryption (stable/beta)

Tools to help with network troubleshooting and policies ❏ Additional features like IPSec, Cluster Mesh, and more 12 Reduced iptables Complexity 13 CiliumNetworkPolicies Layer 7 HTTP Filtering Outbound

- 负载均衡：支持轮询等负载均衡策略。 - 路由：支持 L4、L7 路由规则。 - 灰度：支持百分比灰度方式选择后端服务策略。 • sockamp 网格加速能力：以典型的 service mesh 场景为例，使能 sockmap 网格加速能力之后，业务容器和 envoy 容器之间的通信将被 ebpf 程序短接，通过缩短通信路径从而达到加速效果，对于同节点上 Pod 间通信也能通过 ebpf