Networking Cluster Mesh Operations Istio Concepts Component Overview Terminology Networking Network Security eBPF Datapath Observability Kubernetes Integration Multi-Cluster (Cluster Mesh) Getting Help Observing flows with Hubble Relay Connectivity Problems Policy Troubleshooting etcd (kvstore) Cluster Mesh Troubleshooting Symptom Library Useful Scripts Reporting a problem Community Weekly Community Meeting Configuring IPAM modes Local Redirect Policy (beta) BGP (beta) Egress Gateway (beta) Cluster Mesh Setting up Cluster Mesh Load-balancing & Service Discovery Network Policy Setting up Support for External Workloads

Networking Cluster Mesh Operations Istio Concepts Component Overview Terminology Networking Network Security eBPF Datapath Observability Kubernetes Integration Multi-Cluster (Cluster Mesh) Getting Help Observing flows with Hubble Relay Connectivity Problems Policy Troubleshooting etcd (kvstore) Cluster Mesh Troubleshooting Symptom Library Useful Scripts Reporting a problem Community Weekly Community Meeting Redirect Policy (beta) BGP (beta) Egress Gateway (beta) CiliumEndpointSlice (beta) Cluster Mesh Setting up Cluster Mesh Load-balancing & Service Discovery Network Policy Setting up Support for External Workloads

external access using AWS metadata Advanced Networking Using kube-router to run BGP Se�ng up Cluster Mesh Cilium integra�on with Flannel (beta) IPVLAN based Networking (beta) Transparent Encryp�on (beta) probe-8689f6579-tzbjk 1/1 Running 0 27m Setting up Cluster Mesh This is a step-by-step guide on how to build a mesh of Kubernetes clusters by connec�ng them together, enabling pod-to-pod connec�vity supported by cluster mesh at this point. It is highly recommended to use a TLS protected etcd cluster with Cilium. The server cer�ficate of etcd must whitelist the host name *.mesh.cilium.io . If you are

Advanced Networking Setting up Cilium in AWS ENI mode Using kube-router to run BGP Setting up Cluster Mesh Cilium integration with Flannel (beta) IPVLAN based Networking (beta) Transparent Encryption (beta) at all, the following is a list of reasons when to use a kvstore: If you want to use the Cluster Mesh functionality. If you are running in an environment with more than 250 nodes, 5k pods, or if you observe probe-8689f6579-tzbjk 1/1 Running 0 27m Setting up Cluster Mesh This is a step-by-step guide on how to build a mesh of Kubernetes clusters by connecting them together, enabling pod-to-pod

Setting up Cilium in AWS ENI mode Using kube-router to run BGP Using BIRD to run BGP Setting up Cluster Mesh Cilium integration with Flannel (beta) IPVLAN based Networking (beta) Transparent Encryption (stable/beta) helm command Install Cilium will detach the inaccurate eBPF programs. Cluster Mesh With Kind we can simulate Cluster Mesh in a sandbox too. Kind Configuration This time we need to create (2) config cluster.name=cluster1 \ --set global.cluster.id=1 Setting up Cluster Mesh We can complete setup by following the Cluster Mesh guide with Expose the Cilium etcd to other clusters. For Kind, we’ll want

Networking Network Security eBPF Datapath Observability Kubernetes Integration Multi-Cluster (Cluster Mesh) Getting Help FAQ Slack GitHub Training Enterprise support Security Bugs Operations System Requirements Setting up Cilium in AWS ENI mode Using kube-router to run BGP Using BIRD to run BGP Setting up Cluster Mesh Cilium integration with Flannel (beta) IPVLAN based Networking (beta) Transparent Encryption (stable/beta) subsys=datapath- loader level=warning msg="+ RETCODE=255" subsys=datapath-loader Cluster Mesh With Kind we can simulate Cluster Mesh in a sandbox too. Kind Configuration This time we need to create (2) config

Terminology Networking Network Security eBPF Datapath Kubernetes Integration Multi-Cluster (Cluster Mesh) Getting Help FAQ Slack GitHub Security Bugs Operations System Requirements Summary Linux Distribution Setting up Cilium in AWS ENI mode Using kube-router to run BGP Using BIRD to run BGP Setting up Cluster Mesh Cilium integration with Flannel (beta) IPVLAN based Networking (beta) Transparent Encryption (stable/beta) helm command Install Cilium will detach the inaccurate eBPF programs. Cluster Mesh With Kind we can simulate Cluster Mesh in a sandbox too. Kind Configuration This time we need to create (2) config

Tools to help with network troubleshooting and policies ❏ Additional features like IPSec, Cluster Mesh, and more 12 Reduced iptables Complexity 13 CiliumNetworkPolicies Layer 7 HTTP Filtering Outbound

复杂度上升，埋点成本居高不下 Kubernetes 容器 网络、操作系统、硬件 基础设施层复杂度日益增加 如何关联? 挑战3：数据散落，工具多， 缺少上下文，排查效率低下 业务应用 应用框架 容器虚拟化 系统调用 内核 应用性能监控（APM） Kubernetes监控 Kubernetes组件异常： Scheduler, KCM， etcd，api-server, coredns…