following sections: Getting Started Guides: Provides a simple tutorial for running a small Cilium setup on your laptop. Intended as an easy way to get your hands dirty applying Cilium security policies Provision Environment Submitting a pull request Getting a pull request merged Development Setup Requirements Vagrant Setup Local Development in Vagrant Box Making Changes Add/update a golang dependency Debugging Cilium? Cilium is open source software for transparently securing the network connectivity between application services deployed using Linux container management platforms like Docker and Kubernetes. At the

following sections: Getting Started Guides: Provides a simple tutorial for running a small Cilium setup on your laptop. Intended as an easy way to get your hands dirty applying Cilium security policies committers Weekly duties Developer’s Certificate of Origin Development Setup Verifying Your Development Setup Requirements Vagrant Setup Local Development in Vagrant Box Making Changes Add/update a golang Cilium? Cilium is open source software for transparently securing the network connectivity between application services deployed using Linux container management platforms like Docker and Kubernetes. At the

following sections: Getting Started Guides: Provides a simple tutorial for running a small Cilium setup on your laptop. Intended as an easy way to get your hands dirty applying Cilium security policies Reference Scalability Limiting Identity-Relevant Labels Scalability report Performance Evaluation Setup Evaluation Results Tuning Troubleshooting Component & Cluster Health Observing Flows with Hubble process for committers Weekly duties Developer’s Certificate of Origin Development Setup Requirements Vagrant Setup Local Development in Vagrant Box Making Changes Add/update a golang dependency Optional:

following sections: Getting Started Guides: Provides a simple tutorial for running a small Cilium setup on your laptop. Intended as an easy way to get your hands dirty applying Cilium security policies committers Weekly duties Developer’s Certificate of Origin Development Setup Verifying Your Development Setup Requirements Vagrant Setup Local Development in Vagrant Box Making Changes Add/update a golang Cilium? Cilium is open source software for transparently securing the network connectivity between application services deployed using Linux container management platforms like Docker and Kubernetes. At the

following sections: Getting Started Guides: Provides a simple tutorial for running a small Cilium setup on your laptop. Intended as an easy way to get your hands dirty applying Cilium security policies Reference Scalability Limiting Identity-Relevant Labels Scalability report Performance Evaluation Setup Evaluation Results Tuning Troubleshooting Component & Cluster Health Observing Flows with Hubble process for committers Weekly duties Developer’s Certificate of Origin Development Setup Requirements Vagrant Setup Local Development in Vagrant Box Making Changes Add/update a golang dependency Add/update

following sections: Getting Started Guides: Provides a simple tutorial for running a small Cilium setup on your laptop. Intended as an easy way to get your hands dirty applying Cilium security policies Cilium? Cilium is open source software for transparently securing the network connectivity between application services deployed using Linux container management platforms like Docker and Kubernetes. At the the Linux kernel, Cilium security policies can be applied and updated without any changes to the application code or container configuration. Why Cilium? The development of modern datacenter applications

the following sec�ons: Ge�ng Started Guides: Provides a simple tutorial for running a small Cilium setup on your laptop. Intended as an easy way to get your hands dirty applying Cilium security policies deployed by kubeadm are available in the official Kubernetes documenta�on [h�ps://kubernetes.io/docs/setup/independent/create-cluster- kubeadm/#pod-network]. Standard Installation This guides takes you through kops aws documenta�on [h�ps://github.com/kubernetes/kops/blob/master/docs/aws.md] for more detailed setup instruc�ons. Cilium Prerequisites Ensure the System Requirements are met, par�cularly the Linux kernel

conntrack routing decision mangle PREROUTING nat PREROUTING socket lookup socket receive buffer Application Protocol Network Driver XDP TC ingress alloc_skb Ring Buffer forward Wikipedia - Packet nc -4 192.168.122.221 777 Hip hip hooray! ? Want to use BPF socket lookup? ● Repo with code and setup instructions https://github.com/jsitnicki/ebpf-summit-2020 ● BPF sk_lookup program kernel documentation com/watch?v=qRDoUpqvYjY Watch out for the blog post at https://blog.cloudflare.com/ … will cover setup for UDP Thank you!

Co-Founder/CEO Pixie (@pixie_run) & Adjunct Professor of CS @ Stanford DEVELOPER PROBLEM You’re an application developer, and your program is misbehaving. ● No problem. You have logs! Right? ● Uh-oh, not fact *= float64(i) res += 1 / fact } return res } Let’s look at test application Use Case GET /e?iters={iterations} // computeE computes the approximation of e by running a

system. eBPF is an event-driven architecture that runs specific programs when the kernel or an application passes a certain hook point. For example, kernel probes (kprobe) or user probes (uprobe) can be having to export samples. Attaching eBPF programs to trace points as well as kernel and user application probe points gives powerful introspection abilities for the kernel and user space applications