around the world and is divided into user space (where most applications run) and kernel space (which provides an interface for applications to interact with the underlying hardware). The kernel has visibility highly performant, but needs to provide a stable interface to applications, so it lacks the flexibility of user space programming. Applications User space Kernel System calls Files Networking Process contributed upstream, they also need constant adjustments to adapt to the evolution of the kernel. Applications User space Kernel System calls Files Networking Process Module Memory One day, a concerned

DNS name? Why Cilium & Hubble? eBPF is enabling visibility into and control over systems and applications at a granularity and efficiency that was not possible before. It does so in a completely transparent workloads such as virtual machines and standard Linux processes. The development of modern datacenter applications has shifted to a service-oriented architecture often referred to as microservices, wherein a large that communicate with each other via APIs using lightweight protocols like HTTP. Microservices applications tend to be highly dynamic, with individual containers getting started or destroyed as the application

application code or container configuration. Why Cilium? The development of modern datacenter applications has shifted to a service-oriented architecture often referred to as microservices, wherein a large that communicate with each other via APIs using lightweight protocols like HTTP. Microservices applications tend to be highly dynamic, with individual containers getting started or destroyed as the application how to use it. Secure service to service communication based on identities Modern distributed applications rely on technologies such as application containers to facilitate agility in deployment and scale

DNS name? Why Cilium & Hubble? eBPF is enabling visibility into and control over systems and applications at a granularity and efficiency that was not possible before. It does so in a completely transparent workloads such as virtual machines and standard Linux processes. The development of modern datacenter applications has shifted to a service-oriented architecture often referred to as microservices, wherein a large that communicate with each other via APIs using lightweight protocols like HTTP. Microservices applications tend to be highly dynamic, with individual containers getting started or destroyed as the application

DNS name? Why Cilium & Hubble? eBPF is enabling visibility into and control over systems and applications at a granularity and efficiency that was not possible before. It does so in a completely transparent workloads such as virtual machines and standard Linux processes. The development of modern datacenter applications has shifted to a service-oriented architecture often referred to as microservices, wherein a large that communicate with each other via APIs using lightweight protocols like HTTP. Microservices applications tend to be highly dynamic, with individual containers getting started or destroyed as the application

application code or container configuration. Why Cilium? The development of modern datacenter applications has shifted to a service-oriented architecture often referred to as microservices, wherein a large that communicate with each other via APIs using lightweight protocols like HTTP. Microservices applications tend to be highly dynamic, with individual containers getting started or destroyed as the application how to use it. Secure service to service communication based on identities Modern distributed applications rely on technologies such as application containers to facilitate agility in deployment and scale

DNS name? Why Cilium & Hubble? BPF is enabling visibility into and control over systems and applications at a granularity and efficiency that was not possible before. It does so in a completely transparent workloads such as virtual machines and standard Linux processes. The development of modern datacenter applications has shifted to a service-oriented architecture often referred to as microservices, wherein a large that communicate with each other via APIs using lightweight protocols like HTTP. Microservices applications tend to be highly dynamic, with individual containers getting started or destroyed as the application

servers, applications and networks. 92 6000+ Agents Performance Metrics Domain Agents export performance data from the kernel, services (e.g. PostgreSQL) and other instrumented applications Metrics

quickly, and with great confidence due to kernel verifier • Extra effort to track deeper state in applications (e.g. channel/connection relationship) • BPF can cause unintended behavior (e.g. broken