How to ship BPF with your Go project Lorenz Bauer October 28, 2020 Goal ● Count the number of packets on lo ● Print the count to the console ● From a single Go binary Use the source, Luke github

Create a project or use an existing one export GKE_PROJECT=gke-clusters gcloud projects create $GKE_PROJECT 3. Enable the GKE API for the project if not already done gcloud services enable --project $GKE_PROJECT $GKE_PROJECT container.googleapis.com Create a GKE Cluster You can apply any method to create a GKE cluster. The example given here is using the Google Cloud SDK [https://cloud.google.com/sdk/]. This guide are in a different region of the globe. export GKE_ZONE="europe-west4-a" gcloud container --project $GKE_PROJECT clusters create cluster1 \ --username "admin" --image-type COS --num-nodes 2 --zone ${GKE_ZONE}

Create a project or use an exis�ng one export GKE_PROJECT=gke-clusters gcloud projects create $GKE_PROJECT Enable the GKE API for the project if not already done gcloud services enable --project $GKE_PROJECT $GKE_PROJECT container.googleapis.com Create a GKE Cluster You can apply any method to create a GKE cluster. The example given here is using the Google Cloud SDK [h�ps://cloud.google.com/sdk/]. This guide in a different region of the globe. export GKE_ZONE="europe-west4-a" gcloud container --project $GKE_PROJECT clusters create cluster1 \ --username "admin" --image-type COS --num-nodes 2 --zone ${GKE_ZONE}

"${CLUSTER_NAME}/metadata.json" '.gcp.projectID')" gcloud compute firewall-rules create \ --project="${gcp_projectID}" \ --network="${infraID}-network" \ --allow=tcp:4240,udp:8472,icmp \ --s 2. Create a project or use an existing one export GKE_PROJECT=gke-clusters gcloud projects create $GKE_PROJECT gcloud config set project $GKE_PROJECT 3. Enable the GKE API for the project if not already click the button to Launch an application: Provide a name for the application and select the System project in your cluster as the application target: Be sure to configure the application to have cluster-wide

2. Create a project or use an existing one export GKE_PROJECT=gke-clusters gcloud projects create $GKE_PROJECT gcloud config set project $GKE_PROJECT 3. Enable the GKE API for the project if not already ]. Kata Containers with Cilium Kata Containers [https://katacontainers.io/] is an open source project that provides a secure container runtime with lightweight virtual machines that feel and perform routes. See the guide Using kube-router to run BGP on how to achieve this using the kube-router project. Masquerading Native routing is typically enabled in the context of a virtual network with private

"${CLUSTER_NAME}/metadata.json" '.gcp.projectID')" gcloud compute firewall-rules create \ --project="${gcp_projectID}" \ --network="${infraID}-network" \ --allow=tcp:4240,udp:8472,icmp \ --s 2. Create a project or use an existing one export GKE_PROJECT=gke-clusters gcloud projects create $GKE_PROJECT gcloud config set project $GKE_PROJECT 3. Enable the GKE API for the project if not already click the button to Launch an application: Provide a name for the application and select the System project in your cluster as the application target: Be sure to configure the application to have cluster-wide

"${CLUSTER_NAME}/metadata.json" '.gcp.projectID')" gcloud compute firewall-rules create \ --project="${gcp_projectID}" \ --network="${infraID}-network" \ --allow=tcp:4240,udp:8472,icmp \ --s click the button to Launch an application: Provide a name for the application and select the System project in your cluster as the application target: Be sure to configure the application to have cluster-wide for the Cilium chart and click Next. The application should deploy within the target cluster and project. After a few minutes, you should see all nodes as active, and proper deployments of all Cilium objects

click the button to Launch an application: Provide a name for the application and select the System project in your cluster as the application target: Be sure to configure the application to have cluster-wide for the Cilium chart and click Next. The application should deploy within the target cluster and project. After a few minutes, you should see all nodes as active, and proper deployments of all Cilium objects Pods. Kata Containers with Cilium Kata Containers [https://katacontainers.io/] is an open source project that provides a secure container runtime with lightweight virtual machines that feel and perform

was supported by NSERC through a Discovery Grant. github.com/willfindlay/bpfbox Check out the project on GitHub! 7 / 7

reasons: ○ support for NetworkPolicies ○ feature-rich CNI implementation ○ actively maintained project ○ healthy, supportive community ● Today, all O(10000) DOKS clusters run on Cilium digitalocean