@breakawaybilly.bsky.social
Cloud Native networking, observability, and security with Cilium, eBPF, and Isovalent Newsletter cilium.io/newsletter
Results from the Cilium User Survey are in and it shows how we are moving from plumbing to platform. The networking conversation has moved from connectivity to topology where cluster mesh and network policy are what truly turns Cilium into a platform.
05.12.2025 13:00 — 👍 0 🔁 0 💬 0 📌 0
A method of defending against SLOW GET, POST, & READ attacks implemented through eBPF using CO-RE and libbpf
04.12.2025 12:01 — 👍 0 🔁 0 💬 0 📌 0
10,000 raw events ➡️ 1 useful alert turns eBPF from a firehose into a funnel
If you try to ship every kernel event to userspace, you are killing the system rather than observing it. You need In-Kernel Filtering, Ring Buffers and User-Space Windowing
The kernel isn’t a black box any more, it’s the platform that everything else is built upon and eBPF is the "language" to program it. Don't believe me? Just look at the numbers in the white paper.
03.12.2025 15:00 — 👍 1 🔁 0 💬 0 📌 0
Ten years ago eBPF was “a better packet filter”. Now, if you peel the stickers off most “next‑gen” networking, security, observability, even FinOps and LLM security products, you keep finding eBPF driving the infrastructure innovation.
"eBPF is becoming the strategic platform of choice for infrastructure teams"
This line from latest eBPF Foundation report written by Andrew Green is going to be doing a lot of work in the next decade.
ebpf.foundation/new-state-of...
A High-Performance XDP/eBPF Packet Broker for Flow-Based Distribution of VXLAN-Encapsulated Traffic for Network Analysis
02.12.2025 12:03 — 👍 1 🔁 0 💬 0 📌 0
100,000 CPU cores handling 10 million requests per second while reducing infrastructure costs by 19% and worker hangs by 99.8%. Alibaba leverages eBPF with a userspace-directed I/O event notification framework for L7 load balancing.
01.12.2025 09:01 — 👍 3 🔁 1 💬 0 📌 0If you switched years ago, you got a head start on performance, network observability with Hubble, and security with network policy and encryption. Today, you get what everyone else already has. Tomorrow, you won't be migrating for innovation, it will just be paying down technical debt. 📉
28.11.2025 10:00 — 👍 1 🔁 0 💬 0 📌 0
Cilium has been on the keynote stage in end user architectures for the last 4 KubeCon's in a row because it has become the baseline in cloud native.
When all major cloud providers and distros make a technology their default, it stops being "cutting edge" and starts being "infrastructure."
Last few days left for the eBPF Summit Hackathon. This is your chance to showcase what you have been building with eBPF 🐝
ebpf-summit-2025.devpost.com
My last time as co-chair for CiliumCon 🥲
www.credly.com/badges/f22b7...
An eBPF-based DDoS mitigator specifically designed for IoT devices
26.11.2025 12:01 — 👍 2 🔁 0 💬 0 📌 0
Using eBPF for security, Datadog was dealing with 10 billion file-related events per minute, but they were able to reduce that by 94% by implementing in-kernel filtering based on rules pushed from user space into eBPF maps. This is scalable eBPF architecture
26.11.2025 10:01 — 👍 5 🔁 3 💬 0 📌 0
ingress-nginx is going to the datacenter in the sky ☠️ Luckily, Dean has a migration guide to Cilium's Ingress or Gateway API implementation using ingress2gateway
25.11.2025 10:00 — 👍 2 🔁 1 💬 0 📌 0collaborations, partnerships, and business opportunities, is the kind of (social) engineering that actually matters most.
Looking forward to taking my community into the second decade of cloud native 💘
raveling the world and making friends has been incredible, but I'm most proud of restarting the Kubernetes Community Days program when I was working at CNCF. Seeing that program bring the cloud native community together with local events at a global scale, and inspiring so many Cloud Native Days,
24.11.2025 12:00 — 👍 0 🔁 0 💬 1 📌 0Beyond the hype cycles (I'll never forget Valencia when someone told me they needed Cilium then asked me what it was 😂 ) and the acronyms (hello eBPF 🐝), the real highlight has always been the community, not the code. T
24.11.2025 12:00 — 👍 0 🔁 0 💬 1 📌 0My first KubeCon was with a startup, RiseML (RIP 🪦 ), trying to orchestrate AI/ML workloads on Kubernetes and Cisco was the t-shirt sponsor. Fast forward 7 years and I’m working at Cisco, and the entire conference is obsessed with AI/ML on Kubernetes.
24.11.2025 12:00 — 👍 1 🔁 0 💬 1 📌 0
18 KubeCons since Copenhagen 2018 🇩🇰 A lifetime in tech, but looking at these shirts, it almost feels like nothing has changed.
24.11.2025 12:00 — 👍 5 🔁 0 💬 1 📌 0
"Networking is the elephant in the server room. It’s clear that Kubernetes networking is having a moment"
Kate Holterhoff nails my impression from KubeCon exactly
A Kubernetes operator that logs and forwards all HTTP requests over TCP/IPv4 using an eBPF program to intercept traffic
21.11.2025 11:00 — 👍 2 🔁 0 💬 0 📌 0with no edit button, is it better to delete and repost or have people read the comments or trust people understand what I meant? 🤦
20.11.2025 17:20 — 👍 0 🔁 0 💬 1 📌 0
