Bill Mulligan 🐝🐝🐝

AI makes networking matter again The cloud era taught developers to mostly ignore infrastructure. AI is making them pay attention again.

"If an AI-backed service responds faster and behaves more reactively, it will perform better in the market. And the foundation for that is a highly performant, low-latency network without bottlenecks.

GitHub - aminassadi/spk Contribute to aminassadi/spk development by creating an account on GitHub.

Single Packet Authentication with eBPF. Use eBPF to modify live network packets at the kernel level and do port authentication that is faster and leaner than existing approaches

GitHub - manmohanmirkar123/cilium_analyzer Contribute to manmohanmirkar123/cilium_analyzer development by creating an account on GitHub.

A static analysis tool for Cilium CNI manifests (DaemonSet & ConfigMap) to detect security risks, performance issues, and best practice violations

GitHub - Otsmane-Ahmed/KEIP: Kernel-Enforced Install-Time Policies (KEIP): An eBPF/LSM based security tool that detects and blocks malicious network activity during pip install.Kernel-Enforced Install-Time Policies (KEIP): An eBPF/LSM based security tool that detects and blocks malicious network activity during pip install Kernel-Enforced Install-Time Policies (KEIP): An eBPF/LSM based security tool that detects and blocks malicious network activity during pip install.Kernel-Enforced Install-Time Policies (KEIP): An ...

Real-time malware protection for Python package installations using eBPF

Verified Vectors: eBPF Security & IP Integrity, Fri, Mar 6, 2026, 5:30 PM | Meetup We are happy to announce the next [eBPF](https://ebpf.io/)-focused meetup in Vienna scheduled for March 6, 2026. All talks will be suited for beginners and experts as well

Great to see the eBPF meetups growing 🐝 if you are in Vienna tonight, be sure to stop by!

GitHub - beelzebub-labs/azazel: Linux Runtime Security and Forensics using eBPF Linux Runtime Security and Forensics using eBPF. Contribute to beelzebub-labs/azazel development by creating an account on GitHub.

Linux Runtime Security and Forensics using eBPF

GitHub - zz85/profile-bee: 🐝🦀🔥 Rust-based eBPF CPU profiler, supports stack unwinding 🐝🦀🔥 Rust-based eBPF CPU profiler, supports stack unwinding - zz85/profile-bee

🐝🦀🔥 Rust-based eBPF CPU profiler, supports stack unwinding

GitHub - DavidHavoc/ayaFlow: A high-performance, eBPF-based network traffic analyzer written in Rust. Designed to run as a sidecarless DaemonSet in Kubernetes, providing kernel-native visibility into node-wide network traffic with minimal overhead. A high-performance, eBPF-based network traffic analyzer written in Rust. Designed to run as a sidecarless DaemonSet in Kubernetes, providing kernel-native visibility into node-wide network traffic ...

A high-performance, eBPF-based network traffic analyzer written in Rust. Designed to run as a sidecarless DaemonSet in Kubernetes, providing kernel-native visibility into node-wide network traffic with minimal overhead

Mentorship

Looking forward to working with Luiz Mello for the next round of LFX mentorship. He was part of the team that won the eBPF Summit Hackathon and I can't wait to see what he can do for Cilium 🐝

OVHcloud OVHcloud is a global cloud provider operating 44 data centers across four continents. The company designs its own infrastructure, from servers to cooling systems, enabling efficient, secure…

“Cilium gives us the right foundation to build the next generation of our Managed Kubernetes Service. One that’s secure by design, highly observable, and ready for multi-cluster networking”

Building a Minimal Service Mesh with eBPF and Envoy | iximiuz Labs A hands-on guide to building a minimal service mesh using eBPF and Envoy, focusing on transparent traffic interception and the core mechanics behind policy, observability, and encryption.

There has been a lot of buzz about how to build an eBPF based service mesh, but now there is a lab to help you do it too

GitHub - rogercoll/eprofiler-tui: eBPF profiler flamegraph based TUI 🐧🐝 eBPF profiler flamegraph based TUI 🐧🐝 . Contribute to rogercoll/eprofiler-tui development by creating an account on GitHub.

eBPF profiler flamegraph based TUI 🐧🐝

GitHub - tsint/bpfviewer: A developer tool for disassembling, analyzing, debugging, and visualizing BPF object files. A developer tool for disassembling, analyzing, debugging, and visualizing BPF object files. - tsint/bpfviewer

A developer tool for disassembling, analyzing, debugging, and visualizing BPF object files

eBPF Foundation is funding eBPF Meetups 💸

I'll be doing a world trip next year by bike so hopefully there will be a few meetups I can stop by and talk at

ebpf.foundation/introducing-...

Cilium 1.19, Network Policy enhancements, Multi Pool IPAM goes stable, IPv6 progress, and more! Deep dive into the Cilium 1.19 OSS release including Network Policy enhancements...

10 years in and the latest release had 2,934 new commits from a growing community of over 1,010 developers, and over 23,600 GitHub stars 🚀

isovalent.com/blog/post/ci...

Why eBPF Is Redefining How Software Runs Inside the Linux Kernel - Techstrong TV eBPF Foundation board member Bill Mulligan explains how enterprises are using eBPF to run faster, more efficient software inside the Linux kernel.

Honestly title says it all 🐝

All The Ways To Loop and Iterate in eBPF | iximiuz Labs TODO

Loops are part of what helps makes eBPF Turing Complete, but there are 5+ ways to do it. Find out which one is right for you

GitHub - naiello/litelb: Lightweight eBPF load balancer Lightweight eBPF load balancer. Contribute to naiello/litelb development by creating an account on GitHub.

Lightweight eBPF load balancer

GitHub - msune/l2radar: An eBPF L2 neighbour tracker An eBPF L2 neighbour tracker. Contribute to msune/l2radar development by creating an account on GitHub.

An eBPF L2 neighbour tracker

GitHub - fracappa/eghostbuster: An eBPF-based tool for detecting and cleaning up stale kernel resources An eBPF-based tool for detecting and cleaning up stale kernel resources - fracappa/eghostbuster

An eBPF-based tool for detecting and cleaning up stale kernel resources

🔗 Secure and scale Kubernetes networking with OVHcloud ➡️ https://www.ovhcloud.com/en-ie/public-cloud/ At KubeCon, we spoke with Bill Mulligan, maintainer of the CNCF-graduated Cilium project, to… Interview with Bill Mulligan, Cilium Maintainer | eBPF Network, Security & Multi-Cluster Kubernetes

I definitely needed a hair cut in this video, but at least what I said about Cilium came out ok

Cilium: Up and Running Learn how to deploy, operate, and secure Kubernetes networking with Cilium. Cilium Up and Running is a hands on guide covering architecture, network policy, multi cluster connectivity, observability, ...

O'Reilly’s Cilium Up and Running is out now 🐝

Not only is this the prettiest O'Reilly cover you will ever see, you might also finally understand how BGP, IPAM, DNS, and the rest of the networking alphabet soup really works under the hood.

isovalent.com/blog/post/ci...

GitHub - tylerflint/bpftime-go: Go module for running eBPF programs without root privileges or kernel eBPF support, powered by bpftime. Go module for running eBPF programs without root privileges or kernel eBPF support, powered by bpftime. - tylerflint/bpftime-go

Go module for running eBPF programs without root privileges or kernel eBPF support, powered by bpftime

GitHub - pushkar-gr/Aegis: A high-performance, distributed Zero Trust firewall using eBPF/XDP. Aegis enforces identity-based micro-segmentation, dynamically opening network paths only after user authentication. Features a Go Control Plane and Rust Data Plane for kernel-bypass speed and granular access control. A high-performance, distributed Zero Trust firewall using eBPF/XDP. Aegis enforces identity-based micro-segmentation, dynamically opening network paths only after user authentication. Features a Go...

A high-performance, distributed Zero Trust firewall using eBPF/XDP. Aegis enforces identity-based micro-segmentation, dynamically opening network paths only after user authentication. Features a Go Control Plane and Rust Data Plane for kernel-bypass speed and control

GitHub - overyonder/rstat: eBPF system monitor that runs inside the kernel. Sub-millisecond samples, zero allocations, faster than top. eBPF system monitor that runs inside the kernel. Sub-millisecond samples, zero allocations, faster than top. - overyonder/rstat

eBPF system monitor that runs inside the kernel. Sub-millisecond samples, zero allocations, faster than top

GitHub - fksvs/siper: XDP Based Lightweight and Fast Firewall XDP Based Lightweight and Fast Firewall. Contribute to fksvs/siper development by creating an account on GitHub.

XDP Based Lightweight and Fast Firewall

CNCF-hosted Co-located Events Europe 2026: CiliumCon | Sponsored Keynote - Built in... View more about this event at CNCF-hosted Co-located Events Europe 2026

Looking forward to giving my first ever keynote at CiliumCon. Maybe one day I won't have to pay to get on the keynote stage, but that day is not today 😂

sched.co/2DZMf

GitHub - p-r-a-v-i-n/rwatch: Real-time Threat Detection using eBPF + Rust Real-time Threat Detection using eBPF + Rust. Contribute to p-r-a-v-i-n/rwatch development by creating an account on GitHub.

Real-time Threat Detection using eBPF + Rust

Happy Birthday XDP! It’s a birthday celebration — XDP is ten! It’s been quite a ride so let’s take a look at its beginning, highlights, and the future

XDP is 10 years old now too 🎂 looking at Tom Herbert's predictions for the next decade there are a few I agree with 💯 and some I'm not sure about 🤔

What are your thoughts?

GitHub - codelaboratoryltd/bng: eBPF-accelerated Broadband Network Gateway for Kubernetes edge deployments eBPF-accelerated Broadband Network Gateway for Kubernetes edge deployments - codelaboratoryltd/bng

eBPF-accelerated Broadband Network Gateway for Kubernetes edge deployments