Tag archive

ebpf

Articles tagged ebpf, collected in one place.

Glossy teal runtime chamber watching a bright process beam break out of a transparent container prism through a guarded sensor gate

Security

Falco on Kubernetes: install, tune, and route alerts

Install Falco with the Helm chart, trigger a real alert, write one custom rule, then tune the noise the way the stock rules file actually expects you to.

12 min readRead article

Glossy Tetragon-inspired shield gate with segmented cyan, lime, yellow, orange, red, and violet facets routing a process stream while a rogue branch is cut off at the edge

Security

Tetragon on Kubernetes: in-kernel runtime enforcement

A Tetragon Kubernetes tutorial: installation, TracingPolicy design, monitor mode, and the difference between detecting a runtime event and blocking it in-kernel.

10 min readRead article

Networking

Kubernetes networking with Cilium: eBPF and kube-proxy

Cilium changes Kubernetes networking by replacing more of kube-proxy with eBPF, enforcing identity-aware policy, and adding flow visibility through Hubble.

11 min readRead article