Security
Tetragon on Kubernetes: in-kernel runtime enforcement
A Tetragon Kubernetes tutorial: installation, TracingPolicy design, monitor mode, and the difference between detecting a runtime event and blocking it in-kernel.
10 min readRead article
Networking
Kubernetes networking with Cilium: eBPF and kube-proxy
Cilium changes Kubernetes networking by replacing more of kube-proxy with eBPF, enforcing identity-aware policy, and adding flow visibility through Hubble.
11 min readRead article