# Cilium Published articles for Cilium. This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles. ## Cilium 1.20: Gateway API ExternalAuth, TCPRoute/UDPRoute, ENI IPAM for IPv6, and more DevFeed: [Cilium 1.20: Gateway API ExternalAuth, TCPRoute/UDPRoute, ENI IPAM for IPv6, and more]() Original publisher: [Read original article]() Author: Nico Vibert and Donia Chaiehloudj, Cilium Published: 2026-09-14T10:45:49Z Content type: article Language: en Sources: [Cloud Native Computing Foundation]() Topics: [Cilium](), [Open Source](), [API](), [networking](), [Kubernetes](), [Amazon Web Services](), [eBPF](), [VPC](), [nginx]() Tags: [2026](), [api](), [authentication](), [authorization](), [aws](), [blog](), [cilium](), [cloud](), [cni](), [ebpf](), [google](), [ingress-nginx](), [ipv4](), [ipv6](), [kubernetes](), [microsoft](), [network](), [networking](), [nginx](), [open-source](), [release]() ### AI overview Cilium 1.20 expands Gateway API support with ExternalAuth, CORS filters, ListenerSets, TCPRoute, and UDPRoute. The release also introduces extensible datapath plugins, advances networking standardization with Kubernetes, and adds beta IPv6 support for AWS ENI IPAM. ### Source excerpt Cilium 1.20, the second major open source Cilium release of 2026 after Cilium 1.19, is finally here. Three themes stand out in this release: Thank you to every contributor, reviewer and maintainer who made Cilium 1.20... ## Beeline: Enforcing application-layer policies in eBPF DevFeed: [Beeline: Enforcing application-layer policies in eBPF]() Original publisher: [Read original article]() Author: Brandner Laurin Published: 2026-09-01T23:30:00Z Content type: article Language: en Sources: [APNIC Blog]() Topics: [eBPF](), [Cloud Native Ecosystem](), [Latency](), [networking]() Tags: [applications](), [cilium](), [ebpf](), [guest-post](), [http](), [latency](), [networking](), [tech-matters]() ### AI overview The article presents Beeline, a system that enforces application-layer (L7) policies directly in the kernel using eBPF. It explains the latency overhead of user-space service proxies and reports that Beeline improves request latency by 46%, while eliminating the service proxy from the critical path for 89% of L7 policies in the wild. ### Source excerpt Guest Post: While many L7 protocols are complex to parse, the logic needed to enforce L7 policies tends to be simple. For the vast majority (89%) of L7 policies in the wild, Beeline can eliminate the service proxy from the critical path. ## 【Istio 控制面】选型收束与开放问题：CRD、Gateway API 与 eBPF L4 的排除树 DevFeed: [【Istio 控制面】选型收束与开放问题：CRD、Gateway API 与 eBPF L4 的排除树]() Original publisher: [Read original article]() Author: Liao Tonglang Published: 2026-08-11T00:00:00Z Content type: article Language: zh Sources: [土法炼钢 - 系统与基础设施]() Topics: [istio](), [gateway](), [eBPF]() Tags: [ambient](), [cilium](), [ebpf](), [experimental](), [gamma](), [gateway](), [gateway-api](), [istio](), [kubernetes](), [mesh](), [network](), [open-problems](), [selection](), [xds]() ### AI overview The concluding article in an Istio control-plane series presents a mechanism-based decision tree for choosing among Istio CRDs, Gateway API/GAMMA, and eBPF L4 networking. It explains that Istio CRDs and Gateway API are alternative configuration inputs compiled by istiod into xDS resources, while eBPF L4 avoids xDS entirely. It also identifies open questions around configuration-activation SLOs, Ambient maturity, and coexistence between configuration models. ### Source excerpt 用机制排除树收束 Istio CRD 翻译、Gateway API/GAMMA 与 eBPF L4 的选型边界，回收系列阅读路径，并列出推送 SLO、Ambient 成熟度、GAMMA 双轨等开放问题；不做延迟排行榜。 ## What Is Cilium? DevFeed: [What Is Cilium?]() Original publisher: [Read original article]() Author: Christian Hernandez Published: 2026-07-23T07:01:00Z Content type: tutorial Language: en Sources: [Isovalent - The latest articles covering eBPF-based Networking, Observability, and Security]() Topics: [Cilium](), [eBPF](), [Kubernetes networking](), [observability](), [Security](), [Cloud]() Tags: [cilium](), [cloud-native](), [ebpf](), [infrastructure](), [kubernetes](), [kubernetes-networking](), [observability](), [security]() ### AI overview An introductory article explains Cilium and describes how it uses eBPF for Kubernetes networking, security, and observability in cloud-native infrastructure. ### Source excerpt Learn what Cilium is, how it uses eBPF to power Kubernetes networking, security, and observability, and why organizations choose it for modern cloud-native infrastructure. ## Inside Cilium CNI: solving mysterious Kubernetes pod setup timeouts DevFeed: [Inside Cilium CNI: solving mysterious Kubernetes pod setup timeouts]() Original publisher: [Read original article]() Author: Adyen Published: 2026-07-13T09:17:40Z Content type: article Language: en Sources: [Adyen Tech]() Topics: [Cilium](), [Kubernetes](), [Kubernetes networking](), [networking](), [eBPF](), [Latency](), [hdfs](), [Apache Spark](), [big-data](), [cpu]() Tags: [big-data](), [cilium](), [cni](), [cpu](), [data](), [devops](), [ebpf](), [hdfs](), [kubernetes](), [kubernetes-networking](), [latency](), [spark](), [speed](), [tracing]() ### AI overview An Adyen engineer investigates Cilium CNI timeouts that prevented new Kubernetes pods from starting. The article attributes the issue to sequential connection-tracking-table garbage collection, which became a bottleneck under workloads involving HDFS, Trino, and short-lived Spark jobs. ### Source excerpt By Jorrick Sleijster - Senior Data Platform Engineer, Adyen I was fully aware a year ago that a single configuration line could break the Kubernetes networking stack. But if they told me that leftovers from Kubernetes pods which terminated hours prior could block new ones from starting, I would have thought they were joking. In high-performance networking, 35 seconds is a lifetime. This was the latency required to iterate through our connection tracking table of 7 million entries at a maximum speed of 200,000 entries per second. At our 16-million-entry peak, this sequential lookup could take up to 80 seconds, leading to Cilium CNI timeouts preventing new pods from starting on affected nodes. We uncovered this linear-time behavior at Adyen by tracing syscalls, inspecting codebases, and analyzing eBPF internals. This investigation revealed how our varied workloads turned the connection tracking table's garbage collection algorithm into a critical bottleneck. Our setup: why we're different At Adyen, we run Cilium CNI across all our 100+ Kubernetes clusters. When we switched from Calico to Cilium, we knew we'd face challenges adapting it to our production workloads. Our production big data Kubernetes clusters have a unique usage pattern compared to the other Kubernetes environments within Adyen: Data extraction from HDFS. Our infrastructure relies on more than 500 datanodes. Trino represents one of our most demanding HDFS workloads, processing analytical queries against data stored on HDFS. Due to the distributed nature of HDFS, each file you download requires a new connection to any of these 500 nodes. Therefore, during peak hours, a single pod can produce approximately 50,000 connections every minute. Pod churn. Many pods we spawn on the Kubernetes cluster run batch jobs, such as Spark jobs. They stay around for anywhere from a second to a couple of hours. Wide variety of workloads. Some workloads are very CPU-intensive, like Spark pods executing complex joins and tra ## Splunk and Isovalent Runtime Security: Protecting the Platform Behind Splunk DevFeed: [Splunk and Isovalent Runtime Security: Protecting the Platform Behind Splunk]() Original publisher: [Read original article]() Author: Dean Lewis Published: 2026-07-09T06:02:44Z Content type: article Language: en Sources: [Isovalent - The latest articles covering eBPF-based Networking, Observability, and Security]() Topics: [Security]() Tags: [cilium](), [customer](), [ebpf](), [hubble](), [isovalent](), [kubernetes-networking](), [load-balancer](), [mesh-networking](), [platform](), [runtime-security](), [security](), [tetragon](), [website]() ### AI overview Splunk uses Isovalent Runtime Security, built on Tetragon, to protect its customer-facing platform. ### Source excerpt Splunk uses Isovalent Runtime Security, built on Tetragon, to protect its customer facing platform. ## Taming the AI Double Threat with Isovalent Runtime Security DevFeed: [Taming the AI Double Threat with Isovalent Runtime Security]() Original publisher: [Read original article]() Author: Paul Arah Published: 2026-06-26T18:47:44Z Content type: opinion Language: en Sources: [Isovalent - The latest articles covering eBPF-based Networking, Observability, and Security]() Topics: [Security](), [ai-assisted attacks](), [Artificial Intelligence]() Tags: [ai](), [ai-assisted-attacks](), [attacks](), [cilium](), [ebpf](), [hubble](), [infrastructure](), [isovalent](), [kubernetes-networking](), [load-balancer](), [mesh-networking](), [runtime-security](), [security](), [tetragon](), [website]() ### AI overview This blog post examines how AI-assisted attacks change assumptions about adversaries, the new attack surface introduced by AI workloads, and the infrastructure, identity, and runtime controls needed to address these risks with Isovalent Runtime Security. ### Source excerpt This blog post explores how AI-assisted attacks are changing the assumptions we make about the adversary, the new attack surface AI workloads introduce, and the infrastructure, identity, and runtime controls they require, and finally, how teams can address this new threat landscape with Isovalent Runtime Security. ## What Is Multi-Cloud? DevFeed: [What Is Multi-Cloud?]() Original publisher: [Read original article]() Author: Ryan Kollist Published: 2026-06-23T16:45:27Z Content type: tutorial Language: en Sources: [Isovalent - The latest articles covering eBPF-based Networking, Observability, and Security]() Topics: [Cloud Architecture](), [cloud-infrastructure](), [Cilium](), [networking](), [Security]() Tags: [architecture](), [cilium](), [cloud](), [cloud-architecture](), [cloud-infrastructure](), [infrastructure](), [multi-cloud](), [networking](), [security](), [what-is-multicloud](), [what-is-multicloud-architecture](), [what-is-multicloud-networking](), [what-is-multicloud-security](), [what-is-the-difference-between-multicloud-and-hybrid-cloud]() ### AI overview This article explains multi-cloud architecture, its importance, and how Isovalent Cilium supports a consistent networking and security operational model across different cloud infrastructures. ### Source excerpt Learn what makes a multi-cloud architecture, why it's important and how Isovalent Cilium enables a consistent networking and security operational model across any cloud infrastructure. ## Technology Short Take 197 DevFeed: [Technology Short Take 197]() Original publisher: [Read original article]() Author: Scott Lowe Published: 2026-06-19T14:00:00Z Content type: opinion Language: en Sources: [Scott's Weblog]() Topics: [networking](), [Artificial Intelligence](), [code security](), [Vulnerabilities](), [cloud security](), [Amazon Web Services](), [Kubernetes]() Tags: [ai](), [aws](), [cilium](), [cli](), [cloud](), [cni](), [code-security](), [containers](), [cri-o](), [devops](), [docker](), [go](), [iac](), [k8s](), [kubernetes](), [linux](), [networking](), [oci](), [open-source](), [security](), [technology](), [vulnerabilities]() ### AI overview A commentary roundup covering radical network redesign at AWS, quantum computing's implications for encryption, AI's effects on certifications and code security, AI agent exploits, open-source vulnerabilities, Kubernetes resources, cloud operations, the AI bubble, and AWS IAM guidance. ### Source excerpt Welcome to Technology Short Take 197! I've been traveling for business for the last week, so this Technology Short Take has a tad fewer links than I typically include. Even so, I still have links on radical new network designs, the impacts of AI on code security, things beginners get wrong about AWS IAM, and more! Let's get into the content. Networking This story about a radical network redesign at AWS--along with this accompanying arXiv paper--was intriguing to me. I'm not a networking expert, but designing networks with quasi-random connections between endpoints definitely flies in the face of the traditional wisdom. I do wonder, though, if this is the sort of technology that only makes sense for the hyperscalers, and not for the rest of us. Doug Dawson provides a quick update on current encryption standards and what he terms the "pending encryption crisis" presented by quantum computing. It would appear that AI is affecting even Cisco's well-known industry certifications, as outlined by Daniel Dib. Security CodeRabbit shared the results of an analysis of PRs to open source projects showing that AI-written code produces ~1.7x more issues. Along the same lines, Jens Wessling of Veracode indicates that 45% of all AI-generated code samples contained OWASP Top 10 security vulnerabilities. Anyone who didn't expect seemingly-dangerous AI agent security exploits to appear hasn't been paying attention. Enterprise AI tools don't appear exempt, either. The complex interdependencies of open source software projects once again means that a single critical vulnerability threatens a much larger number of projects and tools. Cloud Computing/Cloud Management This is an older post, but the author recently updated it--check out Marcus Noble's recommended resources for Kubernetes newbies. I am not yet sure about pulumi do (direct operations for any cloud resource; see the Pulumi blog post about it). On one hand, I can see the utility in situations where you "just need a quick" whatever ## Six Live Kubernetes Recommendations: AKS, Cilium, Rate Limiting, and More DevFeed: [Six Live Kubernetes Recommendations: AKS, Cilium, Rate Limiting, and More]() Original publisher: [Read original article]() Author: Adam Gordon Bell Published: 2026-06-15T12:00:00Z Content type: tutorial Language: en Sources: [Pulumi]() Topics: [Kubernetes](), [Azure](), [C#](), [Cilium](), [Docker Hub](), [Web app]() Tags: [ai-coding](), [aks](), [azure](), [c-sharp](), [cilium](), [container-registry](), [dotnet](), [kubernetes](), [tutorials](), [web-app]() ### AI overview A writeup of a live workshop on building an AKS cluster, Azure Container Registry, and a random-cat web app in C# with Pulumi. It presents recommendations for working with Kubernetes on Azure, including choosing a language the team already uses, and describes how Docker Hub rate limiting affected the workshop. ### Source excerpt On June 10th, Engin and I ran a live workshop building an AKS cluster, an Azure Container Registry, and a random-cat web app from scratch in C#. This is the writeup, including the parts we didn't get to live. Since this post was published, Pulumi has added first-class support for HashiCorp Configuration Language (HCL). You can now write Pulumi programs in HCL directly, alongside general-purpose languages like TypeScript, Python, Go, and C#. To see how it works, see Pulumi HCL. Live demos keep you honest. On June 10th my AKS workshop went a little sideways. Partway through, Docker Hub rate-limited my image pull and we had to adapt the content on the fly. The original plan was to stand up an AKS cluster with Cilium, an Azure Container Registry with the cluster's pull permission wired in code, and a random-cat web app, then split the infrastructure from the workload into separate Pulumi stacks. Live, we didn't make it through all of that, but we had some fun tangents and it turned out to be a great session. So here are my six recommendations for working with Kubernetes on Azure from this recent workshop. 1. Pick the language your team already uses I opened the session by asking the room what language they prefer to work in, with one caveat from me: "Hopefully, it's not PowerShell because this is not in PowerShell." We got some C# answers and zero requests for PowerShell, which works out, because the whole workshop is in PowerShell C#. I chose C# because, first, I genuinely love the language. I spent the early part of my career as a C# developer, and on Azure it just makes sense. Second, an Azure workshop tends to draw a big turnout of C# devs, and if they aren't C# devs themselves, they often work somewhere the backend team uses C#. Pulumi lets you bring that language to your infrastructure rather than learn a new DSL. AI coding assistants also came up. LLMs have substantially more C# and Go in their training data than HCL or Bicep. As I put it live: "If you're working ## Tetragon 1.7 adds fentry sensing, environment variable capture, parent-process visibility, and scoped policies DevFeed: [Tetragon 1.7 adds fentry sensing, environment variable capture, parent-process visibility, and scoped policies]() Original publisher: [Read original article]() Author: Paul Arah Published: 2026-06-09T14:01:46Z Content type: release Language: en Sources: [Isovalent - The latest articles covering eBPF-based Networking, Observability, and Security]() Topics: [Processes](), [Environment Variables](), [context]() Tags: [cilium](), [ebpf](), [environment-variables](), [hubble](), [isovalent](), [kubernetes-networking](), [load-balancer](), [mesh-networking](), [policy](), [process](), [runtime-security](), [sensor](), [tetragon](), [visibility](), [website]() ### AI overview Tetragon 1.7 introduces a new fentry sensor, environment variable capture, parent-process visibility, and granular policy scoping with hostSelector. ### Source excerpt Tetragon 1.7 introduces a new fentry sensor, environment variables capturing, parent process visibility, granular policy scoping with hostSelector and more! ## Isovalent Private Networks and Cisco Nexus One: BGP EVPN Integration for the Enterprise Data Center DevFeed: [Isovalent Private Networks and Cisco Nexus One: BGP EVPN Integration for the Enterprise Data Center]() Original publisher: [Read original article]() Author: Marcos Hernandez, Camillo Rossi Published: 2026-06-04T16:42:52Z Content type: release Language: en Sources: [Isovalent - The latest articles covering eBPF-based Networking, Observability, and Security]() Topics: [virtualization](), [networking](), [BGP](), [Cisco](), [evpn](), [VXLAN](), [datacenter]() Tags: [bgp](), [cilium](), [cisco](), [data-center](), [ebpf](), [evpn](), [hubble](), [isovalent](), [kubernetes-networking](), [load-balancer](), [mesh-networking](), [networking](), [nexus-one](), [runtime-security](), [tetragon](), [virtualization](), [vxlan](), [website]() ### AI overview Isovalent announces the general availability of Isovalent Networking for Virtualization and highlights its BGP EVPN/VXLAN integration with Cisco NX-OS for enterprise data centers. ### Source excerpt Today we're announcing the General Availability (GA) of Isovalent Networking for Virtualization alongside a deeper look at one of its core connectivity capabilities: BGP EVPN/VXLAN integration with Cisco NX-OS, part of the Cisco Nexus One strategic alignment. ## OpenAI Uses Isovalent for a Common Networking for AI Infrastructure DevFeed: [OpenAI Uses Isovalent for a Common Networking for AI Infrastructure]() Original publisher: [Read original article]() Author: Dean Lewis Published: 2026-06-03T10:42:00Z Content type: article Language: en Sources: [Isovalent - The latest articles covering eBPF-based Networking, Observability, and Security]() Topics: [Cilium](), [OpenAI](), [AI Infrastructure](), [Kubernetes](), [networking]() Tags: [ai](), [ai-infrastructure](), [cilium](), [ebpf](), [hubble](), [infrastructure](), [isovalent](), [kubernetes](), [kubernetes-networking](), [load-balancer](), [mesh-networking](), [networking](), [openai](), [policy](), [runtime-security](), [tetragon](), [troubleshooting](), [uses](), [website]() ### AI overview The article reports that OpenAI uses Isovalent Networking for Kubernetes, built on Cilium, to provide consistent networking, policy, and troubleshooting across its AI infrastructure. ### Source excerpt OpenAI uses Isovalent Networking for Kubernetes, built on Cilium, for consistent networking, policy, and troubleshooting across AI infrastructure. ## Isovalent Networking for Virtualization: Enterprise-Grade Network Segmentation and Multi-Tenancy for VMs in Kubernetes DevFeed: [Isovalent Networking for Virtualization: Enterprise-Grade Network Segmentation and Multi-Tenancy for VMs in Kubernetes]() Original publisher: [Read original article]() Author: Marcos Hernandez Published: 2026-06-02T12:59:28Z Content type: release Language: en Sources: [Isovalent - The latest articles covering eBPF-based Networking, Observability, and Security]() Topics: [virtualization](), [Network Segmentation](), [Multi-tenancy](), [Kubernetes]() Tags: [cilium](), [ebpf](), [hubble](), [isovalent](), [kubernetes](), [kubernetes-networking](), [load-balancer](), [mesh-networking](), [migrations](), [multi-tenancy](), [network-segmentation](), [policy](), [product](), [runtime-security](), [tetragon](), [virtualization](), [website]() ### AI overview Isovalent announced the general availability of Isovalent Networking for Virtualization, a product that provides network segmentation, multi-tenancy, and policy enforcement for virtual machine workloads running in Kubernetes. It also streamlines migrations to KubeVirt. ### Source excerpt We're formally announcing the General Availability of Isovalent Networking for Virtualization (INV), a purpose-built product that brings full network segmentation, multi-tenancy, and policy enforcement to virtual machine workloads running in Kubernetes, in addition to streamlining migrations to KubeVirt. ## From Tickets to Pull Requests: Running Cilium in a GitOps Platform DevFeed: [From Tickets to Pull Requests: Running Cilium in a GitOps Platform]() Original publisher: [Read original article]() Author: Dean Lewis Published: 2026-06-02T12:56:19Z Content type: tutorial Language: en Sources: [Isovalent - The latest articles covering eBPF-based Networking, Observability, and Security]() Topics: [Cilium](), [GitOps](), [argo-cd](), [Kyverno](), [ci]() Tags: [argo](), [argo-cd](), [ci](), [cilium](), [gitops](), [hubble-timescape](), [kyverno](), [network-policy](), [platform-engineering](), [pull-requests]() ### AI overview The article describes running Cilium as part of a GitOps platform using Argo CD, Kyverno, and isopolicy CI. ### Source excerpt Run Cilium as a GitOps platform: use Argo CD, Kyverno, and isopolicy CI. ## Technology Short Take 196 DevFeed: [Technology Short Take 196]() Original publisher: [Read original article]() Author: Scott Lowe Published: 2026-05-22T14:00:00Z Content type: article Language: en Sources: [Scott's Weblog]() Topics: [datacenter](), [networking](), [Cybersecurity](), [Linux](), [Terraform](), [Artificial Intelligence](), [Ansible](), [Large Language Model](), [Cloud](), [cURL](), [npm]() Tags: [ai](), [ansible](), [article](), [aws](), [cilium](), [cli](), [cloud](), [cni](), [containers](), [cri-o](), [curl](), [cybersecurity](), [data-center](), [devops](), [docker](), [go](), [iac](), [k8s](), [kubernetes](), [linux](), [llms](), [networking](), [npm](), [oci](), [security](), [technologies](), [terraform]() ### AI overview Technology Short Take 196 is a curated list of articles about data center technologies, covering networking, servers and hardware, security, cloud management, operating systems, and applications. Topics include Ansible and IPSet, WireGuard and Headscale, a compromised Bitwarden CLI package on NPM, curl vulnerabilities, Terraform, AWS MCP Server, AI-assisted infrastructure as code, llama.cpp on Apple Silicon, Chrome's local AI model installation, Linux 7.0 and PostgreSQL, and Linux desktop voice typing. ### Source excerpt Welcome to Technology Short Take 196! Just in time for the US Memorial Day holiday, I am back with another list of articles related to various data center technologies like networking, security, operating systems, and applications. You will find articles on VPNs, Linux local privilege escalation (LPE) vulnerabilities, browser quirks and workarounds, the death of Terraform (again), and so much more. Enjoy your weekend reading! Networking Andrew Ward shares an Ansible role to block abusive subnets using IPSet. From this article on switching to WireGuard from Tailscale, I learned about Headscale (an open source implementation of the Tailscale control plane). Servers/Hardware Doug Dawson looks at some innovations that continue to improve computing power. Doug's article includes a few items I hadn't yet heard of. Security Bitwarden confirmed a compromise of its CLI package on NPM. First, we had CopyFail. Now we have Dirty Frag and Fragnesia. Daniel Stenberg talks about how Mythos found a single vulnerability--yes, just one--in curl. I don't really have words for this...security incident? That doesn't seem like the correct way to describe such a massive oversight, especially when you realize it happened to a cybersecurity agency. "Oops" doesn't even begin to describe it. Cloud Computing/Cloud Management Graham Gilbert insists Terraform is dead. I wonder what sorts of things the AWS MCP Server will make possible? William Collins argues in favor of AI through IaC rather than instead of it. I enjoyed this article. Collins indicates that while authoring IaC using LLMs is working rather well, managing infrastructure using LLMs is another story entirely. If you're at all interested in the intersection of LLMs and IaC, I'd add this to your reading list. Operating Systems/Applications Eric Sloof looks at using llama.cpp to run your own local, private AI stack on Apple Silicon. Mat Duggan examines his descent from artist to mercenary as a result of finding LLMs more useful than he exp ## Buzzing Beyond Clouds: The Illustrated Children's Guide to Cilium DevFeed: [Buzzing Beyond Clouds: The Illustrated Children's Guide to Cilium]() Original publisher: [Read original article]() Author: Bill Mulligan, Katie Meinders Published: 2026-05-19T10:23:39Z Content type: release Language: en Sources: [Isovalent - The latest articles covering eBPF-based Networking, Observability, and Security]() Topics: [Cilium]() Tags: [book](), [cilium](), [ebpf](), [hubble](), [isovalent](), [kubernetes-networking](), [load-balancer](), [mesh-networking](), [runtime-security](), [tetragon](), [website]() ### AI overview Buzzing Beyond Clouds is an illustrated children's guide to Cilium. The book is presented as a follow-up to an illustrated guide to eBPF and is intended for readers with varying levels of technical expertise. ### Source excerpt Buzzing Beyond Clouds: The Illustrated Children's Guide to Cilium, and follow up to Buzzing Across Space: The Illustrated Children's Guide to eBPF, is now available. This second illustrated book brings the Cilium story to life in a way that can be digested by readers of all ages and levels of technical expertise. ## Why Prometheus couldn't see Cilium metrics at 2 a.m. DevFeed: [Why Prometheus couldn't see Cilium metrics at 2 a.m.]() Original publisher: [Read original article]() Author: Rishi Mondal Published: 2026-05-10T14:00:00Z Content type: article Language: en Sources: [Kubernetes Overview, News and Trends | The New Stack]() Topics: [Prometheus](), [Cilium](), [Grafana](), [Kubernetes](), [Cloud Native Ecosystem](), [Monitoring]() Tags: [cilium](), [cloud-native-ecosystem](), [cncf](), [grafana](), [kubernetes](), [monitoring](), [network](), [networking](), [platform-engineering](), [post-contributed](), [prometheus](), [sponsor-cncf](), [sponsored-post-contributed](), [tls]() ### AI overview This article examines the integration tax that platform teams encounter when combining CNCF projects in production. It uses Prometheus and Cilium metrics as an example, and discusses integration failures involving Hubble, Grafana, cert-manager, ingress controllers, and cloud DNS configuration. ### Source excerpt I still remember the first time we lost sleep over something that wasn't a bug. It was a Tuesday. Grafana The post Why Prometheus couldn't see Cilium metrics at 2 a.m. appeared first on The New Stack. ## Technology Short Take 195 DevFeed: [Technology Short Take 195]() Original publisher: [Read original article]() Author: Scott Lowe Published: 2026-05-08T14:00:00Z Content type: article Language: en Sources: [Scott's Weblog]() Topics: [Artificial Intelligence](), [Large Language Model](), [Security](), [API keys](), [Automation](), [Kubernetes](), [networking](), [Ollama](), [Local AI]() Tags: [ai](), [api-keys](), [article](), [aws](), [blog](), [cilium](), [cli](), [cloud](), [cni](), [containers](), [cri-o](), [devops](), [docker](), [go](), [iac](), [k8s](), [kubernetes](), [linux](), [llm](), [networking](), [oci](), [ollama](), [security]() ### AI overview Technology Short Take 195 is a curated roundup of technology articles and posts, with an unplanned emphasis on AI and large language models. It covers API-key storage, AI tools and assistants, AI workflow automation, AI-agent security, Kubernetes security, networking, Ollama and local LLM experiments, Terraform versus OpenTofu, and cloud management. ### Source excerpt Welcome to Technology Short Take #195! It wasn't planned this way, but it seems like this Tech Short Take is heavily slanted toward AI/LLM-related articles and posts. Topics like security concerns around improper storage of API keys, how developers are using AI tools, spyware getting installed with AI assistants, and how AI/LLMs might be creating barriers to entry for new IT profesionals are all on tap this time around. I hope this unintentional focus doesn't prevent you from finding something useful! Networking Ivan Pepelnjak takes readers through the process of generating partial devices configurations with netlab. It's an older blog post, but it checks out--have a look at this walkthrough of Containerlab and Netlab. (Hat tip to Ivan for the link. Also, bonus points if you understood the reference at the start of this paragraph.) Ah, MTU issues...they don't go away if you migrate to Kubernetes. Security Sean Gallagher and Omid Mirzaei from Cisco Talos discuss how threat actors are misusing AI workflow automation. Before this article on vulnerability triage, I'd never heard of "brocards." Kelby Ludwig reminds folks that you don't want long-lived keys. Davi Ottenheimer tackles the claims about risk from Anthropic's Mythos preview. (Hint: the words "missing", "failed", "fluffy bunny", and "FUD" are involved.) William Collins reminds readers that they still need to pay attention to where they're storing sensitive data like API keys. Copy Fail has been making the rounds on lots of articles and blogs. Clément Nussbaumer looks at Copy Fail from the perspective of going from unprivileged Pod to root on a Kubernetes Node. Here's another one on Copy Fail, this time looking at blocking Copy Fail with Tetragon. Security is an arms race, and trying to secure AI agents is no different. The latest round in the race is a Falco project called Prempti. Cloud Computing/Cloud Management It's a good thing I came across this article about why friends don't let friends use Ollama. I had in ## Five Things to Know About Cilium Network Policies DevFeed: [Five Things to Know About Cilium Network Policies]() Original publisher: [Read original article]() Author: Christian Hernandez Published: 2026-04-27T21:23:02Z Content type: article Language: en Sources: [Isovalent - The latest articles covering eBPF-based Networking, Observability, and Security]() Topics: [Cilium](), [Kubernetes](), [Network]() Tags: [cilium](), [kubernetes](), [networkpolicies]() ### AI overview This blog introduces five points about Cilium Network Policies and contrasts them with standard Kubernetes NetworkPolicies, which it says can appear similar at first glance. ### Source excerpt Not all CNIs are created equal, and many assume that CiliumNetworkPolicies are the same as standard Kubernetes NetworkPolicies. At first glance, they can look similar. In this blog, we'll go over the top 5 things you may not know about Cilium Network Policies. ## Technology Short Take 194 DevFeed: [Technology Short Take 194]() Original publisher: [Read original article]() Author: Scott Lowe Published: 2026-04-17T13:00:00Z Content type: article Language: en Sources: [Scott's Weblog]() Topics: [datacenter](), [networking](), [Cryptography](), [Security](), [Vulnerabilities](), [eBPF](), [Kubernetes](), [Claude Code](), [TLS (Transport Layer Security)](), [ChaCha]() Tags: [article](), [aws](), [blog](), [cilium](), [claude-code](), [cli](), [cloud](), [cni](), [containers](), [cri-o](), [critical-infrastructure](), [cryptography](), [devops](), [docker](), [go](), [iac](), [k8s](), [kubernetes](), [linux](), [networking](), [oci](), [security](), [vulnerabilities]() ### AI overview Technology Short Take 194 curates data center technology links covering Reticulum, IPv6 networking, security exploits and vulnerabilities, TLS and QUIC diagrams, Kubernetes security, Claude Code advisories, AWS emulation, and developer tools. ### Source excerpt This is Technology Short Take #194, the latest in my semi-regular series of posts sharing data center technology-related links and articles from around the web. What have I gathered for readers this time? Key topics in Tech Short Take 194 include a new cryptography-based network stack, a look at why folks are revolting against AI, and an in-depth comparison of microVM technologies. On to the content! Networking This is cool. Longtime reader Todd Smith pointed me to Reticulum, a new cryptography-based network stack. Todd also spent some time messing around with Reticulum and shared his findings in two blog posts: first, an initial/introductory post, followed by a post sharing his experience with some Reticulum experiments. Scott Hogg examines building an IPv6 training and testing lab. Security eBPF is taking hold in security exploits, like the tool named "BPFdoor" that is penetrating critical infrastructure networks. Paul Meyer discusses reproducing and mitigating BadAML, an ACPI-based attack vector that can be used to potentially gain access to confidential VMs. Meyer admits that the model in the article assumes the attacker has full control over the host, at which point I would assume "game over" and move on. This site provides not only an illustrated TLS 1.2 connection diagram, but also offers diagrams for QUIC, DTLS, and TLS 1.3 (see the links in the upper right corner). Rory McCune continues his series on unpatchable Kubernetes vulnerabilities. David Chisnall posted a scathing analysis of Mythos on Mastodon (hat tip to Bruce Davie for boosting it into my timeline), and shared a link to an advisory on critical command injection vulnerabilities in Claude Code. Cloud Computing/Cloud Management I recently found this alternative to LocalStack for AWS emulation. How to hide regions and services in the AWS console is a useful thing to know about. Operating Systems/Applications Chris Down breaks down the differences between zswap and zram. Micah Kepe introduces his new ## Service Mesh Architecture: Sidecar Overhead, Istio, and Alternatives Without Sidecars DevFeed: [Service Mesh Architecture: Sidecar Overhead, Istio, and Alternatives Without Sidecars]() Original publisher: [Read original article]() Author: Liao Tonglang Published: 2026-04-13T00:00:00Z Content type: article Language: zh Sources: [土法炼钢 - 系统与基础设施]() Topics: [Architecture & Design](), [istio](), [Kubernetes](), [Cilium](), [eBPF](), [linkerd]() Tags: [architecture](), [cilium](), [ebpf](), [envoy](), [istio](), [kubernetes](), [linkerd](), [observability](), [proxy](), [security](), [service-mesh](), [sidecar](), [tls]() ### AI overview This article explains the core problems addressed by service meshes and examines the Sidecar architecture, including traffic interception, proxy processing, Envoy's xDS configuration model, and Istio's istiod control plane. It focuses on the performance and operational overhead of Sidecars and compares them with approaches such as Cilium's eBPF-based implementation and Istio Ambient Mesh. ### Source excerpt 2023 年，某头部电商平台在全量接入 Istio 后发现：每个 Pod 的内存占用增加了 40-70 MB，p99 延迟从 12 ms 上升到 18 ms，整个集群每月多出数万美元的计算成本。这并非个例。CNCF 2024 年度调查显示，超过 60% 的受访企业已在生产环境中使用或评估服务网格（Service Mes... ## Technology Short Take 193 DevFeed: [Technology Short Take 193]() Original publisher: [Read original article]() Author: Scott Lowe Published: 2026-04-03T14:00:00Z Content type: article Language: en Sources: [Scott's Weblog]() Topics: [datacenter](), [networking](), [Security](), [GitHub Actions](), [GitOps](), [ingress-nginx](), [Docker](), [litellm](), [Large Language Model]() Tags: [aws](), [blog-post](), [cilium](), [cli](), [cloud](), [cni](), [containers](), [cri-o](), [devops](), [docker](), [github-actions](), [gitops](), [go](), [iac](), [ingress-nginx](), [k8s](), [kubernetes](), [linux](), [litellm](), [networking](), [oci](), [security](), [technology]() ### AI overview Technology Short Take 193 is a curated roundup of data center technology links covering networking, IPv4 address space, consumer-router regulation, servers and hardware, security incidents involving Trivy and software supply chains, Ingress-NGINX migration, GitOps, local LLMs, and infrastructure management. ### Source excerpt Welcome to Technology Short Take #193! I know it has only been a couple weeks since the last Tech Short Take, but I am guessing that readers won't really mind another one. Here is my latest collection of articles and posts about data center-related technologies. Enjoy! Networking Brian Linkletter shares his 2026 list of network simulators and emulators. (Hat tip to Ivan P. for the link.) Emmanuel Vitus brings to light a battle over IPv4 address space and the control of the regional internet registries. Doug Dawson discusses the recent FCC ban on consumer-grade routers and the potential impacts to industry and ISPs. Servers/Hardware RIP Mac Pro. I had a "classic Mac Pro" (2012 era) for a long time, and I loved that system. (I even ran Linux on it for a while.) It is a shame to see it go. I mentioned on social media (Mastodon/Bluesky) that I recently purchased all the hardware for a new PC build. It'll be part PC/part home server, as I look to expand the type and scope of services that I self-host. Don't be surprised if a few articles emerge out of this. Security Trivy's GitHub Actions were compromised by attackers, leading to the exposure of CI/CD secrets. This post on the Socket blog has more details, and Rose Security has a write-up that provides more details on how a typosquatted domain and a fake version tag were involved. At least one other software supply chain exploit has been tracked back to the Trivy compromise: the Python litellm module on PyPI steals credentials. The Docker side of the Trivy compromise is shared in detail in this Docker blog post. Cloud Computing/Cloud Management Looking for some help in migrating away from Ingress-NGINX? This announcement of Ingress2Gateway 1.0 might be just what you are seeking. The FluxCD team published a post discussing Morgan Stanley's "Stairway to GitOps" presentation, which describes the firm's five-year journey from push-based pipelines to a self-service GitOps platform. Although I am not an AI fanboy, I do recogni ## Talking About Pulumi and Network Automation DevFeed: [Talking About Pulumi and Network Automation]() Original publisher: [Read original article]() Author: Scott Lowe Published: 2026-03-24T14:00:00Z Content type: opinion Language: en Sources: [Scott's Weblog]() Topics: [Infrastructure as code](), [Network](), [Automation](), [Python]() Tags: [aws](), [cilium](), [cli](), [cloud](), [cni](), [containers](), [cri-o](), [devops](), [docker](), [go](), [iac](), [k8s](), [kubernetes](), [linux](), [network-automation](), [networking](), [oci](), [podcast](), [pulumi](), [python](), [security]() ### AI overview The article introduces a Network Automagic podcast episode about Pulumi, its infrastructure-as-code model using general-purpose programming languages, and its potential role in network automation. It specifically discusses using Pulumi with Python for network automation tasks. ### Source excerpt Heard about Pulumi, but aren't sure what it is? Maybe you know a little bit about Pulumi--like that it does infrastructure as code (IaC), but using general purpose programming languages--and you're wondering where it fits in a larger automation framework? Or maybe you're a network engineer just starting to dabble in network automation, and you're wondering if this Pulumi thing is something you should check out. If any of these apply to you, then the latest Network Automagic podcast episode is right up your alley. I recently had the opportunity to join Steinn Bjarnarson and Urs Baumann for an episode of Network Automagic. The focus of our discussion--although I will say we diverged a bit here and there--was on Pulumi, what it is, and whether it fits into a larger network automation framework. After all, if you can use general purpose programming languages like Python with Pulumi, why not just use Pulumi in a Python program that also does network automation stuff? All in all, recording the podcast with Steinn and Urs was great fun, and I hope that the final product ends up being helpful for folks. There's a variety of ways to listen in on the episode: Via the Network Automagic web site Via the Network Automagic channel on YouTube (here is a link to the specific episode) Via Spotify Via Apple Podcasts As you can see, there are plenty of options to listen (and a few that I didn't include--check the Network Automagic web site for more!). Thanks to Steinn and Urs for having me on the show! [Next page]()