A two‑day investigation of intermittent packet loss in a hybrid‑cloud Kubernetes environment revealed that an oversized VXLAN MTU caused fragmentation, prompting a step‑by‑step analysis of MTU fundamentals, diagnostic commands, Cilium configuration changes, and best‑practice recommendations for cloud‑native networks.
This comprehensive guide explains Kubernetes networking fundamentals, compares major CNI plugins such as Flannel, Calico, and Cilium, and provides detailed troubleshooting steps for pod communication, service routing, DNS issues, and eBPF‑based enhancements, helping operators build reliable, high‑performance clusters.
This article introduces pwru, Cilium's eBPF‑based packet‑tracing tool, explains kernel requirements, shows how to install the pre‑built binary, details command‑line options, and provides practical examples for filtering, output customization, and debugging dropped packets in Linux networking.
Cilium leverages eBPF to provide a high‑performance, secure, and observable cloud‑native networking solution for Kubernetes, offering flat L3 networking, flexible routing, advanced load balancing, identity‑based security policies, and seamless integration via CNI, Helm, and Hubble, with step‑by‑step deployment instructions.
This article explains the Kubernetes network model, introduces the CNI standard, and compares four popular network plugins—Flannel, Calico, Weave Net, and Cilium—highlighting their features, advantages, and suitable use cases for different cluster sizes and requirements.
This comprehensive guide walks you through Kubernetes' network model, explains why networking is its biggest pain point, compares major CNI plugins with real‑world performance data, and provides a step‑by‑step decision framework, tuning tips, troubleshooting methods, and monitoring best practices for production environments.
Although containerization brings agility and resource efficiency, this article reveals that moving an application from a VM to Kubernetes containers can increase latency by 25% and reduce QPS by 29%, analyzes the root cause in network soft‑interrupt overhead, and proposes optimizations such as ipvlan, macvlan, and Cilium.
This article investigates why moving applications from virtual machines to containers on Kubernetes can degrade performance, presents benchmark comparisons, analyzes the impact of network architecture and soft interrupts, and proposes optimization strategies such as ipvlan and Cilium to restore efficiency.
The article examines why applications experience slower performance after being containerized on Kubernetes, presenting benchmark comparisons, analyzing increased soft‑interrupt overhead due to the Calico ipip overlay, and proposing network optimizations such as ipvlan modes and Cilium to restore efficiency.
Although moving applications from virtual machines to containers simplifies deployment, benchmark tests reveal that containerized workloads can suffer up to 25 % higher response times and 29 % lower QPS, mainly due to added network hops and increased soft‑interrupt processing in the kernel.
This article introduces eBPF fundamentals, explains the Compile‑Once‑Run‑Everywhere (CO‑RE) approach, compares it with traditional eBPF, outlines best practices, and walks through a complete Go‑based example using the Cilium/eBPF library and the eunomia‑bpf runtime.
This comprehensive course provides a deep dive into Kubernetes networking, covering core concepts, network models, policies, plugins, traffic management, security, multi‑tenant, cross‑cloud, and hybrid‑cloud designs, and offers hands‑on performance optimization techniques across more than 60 video modules.
This article introduces the five most popular Kubernetes CNI network plugins—Flannel, Calico, Weave Net, Cilium, and Canal—detailing their features, typical use‑cases, and installation commands to help you choose the right solution for your cluster.
This guide explains the concepts of IPv4/IPv6 dual‑stack networking, outlines two dual‑stack implementation methods, and provides step‑by‑step instructions to set up a Cilium‑enabled Kubernetes cluster using Kind, configure dual‑stack settings, deploy a demo app, and analyze routing behavior for both IP families.
The article forecasts rapid eBPF adoption across cloud‑native networking, mobile devices, and observability, highlights emerging eBPF marketplaces, discusses performance gains with NetKit and BIG TCP, predicts IPv6‑first Kubernetes clusters, AI‑assisted network troubleshooting, and the growing convergence of platform engineering and networking in 2024.
The article investigates why applications experience higher latency and lower QPS after moving from virtual machines to Kubernetes containers, analyzes the root causes such as increased soft‑interrupts caused by the networking stack, and proposes optimizations like ipvlan, macvlan, and Cilium to restore performance.
This guide walks through setting up a simulated Kubernetes cluster with Cilium, configuring BGP using FRR on a router node and Bird on worker nodes, and enabling Cilium's built‑in BGP speaker to achieve cross‑node pod communication and LoadBalancer IP advertisement.
The article analyzes how Cilium’s eBPF‑based architecture, advanced network policies, cluster‑wide traffic control, and observability tools like Hubble solved performance, security, and scalability challenges that Flannel and kube‑proxy could not meet in production Kubernetes environments.
This guide explains how to enhance Kube‑OVN with Cilium’s eBPF‑based networking and security features by using CNI chaining, covering prerequisites, configuration changes, Helm deployment steps, verification commands, and useful reference links for a complete cloud‑native networking solution.
pwru, Cilium’s eBPF‑based packet tracing utility, offers fine‑grained network diagnostics; this guide covers kernel requirements, installation steps, command‑line options, real‑world iptables drop detection examples, and an in‑depth look at its eBPF map configuration and perf‑event output mechanism.
This article introduces pwru, Cilium’s eBPF‑based network packet tracing utility, covering installation prerequisites, command‑line options, real‑world debugging scenarios, and the underlying implementation that leverages kprobes, eBPF maps, and perf events to filter and display packet data.
Cilium 1.11 introduces a beta Service Mesh, Kubernetes Ingress support, OpenTelemetry integration, topology‑aware load balancing, BGP pod‑CIDR announcements, managed IPv4/IPv6 neighbor discovery, XDP multi‑device acceleration, graceful termination, scalable ID spaces, endpoint slices and several feature enhancements and deprecations.
This article explains why modern enterprises need multiple Kubernetes clusters—covering single‑cluster limits, hybrid‑cloud requirements, and fault‑tolerance—then compares two architectural models and reviews both Kubernetes‑centric federation and network‑centric service‑mesh solutions with practical implementation guidance.
This article introduces Cilium, the eBPF‑based Kubernetes CNI that replaces kube‑proxy, explains its security and scalability advantages over traditional iptables, and provides step‑by‑step guidance for deploying Cilium, testing its connectivity, and using Hubble for deep network visualization integrated with Grafana and Prometheus.
This article walks through installing Cilium as a CNI on a Kubernetes v1.21.3 cluster, disabling kube-proxy, and verifying network connectivity with an Nginx deployment, providing commands, configuration details, and validation steps for a kube‑proxy‑free setup.
This article explains how to build a high‑performance, 5K‑node hybrid‑cloud container network by reviewing Kubernetes pod and service networking, comparing iptables, IPVS and eBPF implementations, and describing large‑scale overlay, BGP, IPVlan, and NodeLocal DNS solutions.
This article explains Kubernetes' core networking model, details the various Service types (PodIP, HostPort, NodePort, ExternalIP, LoadBalancer, ClusterIP), describes Cilium's eBPF/XDP implementation for high‑performance load balancing, and presents performance benchmarks and recent BPF kernel extensions.
This article describes Ctrip's adoption of Cilium with BGP to build a high‑performance, eBPF‑based cloud‑native network, covering the evolution from Neutron+OVS, the BGP peering model, traffic forwarding paths, L4 load‑balancing, security policy implementation, and multi‑cluster integration using ClusterMesh.
This tutorial walks through creating a multi‑node KIND Kubernetes cluster, disabling the default CNI, installing Cilium 1.8.2 via Helm with Hubble enabled, demonstrating eBPF‑based network security and observability, deploying a test application, and verifying CiliumNetworkPolicy effects.
This roundup highlights the latest cloud‑native developments, including Golang 1.14’s production‑grade module support, Cilium 1.7’s networking enhancements, critical Kubernetes PR fixes, the Eventing 2020 roadmap, a new open‑source supply‑chain tool, and several recommended technical reads.
This article chronicles Ctrip’s network architecture evolution—from early VLAN‑based private‑cloud designs, through SDN‑enabled large‑layer‑2 solutions, to container‑aware hybrid‑cloud and cloud‑native approaches like Cilium—offering practical insights and lessons for large‑scale network engineers and teams.
