Cilium

Deep Dive into Kubernetes eBPF Network Policy Enforcement with Cilium

An in‑depth look at how Cilium uses eBPF to enforce network policies in Kubernetes, covering architecture, policy types, observability, and production patterns.

Abstract network mesh with kernel-level filter hooks highlighted.

Inside eBPF and Cilium: How Kernel-Level Filtering Rewrites Container Networking

How eBPF and Cilium move packet filtering from user-space daemons into the Linux kernel itself — and why that rewrites the rules for Kubernetes networking performance, observability, and security.

Network diagram showing multiple Kubernetes clusters connected through an Istio ambient mesh with ztunnel and waypoint components.

Architecting Multi-Cluster Service Mesh with Istio Ambient Mode and eBPF

A practical architecture guide to running Istio Ambient Mode across multiple Kubernetes clusters, with eBPF-powered data planes handling L4 and waypoint proxies owning L7.