Reading List

Admission Controllers are the traffic lights of Kubernetes . Thanks to them, we ensure robust security, maintain operational standards, and enforce policy co...

Discover the dark side of Kubernetes admission webhooks and safeguard your deployments. Learn more and secure your infrastructure today!

Process documentation, non-code deliverables, and miscellaneous artifacts of Kubernetes SIG Security - kubernetes/sig-security

Fast, consistent builds with an instantly familiar syntax – like Dockerfile and Makefile had a baby. Write builds once, and run them anywhere – on your laptop, remote, and in any CI. Great for monorepos and polyrepos. Open source, 9000+ stars.

The Marvel developer portal gives Marvel fans, partners and other technologists access to an array of powerful APIs, documentation, and other tools to interact with Marvel's systems.

Monitorama takes place June 27-29, 2022 in the Gerding Theater at The Armory in Portland, Oregon. Our program consists of three days of single-track sessions...

eBPF Summit is the virtual event for the eBPF community. Watch the talks here, and join in the conversation live on Slack at https://ebpf.io/slack - you'll f...

Step into the world of eBPF/XDP with this beginner's guide. Learn to build a simple SSH firewall, utilizing XDP's capabilities for secure, incoming network traffic management!

Observability was the undisputed king of KubeCon 2023 in Chicago.

It is not recommended to use eBPF without a proper service provider and third-party tool set.

Introduction

The official eBPF documentary.In 2014, a group of engineers at Plumgrid needed to find an innovative and cost-effective solution to handle network traffic in...

(For now 😼) an educational eBPF disassembler. Contribute to mtardy/mahebpf development by creating an account on GitHub.

Inspect SSL/TLS traffic using eBPF. Contribute to tks98/snoopy development by creating an account on GitHub.

kube-proxy is a key component of any Kubernetes deployment.  Its role is to load-balance traffic that is destined for services (via cluster IPs and node ports) to the correct backend pods.  Kube-proxy can run in...

These days It's almost difficult not to get into eBPF discussion. There are many good articles written about eBPF and CNIs.

Learn how XDP allows you to build network packet-processing programs with extremely high performance.

Presentations and docs. Contribute to iovisor/bpf-docs development by creating an account on GitHub.

In this engaging presentation, I would delve into the fascinating world of eBPF (extended Berkeley Packet Filter) and its potential impact on Kubernetes side...

Tetragon is an open source eBPF observability and security tool, hosted by the CNCF as part of the Cilium project. Using eBPF makes it both Kernel and Kubern...

The O'Reilly book Learning eBPF by Liz Rice now available for download!

Learn how Cilium, Hubble, and Tetragon are used for networking, observability, and Security

Cloud Native, eBPF-based Networking, Observability, and Security

eBPF is a revolutionary technology that can run sandboxed programs in the Linux kernel without changing kernel source code or loading a kernel module.

eBPF-based Security Observability and Runtime Enforcement

Another #kubecon in the books, and #opentelemetry was there in a big way. Read on for my thoughts, and what you should keep an eye on going…

Engineers at FTX, Frank and Pollen were asked to do something potentially criminal. Find out how they responded. Also: update on the author of an impressive side project, who got an offer at PostHog