Cilium and eBPF — Kubernetes networking, security and observability

• Understand the Cilium architecture and the role of eBPF programs.
• Master the data path: native routing, encapsulation and addressing.
• Replace the service proxy and optimize traffic distribution.
• Expose applications through the ingress controller and gateway interface.
• Write identity-based, application-layer and DNS-based policies.
• Encrypt communications and use flow observability.

• Platform engineers and Kubernetes administrators.
• Network and security engineers working on clusters.
• Cloud native architects.

• Kubernetes administration course or equivalent practice.
• Sound networking, routing and filtering knowledge.

Day 1 — Architecture and addressing

• Cilium positioning, use cases and agent components
• eBPF programs and maps, application and DNS proxies
• Address management: allocation modes, IPv6 and dual stack

Day 2 — Data path and exposure

• Intra-node and inter-node connectivity: native routing and encapsulation
• Service proxy replacement, session affinity and traffic policies
• Ingress controller, gateway interface and application-layer routing

Day 3 — Security, encryption and operations

• Network policies: identities, reserved entities and deny rules
• Application-layer and DNS-based policies, TLS interception
• Transparent encryption, flow observability and routine operations