Bill Mulligan 🐝🐝🐝
@breakawaybilly.bsky.social
Cloud Native networking, observability, and security with Cilium, eBPF, and Isovalent
Newsletter cilium.io/newsletter
Newsletter cilium.io/newsletter
My alma mater uses Cilium 🐄 I wonder if these clusters help with ice cream production 🍦
"Cilium has been phenomenal. We started with core networking, added Hubble for observability, Cluster Mesh for cross-cluster communication, and are exploring Tetragon"
"Cilium has been phenomenal. We started with core networking, added Hubble for observability, Cluster Mesh for cross-cluster communication, and are exploring Tetragon"
University of Wisconsin–Madison
The University of Wisconsin–Madison is one of the nation’s premier research universities, ranked 8th nationally for research volume with $1.3 billion in research expenditures. As a top R1 research…
www.cncf.io
December 19, 2025 at 9:00 AM
My alma mater uses Cilium 🐄 I wonder if these clusters help with ice cream production 🍦
"Cilium has been phenomenal. We started with core networking, added Hubble for observability, Cluster Mesh for cross-cluster communication, and are exploring Tetragon"
"Cilium has been phenomenal. We started with core networking, added Hubble for observability, Cluster Mesh for cross-cluster communication, and are exploring Tetragon"
Security hardening tool designed to detect and break the post-exploit kill chain for containerized applications, leveraging BPF LSM
GitHub - micromize-dev/micromize: micromize is a security hardening tool designed to detect and break the post-exploit kill chain for containerized applications, leveraging BPF LSM.
micromize is a security hardening tool designed to detect and break the post-exploit kill chain for containerized applications, leveraging BPF LSM. - micromize-dev/micromize
github.com
December 19, 2025 at 7:00 AM
Security hardening tool designed to detect and break the post-exploit kill chain for containerized applications, leveraging BPF LSM
SCX_MUS, or Mostly Unfair Scheduler, is a custom Linux scheduler built with the sched_ext framework to optimize container prioritization in Kubernetes for improved performance
GitHub - patos-ufscar/Hackathon-eBPF-2025
Contribute to patos-ufscar/Hackathon-eBPF-2025 development by creating an account on GitHub.
github.com
December 18, 2025 at 7:00 AM
SCX_MUS, or Mostly Unfair Scheduler, is a custom Linux scheduler built with the sched_ext framework to optimize container prioritization in Kubernetes for improved performance
eBPF dev room schedule for FOSDEM 2026 is out 🐝
eBPF has become a normalized building block for infrastructure so if you want a single room that spans kernel internals, language tooling, observability, and networking, I'll see you in Brussels over a beer 🍻
fosdem.org/2026/schedul...
eBPF has become a normalized building block for infrastructure so if you want a single room that spans kernel internals, language tooling, observability, and networking, I'll see you in Brussels over a beer 🍻
fosdem.org/2026/schedul...
December 18, 2025 at 6:58 AM
eBPF dev room schedule for FOSDEM 2026 is out 🐝
eBPF has become a normalized building block for infrastructure so if you want a single room that spans kernel internals, language tooling, observability, and networking, I'll see you in Brussels over a beer 🍻
fosdem.org/2026/schedul...
eBPF has become a normalized building block for infrastructure so if you want a single room that spans kernel internals, language tooling, observability, and networking, I'll see you in Brussels over a beer 🍻
fosdem.org/2026/schedul...
Monitor ARP, TCP, UDP, ICMP, DNS, HTTP, and TLS traffic at the kernel level using eBPF
GitHub - zrougamed/cerberus: Real-time network monitoring with eBPF technology
Real-time network monitoring with eBPF technology. Contribute to zrougamed/cerberus development by creating an account on GitHub.
github.com
December 16, 2025 at 9:01 AM
Monitor ARP, TCP, UDP, ICMP, DNS, HTTP, and TLS traffic at the kernel level using eBPF
Happy 10th Birthday, Cilium! 🎂
One decade ago, Thomas Graf pushed an initial commit with just a LICENSE, a .gitignore, and 226 lines of code. There was no Hubble, no Cluster Mesh, no network policy, no Tetragon, and eBPF still had a logo with a pea pod in it.
One decade ago, Thomas Graf pushed an initial commit with just a LICENSE, a .gitignore, and 226 lines of code. There was no Hubble, no Cluster Mesh, no network policy, no Tetragon, and eBPF still had a logo with a pea pod in it.
December 16, 2025 at 7:00 AM
Happy 10th Birthday, Cilium! 🎂
One decade ago, Thomas Graf pushed an initial commit with just a LICENSE, a .gitignore, and 226 lines of code. There was no Hubble, no Cluster Mesh, no network policy, no Tetragon, and eBPF still had a logo with a pea pod in it.
One decade ago, Thomas Graf pushed an initial commit with just a LICENSE, a .gitignore, and 226 lines of code. There was no Hubble, no Cluster Mesh, no network policy, no Tetragon, and eBPF still had a logo with a pea pod in it.
Reposted by Bill Mulligan 🐝🐝🐝
At #LinuxPlumbers, @breakawaybilly.bsky.social presented what the eBPF Foundation is doing, where its funds are going, and asked the attendees what should be next.
Recording: www.youtube.com/live/ZLRngpd...
Slides: lpc.events/event/19/con...
Recording: www.youtube.com/live/ZLRngpd...
Slides: lpc.events/event/19/con...
December 15, 2025 at 12:01 PM
At #LinuxPlumbers, @breakawaybilly.bsky.social presented what the eBPF Foundation is doing, where its funds are going, and asked the attendees what should be next.
Recording: www.youtube.com/live/ZLRngpd...
Slides: lpc.events/event/19/con...
Recording: www.youtube.com/live/ZLRngpd...
Slides: lpc.events/event/19/con...
Interactive graphical thread and scheduling analysis tool using eBPF
GitHub - tokiwa-software/feeze: Interactive graphical thread and scheduling analysis tool using eBPF
Interactive graphical thread and scheduling analysis tool using eBPF - tokiwa-software/feeze
github.com
December 15, 2025 at 9:01 AM
Interactive graphical thread and scheduling analysis tool using eBPF
Ecosystems emerge from code and community coordination. My presentation at Linux Plumbers Conference walked through how eBPF Foundation is building the scaffolding that makes innovation repeatable.
LPC Slides
www.linkedin.com
December 12, 2025 at 1:00 PM
Ecosystems emerge from code and community coordination. My presentation at Linux Plumbers Conference walked through how eBPF Foundation is building the scaffolding that makes innovation repeatable.
XDP Virtual Server - an eBPF load balancer implementation and supporting Go library
GitHub - davidcoles/xvs: XDP Virtual Server - an eBPF load balancer implementation and supporting Go library
XDP Virtual Server - an eBPF load balancer implementation and supporting Go library - davidcoles/xvs
github.com
December 12, 2025 at 10:02 AM
XDP Virtual Server - an eBPF load balancer implementation and supporting Go library
A high-performance network traffic generation tool that leverages XDP
GitHub - takehaya/xdperf: xdperf is a high-performance network traffic generation tool that leverages XDP (eXpress Data Path).
xdperf is a high-performance network traffic generation tool that leverages XDP (eXpress Data Path). - takehaya/xdperf
github.com
December 11, 2025 at 10:01 AM
A high-performance network traffic generation tool that leverages XDP
I'm at Linux Plumbers Conference in Tokyo this week to talk about what the eBPF Foundation accomplished this year and get feedback from the community on what we should focus on next
If you can't make, let me know what you think is currently holding eBPF back so the foundation can work to fix it 🐝
If you can't make, let me know what you think is currently holding eBPF back so the foundation can work to fix it 🐝
December 11, 2025 at 1:14 AM
I'm at Linux Plumbers Conference in Tokyo this week to talk about what the eBPF Foundation accomplished this year and get feedback from the community on what we should focus on next
If you can't make, let me know what you think is currently holding eBPF back so the foundation can work to fix it 🐝
If you can't make, let me know what you think is currently holding eBPF back so the foundation can work to fix it 🐝
Excited to be in Tokyo for Linux Plumbers Conference. Shung-Hsi Yu already has a summary of what to look forward to on day 1. What do you think is the most interesting?
shungh.si/blog/lpc-202...
shungh.si/blog/lpc-202...
Looking Ahead at LPC 2025 eBPF Track Day 1
The eBPF Track starts off on the first day (11th of December) of Linux Plumbers Conference 2025 with topics on BPF verifier, with Ihor…
shungh.si
December 10, 2025 at 3:51 PM
Excited to be in Tokyo for Linux Plumbers Conference. Shung-Hsi Yu already has a summary of what to look forward to on day 1. What do you think is the most interesting?
shungh.si/blog/lpc-202...
shungh.si/blog/lpc-202...
Userspace library for chaining co-located AF_XDP network applications
GitHub - networkedsystemsIITB/flash: FLASH userspace library for chaining co-located AF_XDP network applications
FLASH userspace library for chaining co-located AF_XDP network applications - networkedsystemsIITB/flash
github.com
December 10, 2025 at 10:01 AM
Userspace library for chaining co-located AF_XDP network applications
Advent of code? How about advent of eBee? 🐝 Brush up on your @cilium.io skills over the holidays 🎄
A holiday virtual eBee Quest!
Join our eBee Quest! Tackle our labs during the holidays, compete with others in completing all the labs there are, get the chance to win something - and learn a lot during the process!
isovalent.com
December 9, 2025 at 12:01 PM
Advent of code? How about advent of eBee? 🐝 Brush up on your @cilium.io skills over the holidays 🎄
Lightweight system for profiling XDP applications using kfuncs
GitHub - VladimiroPaschali/eBPF-InXpect: lightweight system for profiling XDP applications using kfuncs
lightweight system for profiling XDP applications using kfuncs - VladimiroPaschali/eBPF-InXpect
github.com
December 9, 2025 at 10:02 AM
Lightweight system for profiling XDP applications using kfuncs
"The infrastructure equivalent of dark matter" 🐝
I love this take on eBPF from @rawkode.dev This is also exactly why Cilium has become the default. The future of Kubernetes networking is eBPF-powered. It's not even a debate. It's just physics 😉
rawkode.academy/technology/m...
I love this take on eBPF from @rawkode.dev This is also exactly why Cilium has become the default. The future of Kubernetes networking is eBPF-powered. It's not even a debate. It's just physics 😉
rawkode.academy/technology/m...
December 8, 2025 at 12:01 PM
"The infrastructure equivalent of dark matter" 🐝
I love this take on eBPF from @rawkode.dev This is also exactly why Cilium has become the default. The future of Kubernetes networking is eBPF-powered. It's not even a debate. It's just physics 😉
rawkode.academy/technology/m...
I love this take on eBPF from @rawkode.dev This is also exactly why Cilium has become the default. The future of Kubernetes networking is eBPF-powered. It's not even a debate. It's just physics 😉
rawkode.academy/technology/m...
eBPF-powered Linux observability with AI incident detection
GitHub - linnix-os/linnix: eBPF-powered Linux observability with AI incident detection. AGPL-3.0 licensed.
eBPF-powered Linux observability with AI incident detection. AGPL-3.0 licensed. - linnix-os/linnix
github.com
December 8, 2025 at 10:01 AM
eBPF-powered Linux observability with AI incident detection
Results from the Cilium User Survey are in and it shows how we are moving from plumbing to platform. The networking conversation has moved from connectivity to topology where cluster mesh and network policy are what truly turns Cilium into a platform.
Cilium User Survey Results
www.linkedin.com
December 5, 2025 at 1:00 PM
Results from the Cilium User Survey are in and it shows how we are moving from plumbing to platform. The networking conversation has moved from connectivity to topology where cluster mesh and network policy are what truly turns Cilium into a platform.
A nostalgic terminal Snake game powered by eBPF 🐝
GitHub - gma1k/snake-ebpf: A nostalgic terminal Snake game powered by eBPF 🐝
A nostalgic terminal Snake game powered by eBPF 🐝. Contribute to gma1k/snake-ebpf development by creating an account on GitHub.
github.com
December 5, 2025 at 12:02 PM
A nostalgic terminal Snake game powered by eBPF 🐝
LFX Mentorships is one of my favorite parts of working with CNCF
Contributing to Cilium Through the LFX Mentorship Program
A detailed reflection on my 3-month LFX Mentorship improving Cilium’s SEO, AEO, and AIO to enhance discoverability, structured data, ...
cilium.io
December 4, 2025 at 5:00 PM
LFX Mentorships is one of my favorite parts of working with CNCF
A method of defending against SLOW GET, POST, & READ attacks implemented through eBPF using CO-RE and libbpf
GitHub - ShahbozbekH/Slither: A method of defending against SLOW GET, POST, & READ attacks implemented through eBPF using CO-RE and libbpf.
A method of defending against SLOW GET, POST, & READ attacks implemented through eBPF using CO-RE and libbpf. - ShahbozbekH/Slither
github.com
December 4, 2025 at 12:01 PM
A method of defending against SLOW GET, POST, & READ attacks implemented through eBPF using CO-RE and libbpf
10,000 raw events ➡️ 1 useful alert turns eBPF from a firehose into a funnel
If you try to ship every kernel event to userspace, you are killing the system rather than observing it. You need In-Kernel Filtering, Ring Buffers and User-Space Windowing
If you try to ship every kernel event to userspace, you are killing the system rather than observing it. You need In-Kernel Filtering, Ring Buffers and User-Space Windowing
10,000 Events to 1 Alert: Don’t burn the CPU
In my last post, I wrote about replacing polling with tracing.
parth21shah.substack.com
December 4, 2025 at 9:00 AM
10,000 raw events ➡️ 1 useful alert turns eBPF from a firehose into a funnel
If you try to ship every kernel event to userspace, you are killing the system rather than observing it. You need In-Kernel Filtering, Ring Buffers and User-Space Windowing
If you try to ship every kernel event to userspace, you are killing the system rather than observing it. You need In-Kernel Filtering, Ring Buffers and User-Space Windowing
"eBPF is becoming the strategic platform of choice for infrastructure teams"
This line from latest eBPF Foundation report written by Andrew Green is going to be doing a lot of work in the next decade.
ebpf.foundation/new-state-of...
This line from latest eBPF Foundation report written by Andrew Green is going to be doing a lot of work in the next decade.
ebpf.foundation/new-state-of...
New “State of eBPF” Report Explores How Modern Infrastructure Teams Are Building on Kernel-Level Programmability – eBPF
New eBPF Foundation research shows that eBPF has become the strategic platform of choice for infrastructure teams across networking, security, observability, FinOps, and AI/LLM workloads. The eBPF…
ebpf.foundation
December 3, 2025 at 3:00 PM
"eBPF is becoming the strategic platform of choice for infrastructure teams"
This line from latest eBPF Foundation report written by Andrew Green is going to be doing a lot of work in the next decade.
ebpf.foundation/new-state-of...
This line from latest eBPF Foundation report written by Andrew Green is going to be doing a lot of work in the next decade.
ebpf.foundation/new-state-of...
DNS filtering with eBPF
GitHub - cakturk/dnsbpf: DNS filtering with eBPF
DNS filtering with eBPF. Contribute to cakturk/dnsbpf development by creating an account on GitHub.
github.com
December 3, 2025 at 12:02 PM
DNS filtering with eBPF