Course · Training · Workshop
Cilium for Kubernetes
Two days of hands-on Kubernetes network security with Cilium: eBPF-based Network Policies, Service Mesh with mTLS, Ingress, Load Balancing and observability with Hubble.
This course provides a comprehensive introduction to Network Security and Management with Cilium on Kubernetes clusters. You will understand the basic principles of Cilium and CNI, get to know the Cilium architecture and concepts, and set up various network resources.
Trainers
What participants say
These customers booked courses in the same topic cluster.More customers →
Content
Together with the trainer, you will work on the following topics:
- Overview of CNI and Cilium
- Kubernetes Network Refresh
- Introduction to Cilium Architecture
- Cilium Setup and first Network Resources
- Cilium Network Policies
- Cilium based Ingress and Load Balancing
- Add and use Cilium Endpoints
- Service Mesh and mTLS with Cilium
- Cluster Connectivity
- Monitoring and Debugging
- Best Practices for Cilium Deployment
- Overview Cilium related Enterprise Products
You will not only get to know these concepts, but also implement them in practice.
The actual course content may differ from the above depending on the trainer, delivery, duration and the composition of participants.
Request this course in-house
Request a public date
No suitable public date? Register without obligation — once there is enough interest we schedule a new public date and let you know first.
More about Cilium
Cilium is an open-source software for networking, security, and observability that leverages eBPF technology. It provides traditional container networking interfaces (CNI), Kubernetes ingress and service implementations, as well as transparent encryption and service mesh functionality.Further resources:
History
Cilium was developed in 2015 by Thomas Graf, who previously worked on the Linux kernel networking stack at Red Hat. The project emerged from the vision of using eBPF technology for cloud-native networking and security. The first version was released in 2017 and introduced the concept of identity-based security.
Development was significantly driven by the founding of Isovalent by Graf and Dan Wendlandt. A major milestone was the integration with Kubernetes and the introduction of Hubble for network observability. Support from companies like Google and acceptance into the CNCF as an incubating project in 2021 marked further important steps.
Today, Cilium is the default CNI for many major Kubernetes platforms, including Google GKE, Amazon EKS, and Rancher RKE. It has revolutionized how container networking is implemented through the use of eBPF. The introduction of service mesh functionality, Cluster Mesh for multi-cluster connectivity, and integration with projects like Envoy have made Cilium a comprehensive networking and security solution.