Viewing profile — tgraf

Then you should interview again but with us. This is not too different from wpa_supplicant used by several operating for key management for wireless networks. The complicated key n…

It looks not too different from the majority of HTTP parsers out there written in C. Here is an example of NodeJS [0]. [0] https://github.com/nodejs/http-parser/blob/main/http_pars…

It can do both. It can authenticate and encrypt all traffic between nodes which then also encrypts all traffic between the pods running on those pods. This is great because it also…

The model I'm describing contains two pieces: 1) Moving away from sidecars to per-node proxies that can be better integrated into the Linux kernel concept of namespacing instead of…

If you are in a position where you can do that then great. Most folks out there are in a position where they need to run arbitrary applications delivered by vendors without an abil…

One of the methods that Cilium (which implements this eBPF-based service mesh idea) uses to implementation authentication between workloads is Wireguard. It does exactly what you d…

What the proposed architecture allows is to continue using SPIFFE or another certificate management solution to generate and distribute the certificates but use either a per-node p…

OP here: It's whimsical.com. I really love it.

Extending a bit on what Alexei is talking about (Full eBPF summit talk: https://youtu.be/jw8tEPP6jwQ?t=639 ) Many people seem to make an assumption that kernel code is perfect and …

I personally think that networking will be almost exclusively based Linux in some form. If you want to interpret it as "eBPF - The Future of Linux Networking" then that is totally …

I'm not going to argue with you. You can read up on initial naming and framing in slides of netconf and plumbers conferences as well as LKML archives.

I'm not going to spam this forum with a marketing pitch so I'll just refer to https://www.isovalent.com/product and add that you can buy a Cilium Enterprise distribution with enter…

Another good way to get started is https://ebpf.io/ . It features pointers that go beyond just networking and also cover usage of use cases involving tracing, profiling, security, …

The shift from BPF to eBPF was less of an evolutionary step as the name might indicate. The overlap with the name BPF is primarily due to the requirement for eBPF to be a superset …

Disclaimer: I wrote the post. Happy to answer any questions.

Disclaimer: I'm one of the organizers of eBPF summit If you are interested in eBPF, consider attending the eBPF summit [0] on Oct 28-29. Community driven, free and virtual. I've sp…

We’re excited to announce that the call for proposals is now open for the inaugural eBPF Summit, a virtual event, targeted at DevOps, platform architects and developers, to be held…

https://www.slideshare.net/ThomasGraf5/accelerating-envoy-an... Slide 21-25

[Disclaimer: I'm one of the Cilium authors] We have been trying to reproduce the performance results ever since the article was published as this is not in line at all with what we…