Cilium - Kernel Native Security with BPF and XDP for Containers

May 2018

7 Mon

8 Tue

9 Wed

10 Thu 08:15 AM – 05:25 PM IST

11 Fri 08:30 AM – 06:20 PM IST

12 Sat

13 Sun

Make a submission

NIMHANS Convention Centre, Bengaluru

##About Rootconf 2018 and who should attend:

Rootconf is India’s best conference on DevOps, SRE and IT infrastructure. Rootconf attracts systems and operations engineers to share real-world knowledge about building reliable systems.

The 2018 edition is a single track conference. Day 1 – 10 May – features talks on security. Colin Charles (chief evangelist at Percona Foundation), Pukhraj Singh (former national cybersecurity manager at UIDAI), Shamim Reza (open source enthusiast), Alisha Gurung (network engineer at Bhutan Telecom) and Derick Thomas (former network engineer at VSNL and Airtel Bharti) will touch on important aspects of infrastructure, database, network and enterprise security.

Day 2 – 11 May – is filled with case studies and stories about legacy code, immutable infrastructure, root-cause analysis, handling dependencies and monitoring. Talks from Exotel, Kayako, Intuit, Helpshift, Digital Ocean, among others, will help you evaluate DevOps tools and architecture patterns.

If you are a:

DevOps programmer
Systems engineer
Architect
VP of engineering
IT manager

you should attend Rootconf.

Birds Of Feather (BOF) sessions at Rootconf 2018 will cover the following topics:

DevSec Ops
Microservices - tooling, architecture, costs and culture
Mistakes that startups make when planning infrastructure
Handling technical debt
How to plan a container strategy for your organization
Evaluating AWS for scale
Future of DevOps

Rootconf is a conference for practitioners, by practitioners.

The call for proposals is closed. If you are interested in speaking at Rootconf events in 2018, submit a proposal here: rootconf.talkfunnel.com/rootconf-round-the-year-2018/

##Venue:

NIMHANS Convention Centre, Lakkasandra, Hombegowda Nagar, Bengaluru, Karnataka 560029.

Schedule, event details and tickets: https://rootconf.in/2018

For more information about Rootconf, sponsorships, outstation events, contact support@hasgeek.com or call 7676332020.

Hosted by

Rootconf

Rootconf is a community-funded platform for activities and discussions on the following topics: Site Reliability Engineering (SRE). Infrastructure costs, including Cloud Costs - and optimization. Security - including Cloud Security. more

All submissions

Previous Next

Cilium - Kernel Native Security with BPF and XDP for Containers

Submitted Mar 16, 2018

Section: Full talk Technical level: Intermediate

As good as the affair of containers and microservices has been so far, there’s always been a concern about security. But, security hasn’t evolved along with containers, did it? Enters Cilium, which leverages BPF for securing network connectivity between application services deployed with containers.

Outline

Cilium is an open source project which can be used for transparently securing the network connectivity between application services deployed using Linux container management platforms like Docker and Kubernetes. At it’s heart,Cilium uses a new linux kernel technology called BPF. By leveraging Linux BPF, Cilium retains the ability to transparently insert security visibility + enforcement, but does so in a way that is based on service / pod / container identity (in contrast to IP address identification in traditional systems) and can filter on application-layer (e.g. HTTP). As a result, Cilium not only makes it simple to apply security policies in a highly dynamic environment by decoupling security from addressing, but can also provide stronger security isolation by operating at the HTTP-layer in addition to providing traditional Layer 3 and Layer 4 segmentation.

Speaker bio

A curious DevOps maniac with deep interests in Linux, containers, virtualization, Cloud, Machine Learning, DL, AI. Meetup organizer at Rancher Pune, India. Docker Mentor. A Pink Floydist, and a Platonist. Contributor in cilium project.