Open Source Summit North America 2018

Network security for containers: IPs and ports are meaningless in the day and age of the API. Cilium is an open source network security solution that enforces API-aware security in combination with identity to bring a scalable and powerful network security solution for containers. Under the hood, Cilium is using the ever-growing Linux kernel technology BPF. This session will give an introduction into setting up Cilium in a small environment, defining API-aware network policies, and using the policies to enforce security for real-world example applications. Finally, we will use debug tools to understand the datapath and get a peek at the BPF integration.