Survive eBPF Deployment with Bpfd - Andrew Stoycos, Red Hat & Shane Utt, Kong
Channel: CNCF [Cloud Native Computing Foundation]
Date: 22/11/2023

Don't miss out! Join us at our next Flagship Conference: KubeCon + CloudNativeCon Europe in Paris from March 19-22, 2024. Connect with our current graduated, incubating, and sandbox projects as the community gathers to further the education and advancement of cloud native computing. Learn more at https://kubecon.io

Survive eBPF Deployment with Bpfd - Andrew Stoycos, Red Hat & Shane Utt, Kong

Developing eBPF programs is challenging within itself, but what about deploying those applications in a shared environment such as a Kubernetes cluster? As more applications begin to utilize eBPF, the lack of cooperation, wide use of critical permissions and zero cluster-wide visibility can lead to a “perfect storm” of issues which are almost impossible to diagnose. In this talk we’ll discuss our journey to achieve a better standard for deploying and managing the lifecycle of eBPF programs on Kubernetes. We will demonstrate how bpfd, a system daemon and Kubernetes operator for managing eBPF programs, can be used to deploy, observe and secure those programs on all your cluster nodes. Attendees will see how things can go wrong when multiple networking programs are contending for the same resources and learn how bpfd can be used to diagnose and fix these types of issues.