Cilium - Container Networking with BPF & XDP

Cilium - Container Networking with BPF & XDP

• 3.
  ● ○ ○ ⇒ ⇒ ● ●
• 4.
  ● ○ ● ○ ○ ●
• 6.
  ● ○ ○ ○ ● ○ ○
• 7.
  ● ● ○ ○ Frontend BackendLB FE BE LB LB FE FEBE LB
• 8.
  ● ● ○ ○ Frontend BackendLB FE BE LB LB FE FEBE LB Prod Frontend BackendLB FE BELB QA Prod QA Prodrequires requires QA QA
• 9.
  ● ○ FE BE LB Prod QA Prod Prod FE BE LB QA QA 10 11 12 13 14 15 16 Cluster WideLabel ID Table: This ID is carried in the network packet and used to reconstruct the label context at the receiving host. Policy enforcement cost is reduced to a single hashtable lookup regardless of complexity.
• 10.
  ● ● ● FE BE LB LB ECMP FE FE BE BE BE Small HTTP GET UltraHD Cat Pictures/Videos
• 12.
  Intel Xeon 3.5GhzSandy Bridge, 24 cores, 1 TCP flow per core, netperf -t TCP_SENDFILE, 10’000 policies
• 15.
  ● ● ● ● ● ● ● ● ● ● ● ● ●