Meet with Isovalent at KubeCon North America

Agenda

Hear from Isovalent at KubeCon

• Sunday

  • Reviewing AI-Generated PRs When Every Bug Is a CVE: Envoy's Playbook

    Salt Palace - Level 2 | 250 A-C

    10:15 am

    Envoy sits in the request path of much of the internet. A bug that slips through review can become a CVE with a coordinated disclosure, an embargo, and patch releases across supported versions. That math changed when AI-generated pull requests arrived. They look polished, they compile, they pass CI, and they are wrong in ways human contributions rarely are.

    This talk shares the review playbook Envoy maintainers built in response. We cover the failure patterns we see in AI-written changes, how we adjusted reviewer expectations without banning AI outright, the signals that separate a careful contributor using AI from drive-by slop, and how our security team treats these changes in sensitive code paths like parsers and filters.

    Attendees leave with a review checklist, contributor policy language they can copy, and real numbers on what this costs maintainer time. Every lesson applies to any project where a bad merge has consequences beyond a revert.

    • Kateryna Nezdolii, Engineer

• Monday

  • Handing a Proxy the Keys to Your Pod: Inside Cilium's Sidecarless mTLS

    Level 1 | Ballroom J

    9:10 am

    Cilium 1.19 shipped sidecarless mTLS reusing ztunnel, a proxy from Istio's ambient mode: label a namespace, and traffic between its pods is encrypted and identity-authenticated over HBONE, with no app changes necessary. But underneath that one line is a per-node proxy opening sockets inside pods it was never installed into, and a control plane fanning that label out to every node.

    So how does it actually work? We'll walk from that label to the kernel primitives beneath it: the file-descriptor hand-off that opens listeners inside your pod, the StateDB reconciler that turns a namespace label into per-node state, how its SPIFFE identity is issued, and the in-pod iptables redirect that intercepts traffic.

    You'll leave knowing how the pieces fit and where its edges are today (beta, TCP-only). We close on the SPIRE work we're upstreaming, which binds a certificate to the requesting process, not just to a pod, with a live demo: steal a cert without attestation, then watch SPIRE refuse.

    • Robin Gögge, Software Engineer

  • CiliumCon Keynote | Isovalent: After Mythos: The CVE Firehose Meets Tetragon

    Level 1 | Grand Ballroom J

    10:15 AM - 10:20 AM

    Mythos made the vulnerability backlog feel less like a queue and more like a firehose - and we can’t patch fast enough to keep up. To bridge the gap we need protection at runtime, and thankfully eBPF enables it in a highly performant way. This talk will share the latest developments in using Tetragon to provide guardrails and mitigations that you can deploy without downtime.

    • Liz Rice, Chief Open Source Officer

      Liz Rice is Chief Open Source Officer with eBPF pioneers Isovalent, creators of the Cilium project, and now part of Cisco. which provides cloud native networking, observability and security. She is an award-winning speaker, and the author of O'Reilly books on "Container Security" and "Learning eBPF". She has held many roles with the CNCF, including as a governing board member, chair of the Technical Oversight Committee, and Co-Chair of KubeCon + CloudNativeCon. When not writing code, or talking about it, Liz loves riding bikes in places with better weather than her native London, and making music under the pseudonym Insider Nine.

  • Running Out of IPs Before You Run Out of GPUs: IPv6 for AI-Scale Kubernetes

    CiliumCon (AM) + Platform Engineering (PM) Room 2

    11:45 am

    You've provisioned the GPU nodes and sized the power, cooling, and storage. But have you planned the IP addresses? In a dense AI cluster, with dozens of pods per GPU node across a large fleet, a private range that looked endless on the whiteboard runs dry fast.

    It usually isn't public IPv4 scarcity that forces the move. It's the quiet exhaustion of RFC1918 space inside the flat, multi-account networks AI platforms grow into. Add autoscaling and constant rebuilds, and your address plan becomes what caps your scale.

    So is IPv6 the answer, and is it worth the cost? This talk argues that for AI-scale Kubernetes, IPv6 is the substrate that makes the architecture work. We'll look at teams running it in production, stay honest about the sharp edges, and close with a live demo: IPv6 IP pools advertised over BGP, plus the capacity math to size it yourself.

    • Marino Wijay, Solutions Engineer

  • VM on Kubernetes Day: Learn to Run VMs on K8s with Less Risk

    Salt Lake City Marriott Downtown at City Creek

    12:30PM - 5PM

    Virtualization is moving to Kubernetes, and the question is no longer whether VMs belong there, but how to run them well.
    
    VM on Kubernetes Day North America 2026 explores how KubeVirt brings virtual machines onto the same platform as your cloud-native and AI workloads, so legacy apps come along without being left behind and without platform sprawl. Join platform engineers, VMware admins, developers, and other practitioners for real-world migration stories, unified storage and Day 2 strategies, and a hands-on look at running your own VMs on Kubernetes.

    Event is offsite and not related to Day 0 events, to attend register here: https://portworx.com/events/vm-kubernetes-day-slc-2026/

    
    
    

    • Dan Finneran, Principal Community Advocate

      Dan Finneran is a Principle Community Advocate at Isovalent. His journey to today has included bare-metal, jails, zones, vms and containers where he is currently enjoying the fast paced ride in the cloud native space. He also created & maintains a popular Open-Source load-balancer for Kubernetes and contributes to upstream Kubernetes. He's also been fortunate to present at events ranging from the British computing society, HPE Technical solutions summit to DockerCon and KubeCon amongst others.

  • The Missing Layer of Platform Maturity: Kubernetes Networking

    Platform Engineering Room 1

    1:20 pm

    Kubernetes networking simplifies distributed systems, yet many engineers still struggle to understand how abstractions map to real networking behavior. As the ecosystem matures, community-driven efforts like the Certified Kubernetes Networking Engineer (CKNE) exam are emerging to help standardize the real-world Kubernetes networking skills platform teams increasingly depend on.

    This panel brings together CKNE SMEs, networking specialists, and educators to challenge how Kubernetes networking is understood, taught, and operationalized today. We’ll explore where mental models break down across services, DNS, CNIs, and the Linux networking stack, why networking knowledge remains difficult to scale across teams, and how these gaps impact platform maturity.

    Join us as we explore the invisible layers powering Kubernetes and discuss how the community can build a more practical and standardized model for Kubernetes networking expertise.

    • Marino Wijay, Solutions Engineer

  • Progressive Delivery with Cilium Gateway API and Argo Rollouts

    ArgoCon Room 1

    1:30 PM - 1:55 PM

    Progressive delivery has traditionally required additional traffic management infrastructure such as service meshes, custom ingress controllers, or proprietary load balancers. As Kubernetes standardizes on Gateway API, that story is changing. Cilium includes a production-ready implementation of the Kubernetes Gateway API, providing advanced traffic management capabilities directly within the networking stack. At the same time, Argo Rollouts has support for Gateway API integration, enabling canary deployments, traffic splitting, and targeted user experiences using standard Kubernetes APIs. In this session, we'll demonstrate how these two projects naturally fit together to create a powerful progressive delivery platform with minimal operational overhead.

    • Christian Hernandez, Technical Marketing Engineer

      Christian is a Technical Marketing Engineer and Tech Lead at Isovalent, now part of Cisco. He is a well rounded technologist with experience in infrastructure engineering, systems administration, enterprise architecture, tech support, advocacy, and product management. Passionate about OpenSource and containerizing the world one application at a time. He is currently a maintainer of the Argo Project and OpenGitOps. He focuses on GitOps practices, DevOps, Kubernetes, Network Security, and Containers. On his free time, he plays guitar, travels, and you can catch him touring wineries in California.

  • Building Observability Control Planes with OpenTelemetry, eBPF, and OBI

    Level 2 | 250 A-C

    2:40 PM - 3:05 PM

    The OpenTelemetry eBPF Instrumentation (OBI) agent provides auto-observability with broad coverage via eBPF. But OBI is more than a fixed agent: it also exposes library tools developers can import, extend, and embed into their own systems.

    This talk shows how platform engineers, observability teams, and vendors can use OBI as a library to build custom, dynamic observability controllers. We'll explore how higher-level systems can decide what to instrument, when configuration should change, and how instrumentation maps to platform or product context.

    Attendees will leave with practical patterns for building on OBI, tradeoffs between custom and community-managed approaches, and ideas for extending zero-code instrumentation into developer platforms, internal control planes, and third-party tools.

    
    
    

    • Rafael Roquetto, Software Technical Leader

• Tuesday

  • What's new with Cilium and Gateway API!

    Isovalent Booth 112

    10:55 am

    Come hear the latest and greatest implementations that Cilium has implemented to support Gateway API!

    • Christine Kim, Technical Community Advocate

      Christine Kim is an open source enthusiast at Isovalent, which is now part of Cisco. She dabbles primarily in the world of service mesh and ingresses, focusing on Cilium Service Mesh and contributing to the K8s Gateway API. Previously, she worked at Google Cloud, where she was first introduced to Kubernetes and Service Meshes (Istio), with a focus on developer usability and traffic management.

  • Tetragon in the Real World

    Isovalent Booth 112

    11:05 am

    The pace of vulnerabilities in computer systems being discovered has increased at a huge pace, the linux kernel is close to 2000 per release up from 500 in the previous (6.x kernel). Patching and rebuilding kernels is a slow and near never ending task, this talk shows there is another way. With the power of Tetragon and eBPF we will walk through how a recent high profile exploit can be mitigated and protected against "live!".

    • Dan Finneran, Principal Community Advocate

      Dan Finneran is a Principle Community Advocate at Isovalent. His journey to today has included bare-metal, jails, zones, vms and containers where he is currently enjoying the fast paced ride in the cloud native space. He also created & maintains a popular Open-Source load-balancer for Kubernetes and contributes to upstream Kubernetes. He's also been fortunate to present at events ranging from the British computing society, HPE Technical solutions summit to DockerCon and KubeCon amongst others.

  • From Bytes to Traces: A Deep Dive into OpenTelemetry eBPF Instrumentation Internals

    Level 2 255 EF

    2:50 pm

    Auto-instrumentation has long been a major topic in observability. eBPF introduced a new approach: instrumentation is no longer confined to userspace agents and technology-specific SDKs. By leveraging visibility from the Linux kernel, eBPF-based instrumentation can capture kernel and application runtime events and model them into traces, metrics, profiles, and service topology.

    This talk takes a ground-up look at OpenTelemetry eBPF Instrumentation (OBI), following the path from eBPF programs at the Linux kernel level into the userspace pipeline where events are correlated, enriched, converted into OpenTelemetry data, and emitted. We will examine how OBI combines kprobes, uprobes, socket and cgroup instrumentation, runtime-specific instrumentation, process discovery, context propagation, and Kubernetes metadata enrichment. This session is for engineers interested in how zero-code eBPF instrumentation works under the hood. Attendees will leave ready to debug, extend, or contribute.

    • Rafael Roquetto, Software Technical Leader

  • From FIFO to Fair Share: Extensible Queuing

    Level 1 | Halls 1-5 | Cosmic Canyon

    2:05 PM - 2:20 PM

    When upstream capacity is exhausted, Envoy queues pending work. That queue may look like an implementation detail, but it acts as a hidden scheduler: deciding which request runs next, how long it waits, when the system is overloaded, and which work should be dropped. Envoy’s connection pools have historically embedded FIFO behavior. While predictable, hard-coded queueing makes it difficult to introduce adaptive LIFO, controlled delay, priority scheduling, or tenant-aware fairness. Existing counters reveal how many requests are pending, but cannot fully explain how queueing contributes to latency or when a backlog becomes unhealthy. This talk follows the evolution from an early adaptive-LIFO and CoDel prototype to Envoy’s new generic queue-policy extension. Attendees will leave understanding why queueing policy matters during overload and how extensible, observable queues create a foundation for latency control, fairness, and safer multi-tenant operation.

    • Kateryna Nezdolii, Engineer

  • Keeping Envoy Boring in an eBPF Datapath (Cilium L7)

    Salt Palace | Level 1 | Halls 1-5 | Cosmic Canyon

    2:23 PM-2:33 PM

    Cilium is widely known for its eBPF datapath, but Layer 7 policy brings another critical component into the request path: Envoy. This talk follows a Cilium L7 policy from Kubernetes intent to enforcement: how policy is translated, how traffic is redirected from eBPF to a node-local Envoy, and how policy decisions are made for HTTP, DNS, TLS/SNI-aware use cases, and other L7 protocols. We will highlight the Envoy features Cilium relies on, including xDS, HTTP connection manager, access logging, original destination and Cilium-specific policy extensions. We will also cover recent relevant work: the new go-control-plane-backed ADS path, Delta NPDS, safer policy handling, and port-range robustness fixes.
    Finally, we will share maintainer lessons from living at the boundary between Cilium and Envoy: what we can upstream, what we still carry as downstream patches, how we think about compatibility, and how we reduce long-term maintenance cost while keeping L7 policy reliable for users.

    • Kateryna Nezdolii, Engineer

  • Isovalent Private Networks for Agentic Applications

    Isovalent Booth 112

    4:20 pm

    Agentic applications need to reach tools, APIs, and data across infrastructure while staying within clear network boundaries. In this 10-minute booth demo, see how Isovalent Private Networks can connect Kubernetes applications and virtual machines, then follow an agent’s request as it reaches approved services. We’ll show how segmentation and traffic visibility help operators understand the connections behind agent-driven workflows.

    • Marcos Hernandez, Distinguished Engineer/Sr. Director of Technical Marketing

      Marcos Hernandez is a Distinguished Engineer and Senior Director of Technical Marketing with Isovalent@Cisco. In this role, he focuses on cloud connectivity, security, and observability using Cisco enterprise solutions. Marcos has a background in network modernization and cloud networking. His work involves platform engineering, infrastructure modernization, and he has experience with technologies such as Cilium, eBPF, and Kubernetes, as well as migrating systems to various cloud environments.

  • eBPF-based CVE Enforcement on Windows!

    Isovalent Booth 112

    4:30 pm

    Tetragon has traditionally been associated with Linux and Kubernetes environments, but Tetragon now brings eBPF-powered security observability and enforcement to Windows as well. Join Natalia to explore how you can now install the agent, start collecting security events to immediately gain visibility into process execution, powershell activity, and network connections and to be able to mitigate against a CVE in Windows!

    • Natalia Ivanko, Engineering Product Manager

  • eBPF live-patching for the Post-Mythos Cloud Native Era eBPF live-patching for the Post-Mythos Cloud Native Era

    Isovalent Booth 112

    6:20 pm

    Advanced AI models like Mythos are discovering new CVEs daily, shifting the advantage toward attackers. Defenders need to be able to respond at agent speed in production environments, but Kubernetes nodes and data center fleets still depend on slow patch-and-reboot cycles. Join Liz, Duffie and Natalia to discuss why eBPF is important and the natural technology for on-the-fly live security mitigations and runtime visibility - to both the kernel itself as well as to userspace Cloud Native apps! We will discuss the potential mitigations and strategies that can help many Security and SecOps teams in the Post-Mythos Cloud Native Era!

    • Natalia Ivanko, Engineering Product Manager

    • Liz Rice, Chief Open Source Officer

      Liz Rice is Chief Open Source Officer with eBPF pioneers Isovalent, creators of the Cilium project, and now part of Cisco. which provides cloud native networking, observability and security. She is an award-winning speaker, and the author of O'Reilly books on "Container Security" and "Learning eBPF". She has held many roles with the CNCF, including as a governing board member, chair of the Technical Oversight Committee, and Co-Chair of KubeCon + CloudNativeCon. When not writing code, or talking about it, Liz loves riding bikes in places with better weather than her native London, and making music under the pseudonym Insider Nine.

    • Duffie Cooley, Field CTO Isovalent & CNCF Ambassador

      I am a generalist. I prefer to work in a fast paced deeply technical atmosphere. I believe that if you can't teach a thing then you don't understand it. I enjoy working with engineering focused companies/teams as they tend to align with my values pretty well. I have a strong preference for test driven methodologies. Technologies like Kubernetes, Mesos, Openstack, and Docker. All have a place in creating a new world for ops and engineering teams, and I am excited about it. Where we are headed. The engineering and systems role is very different. I enjoy working with these teams and helping to facilitate the transition to new technologies.

• Wednesday

  • netkit: Specializing Linux Packet Delivery for Container Networks

    Isovalent Booth 112

    10:40 am

    Cloud-native microservices architectures rely on network namespaces for isolation, with the overhead of container communications remaining a critical performance bottleneck. While colocating containers on the same host mitigates some of this overhead, it cannot match the performance of communication within a single network namespace. Existing solutions either require application rewrites or fail to support the full Linux network stack expected by containerized applications.

    In this presentation, we present netkit, an eBPF-based datapath that specializes the Linux networking stack to eliminate redundant backlog queue traversals during network namespace transitions. netkit leverages eBPF to transparently redirect packets between namespaces, bypassing unnecessary buffering while preserving compatibility with existing container applications. Our implementation in the Linux kernel, integrated with minimal changes to the Cilium network plugin for Kubernetes, improves throughput by up to 37% and achieves parity between container-to-container and process-to-process communications, effectively closing the performance gap introduced by namespace isolation.

    • Daniel Borkmann, eBPF & Cilium co-creator & Distinguished Software Engineer, Isovalent at Cisco

      Lorem ipsum dolor sit amet consectetur, adipisicing elit. Saepe repellat natus incidunt aperiam atque autem quibusdam, facilis perferendis iste, sunt, distinctio quos vero earum minima itaque vel reiciendis! Eaque, necessitatibus.

  • Kubernetes-Native Packet Capture for Cloud Native Operations

    Isovalent Booth 112

    10:50 am

    Kubernetes tells you what failed, but what actually happened on the wire? Isopcap brings Kubernetes-native packet capture to your cluster, letting you capture traffic from workloads without modifying them, restarting pods or injecting sidecars. In this lightning talk, we’ll look at how Isopcap makes packet capture accessible to Kubernetes operators, including targeted captures, BPF filtering and automated triggers based on network conditions. We’ll see how these capabilities can turn packet captures from a manual, last-resort debugging tool into a practical part of cloud-native troubleshooting.

    • Christian Hernandez, Technical Marketing Engineer

      Christian is a Technical Marketing Engineer and Tech Lead at Isovalent, now part of Cisco. He is a well rounded technologist with experience in infrastructure engineering, systems administration, enterprise architecture, tech support, advocacy, and product management. Passionate about OpenSource and containerizing the world one application at a time. He is currently a maintainer of the Argo Project and OpenGitOps. He focuses on GitOps practices, DevOps, Kubernetes, Network Security, and Containers. On his free time, he plays guitar, travels, and you can catch him touring wineries in California.

  • Welcome to the Vulnpocalypse!

    Level 2 Salt Lake Ballroom DE

    11:50 am

    We've shifted left, generated SBOMs, and signed artifacts, but we’re drowning in more vulnerability data than ever before. AI is increasing the speed and sophistication of attacks, compounding the crisis of CVE fatigue while teams struggle to patch "critical" vulnerabilities not reachable at runtime, and navigate from "compliance theater" to actual risk reduction.

    Is the panic induced by increasingly capable models justified? Does this fundamentally change the security landscape, or is it just marketing hype? And is the current "scan and patch" model broken? Welcome to the Vulnpocalypse!

    This panel debates the next phase of cloud native and open source security. We‘ll explore the transition from static analysis to runtime insight, the role of reachability analysis, and the latest open source tooling to help build a resilient security posture.

    Attendees will leave with insight & ideas for cutting through the CVE noise, and levelling the playing field against AI-accelerated attacks.

    • Liz Rice, Chief Open Source Officer

      Liz Rice is Chief Open Source Officer with eBPF pioneers Isovalent, creators of the Cilium project, and now part of Cisco. which provides cloud native networking, observability and security. She is an award-winning speaker, and the author of O'Reilly books on "Container Security" and "Learning eBPF". She has held many roles with the CNCF, including as a governing board member, chair of the Technical Oversight Committee, and Co-Chair of KubeCon + CloudNativeCon. When not writing code, or talking about it, Liz loves riding bikes in places with better weather than her native London, and making music under the pseudonym Insider Nine.

  • From ListenerSets to eBPF Plugins: Cilium's Evolution Across the Stack

    Level 2 251 A-C

    11:50 am

    Cilium continues to evolve across every layer of the cloud native networking stack, from new Kubernetes APIs at the top to innovations in the Linux kernel underneath.

    Join us for a technical tour of the latest work happening across the Cilium project. We'll cover recent developments including Gateway API features such as TCPRoute and ListenerSet, new eBPF datapath plugins that make kernel networking more extensible, and the architectural work shaping the next generation of cloud native networking, observability, and security. You'll also hear from an end user on why they chose Cilium.

    We'll close with community activities around the Cilium project and learning how to get involved as the project moves into its second decade!

    • Christine Kim, Technical Community Advocate

      Christine Kim is an open source enthusiast at Isovalent, which is now part of Cisco. She dabbles primarily in the world of service mesh and ingresses, focusing on Cilium Service Mesh and contributing to the K8s Gateway API. Previously, she worked at Google Cloud, where she was first introduced to Kubernetes and Service Meshes (Istio), with a focus on developer usability and traffic management.

    • Katie Meinders, Community Builder

    • Hadrien Patte, Software engineer

  • The Kubernetes VPC: A Quick Primer

    Isovalent Booth 112

    3:50 pm

    Multi-tenancy is a hard-requirement for many organizations especially with Kubernetes being the platform for workloads. Let's explore the Kubernetes VPC concept and how Isovalent Private Networking enables this.

    • Marino Wijay, Solutions Engineer

  • Hubble Timescape: Time Travel through your Flow Data and Network Policy worlds.

    Isovalent Booth 112

    4:00 pm

    Multi-tenancy is a hard-requirement for many organizations especially with Kubernetes being the platform for workloads. Let's explore the Kubernetes VPC concept and how Isovalent Private Networking enables this.

    • Jerry Hency, Principal Solutions Engineer

      Helping customers put the power of eBPF to work for Networking, Security, and Observability in Cloud-Native and Kubernetes environments.

• Thursday

  • eBPF-Powered Linux & Kubernetes Runtime Security for Splunk

    Isovalent Booth 112

    10:40 am

    eBPF-based security observability combined with Splunk analytics capabilities will bring runtime security to a new level. Join Natalia to showcase the new Isovalent Runtime Security Splunk App & TA and discover the workflows tailored for threat detection and incident investigation with low friction and memory usage but with rich context and actionable insights.

    • Natalia Ivanko, Engineering Product Manager

  • Hands On within the Isovalent Universe

    Isovalent Booth 112

    10:50 am

    Discover what’s new in Isovalent’s Instruqt labs. We’ll showcase the hands-on labs available to the community and highlight the new features Raphael has added. Whether you’re trying the labs for the first time or have championed them for years, join us to explore what’s changed and find new ways to get involved.

    • Patrick Whyte, Technical Marketing Engineering Technical Leader

  • Debugging the Invisible: Standardizing Kubernetes Networking Expertise

    Level 2 Salt Lake Ballroom C

    11:00 am

    Kubernetes networking simplifies distributed systems, yet many engineers still struggle to understand how abstractions map to real networking behavior, which raises the question: is Kubernetes networking too complex, or poorly taught? As the ecosystem matures, community-driven efforts like the Certified Kubernetes Networking Engineer(CKNE) exam are emerging to help standardize the real-world Kubernetes networking skills.

    This panel brings together CKNE SMEs, networking specialists and educators to challenge how Kubernetes networking is understood, taught, and operationalized today. We’ll focus on where mental models break down in practice, why engineers struggle to reason across services, DNS, CNIs and Linux networking stack and what foundational networking knowledge Kubernetes practitioners actually need.

    Join us as we explore the invisible layers powering Kubernetes and how the community can build a more practical and standardized mental model for Kubernetes networking expertise.

    • Marino Wijay, Solutions Engineer

  • Here be DRAgons: Bringing Native Zero-Copy Networking to Pods with Cilium and netkit

    Level 2 255 EF

    3:30 pm

    Kubernetes Pods have traditionally been blocked from using hardware-level networking acceleration due to namespace isolation. Cilium is changing that by bringing native Dynamic Resource Allocation (DRA) support to manage hardware resources for Pods.

    This talk unveils how we built two new DRA drivers for Cilium: an SR-IOV flavor as well as a new hardware queue leasing mechanism recently merged into the Linux kernel’s networking stack and the DRAgons we faced along the way. We’ll dive deep into how queue leasing proxies real physical NIC queues directly to virtual netdevs, how we integrated it into netkit, Cilium’s eBPF datapath, and the tradeoffs between the two flavors.

    This architecture brings native io_uring TCP zero-copy into Pods for the first time, enabling high-speed memory-mapped networking. Join us to see how these two new Cilium DRA drivers can be used and how we enable 100G+ single-stream throughput while preserving the operational model cloud native platforms expect today.

    • Daniel Borkmann, eBPF & Cilium co-creator & Distinguished Software Engineer, Isovalent at Cisco

      Lorem ipsum dolor sit amet consectetur, adipisicing elit. Saepe repellat natus incidunt aperiam atque autem quibusdam, facilis perferendis iste, sunt, distinctio quos vero earum minima itaque vel reiciendis! Eaque, necessitatibus.

    • Aaron Campbell, Principal Developer

      Aaron Campbell has spent 25+ years in security, from his early days as an OpenBSD developer and vulnerability researcher to DDoS mitigation, traffic engineering, identity, and access control. He now focuses on network defense and cloud infrastructure at Isovalent, part of Cisco.