Cilium Service Mesh

You already know that Cilium accelerates networking, and provides security and observability in Kubernetes, using the power of eBPF. Now Cilium is bringing those eBPF strengths to the world of Service Mesh. Cilium Service Mesh features eBPF-powered connectivity, traffic management, security and observability.

In this lab, you will learn how you can use Cilium to deploy Ingress, as well as EnvoyConfig resources to dynamically configure the Envoy proxy provided with the Cilium agent.

And all of the above without any Envoy sidecar injection into your pods!

VersionOpen Source

Main steps in the lab

01 🌐 Ingress Controller — HTTP

Let's use the Ingress Controller

02 ⚙️ Ingress Controller — gRPC

Let's deploy a gRPC Ingress

03🔐 Ingress Controller — TLS

Let's add SNI rules in Ingress

04 🚦 Layer 7 Traffic Management

Use generic EnvoyConfig resources to configure Service Mesh

Related labs