A Bold Leap Forward: AWS and Isovalent bring eBPF-based Networking and Security to AWS

Cilium on AWS

Cilium, an open-source project by Isovalent, provides networking and security capabilities using eBPF. Integrating Cilium with AWS offers users the following benefits:

• Powerful integration

  Combines the eBPF-based Cilium datapath which enables the dynamic insertion of programming logic into the Linux kernel. Cilium is available as a commercially supported Kubernetes CNI plugin that can be used on an Amazon EKS-A cluster.

• Enhanced Cilium Features

  Amazon Elastic Kubernetes Service (EKS) users can leverage the high-performance eBPF datapath, scalable network policy, Kubernetes services implementation, and rich observability & troubleshooting capabilities of Cilium.

• Upgrade to Isovalent Enterprise for Cilium

  EKS customers can upgrade from Cilium embedded in EKS to the full Isovalent Enterprise for Cilium platform unlocking advanced security, governance controls, extended network capabilities, Timescape, and Isovalent Tetragon Enterprise features.

• Simplified Operations

  The tight integration with AWS enables auto-upgrades, native integration into the AWS ecosystem for SIEM export, monitoring, governance control, and a unified billing experience, reducing management overhead.

Uncover the full potential with Isovalent Enterprise for Cilium

• SIEM integration

  Tetragon's SIEM export enables groundbreaking security observability for cloud-native environments. This integration expands the networking-focused view offered by Cilium and additionally covers runtime and system spectrums.

• Comprehensive security insights

  Tetragon addresses various use cases such as file access, file integrity monitoring, syscall activity logs, privilege and capabilities escalation alerting, and much more. By providing a comprehensive data source for incident investigations, Tetragon empowers security teams to better understand and respond to security threats

• Preventive security measures

  After achieving visibility into potential security threats, Tetragon offers enforcement policies that allow users to establish preventive security measures within their AWS environment. This helps to protect cloud-native applications and infrastructure from vulnerabilities and attacks.

Capabilities of Isovalent Enterprise for Cilium

Isovalent Enterprise for Cilium is a powerful networking and security solution for Kubernetes environments that goes beyond the capabilities of the open-source Cilium project. With Isovalent Enterprise for Cilium, you can benefit from:

• Comprehensive cloud-native connectivity

  Isovalent Cilium Enterprise provides advanced network policy capabilities, including DNS-aware policy, L7 policy, and deny policy, enabling fine-grained control over network traffic for micro-segmentation and improved security.

• Scalable, multi-tenant design

  Built to scale, Isovalent Cilium Enterprise provides a powerful connectivity layer with built-in security functionality for Kubernetes that allows you to isolate and secure traffic between applications and other cloud-native infrastructure.

• Deep observability

  Achieve deep visibility into network traffic with detailed flow logs and packet captures for real-time monitoring and troubleshooting.

• Robust security

  Protect against sophisticated threats with robust and scalable security features like micro-segmentation, encryption, and authentication.

• SIEM Integration

  Integrating Isovalent Enterprise for Cilium with a SIEM brings extensive visibility into EKS clusters for security teams. This integration offers:

  • Rich Connectivity Data: Gain insights into the communication patterns and performance of your EKS cluster.
  • TLS Visibility: Monitor the encryption status of your network traffic for enhanced security.
  • Network Security Violations: Identify and respond to network security breaches in real-time.
  • Compliance Monitoring Events: Keep track of compliance-related events and ensure adherence to security regulations.

Who is this for?

Advanced use cases that enterprises may look at when using this solution:

• Microservices architectures

  Isovalent Enterprise for Cilium provides application-aware networking that enables microservices architectures to be easily deployed and managed in a secure and scalable way.

• Large-scale Kubernetes deployments

  Enterprises that have large-scale Kubernetes deployments with hundreds or thousands of nodes can benefit from the high-performance networking and observability features provided by Isovalent Enterprise for Cilium.

• Compliance and regulatory requirements

  Isovalent Enterprise for Cilium provides advanced network policy enforcement, making it easier for enterprises to comply with regulatory requirements such as HIPAA and GDPR.

• Cloud-native security

  Isovalent Enterprise for Cilium provides advanced network security at the kernel level, making it an ideal solution for enterprises that require a cloud-native security approach.