cilium – kernel native security & ddos mitigation for microservices with bpf
TRANSCRIPT
![Page 1: Cilium – Kernel Native Security & DDOS Mitigation for Microservices with BPF](https://reader035.vdocuments.us/reader035/viewer/2022062905/5a6cf3927f8b9ade418b47f3/html5/thumbnails/1.jpg)
Cilium – Kernel Native Security & DDOS
Mitigation for Microservices with BPF
Cynthia ThomasTechnology Evangelist, Covalent
@_techcet_
![Page 2: Cilium – Kernel Native Security & DDOS Mitigation for Microservices with BPF](https://reader035.vdocuments.us/reader035/viewer/2022062905/5a6cf3927f8b9ade418b47f3/html5/thumbnails/2.jpg)
Gordon is back!And he got a job at Lego.
![Page 3: Cilium – Kernel Native Security & DDOS Mitigation for Microservices with BPF](https://reader035.vdocuments.us/reader035/viewer/2022062905/5a6cf3927f8b9ade418b47f3/html5/thumbnails/3.jpg)
Robot Competition
● Local marketing launches an Robot competition for Danish residents
● Upcoming deadline means tons of uploaded media
![Page 4: Cilium – Kernel Native Security & DDOS Mitigation for Microservices with BPF](https://reader035.vdocuments.us/reader035/viewer/2022062905/5a6cf3927f8b9ade418b47f3/html5/thumbnails/4.jpg)
Robot Competition
User Data MongoDB
Data store
Inventory
Image UploadService
Web Front-End
KafkaBrokerKafkaBrokerKafkaBroker Image
processingImage processing
Image processing
ZookeeperZookeeperZookeeper
End-User
Admintask
Audit
![Page 5: Cilium – Kernel Native Security & DDOS Mitigation for Microservices with BPF](https://reader035.vdocuments.us/reader035/viewer/2022062905/5a6cf3927f8b9ade418b47f3/html5/thumbnails/5.jpg)
Gordon’s Task List● Deploy Cilium HTTP-aware security for microservices
● Isolate Kafka resources for old & new services
● DDOS mitigation via XDP/BPF
![Page 6: Cilium – Kernel Native Security & DDOS Mitigation for Microservices with BPF](https://reader035.vdocuments.us/reader035/viewer/2022062905/5a6cf3927f8b9ade418b47f3/html5/thumbnails/6.jpg)
Gordon’s 1st TaskUpdate HTTP Security for Microservices
![Page 7: Cilium – Kernel Native Security & DDOS Mitigation for Microservices with BPF](https://reader035.vdocuments.us/reader035/viewer/2022062905/5a6cf3927f8b9ade418b47f3/html5/thumbnails/7.jpg)
Application Architectures
Delivery Frequency
Operational Complexity
Single Server App
Yearly
Low
Evolution of Application Design & Delivery Frequency
![Page 8: Cilium – Kernel Native Security & DDOS Mitigation for Microservices with BPF](https://reader035.vdocuments.us/reader035/viewer/2022062905/5a6cf3927f8b9ade418b47f3/html5/thumbnails/8.jpg)
Application Architectures
Delivery Frequency
Operational Complexity
Single Server App
Yearly
Low
3-Tier App
Monthly
Moderate
Evolution of Application Design & Delivery Frequency
![Page 9: Cilium – Kernel Native Security & DDOS Mitigation for Microservices with BPF](https://reader035.vdocuments.us/reader035/viewer/2022062905/5a6cf3927f8b9ade418b47f3/html5/thumbnails/9.jpg)
Application Architectures
Delivery Frequency
Operational Complexity
Single Server App
Yearly
Low
Distributed Microservices
10-100 x’s / day
Extreme
3-Tier App
Monthly
Moderate
Evolution of Application Design & Delivery Frequency
![Page 10: Cilium – Kernel Native Security & DDOS Mitigation for Microservices with BPF](https://reader035.vdocuments.us/reader035/viewer/2022062905/5a6cf3927f8b9ade418b47f3/html5/thumbnails/10.jpg)
The world still runs on iptablesmatching IPs and ports:
$ iptables -A INPUT -p tcp -s 15.15.15.3 --dport 80 \-m conntrack --ctstate NEW -j ACCEPT
![Page 11: Cilium – Kernel Native Security & DDOS Mitigation for Microservices with BPF](https://reader035.vdocuments.us/reader035/viewer/2022062905/5a6cf3927f8b9ade418b47f3/html5/thumbnails/11.jpg)
Robot Competition
User Data MongoDB
Data store
Inventory
Image UploadService
Web Front-End
KafkaBroker
Image processing
Zookeeper
End-User
Admintask
Audit
Example: HTTP calls
![Page 12: Cilium – Kernel Native Security & DDOS Mitigation for Microservices with BPF](https://reader035.vdocuments.us/reader035/viewer/2022062905/5a6cf3927f8b9ade418b47f3/html5/thumbnails/12.jpg)
API
Web Front-End
Security for Microservices
Image UploadService
GET /image
POST /image
GET /image/flagged
PUT /image/id
![Page 13: Cilium – Kernel Native Security & DDOS Mitigation for Microservices with BPF](https://reader035.vdocuments.us/reader035/viewer/2022062905/5a6cf3927f8b9ade418b47f3/html5/thumbnails/13.jpg)
APIPOST /image
Web Front-End
Security for Microservices
Image UploadService
GET /image
GET /image/flagged
PUT /image/id
POST /image
![Page 14: Cilium – Kernel Native Security & DDOS Mitigation for Microservices with BPF](https://reader035.vdocuments.us/reader035/viewer/2022062905/5a6cf3927f8b9ade418b47f3/html5/thumbnails/14.jpg)
L3/L4
APIPOST /image
Web Front-End
Security for Microservices
iptables -s 10.1.1.1-p tcp --dport 80-j ACCEPT
Image UploadService
GET /image
POST /image
GET /image/flagged
PUT /image/id
![Page 15: Cilium – Kernel Native Security & DDOS Mitigation for Microservices with BPF](https://reader035.vdocuments.us/reader035/viewer/2022062905/5a6cf3927f8b9ade418b47f3/html5/thumbnails/15.jpg)
L3/L4
APIPOST /image
Web Front-End
Security for Microservices
iptables -s 10.1.1.1-p tcp --dport 80-j ACCEPT
exposed
exposed
exposed
Image UploadService
GET /image
POST /image
GET /image/flagged
PUT /image/id
![Page 16: Cilium – Kernel Native Security & DDOS Mitigation for Microservices with BPF](https://reader035.vdocuments.us/reader035/viewer/2022062905/5a6cf3927f8b9ade418b47f3/html5/thumbnails/16.jpg)
Network Security has not evolved for microservices…
…until now.
![Page 17: Cilium – Kernel Native Security & DDOS Mitigation for Microservices with BPF](https://reader035.vdocuments.us/reader035/viewer/2022062905/5a6cf3927f8b9ade418b47f3/html5/thumbnails/17.jpg)
APIPOST /image
Web Front-End
Cilium API-Aware Security
Image UploadService
GET /image
GET /image/flagged
PUT /image/id
POST /image
![Page 18: Cilium – Kernel Native Security & DDOS Mitigation for Microservices with BPF](https://reader035.vdocuments.us/reader035/viewer/2022062905/5a6cf3927f8b9ade418b47f3/html5/thumbnails/18.jpg)
L7
APIPOST /image
Web Front-End
Cilium API-Aware Security
Image UploadService
GET /image
POST /image
GET /image/flagged
PUT /image/id
FROM Web Front-EndALLOW POST /image
![Page 19: Cilium – Kernel Native Security & DDOS Mitigation for Microservices with BPF](https://reader035.vdocuments.us/reader035/viewer/2022062905/5a6cf3927f8b9ade418b47f3/html5/thumbnails/19.jpg)
![Page 20: Cilium – Kernel Native Security & DDOS Mitigation for Microservices with BPF](https://reader035.vdocuments.us/reader035/viewer/2022062905/5a6cf3927f8b9ade418b47f3/html5/thumbnails/20.jpg)
Under the Hood: BPFLinux
Superpowers
Unleashed
![Page 21: Cilium – Kernel Native Security & DDOS Mitigation for Microservices with BPF](https://reader035.vdocuments.us/reader035/viewer/2022062905/5a6cf3927f8b9ade418b47f3/html5/thumbnails/21.jpg)
BPF instruction setstruct bpf_insn prog[] = {
BPF_MOV64_REG(BPF_REG_6, BPF_REG_1), BPF_LD_ABS(BPF_B, ETH_HLEN + offsetof(struct iphdr, protocol) /* R0 =
ip->proto */), BPF_STX_MEM(BPF_W, BPF_REG_10, BPF_REG_0, -4), /* *(u32 *)(fp - 4) = r0
*/ BPF_MOV64_REG(BPF_REG_2, BPF_REG_10), BPF_ALU64_IMM(BPF_ADD, BPF_REG_2, -4), /* r2 = fp - 4 */BPF_LD_MAP_FD(BPF_REG_1, map_fd), BPF_RAW_INSN(BPF_JMP | BPF_CALL, 0, 0, 0, BPF_FUNC_map_lookup_elem), BPF_JMP_IMM(BPF_JEQ, BPF_REG_0, 0, 2), BPF_MOV64_IMM(BPF_REG_1, 1), /* r1 = 1 */BPF_RAW_INSN(BPF_STX | BPF_XADD | BPF_DW, BPF_REG_0, BPF_REG_1, 0, 0),
/* xadd r0 += r1 */BPF_MOV64_IMM(BPF_REG_0, 0), /* r0 = 0 */BPF_EXIT_INSN(),
};
Reference: https://git.kernel.org/pub/scm/linux/kernel/git/ast/bpf.git/tree/samples/bpf/sock_example.c
![Page 22: Cilium – Kernel Native Security & DDOS Mitigation for Microservices with BPF](https://reader035.vdocuments.us/reader035/viewer/2022062905/5a6cf3927f8b9ade418b47f3/html5/thumbnails/22.jpg)
Cilium
CiliumAgent
![Page 23: Cilium – Kernel Native Security & DDOS Mitigation for Microservices with BPF](https://reader035.vdocuments.us/reader035/viewer/2022062905/5a6cf3927f8b9ade418b47f3/html5/thumbnails/23.jpg)
Userspace
Kernelspace
Cilium Architecture
CiliumAgent
![Page 24: Cilium – Kernel Native Security & DDOS Mitigation for Microservices with BPF](https://reader035.vdocuments.us/reader035/viewer/2022062905/5a6cf3927f8b9ade418b47f3/html5/thumbnails/24.jpg)
API Calls
Userspace
Kernelspace
Plugins
Cilium Architecture
CiliumAgent
![Page 25: Cilium – Kernel Native Security & DDOS Mitigation for Microservices with BPF](https://reader035.vdocuments.us/reader035/viewer/2022062905/5a6cf3927f8b9ade418b47f3/html5/thumbnails/25.jpg)
BPF
API Calls
BPF Code & Maps
Userspace
Kernelspace
Plugins
Cilium Architecture
CiliumAgent
![Page 26: Cilium – Kernel Native Security & DDOS Mitigation for Microservices with BPF](https://reader035.vdocuments.us/reader035/viewer/2022062905/5a6cf3927f8b9ade418b47f3/html5/thumbnails/26.jpg)
BPF
API Calls
BPF Code & Maps
Userspace
Kernelspace
Plugins
Cilium Architecture
CiliumAgent
Extremely scalable, highly customized
network filtering, load-balancing, and
monitoring
![Page 27: Cilium – Kernel Native Security & DDOS Mitigation for Microservices with BPF](https://reader035.vdocuments.us/reader035/viewer/2022062905/5a6cf3927f8b9ade418b47f3/html5/thumbnails/27.jpg)
BPF BPF
API Calls
BPF Code & Maps
Userspace
Kernelspace
Plugins
Cilium Architecture
CiliumAgent
![Page 28: Cilium – Kernel Native Security & DDOS Mitigation for Microservices with BPF](https://reader035.vdocuments.us/reader035/viewer/2022062905/5a6cf3927f8b9ade418b47f3/html5/thumbnails/28.jpg)
BPF BPF
API Calls
BPF Code & Maps
Packets
Userspace
Kernelspace
Plugins
Cilium Architecture
CiliumAgent
![Page 29: Cilium – Kernel Native Security & DDOS Mitigation for Microservices with BPF](https://reader035.vdocuments.us/reader035/viewer/2022062905/5a6cf3927f8b9ade418b47f3/html5/thumbnails/29.jpg)
BPF
BPF BPF
API Calls
BPF Code & Maps
Packets
Userspace
Kernelspace
Plugins
Cilium Architecture
CiliumAgent
![Page 30: Cilium – Kernel Native Security & DDOS Mitigation for Microservices with BPF](https://reader035.vdocuments.us/reader035/viewer/2022062905/5a6cf3927f8b9ade418b47f3/html5/thumbnails/30.jpg)
BPF
BPF BPF
API Calls
BPF Code & Maps
Packets
Userspace
Kernelspace
Plugins
Cilium Architecture
CiliumAgent
![Page 31: Cilium – Kernel Native Security & DDOS Mitigation for Microservices with BPF](https://reader035.vdocuments.us/reader035/viewer/2022062905/5a6cf3927f8b9ade418b47f3/html5/thumbnails/31.jpg)
BPF
BPF BPF
API Calls
BPF Code & Maps
Packets
Userspace
Kernelspace
CLI,Monitoring,
Policies
Plugins
Cilium Architecture
CiliumAgent
![Page 32: Cilium – Kernel Native Security & DDOS Mitigation for Microservices with BPF](https://reader035.vdocuments.us/reader035/viewer/2022062905/5a6cf3927f8b9ade418b47f3/html5/thumbnails/32.jpg)
Gordon’s 2nd TaskIsolate Kafka Topics
![Page 33: Cilium – Kernel Native Security & DDOS Mitigation for Microservices with BPF](https://reader035.vdocuments.us/reader035/viewer/2022062905/5a6cf3927f8b9ade418b47f3/html5/thumbnails/33.jpg)
Kafka?Used for building real-time pipelines and streaming apps.
- Horizontally scalable
- Fault-tolerant
- “Wicked fast”
Defined by its own protocol.
1/3 of all Fortune 500 companies use Kafka[1]
![Page 34: Cilium – Kernel Native Security & DDOS Mitigation for Microservices with BPF](https://reader035.vdocuments.us/reader035/viewer/2022062905/5a6cf3927f8b9ade418b47f3/html5/thumbnails/34.jpg)
Kafka ConceptsTopic 1 Producers
Kafka Broker
Topic 1
Topic N
Topic 1 Consumer Group A
Topic 1 Consumer Group B
![Page 35: Cilium – Kernel Native Security & DDOS Mitigation for Microservices with BPF](https://reader035.vdocuments.us/reader035/viewer/2022062905/5a6cf3927f8b9ade418b47f3/html5/thumbnails/35.jpg)
Security for Microservices
Gordon worries about open Kafka topics
The API is too open!How do I bring on
new services?
![Page 36: Cilium – Kernel Native Security & DDOS Mitigation for Microservices with BPF](https://reader035.vdocuments.us/reader035/viewer/2022062905/5a6cf3927f8b9ade418b47f3/html5/thumbnails/36.jpg)
Robot Competition
User Data MongoDB
Data store
Inventory
Image UploadService
Web Front-End
KafkaBrokerKafkaBrokerKafkaBroker Image
processingImage processing
Image processing
ZookeeperZookeeperZookeeper
End-User
Admintask
Audit
Example: Kafka calls
![Page 37: Cilium – Kernel Native Security & DDOS Mitigation for Microservices with BPF](https://reader035.vdocuments.us/reader035/viewer/2022062905/5a6cf3927f8b9ade418b47f3/html5/thumbnails/37.jpg)
Kafka.API
Imageprocessing
Security for Microservices
Kafka Broker
Fetch inventory
Fetch image
Fetch userid
Fetch analytics
Produce inventory
Produce image
Produce userid
Produce analytics
![Page 38: Cilium – Kernel Native Security & DDOS Mitigation for Microservices with BPF](https://reader035.vdocuments.us/reader035/viewer/2022062905/5a6cf3927f8b9ade418b47f3/html5/thumbnails/38.jpg)
Kafka.API
Fetch image
Imageprocessing
Security for Microservices
Kafka Broker
Fetch inventory
Fetch image
Produce userid
Fetch userid
![Page 39: Cilium – Kernel Native Security & DDOS Mitigation for Microservices with BPF](https://reader035.vdocuments.us/reader035/viewer/2022062905/5a6cf3927f8b9ade418b47f3/html5/thumbnails/39.jpg)
L3/L4
Kafka.API
Fetch image
Imageprocessing
Security for Microservices
iptables -s 10.1.1.1-p tcp --dport 9092-j ACCEPT
Kafka Broker
Fetch inventory
Fetch image
Produce userid
Fetch userid
![Page 40: Cilium – Kernel Native Security & DDOS Mitigation for Microservices with BPF](https://reader035.vdocuments.us/reader035/viewer/2022062905/5a6cf3927f8b9ade418b47f3/html5/thumbnails/40.jpg)
L3/L4
Kafka.API
Fetch image
Imageprocessing
Security for Microservices
iptables -s 10.1.1.1-p tcp --dport 9092-j ACCEPT
exposed
exposed
exposed
Kafka Broker
Fetch inventory
Fetch image
Produce userid
Fetch userid
![Page 41: Cilium – Kernel Native Security & DDOS Mitigation for Microservices with BPF](https://reader035.vdocuments.us/reader035/viewer/2022062905/5a6cf3927f8b9ade418b47f3/html5/thumbnails/41.jpg)
Kafka.API
Fetch image
Imageprocessing
Security for Microservices
Kafka Broker
Fetch inventory
Fetch image
Produce userid
Fetch userid
![Page 42: Cilium – Kernel Native Security & DDOS Mitigation for Microservices with BPF](https://reader035.vdocuments.us/reader035/viewer/2022062905/5a6cf3927f8b9ade418b47f3/html5/thumbnails/42.jpg)
L7
Kafka.API
Fetch image
Imageprocessing
Security for Microservices
Kafka Broker
Fetch inventory
Fetch image
Produce userid
Fetch userid
FROM Image processingALLOW Fetch image
![Page 43: Cilium – Kernel Native Security & DDOS Mitigation for Microservices with BPF](https://reader035.vdocuments.us/reader035/viewer/2022062905/5a6cf3927f8b9ade418b47f3/html5/thumbnails/43.jpg)
Demo!
Get real with Gordon
![Page 44: Cilium – Kernel Native Security & DDOS Mitigation for Microservices with BPF](https://reader035.vdocuments.us/reader035/viewer/2022062905/5a6cf3927f8b9ade418b47f3/html5/thumbnails/44.jpg)
Demo: Kafka API Filtering
app1-producer
app1-consumer
app2-producer
app2-consumer
kafka
![Page 45: Cilium – Kernel Native Security & DDOS Mitigation for Microservices with BPF](https://reader035.vdocuments.us/reader035/viewer/2022062905/5a6cf3927f8b9ade418b47f3/html5/thumbnails/45.jpg)
What just happened?
![Page 46: Cilium – Kernel Native Security & DDOS Mitigation for Microservices with BPF](https://reader035.vdocuments.us/reader035/viewer/2022062905/5a6cf3927f8b9ade418b47f3/html5/thumbnails/46.jpg)
L7
Kafka.API
Produce imageprocessing
app1-producer
Demo: Kafka API Filtering
Kafka Broker
Produce imageprocessing
Produce userdata
FROM app1-producerALLOW Produce imageprocessing
![Page 47: Cilium – Kernel Native Security & DDOS Mitigation for Microservices with BPF](https://reader035.vdocuments.us/reader035/viewer/2022062905/5a6cf3927f8b9ade418b47f3/html5/thumbnails/47.jpg)
BPF
BPF BPF
API Calls
BPF Code & Maps
Packets
Userspace
Kernelspace
CLI,Monitoring,
Policies
Plugins
Sidecar Proxy
CiliumAgent
SidecarProxy
![Page 48: Cilium – Kernel Native Security & DDOS Mitigation for Microservices with BPF](https://reader035.vdocuments.us/reader035/viewer/2022062905/5a6cf3927f8b9ade418b47f3/html5/thumbnails/48.jpg)
BPF
BPF BPF
API Calls
BPF Code & Maps
Packets
Userspace
Kernelspace
CLI,Monitoring,
Policies
Plugins
In-Kernel Kafka Parsing
CiliumAgent
kernel proxyBPF
![Page 49: Cilium – Kernel Native Security & DDOS Mitigation for Microservices with BPF](https://reader035.vdocuments.us/reader035/viewer/2022062905/5a6cf3927f8b9ade418b47f3/html5/thumbnails/49.jpg)
Gordon’s 3rd TaskDDOS Mitigation
![Page 50: Cilium – Kernel Native Security & DDOS Mitigation for Microservices with BPF](https://reader035.vdocuments.us/reader035/viewer/2022062905/5a6cf3927f8b9ade418b47f3/html5/thumbnails/50.jpg)
Robot Competition● Local marketing launches
competition for Danish residents only
● DDOS anticipated from other countries and anti-Lego activists
![Page 51: Cilium – Kernel Native Security & DDOS Mitigation for Microservices with BPF](https://reader035.vdocuments.us/reader035/viewer/2022062905/5a6cf3927f8b9ade418b47f3/html5/thumbnails/51.jpg)
Robot Competition
User Data MongoDB
Data store
Inventory
Image UploadService
Web Front-End
KafkaBroker
Image processing
Zookeeper
End-User
Admintask
Audit
Example: DDOS attack!
![Page 52: Cilium – Kernel Native Security & DDOS Mitigation for Microservices with BPF](https://reader035.vdocuments.us/reader035/viewer/2022062905/5a6cf3927f8b9ade418b47f3/html5/thumbnails/52.jpg)
![Page 53: Cilium – Kernel Native Security & DDOS Mitigation for Microservices with BPF](https://reader035.vdocuments.us/reader035/viewer/2022062905/5a6cf3927f8b9ade418b47f3/html5/thumbnails/53.jpg)
BPF
BPF BPF
API Calls
BPF Code & Maps
Packets
Userspace
Kernelspace
CLI,Monitoring,
Policies
Plugins
XDP/BPF handled in NIC driver
CiliumAgent
XDP
![Page 54: Cilium – Kernel Native Security & DDOS Mitigation for Microservices with BPF](https://reader035.vdocuments.us/reader035/viewer/2022062905/5a6cf3927f8b9ade418b47f3/html5/thumbnails/54.jpg)
Source: https://www.netdevconf.org/2.1/slides/apr6/zhou-netdev-xdp-2017.pdf
Facebook published BPF/XDP numbersfor L3/L4 LB at Netdev 2.1
BPF/XDP throughput
IPVS throughput
![Page 55: Cilium – Kernel Native Security & DDOS Mitigation for Microservices with BPF](https://reader035.vdocuments.us/reader035/viewer/2022062905/5a6cf3927f8b9ade418b47f3/html5/thumbnails/55.jpg)
BPF with XDP Setup
pktgen attack:~11.6 Mpbsrandomly in 10.0.0.0/8
legit traffic:netperf tests on 10.192.1.0/24
Blacklist 16M rules
All /32s in 10.0.0.0/8
![Page 56: Cilium – Kernel Native Security & DDOS Mitigation for Microservices with BPF](https://reader035.vdocuments.us/reader035/viewer/2022062905/5a6cf3927f8b9ade418b47f3/html5/thumbnails/56.jpg)
BPF with XDP for DDoS mitigationMetric iptables / ipset XDPDDoS rate [packets/s] 11.6M 11.6MDrop rate [packets/s] 7.1M 11.6MTime to load rules [time] 3 min 20 sec 31 secLatency under load [ms] 2.3ms 0.1msThroughput under DDoS [Gbit/s] 0.014 6.5
Requests/s under DDoS [kReq/s] 0.28 82.8
Sender: Send 64B packets as fast as possible è Receiver: Drop as fast as possible
Source: Daniel Borkmann’s presentation:http://schd.ws/hosted_files/ossna2017/da/BPFandXDP.pdf
![Page 57: Cilium – Kernel Native Security & DDOS Mitigation for Microservices with BPF](https://reader035.vdocuments.us/reader035/viewer/2022062905/5a6cf3927f8b9ade418b47f3/html5/thumbnails/57.jpg)
● Cilium deployment for microservices successfully secured HTTP traffic
● Kafka resources were isolated to protect existing services from new ones
●Mitigated DDOS attacks via XDP/BPF
Gordon’s Summary
![Page 58: Cilium – Kernel Native Security & DDOS Mitigation for Microservices with BPF](https://reader035.vdocuments.us/reader035/viewer/2022062905/5a6cf3927f8b9ade418b47f3/html5/thumbnails/58.jpg)
Cilium Project Status• Cilium v0.12 release in October
• Docker, Kubernetes, and Mesos integration
• Looking for feedback and contributions
![Page 59: Cilium – Kernel Native Security & DDOS Mitigation for Microservices with BPF](https://reader035.vdocuments.us/reader035/viewer/2022062905/5a6cf3927f8b9ade418b47f3/html5/thumbnails/59.jpg)
Take Action!
• Getting Started Using Docker: docs.cilium.io/
• Join our Slack community!
• Check out the project website for more details: https://www.cilium.io/
Please ★us on
GitHub
![Page 60: Cilium – Kernel Native Security & DDOS Mitigation for Microservices with BPF](https://reader035.vdocuments.us/reader035/viewer/2022062905/5a6cf3927f8b9ade418b47f3/html5/thumbnails/60.jpg)
Thank You!
github.com/cilium/cilium
cilium.io
@ciliumproject