Thread by @richburroughs

Next up is @lizrice talking about Cilium :) #KubeCon

Specifically about Cilium’s service mesh :)

Liz started off asking who is tired and a lot of hands went up, including hers 😂 #KubeCon

Liz explaining a bit of the history of service mesh and the sidecar pattern. #KubeCon

Can we move service mesh to the kernel? Mostly. L4 and below is handled but not L7 (the app layer). But Cilium already has visibility into L7. #KubeCon

Liz doing a demo showing how we can see L7 things like HTTP requests/responses/forwards. #KubeCon

Cilium uses eBPF to program the kernel and Envoy for the L7 part. #KubeCon

A CRD called CiliumEnvoyConfig configures the Envoy listeners. #KubeCon

Removing the sidecars means less containers running, and less resources used #KubeCon

These same things could be done with other service meshes (Istio, Linkerd, etc.). #KubeCon

This is pretty cool stuff. I’m super down to get rid of sidecars as much as possible. As Liz mentioned it’s a lot of duplicated resources to have one in every pod. #KubeCon

Liz is so great at explaining things. #KubeCon