Kubernetes CNI Compared: Calico vs Cilium vs Flannel
A 2026 Kubernetes CNI comparison: Calico, Cilium, Flannel, and Multus on dataplane, eBPF, network policy, performance, and a decision matrix for each cluster.
Continuous Profiling with eBPF: Flamegraphs in Prod
A hands-on guide to continuous profiling with eBPF: how Pyroscope and Parca capture CPU and memory flamegraphs in production with near-zero overhead.
Cilium Tetragon Runtime Security: eBPF Hands-On (2026)
A hands-on 2026 guide to Cilium Tetragon: eBPF runtime security, TracingPolicy, process and network enforcement, and how it differs from Falco.
Cilium Sidecarless Service Mesh: An eBPF Deep-Dive
A 2026 deep-dive into Cilium's sidecarless service mesh: how eBPF replaces sidecars, mTLS, L7 policy, and a working setup with trade-offs.
Cilium 1.17 Service Mesh: End-to-End Production Tutorial (2026)
Cilium 1.17 sidecarless service mesh — install, mTLS, L7 policies, Hubble dashboards, and migration from Istio sidecar mode.
Cilium Mesh vs Istio Ambient: 2026 ADR for Sidecarless Meshes
Cilium Service Mesh vs Istio Ambient — sidecarless architectures compared on data path, mTLS, L7 policy, observability, and migration cost.
Sidecar vs eBPF Service Mesh: An ADR for 2026 Production Workloads
ADR for sidecar vs eBPF service mesh in 2026 — context, options (Istio Ambient, Cilium Mesh, Linkerd2), trade-offs, consequences, and the decision criteria we settled on.
Cilium eBPF Service Mesh: L3-L7 Networking, Observability, Security 2026
Complete Cilium service mesh guide — eBPF datapath, Envoy integration, L7 policies, Hubble observability, and sidecarless vs Istio trade-offs.
eBPF for Observability: How Kernel-Level Tracing Replaced Traditional APM
eBPF observability guide — verifier, maps, probes, Cilium/Pixie architectures, continuous profiling, and why kernel-level tracing wins over APM.
eBPF for Kubernetes Observability: An Architecture Decision Record for Replacing Traditional APM
Architecture decision record for adopting eBPF-based observability in Kubernetes. Comparison with traditional APM agents, Cilium/Hubble/Pixie evaluation, performance overhead analysis, and migration path.