eBPF for Kubernetes Observability: An Architecture Decision Record
ADR on replacing APM agents with eBPF for Kubernetes observability: coverage, overhead, limits, OpenTelemetry eBPF instrumentation, decision guide.
Cilium 1.20 ExternalAuth vs oauth2-proxy vs Istio AuthorizationPolicy
Cilium 1.20 ships the Gateway API ExternalAuth filter from GEP-1494. How it compares with oauth2-proxy and Istio, and why Experimental matters.
Kubernetes CNI Compared: Calico vs Cilium vs Flannel
A 2026 Kubernetes CNI comparison: Calico, Cilium, Flannel, and Multus on dataplane, eBPF, network policy, performance, and a decision matrix for each cluster.
Continuous Profiling with eBPF: Flamegraphs in Prod
A hands-on guide to continuous profiling with eBPF: how Pyroscope and Parca capture CPU and memory flamegraphs in production with near-zero overhead.
Cilium Tetragon Runtime Security: eBPF Hands-On (2026)
A hands-on 2026 guide to Cilium Tetragon: eBPF runtime security, TracingPolicy, process and network enforcement, and how it differs from Falco.
Cilium Sidecarless Service Mesh: An eBPF Deep-Dive
A 2026 deep-dive into Cilium's sidecarless service mesh: how eBPF replaces sidecars, mTLS, L7 policy, and a working setup with trade-offs.
Cilium Mesh vs Istio Ambient: 2026 ADR for Sidecarless Meshes
Cilium Service Mesh vs Istio Ambient — sidecarless architectures compared on data path, mTLS, L7 policy, observability, and migration cost.
Sidecar vs eBPF Service Mesh: An ADR for 2026 Production Workloads
ADR for sidecar vs eBPF service mesh in 2026 — context, options (Istio Ambient, Cilium Mesh, Linkerd2), trade-offs, consequences, and the decision criteria we settled on.
Cilium eBPF Service Mesh: L3-L7 Networking, Observability, Security (2026)
Cilium eBPF service mesh explained: sidecar-free L3-L7 networking, Hubble observability, network policy, mTLS, and why eBPF is reshaping Kubernetes networking in 2026.