When you deploy Kubernetes, you need to install a networking plug-in implementing the Container Networking Interface (CNI) to provide connectivity between workloads. Cilium is a popular and widely-deployed CNI solution that is now the default across many Kubernetes distributions and cloud provider offerings.
Read more
When you deploy Kubernetes, you need to install a networking plug-in implementing the Container Networking Interface (CNI) to provide connectivity between workloads. Cilium is a popular and widely-deployed CNI solution that is now the default across many Kubernetes distributions and cloud provider offerings.
When you deploy Kubernetes, you need to install a networking plug-in implementing the Container Networking Interface (CNI) to provide connectivity between workloads. Cilium is a popular and widely-deployed CNI solution that is now the default across many Kubernetes distributions and cloud provider offerings.
In this course, you will learn the basics of Cilium and how it can be used to connect, observe, and secure Kubernetes clusters. We will start by reviewing Kubernetes container networking and its challenges. We’ll move on to discussing the architecture of Cilium and how it uses eBPF to address those challenges. eBPF is a Linux technology that allows changing the kernel’s behavior through dynamically loaded custom programs. We’ll provide an overview of what eBPF is and how Cilium uses it to benefit cloud native networking.
We will provide a step-by-step guide for installing and setting up Cilium as your CNI. Once installed, we will show how to configure basic network policies to secure your network and how we can use Hubble to observe these network flows. Finally, we will discuss some of the commonly used features of Cilium, such as support for FQDN-based and L7 protocol-aware network policies, and cluster mesh networking.
By the end of this course, you will understand how Cilium and Hubble work and how they can be used to connect, observe, and secure your cloud native environments.
What you'll learn
-
Describe Kubernetes networking and its challenges
-
Discuss Cilium’s architecture and how it leverages eBPF
-
Install Cilium and Hubble and verify their operational status
-
Craft L3-L7 and DNS based Cilium Network Policy to secure Kubernetes network connectivity
-
Use Hubble to observe network flows
-
Enhance your network observability by enabling Cilium Prometheus metrics and integrating those metrics into Grafana dashboards
-
Configure Cilium to provide transparent encryption of network traffic
-
Learn how you can replace kube-proxy with Cilium
-
Configure Cilium for cluster mesh operation to connect multiple Kubernetes clusters
What's inside
Syllabus
Welcome!
Ch1. Introduction to Kubernetes Networking Concepts
Ch2. Introduction to Cilium and eBPF
Ch3. Cilium Network Policy In-Depth
Read more
Syllabus
Good to know
Save this course
Save
Activities
Explore Cilium tutorials and documentation
Show steps
Familiarize yourself with Cilium by going through official tutorials and documentation to gain a foundational understanding.
Show steps
-
Visit the Cilium website and explore the tutorials section
-
Read through the Cilium documentation to understand its architecture and features
Organize and review course materials
Show steps
Review and organize course materials to enhance retention and solidify understanding of key concepts.
Show steps
-
Compile lecture notes, slides, and assignments.
-
Summarize key concepts and create mind maps.
-
Review and test your understanding through self-quizzes.
Review Linux networking fundamentals
Show steps
Strengthen your knowledge of Linux networking concepts to complement and enhance your understanding of Cilium's workings.
Browse courses on
Linux Networking
Show steps
-
Review network configurations and routing.
-
Understand network interfaces and traffic management.
-
Practice configuring and troubleshooting Linux networking.
Seven other activities
Expand to see all activities and additional details
Show all ten activities
Create basic network policies with Cilium
Show steps
Reinforce your understanding of Cilium network policies by creating and testing basic policies in a Kubernetes environment.
Browse courses on
Kubernetes Security
Show steps
-
Set up a Kubernetes cluster with Cilium installed
-
Create a simple deployment and service
-
Craft L3-L4 network policies to restrict network access
-
Test the network policies using kubectl commands
Discuss and compare Cilium with other CNI solutions
Show steps
Engage in peer discussions to understand the advantages and disadvantages of Cilium compared to other CNI solutions, broadening your knowledge of the topic.
Show steps
-
Research different CNI solutions and their capabilities.
-
Participate in peer discussions and share insights.
-
Critically evaluate the strengths and weaknesses of each solution.
Configure and test Cilium network policies
Show steps
Follow guided tutorials to set up and test network policies with Cilium, enhancing the security of your Kubernetes clusters.
Browse courses on
Network Policies
Show steps
-
Create network policy resources in Kubernetes.
-
Inspect network traffic using Cilium commands.
-
Verify policy enforcement and troubleshoot issues.
Build and deploy Kubernetes cluster with Cilium CNI
Show steps
Build a Kubernetes cluster with Cilium CNI to gain hands-on experience with the technology discussed in the course.
Browse courses on
Kubernetes
Show steps
-
Create a Kubernetes cluster (e.g. using kubeadm or Minikube).
-
Install and configure Cilium CNI on the cluster.
-
Deploy a sample application and verify connectivity.
Document your Cilium troubleshooting experience
Show steps
Solidify your knowledge by documenting a common troubleshooting scenario you encountered while working with Cilium, sharing your solution and insights.
Show steps
-
Identify a common Cilium troubleshooting scenario
-
Troubleshoot the issue and document the steps taken
-
Write a blog post, create a video tutorial, or share your solution on a community forum
Troubleshoot Cilium connectivity and policy issues
Show steps
Practice troubleshooting common connectivity and policy issues faced in Cilium deployments, improving your troubleshooting skills.
Show steps
-
Simulate connectivity and policy issues using Kubernetes and Cilium.
-
Use Cilium commands and tools to diagnose and resolve issues.
-
Analyze Kubernetes events and Cilium logs to identify errors.
Design and implement a Cilium-based network security solution
Show steps
Design and implement a network security solution utilizing Cilium to protect your Kubernetes deployments, solidifying your understanding of the technology.
Show steps
-
Define security requirements and network topology.
-
Design and implement Cilium network policies to enforce security.
-
Test and evaluate the solution against security scenarios.
Explore Cilium tutorials and documentation
Show steps
Familiarize yourself with Cilium by going through official tutorials and documentation to gain a foundational understanding.
Show steps
- Visit the Cilium website and explore the tutorials section
- Read through the Cilium documentation to understand its architecture and features
Organize and review course materials
Show steps
Review and organize course materials to enhance retention and solidify understanding of key concepts.
Show steps
- Compile lecture notes, slides, and assignments.
- Summarize key concepts and create mind maps.
- Review and test your understanding through self-quizzes.
Review Linux networking fundamentals
Show steps
Strengthen your knowledge of Linux networking concepts to complement and enhance your understanding of Cilium's workings.
Browse courses on
Linux Networking
Show steps
- Review network configurations and routing.
- Understand network interfaces and traffic management.
- Practice configuring and troubleshooting Linux networking.
Create basic network policies with Cilium
Show steps
Reinforce your understanding of Cilium network policies by creating and testing basic policies in a Kubernetes environment.
Browse courses on
Kubernetes Security
Show steps
- Set up a Kubernetes cluster with Cilium installed
- Create a simple deployment and service
- Craft L3-L4 network policies to restrict network access
- Test the network policies using kubectl commands
Discuss and compare Cilium with other CNI solutions
Show steps
Engage in peer discussions to understand the advantages and disadvantages of Cilium compared to other CNI solutions, broadening your knowledge of the topic.
Show steps
- Research different CNI solutions and their capabilities.
- Participate in peer discussions and share insights.
- Critically evaluate the strengths and weaknesses of each solution.
Configure and test Cilium network policies
Show steps
Follow guided tutorials to set up and test network policies with Cilium, enhancing the security of your Kubernetes clusters.
Browse courses on
Network Policies
Show steps
- Create network policy resources in Kubernetes.
- Inspect network traffic using Cilium commands.
- Verify policy enforcement and troubleshoot issues.
Build and deploy Kubernetes cluster with Cilium CNI
Show steps
Build a Kubernetes cluster with Cilium CNI to gain hands-on experience with the technology discussed in the course.
Browse courses on
Kubernetes
Show steps
- Create a Kubernetes cluster (e.g. using kubeadm or Minikube).
- Install and configure Cilium CNI on the cluster.
- Deploy a sample application and verify connectivity.
Document your Cilium troubleshooting experience
Show steps
Solidify your knowledge by documenting a common troubleshooting scenario you encountered while working with Cilium, sharing your solution and insights.
Show steps
- Identify a common Cilium troubleshooting scenario
- Troubleshoot the issue and document the steps taken
- Write a blog post, create a video tutorial, or share your solution on a community forum
Troubleshoot Cilium connectivity and policy issues
Show steps
Practice troubleshooting common connectivity and policy issues faced in Cilium deployments, improving your troubleshooting skills.
Show steps
- Simulate connectivity and policy issues using Kubernetes and Cilium.
- Use Cilium commands and tools to diagnose and resolve issues.
- Analyze Kubernetes events and Cilium logs to identify errors.
Design and implement a Cilium-based network security solution
Show steps
Design and implement a network security solution utilizing Cilium to protect your Kubernetes deployments, solidifying your understanding of the technology.
Show steps
- Define security requirements and network topology.
- Design and implement Cilium network policies to enforce security.
- Test and evaluate the solution against security scenarios.
Career center
Network Security Engineer
Cloud Security Engineer
Network Architect
Security Architect
Kubernetes Administrator
Cloud Architect
DevOps Engineer
Project Manager
Site Reliability Engineer
System Administrator
Network Engineer
Business Analyst
Software Engineer
Data Analyst
Technical Support Engineer
Reading list
Save
Save
Share
Similar courses
OpenCourser helps millions of learners each year. People visit us to learn workspace skills, ace their exams, and nurture their curiosity.
Our extensive catalog contains over 50,000 courses and twice as many books. Browse by search, by topic, or even by career interests. We'll match you to the right resources quickly.
Find this site helpful? Tell a friend about us.
We're supported by our community of learners. When you purchase or subscribe to courses and programs or purchase books, we may earn a commission from our partners.
Your purchases help us maintain our catalog and keep our servers humming without ads.
Thank you for supporting OpenCourser.
