KCD Lima: eBee in Peru!

Drawing parallels between eBPF/Cloud Native and Inca technologies

Transcript

1. Liz Rice eBee in Peru! Chief Open Source Officer, Isovalent at Cisco
2. ¡Hola! Me llamo Liz 👋 • Open source and community at Isovalent, now part of Cisco • Author Learning eBPF & Container Security • Formerly CNCF Governing Board, chair of Technical Oversight Committee • Early career writing network protocol code
3. This is eBee
4. What is ? Makes the kernel programmable
5. userspace kernel app event eBPF program system calls - run custom code in the kernel
6. userspace kernel app eBPF program eBPF Verifier system calls - safely run custom code in the kernel 🔍
7. Photo: Smishra1 CC BYSA 4.0 One day in July 2024
8. ✅ Open Source, many contributors ✅ Field-hardened The verifier is software too Much reduced chance of a kernel crash
9. Like Inca walls, eBPF is Robust Good for security Takes skill to build
10. Incas built incredible things together Ayni - reciprocal work Mita - required work on state projects Minka - work for the benefit of the community
11. Sometimes Incas had to make bug fixes
12. Incas upgraded to avoid vulnerabilities Rebuilding rope bridges every year Photo by Marcos Venteo:
13. eBPF is the foundation for powerful Cloud Native tools for networking, observability and security
14. Chasquis - messenger runners Fit and trained to run long distances Relay system - up to 300km / day Incas had networking
15. Controls on people and goods as they passed through checkpoints Incas had network policies
16. Incas had encrypted data traffic Quipus - knotted strings
17. Incas had observability hubble Observation points high up
18. Incas had security Walls Narrow staircases Gates with doors Armed guards
19. Did the Incas have Tetragon?
20. apiVersion: cilium.io/v1alpha1 kind: TracingPolicy metadata: name: "inca" spec: kprobes: - call: "security_file_permission" ... selectors: - matchArgs: - index: 0 operator: "Equal" values: - "/lost_city_of_inca.txt" matchActions: - action: Sigkill 🚀 process 021c177557f5 /usr/bin/cat /lost_city_of_inca.txt 📚 read 021c177557f5 /usr/bin/cat /lost_city_of_inca.txt 💥 exit 021c177557f5 /usr/bin/cat /lost_city_of_inca.txt SIGKILL Did the Incas have Tetragon?
21. Muchas gracias! ebpf.io cilium.io tetragon.io isovalent.com/labs