Modern cloud-native systems are built on highly dynamic distributed infrastructure where containers

spin up and down constantly, services communicate across clusters, and traditional networking

assumptions break down. Linux networking was designed decades ago around static IPs and linear

rule processing, which makes it increasingly difficult to achieve scale in Kubernetes environments.

At the same time, modifying the Linux kernel to keep up with these demands is slow, risky,

and impractical for most organizations. The extended Berkeley packet filter, or EBPF, is a Linux kernel

technology that allows sandboxed programs to run safely

inside the kernel without modifying kernel source code or loading kernel modules.

CILUM is an open source cloud-native networking platform that's built on EBPF, and provides,

secures, and observes connectivity between workloads in Kubernetes and other distributed

environments. Bill Mulligan is a maintainer in the Cillium ecosystem and a member of the team at

isovalent, the company behind Cillium. He joins the show with Gregorvan to discuss how

EBPF works under the hood. Why Sillium has become one of the most

widely adopted Kubernetes networking projects, and how the future of cloud-native infrastructure

is being reshaped by programmable kernels. Gregor Vand is a security-focused technologist,

having previously been a CTO across cybersecurity, cyber insurance, and general

software engineering companies. He is based in Singapore and can be found via his profile at

van.hk or on LinkedIn. Hello and welcome to Software Engineering Daily. My guest today is Bill Mulligan.

Hey, thanks for having me. Yeah, great to have you here today, Bill. We're going to be talking all about Cillium and the

technology E-PBF. Before we get there, as we like to do, it would be great just to hear a bit about

you and what was your journey to joining Cillium? And I believe, like, the company you work

for is sort of a wrapper around Cillam, for example.

...