Kubernetes Network Policies, eBPF and Cilium
Firewalling pods from first principles: why IP rules fail, how NetworkPolicy works, how eBPF and Cilium enforce it, and what it costs in latency
Harish Sheoran
I’m a software engineer. I build scalable, high-performance systems.
I write things up here as I work them out — mostly networking, systems and backend. Written first for me, published in case they’re useful to you.
Start with the engineering notes, or read more about me.