book

Observability Engineering with Cilium: Observability Magic in the Cloud-Native Journey with Hubble and Tetragon

Name: Observability Engineering with Cilium: Observability Magic in the Cloud-Native Journey with Hubble and Tetragon
Author: Dr. Mehdi Ghane
ISBN: 9798868812583

by Dr. Mehdi Ghane

July 2025

Intermediate to advanced

332 pages

6h 44m

English

Apress

Read now

Unlock full access

Observability Engineering with Cilium
Introduction
Table of Contents
About the Author
About the Technical Reviewer
1. The Groundwork
Hello Cilium World!Are You Ready to Jump In?Where Is My Holistic Mindset?Socioeconomic Change and CiliumSociotechnical Changes and CiliumMapping Out the ItinerarySummary
2. Cloud-Native Phenomena
The Industrial Revolution TimelineKey Components of Industry 4.0DataCenters: The Unsung Hero of Industry 4.0Unveiling the Public Cloud Ontology: It’s simply someone else’s DataCenter!Cloud Migration Strategy PlaybookDecoding Cloud Migration Strategies: Unveiling the 10+1 R’s Rationalization FrameworkThe Paradigm Shift: Cloud-Native DynamicsDemystifying CNA 1.0: Understanding Its Core AttributesWhat Exactly Defines Event-Driven Microservices Systems?What Exactly Defines a Well-Architected Cloud Delivery Framework?What Is the 12-Factor Container?Summary
3. Cloud-Native Maturity Models
The CNMM ParadigmCNCF Approach to Cloud-Native Maturity ModelHarmonizing CNMM and CNCF LandscapeCloud Maturity Model of Open Alliance for Cloud Adoption (OACA)Microsoft Cloud Adoption Framework (CAF)The Methodological Approach to Service MaturityKanban University MethodologyThe C4 Documentation ModelThe ARC42 Documentation ModelFrom Mainframes to MindfulnessBalancing Act: The Trade-offsThe Future Is NowSummary
4. Observability Engineering Fundamentals
Observability Engineering PhilosophyObservability Engineering in the Control FieldsObservability Engineering in the Software FieldsObservability Is Not Monitoring!The Shifting Terrain of Cloud-Native EraEnterprise Architecture and Cloud-NativeObservability-Driven TestingSoftware Observability 101Primary Observability PyramidTwo Endpoint Data Gathering Deployment ArchitecturesThree Monitoring Systems CatalogsFour Levels of Cloud-Native ObservabilityFive Types of Monitoring ServicesClassic Golden SignalsBeyond the Classic Golden SignalsFour Pillars of Classic Monitoring: LDTMCardinality and Dimensionality of MetricsSix Pillars of Cloud-Native Observability: M3PLTTracing, Telemetry, Instrumentation, and NoOpsAI, Machine Learning, and AIOps Work for ObservabilityAI-Native ObservabilityQuantum and Information Theory EffectsThe Art of Alerting QuietlyObservability EffectivenessOutages and Downtime FactorsError Budget and Burn RateObservability NumberscapeSummary
5. Instrumentation Engineering Fundamentals
Instrumentation LandscapeUnboxing the Observability ToolsetSoftware Instrumentation PathfindingOpenTelemetry: A Visionary FitThe OTel SpecificationOTel: The PromiseeBPF-Base Instrumentation: A Strategic FitIntroduction to Grafana BeylaConsiderations Before Adopting eBPFObservability Strategy PositioningContext vs. CoverageSummary

6. Demystifying Cilium’s Spellbinding Nature
Genesis of eBPFBirth of CiliumCilium As Networking HeroCilium As Observability HeroCilium As Security HeroSummary
7. Delineating Cilium Core Architecture
Recap of eBPFCilium ArchitectureAgentOperatorCommand-Line Interface (CLI)CNI Plug-inHow Cilium WorksWhy Opt for Cilium?Networking/CNIService MeshCloud-Native ObservabilityCilium CE or EE?Cilium Scoring ChecklistCilium EE Licensing ModelThe Art of Winning Hearts to CiliumWhat to Share in the First Workshop Session?Cilium CertificationsSummary
8. Portraying Cilium Use Cases
Cilium Networking Use CasesService Load BalancingCloud-Native Networking CNICluster MeshCilium’s Bandwidth ManagerLiberating Kubernetes from kube-proxy and iptablesBorder Gateway Protocol (BGP) with CiliumEgress GatewayCilium Service MeshGateway APICilium Security Use CasesTransparent EncryptionIdentity-Based Policies at ScaleRuntime EnforcementCilium Observability Use CasesService MapMetrics and Tracing ExportIdentity-Aware L3/L4/DNS Network Flow LogsNetwork Protocol VisibilitySummaryNetworking Use CasesSecurity Use CasesObservability Use Cases
9. Observing the Unseen with Cilium and Grafana
Cilium Observability Ensemble: Hubble and TetragonThe Mechanics of TetragonIdentifying Bandwidth-Intensive ApplicationsIdentifying Latency-Intensive ApplicationsThe Mechanics of HubbleWhy Hubble?Who Utilizes Hubble?Is There Any Reason to Forgo Hubble?Enhancing Cluster Security with Network Policies Made EasyWhen Tracing Comes to the SceneAnalyze All Network Flows in GrafanaTroubleshoot a Specific Protocol Like DNSMonitor Process Executions Within ContainersDetecting Suspicious and Malicious BehaviorsHubble Plug-ins for GrafanaSummary
10. Cilium Outstanding, Yet Not Alone
Strategic Contingency RoutesThe Mechanics of PixiePxL LanguageThe Mechanics of FalcoFalco Control (Falcoctl)Summary
Index

Content preview from Observability Engineering with Cilium: Observability Magic in the Cloud-Native Journey with Hubble and Tetragon

D. M. GhaneObservability Engineering with Ciliumhttps://doi.org/10.1007/979-8-8688-1258-3_7

7. Delineating Cilium Core Architecture

Dr. Mehdi Ghane¹

(1)

Frankfurt, Germany

The genesis of the eBPF and Cilium project emerged from a simple yet ambitious vision: to craft a robust CNI agent tailored for Kubernetes, integrating observability and security features, while sidestepping the constraints of iptables through native eBPF utilization. Seamlessly integrating into the L3 network of Kubernetes, Cilium delineates policies and identity-based networking, aspiring to relegate cloud-native networking to the realm of mundane concerns, freeing developers, architects, ...

Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.

Read now

Unlock full access

More than 5,000 organizations count on O’Reilly

O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.

Julian F.

Head of Cybersecurity

I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.

Addison B.

Field Engineer

I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.

Amir M.

Data Platform Tech Lead

I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.

Mark W.

Embedded Software Engineer

Cloud Native DevOps with Kubernetes, 2nd Edition

Publisher Resources

ISBN: 9798868812583Purchase Link Publisher Website

Cloud Computing

Data Engineering

Data Science

AI & ML

Programming Languages

Software Architecture

IT/Ops

Security

Design

Business

Soft Skills

Observability Engineering with Cilium: Observability Magic in the Cloud-Native Journey with Hubble and Tetragon

by Dr. Mehdi Ghane

7. Delineating Cilium Core Architecture

Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.