Loading…
The biggest OpenStack event in the Nordics!

This is a ticketed event. Tickets and more information about the event can be found at http://stockholm.openstacknordic.org
View analytic
Wednesday, October 10 • 13:45 - 14:25
Improve performance and security for containers using Kuryr and Cilium

Sign up or log in to save this to your schedule and see who's attending!

Log in to leave feedback.
Containers in OpenStack are getting more traction every day but there are still concerns about security and performance. In this talk we will describe how to overcome those problems combining the flexibility of SDN and the reliability and speed of the linux kernel.

Cilium is on open source project which implements Kubernetes network policies and provides container network security by using eBPF and XDP packet filtering in the Linux kernel. Kuryr is the OpenStack project that enables native Neutron-based networking in Kubernetes. In this talk we will describe the work that we’ve done to provide Cilium as CNI plugin and how we used Kuryr to integrate it into OpenStack. We will demonstrate how to deploy and configure a Kubernetes cluster using the Cilium-Kuryr integration. We will explain how Cilium provides L7 network policies and its “native routing” mode, where it just allows any routing daemon to route the traffic. We will illustrate Cilium’s features using concrete examples. Thanks to native packet filtering Cilium boosts performance, we will show tests results to measure how Cilium improves throughput compared to other CNI plugins.

Speakers
avatar for Michal Rostecki

Michal Rostecki

Software Engineer, SUSE
Michal Rostecki is contributing to Cilium and maintaining several packages related to container networking and Kubernetes in openSUSE.
avatar for Rossella Sblendido

Rossella Sblendido

Team Lead Networking, SUSE
Rossella Sblendido is involved in OpenStack since Essex. She had been core reviewer for Neutron for several releases and she’s now a member of the Technical Steering Committee of OPNFV and part of the Technical Advisory Committee of the Linux Foundation Networking Fund.


Wednesday October 10, 2018 13:45 - 14:25
Mälarsalen Söder Mälarstrand 29, 118 25 Stockholm, Sweden

Attendees (49)