How to configure Istio’s Gateway Network Topology
Istio has a feature that allows you to configure it to recognize your gateway network topology correctly. -> https://istio.io/latest/docs/ops/configuration/traffic-management/network-topologies/ The...
View ArticleClik here to view.
How to configure minimum TLS version, elliptic curves and PQC for Istio
Today we will briefly talk about how to configure the minimum TLS version and elliptic curves Istio shall use. By default, Istio requires TLS 1.2 as the minimum version and uses Envoy’s default...
View ArticleClik here to view.
Safe Cilium rollout with Cast Off
Before I explain what Cast Off is, I like to quickly explain where the idea came from. While reading the last chapter of “Cilium: Up and Running” from O’Reilly about “Operations”, it was discussed in...
View ArticleCilium’s IPsec performance on Azure Kubernetes Service BYOCNI
After looking at Cilium’s transparent encryption performance for WireGuard and ztunnel on Azure Kubernetes Service BYOCNI, we now look at IPsec. ->...
View ArticleClik here to view.
Cilium ztunnel – native mTLS for Cilium on Azure Kubernetes Service BYOCNI
At KubeCon Europe 2026, the Cilium project announced native mTLS support for Cilium via ztunnel. -> https://cilium.io/blog/2026/03/23/native-mtls-cilium/ Cilium’s ztunnel implementation is a fork of...
View ArticlePerformance comparison Cilium native routing on Azure Kubernetes Service BYOCNI
As a follow-up on the series about Cilium native routing on Azure Kubernetes Service BYOCNI, we focus in today’s blog post on the performance comparison between the different configurations. ->...
View ArticleClik here to view.
An experiment – Enable Cilium native routing on Azure Kubernetes Service...
This is the third and final part of a three-part series about “An experiment – Enable Cilium native routing on Azure Kubernetes Service BYOCNI”. ->...
View ArticleClik here to view.
An experiment – Enable Cilium native routing on Azure Kubernetes Service...
This is the second part of a three-part series about “An experiment – Enable Cilium native routing on Azure Kubernetes Service BYOCNI”. ->...
View ArticleClik here to view.
An experiment – Enable Cilium native routing on Azure Kubernetes Service...
This is the first part of a three-part series about “An experiment – Enable Cilium native routing on Azure Kubernetes Service BYOCNI”. Cilium supports two routing modes, encapsulation and native...
View ArticleClik here to view.
Use Azure Log Alerts with Azure Data Explorer
Since July 2024, the Azure Log Alerts support for Azure Data Explorer is generally available, and you might be familiar with log alerts already by using them with Log Analytics or Application Insights....
View ArticleClik here to view.
Azure Data Explorer network access restrictions
Azure Data Explorer offers several configuration options to restrict the network access to and from an Azure Data Explorer cluster. ->...
View ArticleClik here to view.
Deploy Azure DNS security policies via Terraform
Today, I walk you through a new feature that has been released this year: Azure DNS security policies. -> https://azure.microsoft.com/en-us/updates?WT.mc_id=AZ-MVP-5000119&id=497535 Azure DNS...
View ArticleClik here to view.
Restrict access to the IMDS endpoint on Azure Kubernetes Service with Cilium
In today’s blog post, we take a look at restricting access to the Azure IMDS endpoint on an Azure Kubernetes Service (AKS) cluster with Cilium using the BYOCNI approach. The Instance Metadata Service...
View ArticleClik here to view.
Provide additional metadata information to Cilium for IP addresses outside of...
In Cilium, IP addresses that do not belong to the Pod CIDR or Kubernetes Service CIDR range, and some special ranges like the Kubernetes API server, are recognized as the reserved:world identity. So,...
View ArticleClik here to view.
Azure Load Balancer Health Event Logs
In February, Microsoft announced the general availability of the Azure Load Balancer health event logs. -> https://azure.microsoft.com/en-us/updates?WT.mc_id=AZ-MVP-5000119&id=481818 Those...
View ArticleClik here to view.
Using Hubble CLI’s automatic port forwarding
This will be a rather short blog post today, but it will highlight a new feature in the Hubble CLI in version 1.17 and later. Since version 1.17, the option -P has been added to the Hubble CLI. -P...
View ArticleClik here to view.
Using Cilium Hubble Exporter to log blocked egress traffic on Azure...
In one of my previous blog posts, I covered how to do egress traffic blocking with Cilium bring-your-own CNI on Azure Kubernetes Service ->...
View ArticleClik here to view.
Egress traffic blocking with Calico global network policies on Azure...
In my last blog post, I covered how to do egress traffic blocking with Cilium bring-your-own CNI on Azure Kubernetes Service as Azure CNI powered by Cilium does not officially support Cilium...
View ArticleClik here to view.
Egress traffic blocking with Cilium cluster-wide network policies on Azure...
Today, we talk about how to block egress traffic with Cilium cluster-wide network policies on Azure Kubernetes Service. For this, we need an Azure Kubernetes Service cluster with Cilium installed via...
View ArticleUsing Istio with Kubernetes native sidecars on Azure Kubernetes Service
In my previous blog post, I showed you how to check for specific feature gates on an Azure Kubernetes Service cluster. ->...
View Article
![[imports/adg/photos/213899875_Police-Car-Lights-2.jpg]](http://wehco.media.clients.ellingtoncms.com/imports/adg/photos/213899875_Police-Car-Lights-2_t600.jpg?4326734cdb8e39baa3579048ef63ad7b451e7676)
