Sign in

Bill Mulligan 🐝🐝🐝

@breakawaybilly.bsky.social
1.2K followers 437 following 2.6K posts

Cloud Native networking, observability, and security with Cilium, eBPF, and Isovalent Newsletter cilium.io/newsletter

PostsRepliesMedia
Bill Mulligan 🐝🐝🐝 @breakawaybilly.bsky.social · 29/07/2026
Meta switched to a custom scheduler with eBPF which delivered 🐝 3.28 megawatts of power savings +1.1% on weighted-ads-ranked 28% reduction in service p99 latency 60% reduction in service p99 latency 18% reduction in timeout errors on the critical path engineering.fb.com/2026/07/13/m...
010
Bill Mulligan 🐝🐝🐝 @breakawaybilly.bsky.social · 28/07/2026
"Cillium is like gravity: every time I come across some networking related technology I want to play with, Cillium has an implementation." social.treehouse.systems/@juliancalab...
021
Bill Mulligan 🐝🐝🐝 @breakawaybilly.bsky.social · 27/07/2026
eBPF on cars? Now you CAN
labs.iximiuz.com
Cars, Containers and CAN Networking | iximiuz Labs
This tutorial shows different ways to work with CAN
050
Bill Mulligan 🐝🐝🐝 @breakawaybilly.bsky.social · 24/07/2026
First stop on the eBPF World Tour was Vienna for IETF and eBPF Vienna Meetup 🐝 From someone not coming from a traditional IT background and now be speaking at IETF was a big honor for me. I guess you never know how much your life can change in a decade.
030
Bill Mulligan 🐝🐝🐝 @breakawaybilly.bsky.social · 23/07/2026
Obviously I like my own quote in this eBPF Foundation press release 😂 “eBPF is becoming the strategic technology of choice for infrastructure platforms and teams. ebpf.foundation/ebpf-foundat...
ebpf.foundation
eBPF Foundation Accelerates Growth with Meta, Toyota Membership, and New Strategic Board Leadership – eBPF
100
Bill Mulligan 🐝🐝🐝 @breakawaybilly.bsky.social · 23/07/2026
"IMO the maintenance burden of eBPF programs is much much lighter than out-of-tree kernel modules, with the safety guarantee offered by the verifier at the same time."
kxxt.dev
Actually Maintaining an eBPF Program
Maintaining an eBPF program means surviving multiple kernel versions, architectures, Kconfig options, LLVM changes, and regressions. Here is what I learned while stabilizing tracexec’s eBPF backend.
010
Bill Mulligan 🐝🐝🐝 @breakawaybilly.bsky.social · 22/07/2026
An eBPF-based virtual network dataplane and control plane, written in Rust. Most understanding of eBPF-based networking comes from reading about systems like Cilium rather than building one. Sarena exists to close that gap directly.
github.com
GitHub - erwin-kok/sarena: An eBPF-based virtual network dataplane and control plane, written in Rust.
An eBPF-based virtual network dataplane and control plane, written in Rust. - erwin-kok/sarena
040
Bill Mulligan 🐝🐝🐝 @breakawaybilly.bsky.social · 22/07/2026
I'll be speaking at IETF in Vienna tomorrow. Since RFC 9669: BPF ISA was published in 2024 a lot has happen and I'll be giving the eBPF ecosystem updates. On a personal note, I still remember when I first heard about IETF in my masters. 9 years later, I'm the one giving the speech 🤯
040
Bill Mulligan 🐝🐝🐝 @breakawaybilly.bsky.social · 22/07/2026
From eBPF podcasts to local meetups and conference talks to hands-on coding labs Teodor Podobnik really covered a lot in his Community & Advocacy Fellowship from eBPF Foundation 🐝 Look for applications to open again in the fall 👀
ebpf.foundation
Community & Advocacy Fellowship – Teodor Podobnik – eBPF
May 2026 marked the end of my inaugural Community & Advocacy Fellowship with the eBPF Foundation, awarded in recognition of my ongoing contributions to the eBPF community.
020
Bill Mulligan 🐝🐝🐝 @breakawaybilly.bsky.social · 21/07/2026
Cloudflare's case study with the eBPF Foundation is just the teaser for the 8 part blog series we have coming with them. It will cover why Cloudflare bet on eBPF as a platform rather than a collection of point solutions Coming soon ™️
ebpf.foundation
Cloudflare Uses eBPF to PowerSecurity, Networking, andObservability at Global Scale
011
Bill Mulligan 🐝🐝🐝 @breakawaybilly.bsky.social · 21/07/2026
Looks like hello-ebpf, the Java library for eBPF just got a new homepage and docs ☕ 🐝
parttimenerd.github.io
hello-ebpf
hello-ebpf is the first and only Java library for eBPF that lets you write both the kernel-side BPF program and the user-space control code entirely in Java — no C files, no Makefiles, no separate…
010
Bill Mulligan 🐝🐝🐝 @breakawaybilly.bsky.social · 20/07/2026
eBPF Foundation is launching the eBPF Company Landscape and we need your help to fill it! Our goal is to track all of the companies leveraging eBPF in their products to show how widely it is used and help end users understand what their vendor choices are 🐝 ebpf.foundation/unveiling-th...
ebpf.foundation
Unveiling the eBPF Company Landscape: Mapping the Businesses Powering the eBPF Ecosystem – eBPF
000
Bill Mulligan 🐝🐝🐝 @breakawaybilly.bsky.social · 20/07/2026
The next eBPF acquisition is in the books with Attribute - FinOps Without Tagging joining DoiT 🐝 I see this one as the turning point as it is the first company in the eBPF space to be acquired outside the traditional categories of networking, observability, and security.
100
Bill Mulligan 🐝🐝🐝 @breakawaybilly.bsky.social · 17/07/2026
Nicolas and team are back at it again. Let them know what is bogging down your cluster networking and help us settle the bet if Gateway API, VMs, or AI use cases will be the most important in the survey this year 🗒️
isovalent.com
Help Us Map The State of Kubernetes Networking in 2026
Share how you run Kubernetes networking in 2026. Take the 10-min survey and enter to win prizes!
000
Bill Mulligan 🐝🐝🐝 @breakawaybilly.bsky.social · 17/07/2026
Looking at Cong Wang's analysis of the eBPF ecosystem, everything from lines of code to projects on Github to mailing list activity to kfuncs to academic publications and citations is up and to the right 📈 Twelve years in and I feel like we are just getting started
wangcong.org
eBPF Trend Analysis
The evolution of eBPF (extended Berkeley Packet Filter) has been one of the most significant developments in Linux system observability and networking over the past decade. As we look at the…
000
Bill Mulligan 🐝🐝🐝 @breakawaybilly.bsky.social · 16/07/2026
“The biggest value for us is that Cilium simply works, and works well,” said Pons. “With our previous CNIs, failures were painful and hard to resolve. Now we know that once Cilium is deployed, it will work. That reliability is genuinely valuable.” - From Michelin
cncf.io
Michelin
In 2024, Michelin’s Container as a Service (CaaS) platform team underwent a full rebuild of the company’s Kubernetes platform using open source software, replacing a vendor-based solution that had…
040
Bill Mulligan 🐝🐝🐝 @breakawaybilly.bsky.social · 16/07/2026
From AI/GPU neoclouds to hyperscalers to sovereign European clouds and major Kubernetes distributions, everyone is on Cilium Which of our collectable cards in your favorite and should we make a sticker book for next KubeCon?
000
Bill Mulligan 🐝🐝🐝 @breakawaybilly.bsky.social · 15/07/2026
eBPF-based service dependency mapper for Kubernetes. Builds an accurate topology even through Envoy edge proxies by resolving HTTP Host headers instead of proxy IPs — no sidecars, no instrumentation. Written in Rust, queryable via MCP From Yash Nandwana
github.com
GitHub - YashNandwana/qubit: eBPF-based service dependency mapper for Kubernetes. Builds an accurate topology even through Envoy edge proxies by resolving HTTP Host headers instead of proxy IPs — no sidecars, no instrumentation. Written in Rust, queryable via MCP.
eBPF-based service dependency mapper for Kubernetes. Builds an accurate topology even through Envoy edge proxies by resolving HTTP Host headers instead of proxy IPs — no sidecars, no instrumentatio...
060
Bill Mulligan 🐝🐝🐝 @breakawaybilly.bsky.social · 15/07/2026
Tom Gillis is always talking about how Cisco is turning into a platform company. You buy into the networking and now you get the security along side it too. Where I'm seeing that on the Isovalent side is turning our eBPF kernel engineering into enterprise workflows through Cisco Cloud Control.
000
Bill Mulligan 🐝🐝🐝 @breakawaybilly.bsky.social · 13/07/2026
The last 4.5 years with Isovalent have been a ride on a rocket ship 🚀 but my favorite ride has always been on the bicycle 🚵‍♂️ Starting in August, I'll be going on a semi-batical (yes, Isovalent is cool like that) with my wife by bike around the world.
140
Bill Mulligan 🐝🐝🐝 @breakawaybilly.bsky.social · 10/07/2026
Write eBPF programs in Ruby 💎 A partition + codegen layer over matz/spinel that compiles eBPF-eligible methods to .bpf.c and keeps the rest native C, with transparent dispatch.
github.com
GitHub - yuskesh/spinel-ebpf: Write eBPF programs in Ruby: a partition + codegen layer over matz/spinel that compiles eBPF-eligible methods to .bpf.c and keeps the rest native C, with transparent dispatch.
Write eBPF programs in Ruby: a partition + codegen layer over matz/spinel that compiles eBPF-eligible methods to .bpf.c and keeps the rest native C, with transparent dispatch. - yuskesh/spinel-ebpf
020
Bill Mulligan 🐝🐝🐝 @breakawaybilly.bsky.social · 10/07/2026
"eBPF can unlock new pathways towards efficient power management in modern server systems" As we talk about compute in terms of Gigawatt datacenter, this is just one more way that eBPF is helping with the most pressing demands we are placing on our technology stack
ebpf.foundation
Research Update: Managing Server Power with eBPF (Part 2) – eBPF
Contributed By Daniel Wong, University of California, Riverside
030
Bill Mulligan 🐝🐝🐝 @breakawaybilly.bsky.social · 09/07/2026
A userspace eBPF VM written in Go gBPF tries to ease the validation and testing of eBPF programs by providing control over the input and output memory as well as mimicking the different helpers leveraged when writing eBPF programs.
github.com
GitHub - scitags/gbpf: A userspace eBPF VM written in Go
A userspace eBPF VM written in Go. Contribute to scitags/gbpf development by creating an account on GitHub.
000
Bill Mulligan 🐝🐝🐝 @breakawaybilly.bsky.social · 09/07/2026
Isovalent is a company of kernel engineers, not CSS majors. When I thought about how investors valued us, I would say it was mainly based on our kernel expertise with enterprise workflows starting to be built in I've put X marks on where I think other startups in the eBPF space land, any guesses?
010
Bill Mulligan 🐝🐝🐝 @breakawaybilly.bsky.social · 07/07/2026
eBPF based companies capture value by building a technical moat in the kernel and delivering enterprise workflows in user space. When evaluating a pitch deck claiming eBPF capabilities, carefully consider how the founding team is capturing customer value in both kernel space and user space.
030
Bill Mulligan 🐝🐝🐝 @breakawaybilly.bsky.social · 03/07/2026
Of the five key take away at the top of this conversation from Daniel Finneran and Olimpiu Pop this is my favorite: "While eBPF is famous for networking (Cilium), its true power lies in observability and enforcement across any syscall.
infoq.com
How eBPF Empowers Developers to Observe Inside the Linux Kernel in a Safe and Unintrusive Way
Dan Fineran explores how eBPF has evolved far beyond its roots in packet filtering into a robust, safe way to extend the Linux kernel. He explains how the eBPF "verifier", the security guardrail,…
020
Bill Mulligan 🐝🐝🐝 @breakawaybilly.bsky.social · 02/07/2026
eBPF startup exits have gone through 3 distinct waves 🐝 The first wave of acquisitions consisted of performance based observability point solution tools that gave the acquiring company feature or sensor upgrades.
ebpf.foundation
The eBPF Foundation Launches the Investor’s Due Diligence Guide: Why eBPF is Infrastructure’s Ultimate Technical and Economic Moat – eBPF
120
Bill Mulligan 🐝🐝🐝 @breakawaybilly.bsky.social · 02/07/2026
I've long thought eBPF would be critical for security in the AI era. Paul Arah did a great job capturing how it will help both sandbox AI workloads and defend against AI assisted attacks 🐝
isovalent.com
Taming the AI Double Threat with Isovalent Runtime Security
This blog post explores how AI-assisted attacks are changing the assumptions we make about the adversary,
010
Bill Mulligan 🐝🐝🐝 @breakawaybilly.bsky.social · 01/07/2026
With Meta running an average of 180 eBPF programs per server, ensuring that they don't conflict with one another is critical to avoid This tutorial is the deep dive into what Meta has learned building and running safe multi-program eBPF environments
conferences.sigcomm.org
BPFChain: Building Safe Multi-Program eBPF Environments — Tutorial | ACM SIGCOMM 2026
Multi-program eBPF deployments are now the norm in production infrastructure — yet the educational landscape has not kept pace. While eBPF fundamentals are thoroughly covered in existing courses and…
010
Bill Mulligan 🐝🐝🐝 @breakawaybilly.bsky.social · 29/06/2026
"The companies that own that kernel layer and build upward into analytics, policy management, and workflow integration are structurally positioned to displace incumbents who cannot replicate kernel-level access through any amount of engineering effort."
ebpf.foundation
eBPF Replatforming Thesis
010
Bill Mulligan 🐝🐝🐝 @breakawaybilly.bsky.social · 26/06/2026
A tool for measuring and visualizing end-to-end latency in distributed trading systems using eBPF and flame graphs
github.com
GitHub - avolkov-II/latency-profiler: A tool for measuring and visualizing end-to-end latency in distributed trading systems using eBPF and flame graphs.
A tool for measuring and visualizing end-to-end latency in distributed trading systems using eBPF and flame graphs. - avolkov-II/latency-profiler
020
Bill Mulligan 🐝🐝🐝 @breakawaybilly.bsky.social · 26/06/2026
eBPF Runtime Reporter and Profiler
github.com
GitHub - tanelpoder/brr: eBPF Runtime Reporter and Profiler
eBPF Runtime Reporter and Profiler. Contribute to tanelpoder/brr development by creating an account on GitHub.
010
Bill Mulligan 🐝🐝🐝 @breakawaybilly.bsky.social · 26/06/2026
This is a hand-written eBPF tool tree. The eBPF programs are assembly source files. The build is plain make.
github.com
GitHub - mashirochenkernel/assemblyebpf: ASSEMBLY EBPF
ASSEMBLY EBPF. Contribute to mashirochenkernel/assemblyebpf development by creating an account on GitHub.
000
Bill Mulligan 🐝🐝🐝 @breakawaybilly.bsky.social · 26/06/2026
eBPF-based system health and security observability for Automotive Grade Linux A Rust kernel probe suite and daemon streaming live CPU, memory, scheduler, block, network, per-cgroup bandwidth, and security-syscall telemetry to a Flutter dashboard over memory and D-Bus
github.com
GitHub - meta-flutter/agl-health: eBPF-based system health and security observability for Automotive Grade Linux — a Rust/aya kernel probe suite and daemon streaming live CPU, memory, scheduler, block, network, per-cgroup bandwidth, and security-syscall telemetry to a Flutter dashboard over shared memory and D-Bus.
eBPF-based system health and security observability for Automotive Grade Linux — a Rust/aya kernel probe suite and daemon streaming live CPU, memory, scheduler, block, network, per-cgroup bandwidth...
000
Bill Mulligan 🐝🐝🐝 @breakawaybilly.bsky.social · 26/06/2026
Build a custom Linux kernel with a full eBPF feature set (BTF, struct_ops/sched_ext, tracing, netem, BPF LSM, AF_XDP) and run it under Apple's container runtime on Apple Silicon macOS
github.com
GitHub - yuskesh/apple-container-ebpf-kernel: Build a custom Linux kernel with a full eBPF feature set (BTF, struct_ops/sched_ext, tracing, netem, BPF LSM, AF_XDP) and run it under Apple's container runtime on Apple Silicon macOS.
Build a custom Linux kernel with a full eBPF feature set (BTF, struct_ops/sched_ext, tracing, netem, BPF LSM, AF_XDP) and run it under Apple's container runtime on Apple Silicon macOS. - yuskes...
010
Bill Mulligan 🐝🐝🐝 @breakawaybilly.bsky.social · 26/06/2026
Per-pod Kubernetes network cost, by AWS billing path. An eBPF agent that attributes every byte to the pod paying for it, and gets cross-AZ right
github.com
GitHub - tollwing/tollwing: Per-pod Kubernetes network cost, by AWS billing path. An eBPF agent that attributes every byte to the pod paying for it, and gets cross-AZ right.
Per-pod Kubernetes network cost, by AWS billing path. An eBPF agent that attributes every byte to the pod paying for it, and gets cross-AZ right. - tollwing/tollwing
010
Bill Mulligan 🐝🐝🐝 @breakawaybilly.bsky.social · 26/06/2026
eBee have been one of the core representations of Isovalent's culture Raphaël Pinson did a great write up of his journey to producing them at scale with AI. I think it is also a lesson on where the industry is going overall, from handcrafted work to declarative workflows.
dev.to
Four years chasing a consistent eBee — and what I built when I finally caught one
Four years of AI image generation, three platforms, one stubborn cartoon bee, and the declarative pipeline I built to stop the drift.
010
Bill Mulligan 🐝🐝🐝 @breakawaybilly.bsky.social · 25/06/2026
"Cilium provides the network substrate and CiliumNetworkPolicy restricts which agent identities may reach which MCP server. The combination (cert-manager + agent-level mTLS + CiliumNetworkPolicy) is materially simpler than a service mesh."
cncf.io
Why cloud native belongs at the heart of agentic AI: Lessons from building a multi-agent security platform on Kubernetes
In March, I gave a talk at KubeCon + CloudNativeCon Europe 2026 in Amsterdam. After the session, the same questions kept coming up on the CNCF Slack and in person: why build agentic AI on cloud…
032
Bill Mulligan 🐝🐝🐝 @breakawaybilly.bsky.social · 24/06/2026
eBPF probes CPython frame execution and returns early for unprotected processes
github.com
GitHub - altugbozkurt07/agentguard
Contribute to altugbozkurt07/agentguard development by creating an account on GitHub.
000
Bill Mulligan 🐝🐝🐝 @breakawaybilly.bsky.social · 24/06/2026
An independent runtime safety layer for AI-driven robots — keeps the robot inside its approved limits no matter what the AI outputs, and records evidence it never left From Mehmet Cenk Ayberkin
github.com
GitHub - cenkayberkin-png/robot-governor: An independent runtime safety layer for AI-driven robots — keeps the robot inside its approved limits no matter what the AI outputs, and records evidence it never left.
An independent runtime safety layer for AI-driven robots — keeps the robot inside its approved limits no matter what the AI outputs, and records evidence it never left. - cenkayberkin-png/robot-gov...
000
Bill Mulligan 🐝🐝🐝 @breakawaybilly.bsky.social · 24/06/2026
eBPF tooling to implement RFC 3514 - the "evil bit" in the IPv4 header
github.com
GitHub - lothan/evil-bit: eBPF tooling to implement RFC 3514 - the "evil bit" in the IPv4 header
eBPF tooling to implement RFC 3514 - the "evil bit" in the IPv4 header - lothan/evil-bit
010
Bill Mulligan 🐝🐝🐝 @breakawaybilly.bsky.social · 24/06/2026
eBPF-based USB subsystem tracer and diagnostic tool for Linux BSP
github.com
GitHub - dengtaowei/usbtrace: eBPF-based USB subsystem tracer and diagnostic tool for Linux BSP.
eBPF-based USB subsystem tracer and diagnostic tool for Linux BSP. - dengtaowei/usbtrace
010
Bill Mulligan 🐝🐝🐝 @breakawaybilly.bsky.social · 24/06/2026
Auto-sync listening ports into XDP/nftables, preserve return traffic, keep host protection alive with fallback. Zero-config, maximum protection.
github.com
GitHub - Kookiejarz/Auto_XDP: Auto-sync listening ports into XDP/nftables, preserve return traffic, keep host protection alive with fallback. Zero-config, maximum protection.
Auto-sync listening ports into XDP/nftables, preserve return traffic, keep host protection alive with fallback. Zero-config, maximum protection. - Kookiejarz/Auto_XDP
000
Bill Mulligan 🐝🐝🐝 @breakawaybilly.bsky.social · 24/06/2026
Open-source eBPF compatibility evidence and CI gate
github.com
GitHub - Kernel-Guard/bpfcompat: Open-source eBPF compatibility evidence and CI gate
Open-source eBPF compatibility evidence and CI gate - Kernel-Guard/bpfcompat
000
Bill Mulligan 🐝🐝🐝 @breakawaybilly.bsky.social · 24/06/2026
Cool to see that mTLS transparently encrypted traffic can have the same performance as native routing with Cilium's integration of ztunnel
danielstechblog.io
Cilium ztunnel – native mTLS for Cilium on Azure Kubernetes Service BYOCNI – Daniel's Tech Blog
Daniel's Tech Blog
012
Bill Mulligan 🐝🐝🐝 @breakawaybilly.bsky.social · 23/06/2026
I'll be speaking at the eBPF Meetup in Vienna on July 23rd 🐝 The State of eBPF in 2026: From Kernel Tooling to Strategic Platform Thanks to Reinhard Kugler, Filip Nikolic, and Dimitrij Klesev for organizing!
meetup.com
Autotune & Beyond, Do., 23. Juli 2026, 17:30 | Meetup
We are happy to announce the next [eBPF](https://ebpf.io/)-focused meetup in Vienna scheduled for July 23, 2026. All talks will be suited for beginners and experts as well
020
Bill Mulligan 🐝🐝🐝 @breakawaybilly.bsky.social · 23/06/2026
A workload-identity bus for Kubernetes-aware eBPF — one stable identity for the scheduler, network, and tracing
github.com
GitHub - ccyrene/prism: A workload-identity bus for Kubernetes-aware eBPF — one stable identity for the scheduler, network, and tracing.
A workload-identity bus for Kubernetes-aware eBPF — one stable identity for the scheduler, network, and tracing. - ccyrene/prism
121
Bill Mulligan 🐝🐝🐝 @breakawaybilly.bsky.social · 23/06/2026
With funding from Alpha-Omega, eBPF continues to advance security work with the addition of KASAN memory checker support for eBPF programs
alpha-omega.dev
Driving eBPF Performance: LSFMMBPF 2026 Updates | Bootlin
Join Bootlin's Alexis Lothoré for a recap of the LSFMMBPF 2026 eBPF track in Zagreb. Discover the latest on BPF features, the KASAN for eBPF project, and Linux kernel development.
010
Bill Mulligan 🐝🐝🐝 @breakawaybilly.bsky.social · 22/06/2026
I have the same question as Eunseon Lee. I'll be in Korea in September, who should I meet?
osskorea2026.sched.com
000
Bill Mulligan 🐝🐝🐝 @breakawaybilly.bsky.social · 19/06/2026
Netflix is responsible for ~15% of all internet traffic and they use eBPF to understand their network 🐝 "The value: Comprehensive coverage. Every service shows up here because we’re capturing actual network traffic."
netflixtechblog.com
From Silos to Service Topology: Why Netflix Built a Real-Time Service Map
By Parth Jain, Rakesh Sukumar, Yingwu Zhao, Renzo Sanchez & Nathan Fisher How we built a living map of our distributed infrastructure to…
030