project

Tetragon

eBPF-based runtime security tool from the Cilium project that observes kernel events such as process execution and can block or terminate matching processes in the kernel.

Current clusters

build1 publisher

Cilium 1.19 replaces the per-pod Envoy with one eBPF program per node

Cilium 1.19 puts routing, mTLS and observability in one eBPF program per node, with a single Envoy per node for Layer 7. The 100 GB of RAM the post says that frees assumes 1,000 pods at the top of the sidecar range.

Publishers:dev.to

Reality

Evidence24
Adoption38
Hype gap+45
Incentives: Insufficient
Confidence34