Dan

Dan

@thebsdbox.co.uk

Tinkerer extraordinaire πŸ‘¨β€πŸ”§ mainly eBPF 🐝, Kubernetes, Cilium and kube-vip.io

484 followers447 following225 posts

Dan reposted

Join Nico Vibert and Dan Finneran this Friday for a for a sneak peek at a lab demonstrating how #Tetragon can protect against an #OpenClaw agent trying to access or share private data. #eBPF & #Cilium Office Hours πŸ“† Friday, May 8, 9am ET / 3pm CEST πŸ“ΊοΈ Join live: www.youtube.com/watch?v=G2R3...

So initially I started writing a service mesh (for fun), then everyone started talking about AI workloads. So here we are, a transparent gateway that can be applied to running workloads (no restart) that allows control between agents/workloads and an LLM. kube-gateway.io

Dan reposted

When Heptio was acquired by VMware we had to give up our downtown Seattle office. We had just gotten a new light up sign for the reception and no one wanted it so it has been sitting in my garage for the past 8 years. I have space now so just hung it up and it is magnificent.

Docker can now run workloads inside a VM, we have now gone completely full circle at this point. 🫠

I am two people. - One, doesn't like to implement too much logging in my applications to make things clearer. - Two, the one who has no idea why my application behaves that way.. because the logs don't report anything.

Dan reposted

This Friday, join Nicolas Vibert and Daniel Finneran as they talk through the key trends 2026 will bring in #Kubernetes networking, security, and #eBPF! eBPF & Cilium Office Hours πŸ“† Friday, January 23, 3pm CET πŸ“Ί Join live: www.youtube.com/watch?v=xBex...

Dan reposted

Existing AI workloads? A few annotations and I can now transparently change their behaviour, swap out models in their API calls and more. (Thanks to #eBPF)

Existing AI workloads? A few annotations and I can now transparently change their behaviour, swap out models in their API calls and more. (Thanks to #eBPF)

Re-found the virtual machine manager project for Kubernetes from last year, this example has BeOS inside a kubernetes cluster ssh-ing out to the control plane to manage itself πŸ˜‚. No CNI needed either thanks to eBPF.

Regardless of what the AI client is (GO, Python etc...) we can now ensure we jump in to the "existing" data path and manipulate any of the data in either direction πŸ˜€

Using eBPF 🐝 and some proxy magic πŸͺ„ to change the model on the fly transparently to the AI workload. We can see the first responses from llama and subsequent ones from gemma (more emojis).

Two pods with their traffic being proxied (thx eBPF 🐝) through a gateway, one using kTLS and the other user-land TLS. πŸ”

Dan reposted

Dan reposted

An eBPF Loophole: Using XDP for Egress Traffic XDP is Linux's fastest packet processor but only handles incoming traffic. We found a loophole in how the kernel determines packet direction to make it work for outgoing traffic too! Blog post with details πŸ‘‡ loopholelabs.io/blog/xdp-for...

loopholelabs.ioUsing XDP for Egress TrafficXDP only works for ingress. We found a loophole that lets it work for egress. Here's how we did the impossible.

Managed 25 minutes in this thing before I was starting to overheat πŸ₯΅

Dan@thebsdbox.co.uk

Come join me in 20 minutes, rumour is i'll be doing this in Halloween Fancy Dress too (whilst writing eBPF code) πŸ§Ÿβ€β™‚οΈ

Come join me in 20 minutes, rumour is i'll be doing this in Halloween Fancy Dress too (whilst writing eBPF code) πŸ§Ÿβ€β™‚οΈ

Cilium@cilium.io

Join @thebsdbox.co.uk this Friday to get hands on with eBPF and Kprobes. eBPF & Cilium Office Hours πŸ“† Friday, 31 October, 2pm GMT πŸŽ₯ Livestream: www.youtube.com/live/JMnG5Hf...

Just finished the John Candy documentary. He was pretty much in movies of my time so it hit pretty hard. I’d recommend it.

Pretty close to the episode of Brookyln nine nine where they go undercover in the library.

This post is unavailable.

Been wanting to play with in kernel (kTLS) for a while, my mTLS proxy for encrypted pods now moves all encryption into the kernel 🀩

Spent a good 50 mins queuing for the Star Wars ride at Disney, Oscar (who is 5) repeatedly referred to the β€œlightswords” for the duration and refused to be corrected. Pretty surprised we survived the queue.

Dan reposted