Tag: Container
-
Cilium ztunnel – native mTLS for Cilium on Azure Kubernetes Service BYOCNI
At KubeCon Europe 2026, the Cilium project announced native mTLS support for Cilium via ztunnel. -> https://cilium.io/blog/2026/03/23/native-mtls-cilium/ Cilium’s ztunnel implementation is a fork of Istio’s ztunnel, reengineered to directly integrate it with the Cilium control plane and SPIRE as a certificate authority. Bringing ztunnel to Cilium is a joint effort by Isovalent and Microsoft. In…
-
Performance comparison Cilium native routing on Azure Kubernetes Service BYOCNI
As a follow-up on the series about Cilium native routing on Azure Kubernetes Service BYOCNI, we focus in today’s blog post on the performance comparison between the different configurations. -> https://www.danielstechblog.io/an-experiment-enable-cilium-native-routing-on-azure-kubernetes-service-byocni-part-1/ -> https://www.danielstechblog.io/an-experiment-enable-cilium-native-routing-on-azure-kubernetes-service-byocni-part-2/ -> https://www.danielstechblog.io/an-experiment-enable-cilium-native-routing-on-azure-kubernetes-service-byocni-part-3/ BYOCNI – Cilium VXLAN encapsulation BYOCNI – Cilium VXLAN encapsulation + WireGuard encryption BYOCNI – Cilium native routing + Wire…
-
An experiment – Enable Cilium native routing on Azure Kubernetes Service BYOCNI – Part 3
This is the third and final part of a three-part series about “An experiment – Enable Cilium native routing on Azure Kubernetes Service BYOCNI”. -> https://www.danielstechblog.io/an-experiment-enable-cilium-native-routing-on-azure-kubernetes-service-byocni-part-1/ -> https://www.danielstechblog.io/an-experiment-enable-cilium-native-routing-on-azure-kubernetes-service-byocni-part-2/ We will focus today on how to enable Cilium native routing with Azure Route Server and BGP on Azure Kubernetes Service BYOCNI. Azure Route Server Azure Route…
-
An experiment – Enable Cilium native routing on Azure Kubernetes Service BYOCNI – Part 2
This is the second part of a three-part series about “An experiment – Enable Cilium native routing on Azure Kubernetes Service BYOCNI”. -> https://www.danielstechblog.io/an-experiment-enable-cilium-native-routing-on-azure-kubernetes-service-byocni-part-1/ We will focus today on how to enable Cilium native routing with WireGuard Transparent Encryption on Azure Kubernetes Service BYOCNI. Enable Cilium native routing with WireGuard Transparent Encryption In this example,…
-
An experiment – Enable Cilium native routing on Azure Kubernetes Service BYOCNI – Part 1
This is the first part of a three-part series about “An experiment – Enable Cilium native routing on Azure Kubernetes Service BYOCNI”. Cilium supports two routing modes, encapsulation and native routing. Due to its versatility of not depending on the underlying network, the encapsulation, also called tunneling, mode is the default one for most Cilium…
-
Use node initialization taints on Azure Kubernetes Service with Cilium
On an Azure Kubernetes Service cluster with Bring Your Own Container Network Interface (BYOCNI) using Cilium, you could not use Cilium’s agent-not-ready taint functionality. -> https://docs.cilium.io/en/stable/installation/taints/ The reason for that is that the Azure control plane blocks add/remove operations on taints via the Kubernetes API. You have to remove taints via the Azure Kubernetes Service…