├── LICENSE ├── README.md ├── cfps ├── CFP-003-template.md └── README.md ├── cilium ├── CFP-1189-connectivity-tests-speedup.md ├── CFP-14339-cilium-mtu-model.md ├── CFP-22215-mutual-auth-for-service-mesh.md ├── CFP-25243-high-scale-ipcache.md ├── CFP-25694-move-cilium-cli-to-cilium-repo.md ├── CFP-27196-scale-testing-ci.md ├── CFP-27752-operator-manages-cilium-identities.md ├── CFP-28427-fqdn-selectors.md ├── CFP-28986-mutual-auth-updates.md ├── CFP-30572-non-default-deny-policies.md ├── CFP-31752-active-connection-tracking.md ├── CFP-31893-move-hubble-into-cilium.md ├── CFP-32810-hybrid-routing-mode.md ├── CFP-32820-improve-scalability-of-health-probing.md ├── CFP-33716-packet-tracing.md ├── CFP-34577-per-service-lb-algorithm-selection.md ├── CFP-35631-support-cni-status-operation.md ├── CFP-36975-configuration-profiles.md ├── CFP-37315-bgp-auto-discovery.md ├── CFP-37350-clang-format-for-bpf-formatting.md ├── CFP-38341-multigateway-egress-gateway-policy.md ├── CFP-39646-decouple-internal-policy-engine-from-external-api.md ├── CFP-39757-doc-improvement-plan.md ├── CFP-39876-clustermesh-filtered-export.md ├── CFP-TODO-delegated-ipam-cilium-ips.md ├── README.md ├── cilium │ └── CFP-37454-egress-connection-timeouts.md └── images │ ├── 28986-after-exploit-with-auth-and-encryption.png │ ├── 28986-after-exploit.png │ ├── 28986-before-exploit-with-auth-and-encryption.png │ ├── 28986-before-exploit.png │ ├── 28986-connection-based-mutual-auth.png │ ├── 28986-general-architecture.png │ ├── CFP-27752-pod-creation-process.png │ ├── CFP-33716-demo.png │ ├── CFP-33716-user-story.png │ ├── SPIFFE-SPIRE-arch-with-datapath.png │ ├── SPIFFE-SPIRE-cilium-agent-delegated.png │ ├── SPIFFE-SPIRE-original-kube-arch.png │ ├── conn-tests-concurrent-output.gif │ └── mTLS-general-architecture.png ├── hubble ├── CFP-26438-network-policy-correlation.md ├── CFP-30788-managing-hubble-metrics-cardinality.md ├── CFP-37472-flowlog-aggregation.md └── README.md └── tetragon └── README.md /LICENSE: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cilium/design-cfps/HEAD/LICENSE -------------------------------------------------------------------------------- /README.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cilium/design-cfps/HEAD/README.md -------------------------------------------------------------------------------- /cfps/CFP-003-template.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cilium/design-cfps/HEAD/cfps/CFP-003-template.md -------------------------------------------------------------------------------- /cfps/README.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cilium/design-cfps/HEAD/cfps/README.md -------------------------------------------------------------------------------- /cilium/CFP-1189-connectivity-tests-speedup.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cilium/design-cfps/HEAD/cilium/CFP-1189-connectivity-tests-speedup.md -------------------------------------------------------------------------------- /cilium/CFP-14339-cilium-mtu-model.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cilium/design-cfps/HEAD/cilium/CFP-14339-cilium-mtu-model.md -------------------------------------------------------------------------------- /cilium/CFP-22215-mutual-auth-for-service-mesh.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cilium/design-cfps/HEAD/cilium/CFP-22215-mutual-auth-for-service-mesh.md -------------------------------------------------------------------------------- /cilium/CFP-25243-high-scale-ipcache.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cilium/design-cfps/HEAD/cilium/CFP-25243-high-scale-ipcache.md -------------------------------------------------------------------------------- /cilium/CFP-25694-move-cilium-cli-to-cilium-repo.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cilium/design-cfps/HEAD/cilium/CFP-25694-move-cilium-cli-to-cilium-repo.md -------------------------------------------------------------------------------- /cilium/CFP-27196-scale-testing-ci.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cilium/design-cfps/HEAD/cilium/CFP-27196-scale-testing-ci.md -------------------------------------------------------------------------------- /cilium/CFP-27752-operator-manages-cilium-identities.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cilium/design-cfps/HEAD/cilium/CFP-27752-operator-manages-cilium-identities.md -------------------------------------------------------------------------------- /cilium/CFP-28427-fqdn-selectors.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cilium/design-cfps/HEAD/cilium/CFP-28427-fqdn-selectors.md -------------------------------------------------------------------------------- /cilium/CFP-28986-mutual-auth-updates.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cilium/design-cfps/HEAD/cilium/CFP-28986-mutual-auth-updates.md -------------------------------------------------------------------------------- /cilium/CFP-30572-non-default-deny-policies.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cilium/design-cfps/HEAD/cilium/CFP-30572-non-default-deny-policies.md -------------------------------------------------------------------------------- /cilium/CFP-31752-active-connection-tracking.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cilium/design-cfps/HEAD/cilium/CFP-31752-active-connection-tracking.md -------------------------------------------------------------------------------- /cilium/CFP-31893-move-hubble-into-cilium.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cilium/design-cfps/HEAD/cilium/CFP-31893-move-hubble-into-cilium.md -------------------------------------------------------------------------------- /cilium/CFP-32810-hybrid-routing-mode.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cilium/design-cfps/HEAD/cilium/CFP-32810-hybrid-routing-mode.md -------------------------------------------------------------------------------- /cilium/CFP-32820-improve-scalability-of-health-probing.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cilium/design-cfps/HEAD/cilium/CFP-32820-improve-scalability-of-health-probing.md -------------------------------------------------------------------------------- /cilium/CFP-33716-packet-tracing.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cilium/design-cfps/HEAD/cilium/CFP-33716-packet-tracing.md -------------------------------------------------------------------------------- /cilium/CFP-34577-per-service-lb-algorithm-selection.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cilium/design-cfps/HEAD/cilium/CFP-34577-per-service-lb-algorithm-selection.md -------------------------------------------------------------------------------- /cilium/CFP-35631-support-cni-status-operation.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cilium/design-cfps/HEAD/cilium/CFP-35631-support-cni-status-operation.md -------------------------------------------------------------------------------- /cilium/CFP-36975-configuration-profiles.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cilium/design-cfps/HEAD/cilium/CFP-36975-configuration-profiles.md -------------------------------------------------------------------------------- /cilium/CFP-37315-bgp-auto-discovery.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cilium/design-cfps/HEAD/cilium/CFP-37315-bgp-auto-discovery.md -------------------------------------------------------------------------------- /cilium/CFP-37350-clang-format-for-bpf-formatting.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cilium/design-cfps/HEAD/cilium/CFP-37350-clang-format-for-bpf-formatting.md -------------------------------------------------------------------------------- /cilium/CFP-38341-multigateway-egress-gateway-policy.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cilium/design-cfps/HEAD/cilium/CFP-38341-multigateway-egress-gateway-policy.md -------------------------------------------------------------------------------- /cilium/CFP-39646-decouple-internal-policy-engine-from-external-api.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cilium/design-cfps/HEAD/cilium/CFP-39646-decouple-internal-policy-engine-from-external-api.md -------------------------------------------------------------------------------- /cilium/CFP-39757-doc-improvement-plan.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cilium/design-cfps/HEAD/cilium/CFP-39757-doc-improvement-plan.md -------------------------------------------------------------------------------- /cilium/CFP-39876-clustermesh-filtered-export.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cilium/design-cfps/HEAD/cilium/CFP-39876-clustermesh-filtered-export.md -------------------------------------------------------------------------------- /cilium/CFP-TODO-delegated-ipam-cilium-ips.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cilium/design-cfps/HEAD/cilium/CFP-TODO-delegated-ipam-cilium-ips.md -------------------------------------------------------------------------------- /cilium/README.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cilium/design-cfps/HEAD/cilium/README.md -------------------------------------------------------------------------------- /cilium/cilium/CFP-37454-egress-connection-timeouts.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cilium/design-cfps/HEAD/cilium/cilium/CFP-37454-egress-connection-timeouts.md -------------------------------------------------------------------------------- /cilium/images/28986-after-exploit-with-auth-and-encryption.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cilium/design-cfps/HEAD/cilium/images/28986-after-exploit-with-auth-and-encryption.png -------------------------------------------------------------------------------- /cilium/images/28986-after-exploit.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cilium/design-cfps/HEAD/cilium/images/28986-after-exploit.png -------------------------------------------------------------------------------- /cilium/images/28986-before-exploit-with-auth-and-encryption.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cilium/design-cfps/HEAD/cilium/images/28986-before-exploit-with-auth-and-encryption.png -------------------------------------------------------------------------------- /cilium/images/28986-before-exploit.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cilium/design-cfps/HEAD/cilium/images/28986-before-exploit.png -------------------------------------------------------------------------------- /cilium/images/28986-connection-based-mutual-auth.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cilium/design-cfps/HEAD/cilium/images/28986-connection-based-mutual-auth.png -------------------------------------------------------------------------------- /cilium/images/28986-general-architecture.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cilium/design-cfps/HEAD/cilium/images/28986-general-architecture.png -------------------------------------------------------------------------------- /cilium/images/CFP-27752-pod-creation-process.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cilium/design-cfps/HEAD/cilium/images/CFP-27752-pod-creation-process.png -------------------------------------------------------------------------------- /cilium/images/CFP-33716-demo.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cilium/design-cfps/HEAD/cilium/images/CFP-33716-demo.png -------------------------------------------------------------------------------- /cilium/images/CFP-33716-user-story.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cilium/design-cfps/HEAD/cilium/images/CFP-33716-user-story.png -------------------------------------------------------------------------------- /cilium/images/SPIFFE-SPIRE-arch-with-datapath.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cilium/design-cfps/HEAD/cilium/images/SPIFFE-SPIRE-arch-with-datapath.png -------------------------------------------------------------------------------- /cilium/images/SPIFFE-SPIRE-cilium-agent-delegated.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cilium/design-cfps/HEAD/cilium/images/SPIFFE-SPIRE-cilium-agent-delegated.png -------------------------------------------------------------------------------- /cilium/images/SPIFFE-SPIRE-original-kube-arch.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cilium/design-cfps/HEAD/cilium/images/SPIFFE-SPIRE-original-kube-arch.png -------------------------------------------------------------------------------- /cilium/images/conn-tests-concurrent-output.gif: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cilium/design-cfps/HEAD/cilium/images/conn-tests-concurrent-output.gif -------------------------------------------------------------------------------- /cilium/images/mTLS-general-architecture.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cilium/design-cfps/HEAD/cilium/images/mTLS-general-architecture.png -------------------------------------------------------------------------------- /hubble/CFP-26438-network-policy-correlation.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cilium/design-cfps/HEAD/hubble/CFP-26438-network-policy-correlation.md -------------------------------------------------------------------------------- /hubble/CFP-30788-managing-hubble-metrics-cardinality.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cilium/design-cfps/HEAD/hubble/CFP-30788-managing-hubble-metrics-cardinality.md -------------------------------------------------------------------------------- /hubble/CFP-37472-flowlog-aggregation.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cilium/design-cfps/HEAD/hubble/CFP-37472-flowlog-aggregation.md -------------------------------------------------------------------------------- /hubble/README.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cilium/design-cfps/HEAD/hubble/README.md -------------------------------------------------------------------------------- /tetragon/README.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cilium/design-cfps/HEAD/tetragon/README.md --------------------------------------------------------------------------------