Kubernetes Networking with Cilium: From CNI to Service Mesh
Cilium replaces the kube-proxy iptables mess with an eBPF dataplane, adds identity-based network policy up to L7, and gives you Hubble for flow visibility. How it works and how to reason about policy that follows pods, not IPs.