Networking

659 talks across 33 events, oldest first: 86 case studies where an organization reports its own experience, plus concept talks and tutorials.

Keywords: networking, cni, cilium, calico, service mesh, istio, linkerd, envoy, gateway api, ingress, dns, coredns, load balancing, network policy, ebpf, multi-cluster networking (edit under categories: in wiki.yaml).

Over time

Year	Talks	Case studies
2016	4	0
2017	24	5
2018	86	12
2019	100	14
2020	55	5
2021	48	9
2022	46	4
2023	75	7
2024	104	15
2025	64	8
2026	53	7

Organizations with case studies

Lyft (4), Spotify (3), Google (2), HP (2), Datadog (2), Buoyant (2), Airbnb (2), VMware (2), Concur, Monzo, Credit Karma, Booking.com, Form3, Heptio, Zachary Arnold & Austin Adams' employer, The Weather Company, IBM, ControlPlane, Inspur, Onefootball, Yahoo, Verizon, Yelp, Fred..., Fault, Cruise, H-E-B, Tencent, PingCAP, Alibaba, Salesforce, Absa Group, Niantic, Intuit, Amazon Web Services, Buoyant, Inc, DoorDash, Decathlon, eBay, EarnIn, Cash App, Microsoft, OpenTelemetry Network, Red Hat, NVIDIA, New York Times, Preferred, Meta, Careem, Feesh, Skyscanner

Talks by event

2016 · KubeCon + CloudNativeCon North America 2016 (Seattle)

• concept · Lightning Talk - Introducing CoreDNS Kubernetes Integration by John Belamaric, Infoblox
• concept · Kubernetes Ingress: Your Router, Your Rules by Gerred Dillon, Deis
• concept · Navigating the Container Jungle by Casey Davenport, Tigera. Tigera's Casey Davenport gives an overview of container networking options and how to choose among them.
• panel · Kubernetes Networking Panel: Collaborate on the Spec, Compete on Execution

2017 · KubeCon + CloudNativeCon Europe 2017 (Berlin)

• case study · Switching From External Load Balancing to consul & ingress [I] - Dan Wilson, Concur — Concur
• case study · When Failure is Not an Option: Processing Real Money at Monzo with Kubernetes and Linkerd [I] — Monzo
• concept · Life of a Packet [I] - Michael Rubin, Google. Traces how a packet travels through Kubernetes networking.
• concept · K8SNIff - End-to-End Encryption Till the Pod [A] - Sebastian Scheele & Jason Murray, Loodse GmbH. Describes K8SNIff, an approach for end-to-end encryption all the way to the pod.
• concept · IPVS for Scaled Private Cloud Load Balancing [I] - Kimberly Messimer, Comcast VIPER

2017 · KubeCon + CloudNativeCon North America 2017 (Austin)

• case study · The Mechanics of Deploying Envoy at Lyft - Matt Klein, Lyft — Lyft
• case study · Bottoms-Up Adoption of a Microservices Workflow Using Kubernetes & Envoy - Rafael Schloming
• case study · From Monolith to Microservices with Kubernetes and Linkerd - Mason Jones, Credit Karma — Credit Karma
• concept · Istio: Weaving the Service Mesh [I] - Shriram Rajagopalan, IBM & Louis Ryan, Google
• concept · Microservices, Service Mesh, and CI/CD Pipelines: Making It All Work Together [I] - Brian Redmond
• concept · Ask Your Proxy, It Knows Everything - Blake Mizerany, Backplane. Explores querying a proxy to learn about traffic and system behavior.
• concept · The Service Mesh: Past, Present, and Future [B] - William Morgan, Buoyant. William Morgan traces the service mesh's past, present, and future.
• concept · Microservices Patterns with NGINX Proxy in an Istio Services Mesh [I] - A.J. Hunyady, NGINX Inc
• concept · Securing Cluster Networking with Network Policies - Ahmet Balkan, Google. Explains how to use Kubernetes Network Policies to secure cluster networking.
• concept · The Easy--Don't Drive Yourself Crazy--Way to Kubernetes Networking [B] - Gerard Hickey
• concept · Istio: Sailing to a Secure Services Mesh [I] - Spike Curtis, Tigera & Dan Berg, IBM
• concept · Kubernetes Ingress Controller with Apache Traffic Server [I] - Mrunmayi Dhume, Oath (Yahoo)
• concept · Linkerd Salon - Hosted by William Morgan, Buoyant
• concept · Setting Sail with Istio [B] - Lachlan Evenson, Microsoft
• concept · Reliable Application Roll Out and Operations with Istio [B] - Lin Sun, IBM & Mandar Jog, Google. Shows how to use Istio for reliable application rollouts and operations.
• concept · Enable your Microservices with Advanced Resiliency and Fault Tolerance Leveraging Istio
• concept · Istio’s Mixer: Policy Enforcement with Custom Adapters - Limin Wang, Google & Torin Sandall, Styra
• concept · CNI, CRI, and OCI - Oh My! [I] - Elsie Phillips & Paul Burt, CoreOS. Explains how the CNI, CRI and OCI standards relate and what each does in the container ecosystem.
• panel · Panel: Ask Me Anything: Microservices and Service Mesh [B] - Moderated by Jason McGee, IBM. Moderated ask-me-anything panel on microservices and service mesh.

2018 · KubeCon + CloudNativeCon China 2018 (Shanghai)

• case study · Experiences From Running Istio in a K8s Production Environment - Line Moseng & Johnny Horvi. Speakers share their experiences running Istio in a Kubernetes production environment.
• case study · Istio in Production: Real Customers, Real Solutions - Craig Box, Google — Google
• case study · How HP Uses Istio to Manage Network Traffic - Xi He & Zhoujian Zhang, HP — HP
• concept · Extending Istio - Develop a New Mixer Adapter for Your Monitoring - Wen Tao Zhang & Yang Yang
• concept · Modern Service Networking With Consul Connect, Envoy and Kubernetes - Nic Jackson, HashiCorp
• concept · Container Networking Untangling Services Meshes and SDNs - Gregory Elkinbard, GSE Software
• concept · Comprehensive Performance Benchmark on Various Well-Known CNI Plugins - Giri Kuncoro & Vijay Dhama. Benchmarks the performance of various well-known CNI plugins.
• concept · Istio Certificate Management Through Vault - Lei Tang & Yonggang Liu, Google
• concept · Network QoS Support for Kubernetes Applications - Jun Du, Huawei. Presents design for network quality-of-service support for Kubernetes applications.
• concept · Intro: CoreDNS - Yong Tang, Infoblox. Introduces CoreDNS and its plugin-based design.
• concept · Deep Dive: CoreDNS - Yong Tang, Infoblox
• concept · Navigating the Service Mesh Ecosystem - George Miranda, Buoyant, Inc. & Diogenes Rittori, Pivotal
• concept · Handling Edge Cloud Network Using “KubeEdgeBus” - Yulin Sun & Weijin Xu, Huawei. Presents KubeEdgeBus, a messaging approach for edge cloud networking in KubeEdge.
• concept · Mesher: The Practice of a Production-Level Service Mesh - Xiaoliang Tian, Huawei

2018 · KubeCon + CloudNativeCon Europe 2018 (Copenhagen)

• case study · Introducing Envoy-Based Service Mesh at Booking.com - Ivan Kruglov, Booking.com — Booking.com
• case study · Evolving Systems Design: From Unreliable rpc to Resilience with Linkerd - Edward Wilde, Form3 — Form3. Form3 describes how its systems design evolved from unreliable RPC to resilience using Linkerd.
• case study · How We Built Contour, and What You Can Learn From Our Experience - Dave Cheney, Heptio — Heptio. Heptio's Dave Cheney shares the experience and lessons from building the Contour ingress controller.
• case study · Achieving High Security at Scale with Microservices - Zachary Arnold & Austin Adams — Zachary Arnold & Austin Adams' employer. Speakers describe how they achieved high security across a large microservices deployment in their own organization.
• case study · Istio - The Weather Company's Journey - Nick Nellis & Fabio Oliveira, IBM (Any Skill Level) — The Weather Company, IBM. The Weather Company (IBM) shares its journey adopting Istio service mesh in production.
• case study · From Kubelet to Istio: Kubernetes Network Security Demystified - Andrew Martin, ControlPlane — ControlPlane
• concept · Low-Overhead Tracing Using eBPF for Observability into Kubernetes Apps and Services - Gaurav Gupta
• concept · Performance and Scale @ Istio Service Mesh - Fawad Khaliq, Laurent Demailly & Surya V Duggirala
• concept · Building Hybrid Clouds with Istio - Allan Naim, Google & Rohit Agarwalla, Cisco
• concept · Replacing NGINX with Envoy in a Traffic Control System - Mark McBride, Turbine Labs, Inc
• concept · The Untapped Power of Services - L7 Load Balancing Without a Service Mesh - Damien Lespiau
• concept · Envoy Project Intro – Matt Klein & Jose Nino, Lyft (Any Skill Level)
• concept · gRPC Load Balancing on Kubernetes - Jan Tattermusch, Google (Intermediate Skill Level)
• concept · Cloud Native Networking for Containers in AWS using CNI Plugins - Anirudh Aithal
• concept · The “Silk” Road: Building a CNI Plugin from Scratch - Usha Ramachandran & Angela Chin
• concept · Kubernetes and the CNI: Where We Are and What's Next - Casey Callendrello, CoreOS
• concept · Multicluster Ingress Powered by Kubernetes Cluster Registry - Greg Harmon & Nikhil Jindal
• concept · Understand and Troubleshoot the “Magic” of Kubernetes Networking - Minhan Xia & Rohit Ramkumar
• concept · Lightning Talk: Istio by Example - Josef Adersberger, QAware (Beginner Skill Level)
• concept · Extending Istio Service Mesh w/Envoy v2 APIs - Dmitri Chtchourov & Tim Swanson
• concept · CoreDNS Intro – Miek Gieben, Google (Any Skill Level)
• concept · Observability and Debugging Cloud-Native Apps using Linkerd & Conduit - Franziska von der Goltz
• concept · Envoy Internals Deep Dive - Matt Klein, Lyft (Advanced Skill Level)
• concept · GitOps for Istio - Manage Istio Config like Code - Varun Talwar & Alexis Richardson
• concept · How a Service Mesh Helped Us Build Production Cloud-Native Services - Israel Sotomayor
• concept · How to Get a Service Mesh Into Prod without Getting Fired - William Morgan, Buoyant, Inc
• concept · Observing and Troubleshooting your Microservices with Istio - Isaiah Snell-feikema & Douglas Reid
• concept · Accelerating Envoy with the Linux Kernel - Thomas Graf, Covalent (Advanced Skill Level)
• concept · Istio Tells me my Service has Slow Response Time, Now What? - Endre Sara & Enlin Xu
• concept · Canary Deploys with Kubernetes, Istio and Envoy - Jason Yee, Datadog (Beginner Skill Level)
• concept · Envoy Project Intro – Matt Klein & Jose Nino, Lyft (Any Skill Level)
• concept · Linkerd Deep Dive – George Miranda & Thomas Rampelberg (Intermediate Skill Level)
• concept · Envoy Deep Dive – Matt Klein, Lyft (Intermediate Skill Level)
• concept · Istio Multi-Cluster Mesh Expansion BOF - Sven Mawson, Google (Any Skill Level)
• concept · CoreDNS Deep Dive – Miek Gieben, Google (Intermediate Skill Level)
• concept · Practical and Useful Latency Analysis using Istio and OpenCensus - Varun Talwar
• concept · Linkerd Intro – Andrew Seigner, Buoyant.io, & George Miranda (Any Skill Level)
• tutorial · Introduction to Istio Configuration - Joy Zhang, Google (Beginner Skill Level)
• tutorial · CNI Intro – Bryan Boreham, Weaveworks, & Casey Callendrello, CoreOS (Any Skill Level). Introductory session on the Container Network Interface and how CNI plugins work.
• panel · Panel Discussion: Ask Us Anything: Microservices and Service Mesh - Moderated by Jason McGee

2018 · KubeCon + CloudNativeCon North America 2018 (Seattle)

• case study · Lightning Talk: Optimizing Kubernetes Networking at Datadog - Laurent Bernaille, Datadog — Datadog
• case study · Instrumenting and Scaling Cloud-Native Databases with Envoy - Daniel Hochman, Lyft — Lyft. Lyft shows how it uses Envoy to instrument and scale its cloud-native databases.
• case study · The Telco Networking Journey to Cloud Native: The Good, Bad, and Ugly - Heather Kirksey
• concept · Lightning Talk: CoreDNS Over gRPC: Reliable Service Discovery for Kubernetes - Yong Tang
• concept · Lightning Talk: PID Autoscaling Strava's Linkerd Service Mesh Using Prometheus Data - J Evans
• concept · Intro: Network Service Mesh BoF - Ed Warnick, Cisco & Frederick F. Kautz IV, Red Hat
• concept · Deep Dive: Envoy - Matt Klein & Constance Caramanolis, Lyft
• concept · Intro: Envoy - Matt Klein & Constance Caramanolis, Lyft
• concept · Linkerd 2.0, Now with Extra Prometheus - Andrew Seigner, Buoyant & Frederic Branczyk, CoreOS
• concept · Intro: CoreDNS - Yong Tang, MobileIron, Inc & Cricket Liu, Infoblox
• concept · Athenz with Istio: Single Access Control Model in Cloud Infrastructures - Tatsuya Yano
• concept · Securing Application Telemetry & Tracing with SPIFFE and Envoy - Sabree Blackmon, Docker
• concept · Deep Dive: Linkerd - Oliver Gould, Buoyant. Deep dive into how the Linkerd service mesh is designed and works.
• concept · Understanding CoreDNS in Kubernetes - John Belamaric, Google & Cricket Liu, Francois Tur, Infoblox
• concept · Implementing Least Privilege Security and Networking with BPF on Kubernetes - Arvind Soni, Covalent. Shows how to implement least-privilege security and networking on Kubernetes with BPF.
• concept · Navigating Workload Identity in Kubernetes - Michael Danese, Google & Spike Curtis, Tigera. Explains approaches to giving Kubernetes workloads verifiable identity and how they compare.
• concept · Deep Dive: CNI - Bryan Boreham, Weaveworks & Dan Williams, Red Hat
• concept · eBPF Powered Distributed Kubernetes Performance Analysis - Lorenzo Fontana, InfluxData
• concept · Deep Dive: Network Service Mesh BoF - Ed Warnicke, Cisco & Frederick F. Kautz IV, Red Hat
• concept · Multi-Cloud Ingress LB: Gimbal Use Case in Actapio and Yahoo... - Hirotaka Ichikawa & Ryutaro Inoue
• concept · Istio - The Packet's-Eye View - Matt Turner, Tetrate
• concept · Reducing Mean-Time-to-Detection of Incidents with an Envoy Service Mesh - Constance Caramanolis
• concept · Performance Testing Ingress for Internet-Scale Workloads - Alexander Brand, Heptio
• concept · Deep Dive: CoreDNS - Michael Grosser, Okkur Labs & John Belamaric, Google
• concept · Is Istio the Most Next Gen Next Gen Firewall Ever Created? - John Morello, Twistlock
• concept · Game Server Networking with Envoy - Christopher M Luciano, IBM
• concept · Switching the Engine (DNS) in Kubernetes: Benchmarks ... - Michael Grosser & Jake Sanders
• concept · Intro: Linkerd – William Morgan, Buoyant with William King & Ivan Sim & Sebastian Tiedtke. Introduction to the Linkerd service mesh project and its design.
• concept · Evolution of Integration and Microservices with Service Mesh and Ballerina - Christian Posta
• tutorial · Tutorial: Using Istio - Lee Calcote & Girish Ranganathan, SolarWinds
• tutorial · Container Networking From Scratch - Kristen Jacobs, Oracle. Builds container networking from scratch to explain how it works.
• panel · Panel Discussion: Ask Us Anything: Microservices and Service Mesh – Moderated by Jason McGee

2019 · KubeCon + CloudNativeCon China 2019 (Shanghai)

• case study · Lightning Talk: How We Use Istio and OPA for Authorization - Lin Tao, HP — HP
• case study · Open Source Networking Technology in Inspur Cloud - Yanjun Li, Inspur — Inspur. Inspur describes using open source networking technology in its own cloud.
• concept · Intro: Network Service Mesh (NSM) - Frederick Kautz, Doc.ai & Nikolay Nikolaev, VMware. Introduces Network Service Mesh and its approach to Kubernetes networking.
• concept · Intro + Deep Dive: CoreDNS - Yong Tang, MobileIron
• concept · Observability in Service Mesh Powered by Envoy and Apache SkyWalking - Sheng Wu & Lizan Zhou
• concept · Intro: Envoy - Lizan Zhou, Tetrate. Introduction to the Envoy proxy project.
• concept · How SPIFFE Helps Istio in Service Mesh Federation - Yonggang Liu & Wencheng Lu, Google
• concept · Istio Performance and Best Practices in Large Scale... Guang Ya Liu & Chun Lin Yang
• concept · Cloud Native Load Balancing From Scratch - Fangyuan Li, VMware. Builds a cloud native load balancer from scratch.
• concept · Running Resilient Workloads with Istio - Matt Turner, Tetrate
• concept · Upgrading Your Service Mesh to Linkerd 2 - Tilen Faganel, Open Credo ltd.
• concept · Using Istio to Manage the Cross-Regional & Cross-Cluster... Xi Ning Wang & Xiaozhong Liu
• concept · Enhancing Envoy: Certificate Handling at the Edge - Brian Redbeard & Bill Decoste, Red Hat
• concept · Network Observability with Envoy - Nic Jackson, HashiCorp
• concept · Efficient and Flexible Virtual Machine Networking Through eBPF - Jason Wang, Red Hat
• concept · Debugging with eBPF on Arm Platforms - Leo Yan, Linaro
• concept · IngressRoute: A Path Towards a Better Ingress Object for Kubernetes - David Cheney, VMware
• concept · AIOps: Anomaly Detection with Prometheus and Istio - Marcel Hild, Red Hat
• concept · Manage Multi-tenant ML Workloads Using Istio - Wencheng Lu & Limin Wang, Google

2019 · KubeCon + CloudNativeCon Europe 2019 (Barcelona)

• case study · JustFootball’s Journey to gRPC + Linkerd in Production - Ben Lambert, & Kevin Lingerfelt
• case study · 5 Simple Steps To Simplifying Your Compliance Journey With a Service Mesh – Granville Schmidt
• case study · Istio on Knative Lessons Learned: How Istio is Fit for Serverless Platform - Ying Chun Guo
• case study · Scaling Edge Operations at Onefootball with Ambassador: From 0 to 6000 rps - Jonathan Juares Beber — Onefootball. Onefootball scaled its edge operations with Ambassador from zero to 6000 requests per second.
• case study · Kubernetes Networking at Scale - Laurent Bernaille, Datadog & Bowei Du, Google — Datadog, Google
• concept · Lightning Talk: Using Istio's Mixer for Network Request Caching - Zach Arnold, Ygrene Energy Fund
• concept · Lightning Talk: Back to the Future with eBPF - Beatriz Martínez Rubio, IBM. Lightning talk looking at eBPF and how it connects past and future technologies.
• concept · Istio, We Have a Problem! Understanding and Fixing Bugs with a Service-Mesh - David Gageot, Google. Shows techniques for understanding and fixing bugs using a service mesh like Istio.
• concept · Intro: Network Service Mesh (NSM) - Frederick Kautz, Doc.ai & Ed Warnicke, Cisco
• concept · Using eBPF to Bring Kubernetes-Aware Security to the Linux Kernel - Dan Wendlandt, Isovalent. Describes using eBPF to give the Linux kernel Kubernetes-aware security enforcement.
• concept · Envoy SDS: Fortifying Istio Security - Yonggang Liu & Quanjie Lin, Google
• concept · Intro: Linkerd - William Morgan, Buoyant
• concept · Istio New Workload Identity Provision Pipeline Based on Envoy SDS - Quanjie Lin & Diem Vu, Google
• concept · What WePay Learned From Processing Billions of Dollars on GKE Using Linkerd - Mohsen Rezaei, WePay
• concept · Extending Envoy with WebAssembly - John Plevyak & Dhi Aurrahman, Tetrate
• concept · Intro: CoreDNS - Daniel Garcia, Infoblox & Michael Grosser, Okkur Labs
• concept · Democratizing Service Mesh on Kubernetes - Gabe Monroy, Microsoft & CNCF Board Member
• concept · Istio Multi-Cluster Service Mesh Patterns Explained - Daniel Berg & Ram Vennam, IBM. Explains Istio multi-cluster service mesh deployment patterns.
• concept · Intro: Envoy - Lizan Zhou, Tetrate
• concept · Zero Trust Service Mesh with Calico, SPIRE, and Envoy - Shaun Crampton & Evan Gilman
• concept · Building an Edge Control Plane with Kubernetes and Envoy - Flynn, Datawire
• concept · Deep Dive: CoreDNS - Yong Tang, MobileIron & John Belamaric, Google
• concept · Benefits of a Service Mesh When Integrating Kubernetes with Legacy Services - Stephan Fudeus
• concept · Co-Evolution of Kubernetes and GCP Networking - Purvi Desai & Tim Hockin, Google
• concept · gRPC load balancing and Service Mesh - Vishal Powar, Google
• concept · Reinventing Networking: A Deep Dive into Istio's Multicluster Gateways - Steve Dake, Independent. A deep dive into how Istio's multicluster gateways work and how they reshape networking.
• concept · Deep Dive: Network Service Mesh (NSM) - Nikolay Nikolaev, VMware & Frederick Kautz, Doc.ai. Deep dive into the architecture of Network Service Mesh.
• concept · Cross-Cluster Calls Made Easy with Istio 1.1 - Matt Turner, Tetrate
• concept · Networking the Service Mesh Proxy: Where We Are, Where We’re Going - Tim Swanson & John Joyce, Cisco
• concept · Deep Dive: Linkerd - Oliver Gould, Buoyant
• concept · Deep Dive: Envoy - Lizan Zhou, Tetrate
• concept · High Performance Networking with Kubevirt - Doug Smith, Red Hat & Abdul Halim, Intel
• concept · Unblocking the Release Train with Istio Traffic Management - Dave Shepherd & Pierre Meunier
• concept · Autoscaling Multi-Cluster Observability with Thanos and Linkerd - Andrew Seigner & Frederic Branczyk
• concept · Kubernetes Networking: How to Write a CNI Plugin From Scratch - Eran Yanay, Twistlock
• concept · Ingress V2 and Multicluster Services - Rohit Ramkumar & Bowei Du, Google
• concept · Transparent Chaos Testing with Envoy , Cilium and BPF - Thomas Graf, Isovalent
• concept · Network Flow Monitoring in Kubernetes with Contiv/VPP CNI and Elastic Stack - Rastislav Szabo
• panel · Panel Discussion: Ask Us Anything: Microservices and Service Mesh. Ask-us-anything panel on microservices and service mesh.

2019 · KubeCon + CloudNativeCon North America 2019 (San Diego)

• case study · Running Istio and Kubernetes On-prem at Yahoo Scale - Suresh Visvanathan & Mrunmayi Dhume, Verizon — Yahoo, Verizon
• case study · Envoy on Fire: A Practical Look at Debugging a Service Mesh - Lita Cho & Ryan Cox, Lyft — Lyft. Lyft shares how it debugs Envoy and its service mesh in production.
• case study · How Yelp Moved Security From the App to the Mesh with Envoy and OPA - Daniel Popescu & Ben Plotnick — Yelp
• case study · From Brownfield to Greenfield: Istio Service Mesh Journey at Fred... Shriram Rajagopalan & Lixun Qi — Fred...
• case study · There's a Bug in My Service Mesh! What Do You Do When the Mesh is At Fault? - Ana Calin & Risha Mars — Fault
• case study · Cruise’s Self-Driving Networking Journey - Bernard Van De Walle & Jon Yucel, Cruise — Cruise
• case study · How Spotify Migrated Ingress HTTP Systems to Envoy - Erica Manno & Vladimir Shakhov, Spotify — Spotify
• concept · Lightning Talk: Is Your Kubernetes Cluster's DNS Working? - Jonathan Perry, Flowmill
• concept · Porting Envoy to Windows; A Progress Report - Yechiel Kalmenson & William A. Rowe, Jr., Pivotal
• concept · Enforcing Automatic mTLS With Linkerd and OPA Gatekeeper - Ivan Sim, Buoyant & Rita Zhang, Microsoft
• concept · Rethinking the K8s DNS for the Modern Enterprise - Deepa Kalani & Venil Noronha, VMware
• concept · Understanding and Troubleshooting the eBPF Datapath in Cilium - Nathan Sweet, DigitalOcean
• concept · Intro to gRPC - Jayant Kolhe & Eric Anderson, Google. Introduces gRPC, covering its design and how to use it.
• concept · Intro: Linkerd - William Morgan, Buoyant
• concept · How the Department of Defense Moved to Kubernetes and Istio - Nicolas Chaillan
• concept · Service Mesh: There and Back Again - Hema Lee & Cody Vandermyn, Nordstrom
• concept · Supercharge Your Microservices CI/CD with Service Mesh and Kubernetes - Brian Redmond, Microsoft
• concept · Evolving the Kubernetes Ingress APIs to GA and Beyond - Christopher M Luciano, IBM & Bowei Du
• concept · Life Outside the Cluster: Adding Virtual Machines to an Envoy Servic... Megan O'Keefe & Ameer Abbas,. Shows how to add virtual machines to an Envoy-based service mesh.
• concept · Liberating Kubernetes From Kube-proxy and Iptables - Martynas Pumputis, Cilium
• concept · Advanced Model Inferencing Leveraging KNative, Istio & Kubeflow Serving - Animesh Singh & Clive Cox
• concept · Deep Dive: CNI - Bryan Boreham, Weaveworks & Dan Williams, Red Hat
• concept · CoreDNS Deep Dive - John Belamaric, Google
• concept · Take Envoy Beyond a K8s Service Mesh - to Legacy Bare Metal & VMs + More - Steve Sloka & Steven Wong
• concept · Five Cool Things You Can Do with Network Service ... Ed Warnicke, Nikolay Nikolaev & Frederick Kautz. Demonstrates five things you can do with Network Service Mesh.
• concept · Enforcing Service Mesh Structure using OPA Gatekeeper - Sandeep Parikh, Google. Shows how to enforce service mesh structure and configuration with OPA Gatekeeper.
• concept · Walk-through: Debugging an RBAC Problem in Istio (But Without the Swearing) - Matt Turner
• concept · Networking Optimizations for Multi-Node Deep Learning on Kubernetes - Rajat Chopra & Erez Cohen
• concept · Networking Optimizations for Multi-Node Deep Learning on Kubernetes - Rajat Chopra & Erez Cohen
• concept · CoreDNS: Beyond the Basics - Cricket Liu, Infoblox & John Belamaric, Google
• concept · Building a Dev/Test Loop for a Kubernetes Edge Gateway with Envoy Proxy - Flynn, Datawire
• concept · Bringing the Envoy Service Mesh to Mobile - Jose Nino & Michael Schore, Lyft
• concept · Envoy Overview and Maintainer Q&A - Harvey Tuch; Lizan Zhou; Stephan Zuercher & Snow Pettersen
• concept · How Container Networking Affects Database Performance - Tyler Duzan & Vadim Tkachenko, Percona
• concept · Stitching a Service Mesh Across Hundreds of Discrete Networks - Jason Webb & Anil Attuluri, Intuit
• concept · Low Latency Multi-cluster Kubernetes Networking in AWS - Paul Fisher, Lyft
• concept · Deep Dive: Linkerd - Oliver Gould, Buoyant
• concept · OpenFaaS Cloud + Linkerd: A Secure, Multi-Tenant Serverless Platform - Charles Pretzer & Alex Ellis
• tutorial · Service Discovery With Hybrid and Multi-Cloud: Introduction to CoreDNS - Yong Tang, MobileIron
• tutorial · Introduction to CNI, the Container Network Interface Project - Bryan Boreham & Dan Williams
• tutorial · Tutorial: Service Mesh for the Developer Workflow - Christian Posta & Nic Jackson
• panel · Panel: Is Service Mesh Ready for Edge-Native Applications?

2020 · KubeCon + CloudNativeCon Europe 2020 - Virtual

• case study · Booting 5 K8s Clusters on Every Git Push: How Linkerd Leveled Up Its CI - Andrew Seigner, Buoyant — Buoyant. Buoyant explains how Linkerd's CI now boots five Kubernetes clusters on every git push.
• case study · Migrating Transactions Worth Billions of $ to Service Mesh With N... Mahendra Kariya & Shishir Joshi
• case study · Multi-cluster Made Reasonable: Envoy Service Mesh Control Plane - Ashley Kasim & Paul Fisher, Lyft — Lyft. Lyft describes the Envoy-based control plane it built to run its service mesh across multiple clusters.
• concept · Making Envoy Contributions Feasible for Everyone - Yaroslav Skopets, Tetrate.io
• concept · Hacking on Network Service Mesh Dataplane for a True Multi-c... Aleksandra Kowalska & Jaroslaw Lukow
• concept · Envoy, Take the Wheel: Real-time Adaptive Circuit Breaking - Tony Allen, Lyft
• concept · Building the Cloud Native Telco with Network Service Mesh - Ivana Atanasova & Radoslav Dimitrov
• concept · Kubernetes DNS Horror Stories (And How to Avoid Them) - Laurent Bernaille, Datadog
• concept · Deep Dive: Linkerd - Zahari Dichev, Buoyant
• concept · Designing a gRPC Interface for Kernel Tracing with eBPF - Leonardo Di Donato, Sysdig
• concept · eBPF and Kubernetes: Little Helper Minions for Scaling Microservices - Daniel Borkmann, Cilium. Explains how eBPF and Cilium help scale Kubernetes microservices networking.
• concept · Multicloud Vitess over Network Service Mesh - Tim Swanson, Cisco & John Watson, PlanetScale
• concept · Ingress on the Rails: Use Community Tools to Automate Ingress Provisioning - Alastair Firth, Camunda
• concept · Deep-Dive: Packet-level Debugging of Bridged and Non-bridged CNI Plugins - Jay Vyas & Sedef Savas
• concept · The Past, Present, and Future of Cloud Native API Gateways - Daniel Bryant, Datawire. Traces the history, current state and future of cloud native API gateways.
• concept · Service Mesh and Serverless Chatbots with Linkerd, K8s and OpenFaas - Sergio Méndez
• concept · What You Didn’t Know About Ingress Controllers’ Performance - Mikko Ylinen & Ismo Puustinen, Intel. Examines the performance characteristics of ingress controllers.
• concept · Scaling Kubernetes Networking Beyond 100k Endpoints - Rob Scott & Minhan Xia, Google
• concept · Episode IV: A New Network Service Mesh - Frederick Kautz, Doc.ai & Nikolay Nikolaev, VMware
• concept · CoreDNS for Hybrid and Multi-cloud - Yong Tang, MobileIron. Explains using CoreDNS for DNS across hybrid and multi-cloud environments.
• concept · Automating Load Balancing and Fault Tolerance via Predictive Analysis - Steven Rosenberg, Red Hat
• concept · Deep Dive: CNI - Bryan Boreham, Weaveworks & Bruce Ma, Ant Financial. A deep dive into the Container Network Interface specification and how it works.
• concept · Building a Distributed API Gateway with a Service Mesh - Rei Shimizu & Cynthia Coan
• concept · Mutual TLS Adoption Made Simple, Safe and Secure - Lizan Zhou, Tetrate & Jianfei Hu, Google. Maintainers explain why mutual TLS is hard to adopt and how Istio API improvements make adoption simpler and safer.
• concept · Intro: Linkerd - William Morgan, Buoyant
• concept · Sponsor Demo: HAProxy Technologies - Benchmarking 5 Popular Ingress Controllers
• concept · Hubble - eBPF Based Observability for Kubernetes - Sebastian Wicki, Isovalent. Introduces Hubble, eBPF-based observability for Kubernetes.
• concept · Kubernetes Networking Intro and Deep-Dive - Bowei Du & Tim Hockin, Google
• concept · Network Service Mesh to Address Cloud Native 5G Telco Networking... Roshini Ratnam & Anders Franzen
• concept · Mesh in a Mesh: A Model for Stronger Multi-tenancy of Kubernetes Wo... Nitish Malhotra & Akash Baid. Proposes a mesh-in-a-mesh model for stronger multi-tenancy of Kubernetes workloads.
• tutorial · Tutorial: Communication Is Key - Understanding Kubernetes Networking - Jeff Poole, Vivint Smart Home
• tutorial · BoF: Introduction to Contour, A High Performance Multitenant Ingress... Michael Michael & Nick Young
• tutorial · Introduction to CNI, the Container Network Interface Project - Casey Callendrello & Bryan Boreham
• panel · Panel: Ask Me Anything About Service Mesh. A panel taking audience questions about service mesh.

2020 · KubeCon + CloudNativeCon North America 2020 - Virtual

• case study · How H-E-B Curbside Adopted Linkerd During a Pandemic - Justin Turner & Garrett Griffin, H-E-B — H-E-B
• case study · High Performance Networking for Distributed DL Training in Production K8s - Nivedita Viswanath
• concept · Taking Envoy Beyond C++ with WebAssembly - Idit Levine & Yuval Kohavi, Solo.io
• concept · Scalable and Multitenant Networking in XDP and Kubernetes Operators - Sherif Abdelwahab & Ying Xiong
• concept · Inside Kubernetes Ingress - Dominik Tornow, Cisco. Deep dive into how Kubernetes Ingress works internally.
• concept · Extending Service Mesh to the Edge - Stephen Wong, OPNFV Clover
• concept · Enhancing K8s Networking with SmartNICs - Dave Cremins, Intel
• concept · Proxyless Service Mesh with gRPC - Menghan Li, Google
• concept · Overview and State of Linkerd - William Morgan & Tarun Pothulapati, Buoyant, Inc.. Overview and state of the Linkerd project, with recent changes.
• concept · Multi-Cluster is Easier Than You Think with Linkerd and Ambassador - Thomas Rampelberg, Buoyant
• concept · Kubernetes SIG-Network: Intro and Deep-Dive - Tim Hockin & Bowei Du, Google & Rich Renner. Intro and deep dive into Kubernetes SIG-Network and its current work.
• concept · Service Discovery with CoreDNS Plugins in Golang - Yong Tang, Mobileiron & John Belamaric, Google
• concept · Safely Deploying a 100K line Envoy YAML Configuration to Production - Lisa Lu & Jyoti Mahapatra
• concept · All You Can Eat Networking. Kubernetes Goodness for the Hungriest Workloads - Aloys Augustin
• concept · Service Mesh Specifications and Why They Matter in Your Deployment - Lee Calcote & Kush Trivedi. Explains service mesh specifications and why they matter for deployments.
• concept · Empowering Cloud Native Networking with Arm Ecosystem - Trevor Tao & HanYu Ding, Arm
• concept · Contour, A High Performance Multitenant Ingress Controller for Kubernetes - Michael Michael. Explains how Contour provides a high-performance multitenant ingress controller for Kubernetes.
• concept · Cloud Native & SD-WAN: Improving K8s Application Experience Over SD-WAN - Alberto Rodriguez-Natal. Explains how to improve Kubernetes application experience over SD-WAN networks.
• concept · Build Your Own Envoy Control Plane - Steve Sloka, VMware
• concept · Envoy Q&A - Matt Klein, Lyft & Harvey Tuch, Google
• panel · Panel: Tales from the Edge: Is the Edge More Important Than the Service Mesh? - Matt Klein

2021 · KubeCon + CloudNativeCon + Open Source Summit China 2021

• case study · Online Video upgrades resilience from SC Circuit Breaker to Service Mesh - Xu Shiyu & Zhang Chaomeng
• case study · Envoy Mesh Acceleration: From Iptables to Fully BPF - Xiyao Zhang & Xu Liu, Tencent — Tencent
• case study · Creating a Unified Network Plane across Kubernetes with Kube-OVN - Cheng Chen, PingCAP — PingCAP. PingCAP shows how it created a unified network plane across Kubernetes clusters using Kube-OVN.
• case study · Best Practice: DNS Failure Observability and Diagnosis in Kubernetes - Yuning Xie, Alibaba — Alibaba. Alibaba shares its best practices for observing and diagnosing DNS failures in its Kubernetes clusters.
• concept · Zero Trust Network Turnkey Solution to Support Zero Trust Service Mesh - Hongjun Ni & Pan Zhang
• concept · Solving the Service Mesh Adopter’s Dilemma - Anita Ihuman, Layer5. Discusses barriers to service mesh adoption and ways to address the adopter's dilemma.
• concept · RDMA Programming Using Rust Async - Pu Wang, China. Shows how to program RDMA using Rust async.
• concept · Overview of CNI 1.0.0 and preview of CNI 2.0 - Bruce Ma, Ant Financial & Bingshen Wang, Alibaba. Overview of CNI 1.0.0 and a preview of the planned CNI 2.0.
• concept · Monitor mesh for edge clusters - Liye Pang, Inspur & Huailong Zhang, Intel. Presents a monitoring mesh design for observing edge clusters.
• concept · Extension and expansion of Service Mesh in edge computing scenarios - Wang Jiezhang, Huawei
• concept · CNCF TAG Network and Service Mesh Working Group - Lee Calcote, Ed Warnicke & Ken Owens
• concept · C++ Workflow: Task-based Parallel Computing and Asynchronous Networking Engine - Yingxin Li, Tencent
• tutorial · BPF: Introduction, Programming Tips and Tricks - Wenbo Zhang, PingCAP. Introduction to BPF with programming tips and tricks.

2021 · KubeCon + CloudNativeCon Europe 2021

• case study · Operationalizing Kubernetes Sidecars in Production at Salesforce - Mayank Kumar, Salesforce — Salesforce. Salesforce shares how it operates Kubernetes sidecars in production and the lessons learned.
• concept · Linkerd vs. COVID-19: Addressing the global Pandemic with a Service Mesh - William Morgan, CEO
• concept · xDS in gRPC for Service Mesh - Megan Yahya, Google LLC
• concept · Towards CNI v2.0 - Casey Callendrello, Red Hat
• concept · Overview and State of Linkerd - William Morgan & Matei David, Buoyant, Inc.. Overview and project update on the Linkerd service mesh and its state and direction.
• concept · Gateway API: A New Set of Kubernetes APIs for Advanced Traffic Routing - Harry Bagdi & Rob Scott
• concept · Turning Your Cloud Native Apps Inside Out With a Service Mesh - Adam Zwickey & Liam White, Tetrate
• concept · Seamless multi-cluster Communication and Observability with Linkerd - Max Körbächer, Liquid Reply
• concept · Inside Kubernetes Networking - Dominik Tornow, Cisco
• concept · How to Break your Kubernetes Cluster with Networking - Thomas Graf, Isovalent. Explains ways networking can break a Kubernetes cluster.
• concept · Cert-Manager Beyond Ingress – Exploring the Variety of Use Cases - Matthew Bates, Jetstack
• concept · CoreDNS Deep Dive: Building Custom Plugins - Yong Tang, Ivanti
• concept · Contour, a High Performance Multitenant Ingress Controller for Kubernetes - Steve Sloka, VMware
• concept · Sponsored Session: HAProxy Technologies - Benchmarking 5 Popular Ingress Controllers
• concept · Sponsored Session: Google Cloud - Multi-cluster, Blue-green Traffic Splitting with the Gateway API
• tutorial · Kubernetes Advanced Networking Testing with KIND - Antonio Ojea, RedHat. Antonio Ojea shows how KIND implements networking with Docker and how to use it for advanced Kubernetes network testing.
• tutorial · eBPF on the Rise - Getting Started - Quentin Monnet, Isovalent
• panel · Panel Discussion: Cloud Native Networking State of the Union

2021 · KubeCon + CloudNativeCon North America 2021

• case study · Cloud Native Global Load Balancer for Kubernetes - Yury Tsarev & Zak Anderson, Absa Group — Absa Group. Absa Group presents its cloud native global load balancer for Kubernetes, k8gb, and its use in multi-cluster setups.
• case study · Migrating to Service Mesh at Scale to Support Billions of $ Transactions - Imre Nagi & Giri Kuncoro
• case study · Building a Multi Cluster/Env Service Mesh at Airbnb - Weibo He & Stephen Chan, Airbnb — Airbnb. Airbnb describes how it built its multi-cluster, multi-environment service mesh.
• case study · Context Aware Traffic Routing for Stateful Services using Envoy - Renana Yacobi & Piaw Na, Niantic — Niantic. Niantic describes using Envoy for context-aware traffic routing of its stateful services.
• concept · Contour, a High Performance Multitenant Ingress Controller for Kubernetes - Steve Sloka & Alex Xu
• concept · Real-time Kubernetes: How Entain Australia 10x'd throughput with Linkerd - Steve Gray
• concept · How to Improve Your Kubernetes Experience with Service Mesh... Maksim Chudnovskii & Igor Gustomyasov
• concept · Cloud Native Superpowers with eBPF - Liz Rice, Isovalent
• concept · Calico/VPP: Using Calico’s Pluggable Dataplanes for Fun and Fast N... Aloys Augustin & Chris Tomkins. Shows how Calico's pluggable dataplanes, including VPP, deliver faster networking.
• concept · Beyond the Hype: Cloud Native eBPF - Frederic Branczyk, Polar Signals. Looks past the hype to explain what eBPF offers cloud native systems in practice.
• concept · Storage and Networking: Rook on Multus - Sébastien Han & Rohan Gupta, Red Hat
• concept · Service Mesh using Envoy on Windows - S. Nanopoulos, P. Balasubramanian, K. Subramanian, N Jackson
• concept · Deep Dive CoreDNS - Yong Tang, Ivanti Inc.; Miek Gieben, Independent; John Belamaric, Google
• concept · Overview and State of Linkerd - Oliver Gould, Buoyant. Linkerd's creator gives an overview and the current state of the project.
• concept · gRPC Proxyless Service Mesh with Security - Sanjay M Pujare, Google
• concept · Envoy Maintainer Q&A - Lizan Zhou, Tetrate
• concept · Beyond printf & tcpdump: Debugging Kubernetes Networking with eBPF - Martynas Pumputis & Aditi Ghag

2022 · KubeCon + CloudNativeCon Europe 2022

• case study · Service Mesh at Scale: How Xbox Cloud Gaming Secures 22k Pods with Linkerd - Christopher Voss
• case study · Automated Progressive Delivery Using GitOps and Service Mesh - Yasen Simeonov & Henrik Blixt, Intuit — Intuit. Intuit shows how it automates progressive delivery with GitOps and a service mesh.
• concept · How Linkerd Helped bink Partner up with Barclays - Mark Swarbrick, bink
• concept · CNCF TAG Network and Service Mesh Working Group Deep-Dive - Lee Calcote, Ken Owens, Ed Warnicke,
• concept · Composability is to Software as Compounding Interest is to Finance - Bill Mulligan, Isovalent. Argues that composability in software compounds value like interest in finance, using cloud native examples.
• concept · "My CNI Plugin Did… What?!": Debugging CNI with Style & Aplomb - Douglas Smith & Daniel Mellado Area
• concept · Better Bandwidth Management with eBPF - Daniel Borkmann & Christopher M. Luciano, Isovalent
• concept · Logs Told Us It Was DNS, It Felt Like DNS, It Had To Be DNS, I... Laurent Bernaille & Elijah Andrews
• concept · Lightning Talk: Locating and Debugging Failures with Linkerd... Alejandro Pedraza & Edidiong Asikpo
• concept · Lightning Talk: Tell Your SD-WAN About Your Service Mesh External Services! - Alberto Rodriguez
• concept · A Guided Tour of Cilium Service Mesh - Liz Rice, Isovalent
• concept · Simplifying Service Mesh Operations with Flux and Flagger - Mitch Connors & Stefan Prodan. Shows how Flux and Flagger can be combined to simplify operating a service mesh through GitOps and progressive delivery.
• concept · CoreDNS: Intro and Deep Dive - John Belamaric, Google & Yong Tang, Ivanti, Inc
• concept · Contour Ingress Intro and Deep Dive - Nick Young, Orlin Vasilev & Nigel Brown, VMware
• concept · Overview and State of Linkerd - Matei David, Buoyant, Inc.. Overview of Linkerd and its current state, with recent changes and plans.
• concept · Three Surprising K8s Networking “Features” and How to Defend Against Them - James Cleverley-Prance. Covers three surprising Kubernetes networking behaviors and how to defend against them.
• concept · Full Mesh Encryption in Kubernetes with WireGuard and Calico - Peter Kelly, Tigera
• concept · Gateway API: Beta to GA - Rob Scott, Google & Nick Young, VMware
• concept · Reproducing Production Issues in your CI Pipeline Using eBPF - Matthew LeRay & Omid Azizi
• concept · Multi-cluster Failover Using Linkerd - Charles Pretzer, Buoyant, Inc.
• tutorial · Kubernetes Networking 101 - Randy Abernethy, RX-M LLC
• tutorial · Cloud-Native Building Blocks: An Interactive Envoy Proxy Workshop - Adam Sayah & Jim Barton, Solo.io
• tutorial · Emissary + Linkerd: A Guide to End-to-end Encryption for your Cluster - Flynn & Jason Morgan. A guide to setting up end-to-end encryption in a cluster using Emissary ingress together with Linkerd.
• panel · Linkerd End User Panel: Case Studies from Production
• keynote · Cilium: Welcome, Vision and Updates - Thomas Graf & Liz Rice, Isovalent; Laurent Bernaille, Datadog

2022 · KubeCon + CloudNativeCon North America 2022

• case study · Building Multi-Tenant Routing And Scaling With Envoy - Yiming Peng, Amazon Web Services, Inc. — Amazon Web Services. AWS describes building multi-tenant routing and scaling with Envoy.
• case study · What We Learned From the Gateway API: Designing Linkerd’s New Policy CRD - Matei David, Buoyant, Inc — Buoyant, Inc
• concept · 100Gbit/S Clusters With Cilium: Building Tomorrows Networking- Daniel Borkmann & Nikolay Aleksandrov
• concept · Resize Your Pods In-Place With Deterministic eBPF Triggers - Pablo Chico de Guzman & Vinay Kulkarni
• concept · Remote Control Planes With Konnectivity; What, Why And How? - Jussi Nummelin & Rastislav Szabo. Explains what Konnectivity is and how to use it to run control planes remote from worker nodes.
• concept · Five Ways With a CNI: Understanding Kubernetes Networking For Performance..-Stig Telfer & Erez Cohen
• concept · Whose Packet Is It Anyway? Life of a Packet Through a Service Mesh - Kevin Leimkuhler & Doug Jordan
• concept · Exiting Ingress With the Gateway API - Rob Scott, Google & Shane Utt, Kong, Inc.
• concept · Using the EBPF Superpowers To Generate Kubernetes Security... Mauricio Vásquez Bernal & Alban Crequy. Shows how eBPF tooling can observe workloads to automatically generate Kubernetes security policies.
• concept · Emissary + Linkerd Resilience Patterns: Rate Limits, Retries & Timeouts - Flynn & Daniel Bryant
• concept · CoreDNS Intro And Deep Dive - Yong Tang, Ivanti. Intro and deep dive into CoreDNS and its plugin architecture.
• concept · Kubernetes Networking Infrastructure...- D Daly & N Jain, N Bitar, Moshe Levi, Vytautas Valancius
• concept · Dynamically Testing Individual Microservice Releases In Production - Matt Turner, Tetrate. Shows how to dynamically test individual microservice releases in production.
• concept · One API To Rule Them All? What the Gateway API Means For Service Meshes - Keith Mattix & John Howard
• concept · Cilium Updates, News And Roadmap- Thomas Graf, Bill Mulligan Liz Rice, Purvi Desai, Chandan Aggarwal
• concept · Istio Today and Tomorrow: Sidecars and Beyond - Mitch Conners, Google & Lin Sun, Solo.io
• concept · Decentralized Routing For a Sharded Application On Service Mesh - Vinay Gonuguntla & Pankaj Sikka
• concept · Overview And State Of Linkerd - Alex Leong, Buoyant
• concept · Lightning Talk: Securing Envoy: Catching Vulnerabilities With Continuous Fuzz Testing - Teju Nareddy. Lightning talk on using continuous fuzz testing to catch vulnerabilities in Envoy.
• concept · Envoy Maintainer Q+A - Matt Klein, Lyft
• tutorial · Flagger, Linkerd, And Gateway API: Oh My! - Jason Morgan, Buoyant & Sanskar Jaiswal, Weaveworks. Shows how Flagger, Linkerd and the Gateway API work together for progressive delivery.

2023 · KubeCon + CloudNativeCon + Open Source Summit China 2023

• case study · Live CNI Migration in Production Environments - Yike Wang and Yanzhao Li, VMware — VMware
• concept · Building Proxy with New Asynchronous I/O API: Exploring Envoy's Io_uring In... Hejie Xu & Zhihao Xie
• concept · The Service Mesh Exploration of China Mobile Cloud - Haiwen Zhang, China Mobile
• concept · Service Mesh Is on the Way to Witness the... - Huailong Zhang, Zhonghu Xu, Pei Fei, Xi Ning Wang
• concept · Rethink About Service Mesh Load Balancing - Zhonghu Xu, Huawei
• concept · CNI-Agnostic Network Performance Accelerator with eBPF - Mengxin Liu, Alauda & Yizhou Xu, Intel
• concept · Cross-Cluster Traffic Orchestration with eBPF - Xiaohui Zhang, Flomesh & Zhen Chang, Huawei Cloud
• concept · Envoy Gateway: The API Gateway in the Cloud Native Era - Xunzhuo Liu, Tencent & Huabing Zhao
• concept · Next Hop of Istio After Graduation - Zhonghu Xu, Huawei
• concept · Scaling up and Scaling Out Networking, Observability, and Security... - Bill Mulligan & Jaff Cheng
• concept · Just Buzz or Real Byte? eBPF in Cloud Native - Bill Mulligan, Isovalent
• concept · Detailed Parse and Reproduce Response Flags of Istio Access Log Based on Productio... Chaomeng Zhang

2023 · KubeCon + CloudNativeCon Europe 2023

• case study · Operate Multi-Tenancy Service Mesh with ArgoCD in Production - Lin Sun & Faseela K
• case study · Multi-Cluster Observability with Service Mesh - That Is a Lot of Moving Parts!? - Ryota Sawada. The speaker shares their experience operating multi-cluster observability across a service mesh and the complexity involved.
• concept · Emissary-Ingress: Self-Service APIs and the Kubernetes Gateway API - Lance Austin & Flynn
• concept · Envoy Gateway Update - Alice Wasko, Ambassador Labs & Arko Dasgupta, Tetrate. Project update on Envoy Gateway covering recent progress and plans.
• concept · Gateway API Project Update - Nick Young, Isovalent & Rob Scott, Google
• concept · Life Without Sidecars - Is eBPF's Promise Too Good to Be True? - Zahari Dichev, Buoyant
• concept · Cilium Updates, News, Roadmap, and in the Wild - Liz Rice, Andy Allred, Richard Hartmann
• concept · Past, Present, & Future of eBPF in Cloud Native Observability - Frederic Branczyk & Natalie Serrino
• concept · Verifiable GitHub Actions with eBPF - Jose Donizetti, Aqua. Shows how to verify GitHub Actions runs using eBPF.
• concept · Overview and State of Linkerd - Matei David, Buoyant, Inc.
• concept · Automated Cloud-Native Incident Response with Kubernetes and Service Mesh - M Turner & F Beltramini
• concept · The RPC Revolution: Getting the Most Out of gRPC - Richard Belleville & Kevin Nilson, Google. Google's gRPC maintainers explain how to get more out of gRPC through its features and best practices.
• concept · Create Istio Filters with Any Programming Language - Angel De Miguel Meana & Rafael Fernandez Lopez
• concept · Beyond Gateway API: Building a Cloud Agnostic Gateway Controller- Michael Larsen & Martin Villumsen
• concept · Future of Istio - Sidecar, Sidecarless or Both? - Neeraj Poddar, Solo.io
• concept · SIG Network: Intro and Updates - Antonio Ojea Garcia, Google; Surya Seetharaman, Red Hat; Shane Utt. SIG Network introduces itself and gives updates on its recent work and roadmap.
• concept · 🦝 The Top 10 List of Istio Security Risks and Mitigation Strategies - José Carlos Chávez, Tetrate
• concept · The Next Log4jshell?! Preparing for CVEs with eBPF! - Natalia Reka Ivanko & John Fastabend
• concept · Agones + Quilkin: Kubernetes Game Server Orchestration and UDP Service Mesh - Mark Mandel
• concept · Developing a Mental Model of Istio: From Kubernetes to Sidecars...- Aaron Birkland & Nina Polshakova. Builds a mental model of how Istio works by relating its sidecar-based mesh to underlying Kubernetes primitives.
• concept · Effortless Open Source Observability with Cilium, Prometheus... - Raymond de Jong & Anna Kapuścińska
• concept · Surviving Day 2 - How to Troubleshoot Kubernetes Networking - Thomas Graf, Isovalent. Covers approaches to troubleshooting Kubernetes networking in day 2 operations.
• concept · Keeping It Simple: Cilium Networking for Multicloud Kubernetes - Liz Rice, Isovalent
• concept · Scale the Internet with DNS: A CoreDNS Deep Dive - Yong Tang, Ivanti
• concept · Exiting Ingress 201: A Primer on Extension Mechanisms in Gateway API- Sunjay Bhatia & Daneyon Hansen. Primer on the extension mechanisms Gateway API offers beyond what Ingress supported.
• tutorial · Tutorial: Getting Familiar with Security Observability Using eBPF &Cilium Tetragon - Holmes & Cooley
• tutorial · Tutorial: Measure Twice, Cut Once: Dive Into Network Foundations the Right Way! - Wijay & Skrzypek. A hands-on tutorial on network fundamentals for Kubernetes.
• tutorial · eBPF 201: Supercharging Your eBPF Dev Process for Cloud Native Apps - Sanjeev Rampal & Donald Hunter. Intermediate eBPF session on speeding up the eBPF development process for cloud native apps.
• tutorial · Kubernetes Networking 101: An Overview of Popular Networking Options - Goutam Verma

2023 · KubeCon + CloudNativeCon NA 2023

• case study · A Practical Guide to eBPF Licensing: Or How I Learned to Stop Worryin... Jef Spaleta & Bill Mulligan
• case study · Five Years of Cloud Native Rust - Alex Leong, Buoyant — Buoyant. Buoyant reflects on five years of building the Linkerd data plane in Rust and the lessons learned.
• case study · Service Mesh Journey at DoorDash: The Good, the Bad, and the Ugly - Hochuen Wong, DoorDash — DoorDash
• case study · Cilium: From Service Mesh to Kubernetes and... James McShane, Hemanth Malla, Liz Rice & Thomas Graf
• concept · Network Policy API: Intro and Project... Andrew Stoycos, Surya Seetharaman, Dan Winship & Yang Ding
• concept · Service Mesh Battle Scars: Technology, Timing, and Tradeoffs - Panel
• concept · High Performance, Low Latency Networking for Edge & Telco
• concept · Take It to the Edge: Creating a Globally Distributed Ingress with Istio & K8gb - Jimmi Dyson, D2iQ. Shows how to build a globally distributed ingress with Istio and k8gb.
• concept · Service via BGP with Metallb and Calico - Evangelista Tragni & Francesco Grimaldi, Desotech SRL
• concept · Demystifying Service Mesh: Separating Hype from Practicality - Brian Redmond & Ally Ford, Microsoft
• concept · When Is a Secure Connection Not Encrypted? and Other Stories - Liz Rice, Isovalent. Liz Rice explains when secure connections are not actually encrypted and the pitfalls of how encryption is applied in Kubernetes networking.
• concept · Collecting Low-Level Metrics with eBPF - Mauricio Vásquez Bernal, Microsoft
• concept · CoreDNS Plugins: A Deep Dive - Yong Tang, Ivanti & John Belamaric, Google. Deep dive into how CoreDNS plugins work and are built.
• concept · Envoy Maintainer Q&A - Alyssa Wilk, Josh Marantz, Greg Greenway, Yan Avlasov
• concept · Emissary-Ingress: Self-Service APIs and the Kubernetes Gateway API - Hamzah Qudsi & Flynn
• concept · Gateway API: The Most Collaborative API in Kubernetes History Is GA - Rob Scott & Nick Young
• concept · Turning up Performance to 11: Cilium, NetKit Devices, and Going Big with TCP - Daniel Borkmann. Explains Cilium performance improvements using netkit devices and big TCP.
• concept · Modern Load Balancing, Improving Application's Resource Availability... Antonio Ojea & Gerrit DeWitt
• concept · eBPF for Observability: Data Overload Panacea or Pain.... Examines whether eBPF-based observability solves or worsens data overload.
• concept · Apply the Can Opener of Enlightenment: Lifting the Lid off Kubernetes Networking - Joe Thompson
• concept · Service Proxy, API Gateway, Service Mesh: What’s the Difference? W... Ahmet Soormally & Carol Cheung
• concept · Linkerd for the Enterprise: VM Support, Flat Networks, Gateway API, and More - William Morgan
• concept · Survive eBPF Deployment with Bpfd - Andrew Stoycos, Red Hat & Shane Utt, Kong. Presents bpfd for safely deploying and managing eBPF programs in Kubernetes.
• concept · Istio: The Past, Present and Future of the Project and Community - Louis Ryan & John Howard
• concept · Flavors of Certificates in Service Mesh: The Whys and Hows! - Iris Ding & Faseela Kundattil. Explains the different kinds of certificates used in service mesh and how and why they are configured.
• concept · Paint the Picture! - Detecting Suspicious Data Patterns in E... Natalia Reka Ivanko & John Fastabend. Shows how Tetragon uses eBPF and kTLS to detect suspicious data patterns in encrypted traffic.
• concept · Under the Hood: Exploring Istio's Lock Contention and Its Impact o... Raghav Grover & Timothy Ehlers
• concept · Untangling Your Service Mesh with Feature Gates - Niranjan Shankar, Microsoft
• concept · Scaling Kubernetes Networking to 1k, 5k, ... 100k Nodes!? - Marcel Zięba & Dorde Lapcevic
• concept · eBPF + Wasm: Lightweight Observability on Steroids - Michael Yuan & Yusheng Zheng
• concept · gRPC Tapping Filter with Hardware Accelerated in Service Mesh - Yizhou Xu & Devan Nair. Shows how a gRPC tapping filter can be hardware accelerated in a service mesh.
• concept · Make Underlay CNI to Be Powerful and Simple - Lan Weizhou & Qiuping Dai, Daocloud
• concept · A Wind of Change for Threat Detection - Melissa Kilby, Apple. Describes changes and new directions in threat detection, focused on Falco and runtime security.
• tutorial · Tutorial: Demystifying Cilium: Learn How to Build an eBPF CNI Plugin from Scratch - Adam Sayah. Hands-on tutorial building an eBPF-based CNI plugin from scratch to understand how Cilium works.

2024 · KubeCon + CloudNativeCon + Open Source Summit + AI_dev China 2024

• case study · Understanding the Buzz Around Cilium: Introduction and in Production at... - Bo Kang Li & Liyi Huang
• concept · Best Practice: Karmada & Istio Improve Workload & Traffic Resilience of Production... Chaomeng Zhang
• concept · How Does KubeEdge Build the Tunnel Which Is Secure, Trusted, and Adapta...- Wei Hu & Clement Richard. Describes how KubeEdge builds a secure, trusted and adaptable tunnel between cloud and edge.
• concept · Model Service Mesh: A New Paradigm for Large-Scale AI Model Servic...- Xi Ning Wang & Huailong Zhang
• concept · Unlocking LLM Performance with EBPF: Optimizing Training and Inference Pipelines - Yang Xiang
• concept · Gateway API and Beyond: Introducing Envoy Gateway's Gateway API Extensions - Huabing Zhao, Tetrate
• concept · Revolutionizing Service Mesh with Kernel-Native Sidecarless Architecture - Xin Liu
• concept · Unified Management, Continuity, Compliance in Multi-Clouds with Service Mesh - Kebe Liu, DaoCloud
• concept · Redefining Service Mesh: Leveraging EBPF to Optimize Istio Ambient Architecture and... - Yuxing Zeng. Shows how eBPF can optimize Istio Ambient mesh architecture.
• concept · What Is the Future of Service Mesh? Sidecar or Sidecarless - Zhonghu Xu, Huawei. Compares sidecar and sidecarless service mesh architectures and where service mesh is heading.
• concept · A New Choice for Istio Data Plane: Architectural Innovation for a Brand-New Performan...- Zhonghu Xu
• concept · Multi-Cluster Networking and Service Discovery Leveraging NRI - LingMing Xia & Di Xu
• concept · Implementing Seamless Connectivity and Service Governance in Multi Kubernetes Clu... - Xiaohui Zhang. Describes approaches to seamless connectivity and service governance across multiple Kubernetes clusters.
• concept · Project Lightning Talk: Telemetry API and Open Telemetry: the answer of istio monitoring?
• concept · Project Lightning Talk: A Deep Dive into Cilium Gateway API: The Future of Ingress Traffic Routing
• panel · Istio and Modern API Gateways: Navigating the Future of Service Meshes - Panel Discussion. A panel on the future of service meshes and their relationship with API gateways.

2024 · KubeCon + CloudNativeCon Europe 2024

• case study · Assessing Service Mesh's Net Worth: A Pragmatic Onboarding - Adrien Gillard, Decathlon — Decathlon. Decathlon assesses the value of a service mesh and describes its pragmatic onboarding approach.
• case study · No 'Soup' for You! Enforcing Network Policies for Host Processes via eBPF - Vinay Kulkarni, eBay — eBay. eBay describes enforcing network policies on host processes with eBPF in its own infrastructure.
• case study · Reducing Cross-Zone Egress at Spotify with Custom gRPC Load Balancing — Spotify. Spotify reduced cross-zone egress costs by implementing custom gRPC load balancing.
• concept · Istio Project Update - Mitch Connors, Aviatrix & Zhonghu Xu, Huawei
• concept · eBPF’s Abilities and Limitations: The Truth - Liz Rice & John Fastabend, Isovalent
• concept · At the Intersection of Cilium CNI and Service Mesh - Who Has the Right of Way? - Christine Kim
• concept · Next-Level Security: Implementing MTLS in Istio Multi-Cluster Environments Using SPIRE. Explains implementing mTLS across Istio multi-cluster environments using SPIRE for identity.
• concept · Scaling Service Mesh: Self Service Beyond 300 Clusters - Sumit Mathur & Sushanth Kamath A, Intuit
• concept · Cilium ClusterMesh in Action: Strengthening Security Across Distributed Kubernetes Clusters
• concept · CNI: Recap and Update - Casey Callendrello, Isovalent & Tomofumi Hayashi, Red Hat
• concept · Bringing SPIFFE to Linkerd for Mesh Expansion - Zahari Dichev, Buoyant
• concept · Unlock Energy Consumption in the Cloud with eBPF - Leonard Pahlke
• concept · Gateway API: Beyond GA - Mattia Lavacca, Kong; Surya Seetharaman, Nick Young, Lior Lieberman
• concept · Stop Leaking Kubernetes Service Information via DNS! - John Belamaric, Google & Yong Tang, Ivanti
• concept · Network Policy: The Future of Network Policy with AdminNetworkPolicy
• concept · The Rustvolution: How Rust Is the Future of Cloud Native - Flynn, Buoyant. Argues that Rust is the future of cloud native software, drawing on the Linkerd data plane's design.
• concept · Ingress-Nginx and 2024 Plans - Marco Ebert, Giant Swarm & James Strong, Isovalent. Ingress-NGINX maintainers outline project status and plans for 2024.
• concept · Fast and Efficient Log Processing with Wasm and eBPF - Michael Yuan, Second State. Shows how Wasm and eBPF can be combined for fast, efficient log processing.
• concept · What not to do when you're updating Istio in a critical environm... David de Lucca & Guilherme Saijo
• concept · Troubleshooting Hidden Performance and Costs in Network Traffic Across Multiple AZs with eBPF
• concept · Linkerd Project Update: VM Support, Ingress, Security on the Edge, and Rust
• concept · CoreDNS Plugins: A Deep Dive - John Belamaric, Google & Yong Tang, Ivanti
• concept · Simplifying Multi-Cluster and Multi-Cloud Deployments with Cilium - Liz Rice, Isovalent
• concept · How Many Network Policies Can I Create? - Nadia Pinaeva, Red Hat & Shaun Crampton, Tigera. Examines how many network policies a cluster can handle and how different CNIs scale.
• concept · Persistence Pays Off: The Path to Session Persistence in Gateway API. Explains how session persistence is being designed in Gateway API.
• concept · Comparing Sidecar-Less Service Mesh from Cilium and Istio - Christian Posta, Solo.io. Compares the sidecar-less service mesh approaches of Cilium and Istio.
• concept · A Cilium Introduction: Back to Bee-Sics - Nico Vibert & Dan Finneran, Isovalent
• concept · The gRPCRoute to Success: Idiomatically Routing and Balancing...- Richard Belleville & Arko Dasgupta. Explains how GRPCRoute in Gateway API routes and balances gRPC traffic idiomatically.
• concept · Sustainable Computing: Measuring Application Energy Consumption in Kubernetes Environments with K.... Shows how to measure application energy consumption in Kubernetes environments.
• concept · What’s New in Kuma: Advanced Service Mesh Capabilities | Project Lightning Talk
• concept · Future of Service Mesh is Sidecar-less with Istio Ambient Mesh | Project Lightning Talk
• concept · K8gb: Reliable Global Service Load Balancing without vendor lock-in | Project Lightning Talk
• concept · Lightning Talk: Help! My Envoy Sidecar Is Consuming 8GBs of Memory! - Krzysztof Słonka, Kong
• concept · Dealing with eBPF’s Observability Data Deluge - Anna Kapuścińska, Isovalent
• concept · Cilium: Connecting, Observing, and Securing Service Mesh and Beyond with eBPF - Panel
• tutorial · Tutorial: Simpler Than Making a Fraisier Cake: Building, Running, and Observing Your First eBPF...
• tutorial · Tutorial: From CNI Zero to CNI Hero: A Kubernetes Networking Tutorial Using CNI
• tutorial · Tutorial: Configuring Your Service Mesh with Gateway API - Mike Morris, Microsoft & Flynn, Buoyant

2024 · KubeCon + CloudNativeCon India 2024

• case study · Pick Cilium! Lessons Learned From Writing 20+ Cloud Native Case Studies about Cilium
• case study · From Bottleneck to Breakthrough: EarnIn's Network Evolution with Link... K. Trivedi & S. Chakraborty — EarnIn. EarnIn recounts how its network evolved by adopting Linkerd.
• case study · A Debugging Journey from CoreDNS to Coreutils - Akhil Mohan & Humble Devassy Chirammal, VMware — VMware
• case study · Stay Ahead of Disruptions : Experience Robust DNS Failover for API Ga... G. Yadav & V. K. M. Vadrevu. Speakers describe building robust DNS failover for API gateways to stay available through disruptions.
• concept · Lightning Talk: Non-Intrusive Multi-Tenant Auth & Authz with Istio, OAuth2Pr... - Adarsh Kumar Singh
• concept · Invoking Serverless Functions via gRPC Service Mesh - K. Jayaprakasam, S. Sridharan & R. Belleville. Shows how to invoke serverless functions through a gRPC service mesh.
• concept · A Deep Dive Into the Current Runtime Security Landscape - Ankur Kothiwal, CERN. Survey of the current runtime security tooling landscape for cloud native workloads.
• concept · Contributing to Istio : View from an LFX Mentee's Eyes - Adil Mohamed M P, Independent
• concept · Cilium: Connecting, Observing, and Securing Kubernetes and Beyond with eBPF - B. Mulligan & N. Bisht. Overview of Cilium for connecting, observing and securing Kubernetes with eBPF.

2024 · KubeCon + CloudNativeCon NA 2024 - Salt Lake City

• case study · Cash App's Journey Into a Multi-Cluster Ecosystem - Rachel Sheikh, Cash App — Cash App. Cash App shares its journey to a multi-cluster Kubernetes ecosystem.
• case study · How to Move from Ingress to Gateway API with Minimal Hassle - Keith Mattix, Microsoft — Microsoft
• case study · Understanding How OpenTelemetry Network Uses eBPF for Network Observab... S.R. Shrivastava, J. Perry — OpenTelemetry Network
• case study · From Observability to Enforcement: Lessons Learned Implementing eBPF R... A. Kapuścińska, K. Kourtis
• case study · Thousands of Gamers, One Kubernetes Network - Surya Seetharaman, Red Hat & Girish Moodalbail — Red Hat, NVIDIA. Red Hat and partner engineers show how one Kubernetes network was built to serve thousands of gamers.
• case study · Accelerating Adoption: What’s New in Envoy Gateway and Why It Matters | Project Lightning Talk
• case study · Kubernetes at Scale: Practical Solutions for Enhanced CNI and Kubelet P... H. Santana, B.G. da Silva
• concept · Solving the Kubernetes Networking API Rubik's Cube - D. Smith, S. Seetharaman, S. Utt, L. Lieberman
• concept · Understanding Kubernetes Networking in 30 Minutes - Ricardo Katz & James Strong
• concept · Cilium: Connecting, Observing, and Securing Kubernetes and Beyond with eBPF - Panel
• concept · Life of a Packet: Ambient Edition - John Howard, Solo.io & Keith Mattix, Microsoft. Follows a packet through Istio ambient mesh to show how traffic flows.
• concept · Extending the Gateway API: The Power and Challenges of Policies - Kate Osborn, NGINX
• concept · Cilium, eBPF, WireGuard: Can We Tame the Network Encryption Performanc... D. Borkmann, A. Protopopov
• concept · Optimizing Load Balancing and Autoscaling for Large Language Model (LLM) Inference on Kub... D. Gray
• concept · Can Your Kubernetes Network Handle the Heat? Building Resilience wit... L. Lieberman, S. Seetharaman. Explores how to build resilience into Kubernetes networking so it can withstand failures and stress.
• concept · All Your Routes Are Ready, More or Less - Dave Protasowski. Explains how route readiness is determined and why it is eventually consistent in the networking layer.
• concept · DNS Deep Dive in Kubernetes with CoreDNS - Jingming Guo, Airbnb
• concept · Gateway API: What's New, What's Next? - C. Kim, N. Young, M. Lavacca, G. Cassolato
• concept · What Istio Got Wrong: Learnings from the Last Seven Years of Service Mesh - C. Posta, L. Ryan
• concept · Shopify’s Open Source Approach to Network Monitoring with eBPF, Vector... S. Rabenhorst, M. Franklin
• concept · Powering Automatic Authorization in Envoy Through Live Traffic Inspection - Dom Del Nano
• concept · CoreDNS Plugins: A Deep Dive - John Belamaric, Google & Yong Tang, Ivanti
• concept · Testing Kubernetes Without Kubernetes: A Networking Deep Dive - John Howard, Solo.io. John Howard shows how to test Kubernetes networking components without a real cluster for faster, easier-to-debug tests.
• concept · With Great Flexibility Comes Great Complexity: Inspect Your Gateway API... M. Lavacca, G. Ghildiyal
• concept · Inspektor Gadget: eBPF for Observability, Made Easy and Approachable | Project Lightning Talk
• concept · OpenTelemetry: The Future of Network Monitoring eBPF for Low-Level Insights | Project Lightning Talk
• concept · k8gb: Global Load Balancing, the Kubernetes Way | Project Lightning Talk
• concept · Linkerd: Adding Federated Services to Linkerd - Design Considerations and Debates | PLT
• concept · Istio: Why Choose Istio in 2025 | Project Lightning Talk
• concept · Kuma: What’s New in Kuma? | Project Lightning Talk. Lightning talk on what is new in the Kuma service mesh.
• concept · Seeing Double? Implementing Multicast with eBPF and Cilium - Louis DeLosSantos, Isovalent at Cisco
• concept · CNI Updates and Direction! - Michael Zappa, Microsoft & Lionel Jouin, Ericsson
• concept · Mish-Mesh: Abusing the Service Mesh to Compromise Kubernetes Environments - H. Ben-Sasson, N. Ohfeld
• concept · Seccomp and eBPF; What’s the Difference? Why Do I Need to Know? - Natalia Reka Ivanko, Duffie Cooley
• concept · Harnessing the Power of Envoy Proxy for Building an LLM Gateway - Idit Levine, Solo.io
• concept · One Gateway API to Rule Them All (and in the Cluster Configure Them) - Flynn, Buoyant
• concept · Linkerd Update: Egress, Rate Limiting, Federated Services, and more William Morgan, Linkerd
• tutorial · Kubernetes Multi-Cluster Networking 101 - Niranjan Shankar, Microsoft & Ram Vennam, Solo.io
• tutorial · Tutorial: No Mess Rollouts with Gateway API: Leveraging Gateway API and... N. Polshakova, L. Gadban
• tutorial · Tutorial: A Mad Scientist's Guide to Automating CNI with Generative AI - Doug Smith, Red Hat, Inc
• tutorial · Tutorial: Live with Gateway API V1.2 - Flynn, Buoyant & Mike Morris, Microsoft

2025 · KubeCon + CloudNativeCon China 2025 (Hong Kong)

• concept · Revolutionizing Sidecarless Service Mesh With eBPF - Zhonghu Xu & Muyang Tian, Huawei
• concept · Guardians of the Gateway: Keeping Chaos Out of Your Cloud Highway - Sayan Mondal & Jintao Zhang. Shows how to apply chaos engineering to gateways to test the resilience of cloud traffic paths.
• concept · Project Lightning Talk: Practical Extension of eBPF Usability in KubeCon - Lizhencheng, Maintainer
• concept · Lightning Talk: Best Practices for Upgrading Service Mesh Seamlessly - Hang Yin & Zhencheng Lee
• concept · Simplifying the Networking and Security Stack With Cilium, Hubble, and Tet... Liyi Huang & Kaixi Fan

2025 · KubeCon + CloudNativeCon Europe 2025 - London

• case study · How We Moved Spotify To a Proxyless gRPC Service Mesh - Erik Lindblad & Erica Manno, Spotify — Spotify. Spotify explains how it migrated to a proxyless gRPC service mesh.
• case study · Journey at the New York Times: Is Sidecar-Less Service Mesh Disappearing I... Lin Sun & Ahmed Bebars — New York Times. The New York Times shares its service mesh journey and evaluates whether sidecar-less mesh is replacing sidecars.
• case study · Expanding eBPF’s Reach: From Batteries-Included Auto-Instrumentation To E2E Observab... Dom Del Nano
• concept · Using eBPF for Non-invasive, Performant, Instant Network Monitoring - Mario Macías & Marc Tudurí
• concept · Emissary-ingress: Version 4 and the Road Ahead - Flynn, Buoyant. Covers Emissary-ingress version 4 and the project's future direction.
• concept · Linkerd Update: Gateway API, Client-Specific Policy, Federated Services, Multicluster... Alex Leong
• concept · Redesigning Ingress: Docker’s Transition To the Next-Gen Gate... Kateryna Nezdolii & Ryan Hristovski
• concept · Istio: The Past, Present and Future of the Project and Communi... Lin Sun, Louis Ryan & Raymond Wong
• concept · Securing the Gateway: A Deep Dive Into Envoy Gateway's Advanced Security Pol... Huabing (Robin) Zhao
• concept · Debugging Envoy Tunnels: A Deep Dive - Carlos Sanchez & Alexandra Stoica, Adobe
• concept · eBPF and Wasm: Unifying Userspace Extensions With Bpftime - Yusheng Zheng, eunomia-bpf
• concept · What's New in gRPC - Kevin Nilson, Google. An update on new features and developments in the gRPC project.
• concept · Scalable DNS With CoreDNS Plugins: A Deep Dive - Yong Tang, Ivanti & John Belamaric, Google
• concept · How To Gateway With Ingress - 140 Days InGate - Marco Ebert & James Strong
• concept · Simplifying the Networking and Secur... Bill Mulligan, Anna Kapuścińska, Bowei Du & Amir Kheirkhahan
• concept · Museum of Weird Bugs: Our Favorites From 8 Years of Service Mesh Debugging - Alex Leong, Buoyant
• concept · Making the Leap: What Gateway API Needs To Support Ingress-NGINX Users - Rob Scott & James Strong
• concept · Uncharted Waters: Dynamic Resource Allocation for Networking - Miguel Duarte Barroso & Lionel Jouin
• concept · Project Lightning Talk: Kepler Project Updates - Sunyanan Choochotkaew, Maintainer. Lightning talk on recent updates to the Kepler energy-monitoring project.
• concept · Project Lightning Talk: API Management in the CRD World: What Linkerd Has Learned - Phil Henderson. Lightning talk on what Linkerd learned about managing APIs in a world of CRDs.
• concept · Project Lightning Talk: What's New in Istio? - Mitch Connors, Maintainer
• concept · Project Lightning Talk: What’s New in Kuma: Advanced Service Mesh Capabilities - Marcin Skalski
• concept · Lightning Talk: Extending Envoy With WebAssembly - Yuki Ito, newmo, Inc.
• concept · C.A.L.L.I.N.G. Now I'm Calling You, Calling You Now - Mario Macías & Terra Tauri, Grafana Labs. Grafana Labs speakers explain an observability approach that builds on OpenTelemetry and eBPF instrumentation.

2025 · KubeCon + CloudNativeCon India 2025

• concept · Back To the Basics - Service Mesh Fundamentals - Kannan Jayaprakasam & Pawan Bhardwaj, Google. Explains service mesh fundamentals and why and how to use one.
• concept · Unlocking the Power of Kuma Service Mesh: Enhancing Reliability and D... Deepak Verma & Arpit Mishra
• concept · Effortless, Standardised Homelab Observability With eBPF - Goutham Veeramachaneni, Grafana Labs
• concept · Guard Your Network With Kyverno and Envoy - Sanskar Gurdasani & Swastik Gour
• concept · High-Performance Cloud Networking With Calico and Vec... Shatakshi Mishra & Abed Mohammad Kamaluddin
• concept · Enhancing DNS Reliability in Kubernetes With Node Local DN... Sanjay Kumar K K R & Priyanshi Agrawal
• concept · Auto-instrumentation for GPU Performance Using eBPF - Annanay Agarwal, Grafana Labs

2025 · KubeCon + CloudNativeCon Japan 2025 (Tokyo)

• case study · BGP Peering Patterns for Kubernetes Networking at Preferred Networks - Sho Shimizu & Yutaro Hayakawa — Preferred
• case study · From Moon Prism Power To eBPF Super Saiyan: A Guide To Cloud Native Se... Carla Gaggini & Kenta Tada
• concept · Access AI Models Anywhere: Scaling AI Traffic With Envoy AI Gateway - Dan Sun & Takeshi Yoneda
• concept · Lightning Talk: Enhanced Service Redirection: eBPF Ensures the High Availability of N... Weizhou Lan
• concept · Envoy Gateway Policies: Unlocking the Full Power of Envoy Proxy for API Gateways - Huabing Zhao
• concept · Project Lightning Talk: Understanding Cilium's eBPF kube-proxy Replacement for High... Yusuke Suzuki
• concept · Full Lifecycle API Management in Kubernetes With Envoy and WebAssem... Brandon Kang & Mostafa Radwan

2025 · KubeCon + CloudNativeCon North America 2025

• case study · Fast and the Furious: CICD Pipeline for eBPF Programs at Meta S... Theophilus Benson & Prankur Gupta — Meta
• case study · TikTok's IPv6 Journey To Cilium: Pitfalls and Lessons Learned - Giri Kuncoro & Joseph Pallamidessi
• case study · GAMMA in Action: How Careem Migrated To Istio Without Downtime - Suren Raju & Sergey Marunich — Careem
• concept · Fix First, Investigate Later: When an eBPF Rollout Brought Down Our... Zain Malik & Grzegorz Głąb
• concept · Scaling and Securing CoreDNS: Performance and Resilience - Yong Tang & John Belamaric
• concept · Diagnosing Application Performance With EBPF, Pyroscope, and Kubernetes - Liam Mackie
• concept · Istio Project Updates: AI Inference, Ambient Multicluster & Default Deny - Keith Mattix, Microsoft
• concept · Gateway API: Table Stakes - Shane Utt, Candace Holman, Mike Morris, Lior Lieberman & Kellen Swain
• concept · Navigating the AI/ML Networking Maze in Kubernetes: Lessons From the Trenches - Antonio Ojea, Google
• concept · Beyond the Cloud(s): Falco’s Ascent in Performance and... Leonardo Grasso & Leonardo Di Giovanna. Falco project update on performance improvements and new capabilities.
• concept · 10 Years of Cilium: Connecting, Securing... Bill Mulligan, Paul Arah, Neha Aggarwal, Satish Krishnan
• concept · Routing Stateful AI Workloads in Kubernetes - Maroon Ayoub, IBM & Michey Mehta, Red Hat. Explains why standard Kubernetes load balancing fails for stateful LLM inference and how llm-d's cache-aware routing fixes it, with benchmark data.
• concept · QEMU in the Fast Lane: Accelerating KubeVirt Networking With... Daniel Borkmann & Anton Protopopov. Shows how to speed up KubeVirt networking by accelerating the QEMU data path with eBPF.
• concept · On-Prem Load Balancing Reimagined: Serving 20 Million QPS With Gateway API and Envoy... Isaac Wilson
• concept · Return of the Mesh: Gateway API's Epic Quest for Unity - Henrik Rexed, Dynatrace
• concept · Project Lightning Talk: Introducing k8gb: Kubernetes Native Global Load Balancing Mad... Yury Tsarev. Lightning talk introducing k8gb, a Kubernetes-native global server load balancing project.
• concept · Project Lightning Talk: Linkerd, mTLS, and Bungled Bundles - Flynn, Technical Evangelist
• concept · Project Lightning Talk: Istio: Set Sailing With Istio Without Sidecars - Lin Sun
• concept · Project Lightning Talk: OVN-Kubernetes: Scalable, Production-Grade Networking... Surya Seetharaman. Project lightning talk on OVN-Kubernetes as a scalable, production-grade networking implementation for Kubernetes.
• tutorial · Lightning Talk: Know Before You Go! Speedrun Intro To Gateway API - Christine Kim
• tutorial · Don't Panic! A Beginner's Guide To K8s Debugging - Ivan Porta & Phil Henderson, Buoyant. Beginner's guide to debugging problems in Kubernetes clusters.

2026 · KubeCon + CloudNativeCon + OpenInfra Summit + PyTorch Conference China 2026

• concept · Non-Invasive AI Agent Observability With OBI - Haibin Zhang, Alibaba Cloud & Endre Sara, Causely. Shows non-invasive observability of AI agents using OpenTelemetry eBPF instrumentation (OBI).
• concept · 10 Years of Cilium: Connecting, Securing, and Simplifying the... Liyi Huang, Tingjin Ye & Yashi Su
• concept · Behind the Scenes of Building a Gateway API Dataplane... Norwin Schnyder & Huabing (Robin) Zhao. Behind-the-scenes look at designing and building a Gateway API dataplane.

2026 · KubeCon + CloudNativeCon Europe 2026

• case study · An Immersive and Visual Journey Into Kubernetes Networking - Benoit Entzmann, Feesh — Feesh
• case study · From NLB Sprawl To Mesh Efficiency: How Skyscanner Handles 60M Reque... John Clark & Steven Thwaites — Skyscanner. Skyscanner describes moving from NLB sprawl to a mesh to handle 60M requests efficiently.
• case study · Gateway API: Bridging the Gap from Ingress to the Future - Panel
• concept · Cloud Native Theater | Istio Day: The Good, The Ugly, and The Bad... Alfonso Ming and Jorge Turrado
• concept · Cloud Native Theater | Istio Day: Running State of the Art Inference... Jackie Maertens and Nili Guy
• concept · Cloud Native Theater | Istio Day: Zero-Downtime Migration from ingress-nginx to Isti... Joe Abellard
• concept · Cloud Native Theater | EnvoyCon: External Processing, Internal Leverage: MCP Tool Calls... Jens Kat. Shows how Envoy external processing can be used to handle MCP tool calls.
• concept · Cloud Native Theater | EnvoyCon: The Future of AI Traffic: What's New in Envoy AI Tra... Xiaolin Lin. Presents new features and the direction of Envoy AI Gateway for managing AI traffic.
• concept · Cloud Native Theater | EnvoyCon: Inside Spotify’s Envoy Architecture: What We Le... Leonardo da Mata
• concept · Cloud Native Theater | EnvoyCon: The Next Generation of Envoy Extensibility: Dynami... Rohit Agrawal
• concept · Cloud Native Theater | EnvoyCon: From ingress-nginx to Envoy Gateway at Zapier: The... Kalen Wessel
• concept · Project Lightning Talk: Envoy Today: What’s New In Managing Cloud-Native And AI Workl... Karol Szwaj
• concept · Project Lightning Talk: Optimize Sidecarless Service Mesh With A Brand-New Rust-Base... Zengzeng Yao
• concept · Project Lightning Talk: MCP Routing In Linkerd - Flynn, Technical Evangelist
• concept · Envoy in the Era of Agentic Workloads - Yan Avlasov, Google & Erica Hughberg, Tetrate
• concept · Project Lightning Talk: Translating Ebpf Into Business Value: Lessons From The Cili... Bill Mulligan
• concept · Tailor Made: Dynamic Fine-Grained Authorization for API Traffic - Erica Hughberg & Andres Aguiar. Shows dynamic fine-grained authorization for API traffic at the gateway.
• concept · Navigating the Gateway API Maze: 40+ Implementations, 55+ Features... Beka Modebadze & Christine Kim
• concept · Signed, Sealed, Delivered: Why Reverse Proxies Outperform VPNs - Peter O'Neill & Boris Kurktchiev. Argues that reverse proxies outperform VPNs for secure access and explains why.
• concept · Evolution or Revolution: Istio as the Network Platform for Cloud Nat... Mitch Connors & Daniel Grimm. Considers whether Istio's evolution is evolutionary or revolutionary as a cloud native network platform.
• concept · Hacking GPU Observability: eBPF & Ephemeral Containers in Action on Kubernetes - Brandon Kang
• concept · BoF | Beyond Nginx Ingress: Higress as the K8s Gateway for the AI Era
• concept · Peeking Into the GPU Black Box: Continuous Profiling on Kubernetes With eBPF - Zahari Dichev
• concept · Agentic Networking: Securing AI Agents on Kubernetes - Haiyan Meng, Google & Evaline Ju, IBM
• concept · Linkerd: Reliable Production in an AI/MCP World - William Morgan, Buoyant
• concept · Rust Vs. Go: Building a Container Network Stack From Scratch - Matt Heon & Shivang K Raghuvanshi. Compares Rust and Go for building a container network stack from scratch.
• concept · Real-World Supply-Chain Security - Alex Leong, Buoyant. Covers practical supply-chain security measures and threats, from the Buoyant perspective.
• concept · Not Yet Another Envoy Implementation - Exploring Kgateway To Write Your Own GatewayA... Ricardo Katz. Explores using kgateway to build your own Gateway API implementation.
• concept · Building the Next Generation of Multi-Cluster with Gateway API - Mike Morris & Alan Grosskurth
• concept · 10 Years of Cilium: Connecting, Securing, and Simplifying the... Bill M, Paul A, Marcelo M & Neha A
• concept · When DNS Blinks: Scaling and Hardening CoreDNS in Critical Cloud Infra... Yong Tang & John Belamaric. Covers how to scale and harden CoreDNS for critical cloud infrastructure.
• concept · SIG Network: The State of Networking for AI on Ku... David M, Haiyan M, Bowei D & Kellen S & Nadia P
• concept · Istio's Ambient Mesh: The Real Cost of Sidecar-less Tracing - Mofesola Babalola & Hannah Olukoye
• concept · DNS Tracing & Metrics Via eBPF in OpenTelemetry- Endre Sara, Causely & Nikola Grcevski, Grafana Labs
• tutorial · Tutorial: Attack Defense: Leverage eBPF To Reveal Attack Flows... Constanze R, Markus G & Teodor P
• panel · Cloud Native Theater | Istio Day: Panel: Horrors and Successes of Running Istio in Production. Istio Day panel on the horrors and successes of running Istio in production.

2026 · KubeCon + CloudNativeCon India 2026

• case study · Zero Trust for Fintech: Building Secure Banking Infrastructure Wit... Prasta Maha & Herbert Sianturi. Describes building secure zero-trust banking infrastructure for fintech on cloud native tooling.
• concept · Service Networking Within Air-Gapped Environments: Deployment Strategies and Operat... Anirban Nandi
• concept · When Kubeflow Fights Cilium: Debugging 60% Idle GPUs... Ramkumar Nagaraj & Bingi Narasimha Karthik

2026 · KubeCon + CloudNativeCon Japan 2026

• case study · The Road To Cilium: Migrating 150+ Kubernetes Clusters at Airbnb - Yifei Sun, Airbnb — Airbnb
• case study · Runtime Security at Scale With EBPF: Hybrid Detection and Root Cause… Y. Krishna Kota & R. Waghare
• case study · I Tested 7 So You Only Need 1: Your First Gateway API Migration in 5 Minutes - Hoon Jo
• concept · Beyond Wasm: How Dynamic Modules Let You Extend Envoy Proxy in Go, Rust, or… R. Agrawal & T. Yoneda
• concept · Dynamic Modules in Envoy Gateway: API Design, Safety, and Operability - K. Kimura & H. (Robin) Zhao
• concept · A Practical, Research‑Backed Introduction To Cloud‑Native Kernel‑Bypass Networking - K. Yasukata. A research-backed introduction to kernel-bypass networking in cloud-native environments.
• concept · Running Wasm Inside Your Storage Cluster With CSI and Gateway API - Ho Kim & SangJoon Park
• concept · Detecting Compromised CI With eBPF and Cilium Tetragon - Liz Rice, Isovalent at Cisco
• concept · A Decade of Cilium Around the World - Liz Rice, Isovalent at Cisco & Hiroki Hanada, Cybozu, Inc.
• concept · Beyond Power and Magic: Forging Stable eBPF Tools for the Post-Demon King Era - K. Tada & C. Gaggini

2026 · Sneak Peek: KubeCon + CloudNativeCon North America 2026

• other · Meet William Morgan - Speaker at KubeCon + CloudNativeCon North America. A short sneak-peek promo introducing speaker William Morgan for KubeCon North America.