You are using an out of date browser. It may not display this or other websites correctly. You should upgrade or use an alternative browser.
cilium
About this tag
Cilium is a networking, observability, and security solution for Kubernetes that leverages eBPF (extended Berkeley Packet Filter) in the Linux kernel. On WindowsForum.com, discussions highlight Cilium in the context of container networking and cluster security. One thread covers CVE-2025-37959, a BPF-related vulnerability that could cause socket buffer metadata to leak across network namespaces after a bpf_redirect_peer redirection, affecting Cilium-managed clusters. Other threads mention Cilium as part of Azure Kubernetes Service (AKS) Automatic, a managed Kubernetes mode that includes Cilium for networking and security. These posts focus on how Cilium integrates with AKS to provide production-ready, secure, and observable Kubernetes environments with minimal operational overhead.
The Linux kernel received a targeted fix for CVE-2025-37959 — a BPF-related packet-scrubbing bug that could cause *socket buffer (skb) metadata from one network namespace to be preserved and misapplied after a bpf_redirect_peer redirection — a behavior which broke container networking (notably...
Microsoft has made Azure Kubernetes Service (AKS) Automatic generally available, offering an “opinionated” — but fully Kubernetes‑compatible — managed mode that stitches together autoscaling, node lifecycle management, observability, and security defaults to deliver production‑ready clusters...
Microsoft’s AKS Automatic is the kind of product that reads like a direct answer to a single question enterprises have been asking for years: how do we keep Kubernetes’ benefits without paying an ever‑rising Kubernetes tax in staff, time, and outages?
Background
Kubernetes is the default runtime...
Azure has made a decisive push to lower the operational friction of Kubernetes with the general availability of Azure Kubernetes Service (AKS) Automatic — an opinionated, fully managed mode of AKS that ships production-ready clusters with preselected networking, security, scaling, and...