Networking · advanced

eBPF & Cilium for Kubernetes Networking

Master eBPF-powered Kubernetes networking with Cilium — the CNI plugin that replaces kube-proxy and iptables with high-performance kernel programs. This advanced course covers Cilium architecture, identity-based NetworkPolicy, L7 enforcement, Hubble observability, Tetragon runtime security, and BGP routing for bare-metal clusters.

9 hours
20 lessons
5 modules
updated May 2026

Module 1 freeNo credit cardFull course from $8.99/mo

try it

Try it before you sign up

Read a full lesson and answer 3 questions from the Module 1 quiz. No account needed.

free lesson · read · 22 min

eBPF Architecture: Programs, Maps, Verifier, and JIT Compilation

eBPF (extended Berkeley Packet Filter) is a revolutionary Linux kernel technology that allows sandboxed programs to run in the kernel without modifying kernel source code or loading kernel modules. Originally created…

question 1 of 3 · from the Module 1 quiz

An eBPF program attempts to dereference a pointer without first checking if it is NULL. What happens?

Pick an answer.

curriculum

5 modules, 20 lessons

Module 1 is free — lessons, hands-on walkthrough and quiz.

readeBPF Architecture: Programs, Maps, Verifier, and JIT Compilation22 min
videoTutorial: Getting Started with eBPF25 min
hands-onHands-On: Inspect eBPF Programs and Maps with bpftool20 min
quizModule 1 Quiz: eBPF Architecture and Fundamentals10 min

how it's built

Built by the CloudaQube team

No celebrity instructor — here is exactly what goes into the course instead.

01 6 guided hands-on walkthroughs you run in a real environment.
02 5 module quizzes — every answer comes with an explanation.
03 Last updated May 2026.
04 Any module can become a hands-on lab in Labs Studio.

outcomes

What you'll be able to do

01 Explain how eBPF programs are loaded, verified, and executed in the Linux kernel
02 Identify the architectural advantages of Cilium over iptables-based kube-proxy
03 Build a Cilium-powered Kubernetes cluster with kube-proxy replacement enabled
04 Apply identity-based NetworkPolicy including L7 HTTP and DNS egress controls
05 Evaluate network flows and security events using Hubble and Tetragon
06 Configure BGP control plane for bare-metal Kubernetes load balancing

before you start

— Strong Kubernetes experience (networking, CNI, Services, Ingress)
— Solid Linux networking fundamentals (iptables, routing tables, namespaces)
— Familiarity with container networking concepts (veth pairs, bridge devices, overlay networks)
— Working knowledge of kubectl and Helm

questions

Before you start

How long does it take?

About 9 hours of lessons, videos and hands-on walkthroughs across 5 modules.

What’s free?

Module 1 in full — lessons, hands-on walkthrough and quiz — with no card required. Any paid plan (from $8.99/mo) unlocks all 5 modules, and starts with a 14-day free trial.

keep going

Start the course with Module 1 free.

No card required. Unlock every module from $8.99/mo when you’re ready.

See pricing