Multi-Cluster Calico Enterprise on eBPF: Notes From the Deep End

Flipping the dataplane took about forty seconds. Dealing with what it broke took three weeks. That ratio is the honest summary of an eBPF migration, and almost nothing written about eBPF networking tells you about it. The posts are about throughput graphs and iptables rule counts. The work is about conntrack, kernel versions, asymmetric returnContinue reading “Multi-Cluster Calico Enterprise on eBPF: Notes From the Deep End”

A Software Supply Chain That Survives a Regulator: SLSA, Sigstore and SBOMs in Practice

The question that reorganised our entire supply chain programme took about eleven seconds to ask. Not “do you sign your images.” Not “do you scan for vulnerabilities.” It was: for the container that was running in production on that date, show me the commit it came from, show me the build that produced it, andContinue reading “A Software Supply Chain That Survives a Regulator: SLSA, Sigstore and SBOMs in Practice”