Target Audience

This course is designed for professionals responsible for designing, deploying, securing, and operating Kubernetes networking platforms, including:

• Network Engineers
• Cloud Infrastructure Engineers
• Platform Engineers
• Security Engineers
• Kubernetes Administrators
• DevOps Engineers
• Site Reliability Engineers (SRE)
• Solutions Architects
• Technical Consultants supporting cloud-native infrastructures

Pre-requisites:

Basic knowledge of Linux, Kubernetes, and container networking is recommended. Prior experience with Cilium is not required.

---

Course Objectives

Upon completion of this course, students will be able to:

• Understand cloud-native networking principles and Kubernetes networking architecture.
• Explain how eBPF enables high-performance networking, security, and observability within Kubernetes.
• Design and deploy Cilium as the primary networking platform for Kubernetes clusters.
• Select appropriate deployment models, routing strategies, and IP Address Management (IPAM) options.
• Implement identity-based security using Cilium Network Policies.
• Configure secure service exposure using Gateway API, LoadBalancer Services, and egress controls.
• Deploy and manage advanced networking features including routing, encryption, and high-performance datapaths.
• Design and operate multi-cluster Kubernetes environments using Cilium Cluster Mesh.
• Monitor, troubleshoot, and optimize Kubernetes networking using Hubble observability tools.
• Apply enterprise best practices for deployment, upgrades, validation, and day-to-day operations.

---

 

Detailed Course Structure

Module 1 – Cloud Native Networking
and Security

• Datacenter Foundations
• Traffic and Security Patterns
• Containers and Kubernetes networking
• Cilium and eBPF
• Distribution and Production Planning

Module 2 – Kubernetes Fundamentals
for Network and Security Teams

• Application Evolution and Container
  Foundations
• Kubernetes Control Plane and Core Objects
• Service Exposure, Configuration, and Storage
  Primitives
• Scheduling, Runtime Features, kube-proxy,
  and CNI Networking

Module 3 – ISOVALENT Introduction,
Architecture, and Use Cases

• Enterprise Platform Context
• Cilium Platform Capability
• Enterprise use cases for Cilium
• Architecture, eBPF, and Datapath Mechanics

Module 4 – Installation Strategy
and Deployment Workflow

• Deployment Strategy and Readiness
• Cilium Components and Node Integration
• Validation, Inspection, and Rollback
• IP Address Management Design
• CNI Lifecycle and Routing Modes
• Service handling and and kube-proxy Replacement
• Upgrades and Change Validation

Module 5 – External Communication,
Service Exposure, and Egress Control

• External Communication Model and Packet Lifecycle
• Service Exposure and Gateway API
• External Reachability and Routing Integration
• Service Mesh and Cluster Mesh context
• Egress Control and Policy-Driven Internet Access

Module 6 – ISOVALENT Policy
Model and Security Architecture

• Why the Policy Model Matters
• Identity-Based Enforcement
• Policy Types and Structure
• Examples, Demos, and Policy Operations
• Hubble Policy Troubleshooting
• Policy Calculation and Datapath Internals
• Integrated Lab

Module 7 – Advanced Networking,
Routing, Encryption, and Performance

• Transparent Encryption
• High-Performance Datapath and Load Balancing
• TLS and PKI Foundations
• Cilium Mutual Authentication and Gateway mTLS
• TLS Interception
• Demo and Integrated Lab

Module 8 – Multi-Cluster, Cloud
and Observability

• Cluster Mesh and Multi-Cluster Fundamentals
• Global Services, Cross-Cluster Identity, and Service Exposure
• Public Cloud and Hybrid Network Design
• Hubble Observability Architecture
• Hubble Operations, Metrics, and SIEM Integration
• Integrated Operations Checklist
  and Knowledge Review

Module 9 – Deep Security,
Operations and Best Practices

• Runtime Security Foundations and eBPF
• TracingPolicy and Enforcement Model
• Tetragon Use Cases and Telemetry Integration
• RBAC and Access Governance
• Incident Response and Operational
  Troubleshooting
• Migration and Production Best Practices