Raphaël Pinson
LightNews LightNews
banner
raphink.info
Raphaël Pinson
@raphink.info
2.9K followers 760 following 300 posts
@cilium.io Alchemist @isovalent at Cisco | CNCF Ambassador | I'm the Oops in DevOops ∞ | Family Historian 🌳 | Tweets Mine | @[email protected]
Posts Replies Media Videos
raphink.info
Did you hear?

KCD Suisse Romande will have the honor of welcoming Jessie Frazelle as a keynote speaker this December, at CERN!

See the full conference schedule here: kcd-schedule.cloud-native-romandy.ch
October 25, 2025 at 8:46 PM
raphink.info
🌹 Roses are red
💙 Violets are blue
🎟️ Early-bird tickets
Are waiting for you

Don’t miss KCD / Cloud Native Suisse Romande 2025 @ CERN — only 40 days left!

👉 Tickets on kcd.cloud-native-romandy.ch

🐦 Early birds tickets are only available until the 5th of November!
October 25, 2025 at 8:47 AM
raphink.info
KCD Suisse Romande 2025 will take place at CERN on the 4th and 5th of December!

🗓️ The schedule is out at kcd.cloud-native-romandy.ch and you can get tickets.

We're excited to welcome you there.
October 20, 2025 at 2:35 PM
raphink.info
Robin, it's Tuesday
October 14, 2025 at 9:19 PM
raphink.info
🚀 Engineers love State of… reports.

That’s why we’re launching the State of Kubernetes Networking, but to make it real, we need YOUR input!

👉 Take the survey to help us build the report on the State of Kubernetes Networking.

docs.google.com/forms/d/e/1F...

#Kubernetes #Networking #CloudNative
September 5, 2025 at 9:03 AM
raphink.info
Au moins, les enfants n'y toucheront pas...
August 7, 2025 at 12:23 PM
raphink.info
Books are great, blog posts can be insightful, talks can inspire... but nothing compares to doing!

That’s why I love online labs as a teaching tool 🧪

They remove the friction. The infrastructure is ready. You get straight to the feature you want to understand — not just read about.
July 25, 2025 at 1:39 PM
raphink.info
Colombian restaurants are getting into AI
July 16, 2025 at 2:15 PM
raphink.info
Is a penguin dressed as a bee the most eBPF plush toy?
July 14, 2025 at 11:15 PM
raphink.info
💡 Earn badges for completing hands-on labs in every session!
June 24, 2025 at 1:43 PM
raphink.info
🔒 Session 4: Managing Data Out of your Cluster

📆 August 21: Lock down outbound traffic with Cilium’s Egress Gateway and ensure enterprise-grade policy enforcement.

👉 Sign up: isovalent.com/events/2025-...
June 24, 2025 at 1:43 PM
raphink.info
👁️ Session 3: Seeing Data Within your Cluster

📆 August 12: Use Hubble for real-time visibility into network flows and service communication.

👉 Sign up: isovalent.com/events/2025-...
June 24, 2025 at 1:43 PM
raphink.info
🔄 Session 2: Routing Data Into your Cluster

📆 July 31: Harness the power of the Gateway API for advanced routing and fine-grained traffic control.

👉 Sign up: isovalent.com/events/2025-...
June 24, 2025 at 1:43 PM
raphink.info
🚀 Session 1: Delivering Data to Your Cluster

📆 July 22: Discover how Isovalent’s new eBPF-based Load Balancer enables efficient, scalable traffic delivery.

👉 Sign up: isovalent.com/events/2025-...
June 24, 2025 at 1:43 PM
raphink.info
What will you learn this summer? Kubernetes Networking of course! 🌐

🌞 Isovalent Kubernetes Summer School: Traffic in, out, and all about.

➡️ Join me and my Isonaut colleagues for a free, hands-on webinar series and master the tools that power modern Kubernetes networking!
June 24, 2025 at 1:43 PM
raphink.info
It's always fun as a genealogist when Google Photos reminds me of that trip 100 years ago...
June 21, 2025 at 6:44 PM
raphink.info
📚 Read the blog post about the new Isovalent Load Balancer: isovalent.com/blog/post/is...

🧪 Try the lab: isovalent.com/labs/ilb-get...
June 13, 2025 at 6:07 AM
raphink.info
June 13, 2025 at 6:07 AM
raphink.info
Most load balancers were built before Kubernetes. The newly announced Isovalent Load Balancer (ILB) is
✅ Built on Kubernetes + Cilium
🚀 Runs with eBPF & XDP for lightning-fast L3/L4
🎯 Uses Envoy for L7
📦 Configured via YAML
🌍 Horizontally scalable

🧪 Try the lab: isovalent.com/labs/ilb-get...
June 13, 2025 at 6:07 AM
raphink.info
Find our Network Policies hands-on labs on isovalent.com/labs!

🏆 You'll even earn Credly badges with each lab you complete!
A cartoon image of the Death Star labeled with `PUT /v1/exhaust-port`, surrounded by four spacecraft attempting access. The Lambda shuttle and TIE fighter (both labeled `org=empire`) are blocked with red "DENIED (HTTP 403)" tags, while the Millennium Falcon and X-wing (not part of the Empire) are blocked with red Xs and "DROP (L3/L4)" warnings. This visual demonstrates a security policy that denies all Layer 7 PUT requests—even from allowed Layer 3/4 sources—highlighting application-layer enforcement. A cartoon bee character dressed as a Jedi, holding a blue lightsaber, stands next to a glowing sign. The sign reads: “Take the Isovalent hands-on labs at isovalent.com/labs to discover more about how to protect your workloads with Cilium Network Policies!” The scene combines Star Wars aesthetics with a promotional message for Kubernetes security training.
June 3, 2025 at 7:07 PM
raphink.info
Two bee-like characters in Imperial uniforms are shaking hands in a hallway of the Death Star. A stormtrooper bee rushes in from the background, raising a hand and shouting, “Sir! A security vulnerability has been found in the Death Star!” The scene humorously blends Star Wars elements with cybersecurity themes using insect characters. A bee character dressed as a stormtrooper points at a warning sign that says “⚠️ PUT /v1/exhaust-port.” The character exclaims, “PUT requests to /v1/exhaust-port would cause the Death Star to explode!” The scene humorously references the iconic Death Star vulnerability from Star Wars, framing it as an API misconfiguration or exploit in a Kubernetes-style setting. A bee character in an Imperial uniform stands next to a glowing terminal screen displaying YAML configuration. The bee raises one hand and says, “We need Cilium Network Policies for layer 7 protection!” The scene blends Star Wars-style visuals with Kubernetes security concepts, emphasizing advanced application-level (L7) policy enforcement. A glowing blue terminal screen displays a CiliumNetworkPolicy YAML configuration titled `deathstar-allow-empire`. Above it, a caption reads: “This will only allow POST requests to /v1/request-landing.” The YAML defines Layer 3, 4, and 7 restrictions: access is limited to Empire-labeled pods (`org: empire`), only allows TCP traffic on port 80, and specifically permits only POST requests to the `/v1/request-landing` path. Annotations in the image highlight: * "Secure the Death Star" * "Allow only Empire ships (L3)" * "Allow only TCP/80 (L4)" * "Allow only landing (L7)"
June 3, 2025 at 7:05 PM
raphink.info
Inside a dark, sci-fi command room, two cartoon bee-like characters with glowing blue eyes and translucent wings are discussing Kubernetes security. One bee, pointing upward, says, “We need to use pod labels in Kubernetes Network Policies to secure traffic.” Behind them, a diagram shows two labeled pods with an arrow indicating allowed traffic between them. The scene mixes Star Wars aesthetics with Kubernetes concepts in a humorous style. A cartoon depiction of the Death Star labeled with `POST /v1/request-landing`, surrounded by four spacecraft: an Imperial Lambda shuttle, a TIE fighter, the Millennium Falcon, and an X-wing. Each ship has Kubernetes-style metadata tags: * Lambda shuttle: `org=empire`, `class=lambda` * TIE fighter: `org=empire`, `class=tiefighter` * Millennium Falcon: `class=millenium-falcon` * X-wing: `org=alliance`, `class=xwing` * Death Star: `org=empire`, `class=deathstar` Green dotted lines connect each ship to the Death Star, symbolizing API calls with pod labels for network access. A cartoon bee character in an Imperial uniform stands in front of a glowing holographic screen displaying a Kubernetes NetworkPolicy YAML titled “DEATH STAR PROTECTION PLAN.” The character points at the screen and says, “This will only allow imperial ships to access the Death Star.” The YAML config matches pods with `org: empire` and `class: deathstar` and allows ingress only from other pods with the same organization. A cartoon-style illustration of the Death Star labeled `POST /v1/request-landing`, surrounded by four spacecraft with Kubernetes-style labels. The Imperial Lambda shuttle and TIE fighter (labeled with `org=empire`) are successfully connected to the Death Star. The Millennium Falcon (`class=millenium-falcon`) and X-wing (`org=alliance`, `class=xwing`) have red Xs and "DROP (L3/L4)" icons next to them, indicating their access is denied by Layer 3/Layer 4 network policies. This visual shows that only imperial-labeled ships are allowed to connect.
June 3, 2025 at 7:03 PM
raphink.info
🔓 No, your k8s workloads are not safe by default.

In Kubernetes, everything can talk to everything by default, until you write Network Policies.

🛡️ They give you control over:
- Who can talk to whom (L3)
- On which ports (L4)
- Using what verbs and paths (L7)

🧵
A Star Wars-themed parody illustration titled "Platform Wars: The Pod Menace." It features a Kubernetes logo stylized as the Death Star in space. Surrounding it are X-wing and TIE fighter-style spacecraft, with orange laser blasts streaking through the starry background. The design mimics a dramatic sci-fi battle scene. Yellow scrolling text in a Star Wars-style crawl on a black background reads: “In a Kubernetes cluster far, far away… A Pod known as the Death Star orbits in deep space. Pods from across the galaxy, Rebel and Imperial alike, can land on it. But the Empire's security team has other plans…” The text is angled backward into the distance, evoking the iconic opening of a Star Wars film. A cartoon-style illustration of the Death Star with a glowing terminal-like label that reads POST /v1/request-landing. Four spacecraft—an Imperial shuttle, a TIE fighter, the Millennium Falcon, and an X-wing—are shown connecting to the Death Star via dotted green lines, symbolizing API requests for landing access. The background is a starry space scene. Two cartoon bee-like characters dressed in dark Imperial-style uniforms stand in a hangar with an X-wing starfighter in the background. One bee gestures seriously toward the other and says, “This needs to stop.” The scene is styled like a humorous sci-fi comic, combining Star Wars aesthetics with anthropomorphic bee characters.
June 3, 2025 at 7:00 PM
raphink.info
As long as people don't get directly targeted, they'll keep believing only others are targeted.
April 16, 2025 at 11:48 PM
raphink.info
The last five days for me...
April 1, 2025 at 5:38 PM