Cilium Certified Associate Study Guide
February 7, 2024 · View on GitHub
The aim of this study guide is to help the Cilium community prepare for the CNCF's Cilium Certified Associate(CCA) Exam 🐝
About the Certification
You can find all you need to know about the Certification on its official page.
General Overview
Installation and Configuration - 10%
Topics
- Know How to Use Cilium CLI to Query and Modify the Configuration
- Using Cilium CLI to Install Cilium, Run Connectivity Tests, and Monitor its Status
Resources
- Cilium Quick Installation - Cilium Docs 📖
- eCHO episode 1: Introduction to Cilium 📺
- Getting Started with Cilium - Lab 🥼
- Tutorial: Tips and Tricks to install Cilium 📖
- Cilium Command Cheat Sheet - Cilium Docs 📖
Architecture - 20%
Topics
- Understand the Role of Cilium in Kubernetes Environments
- Cilium Architecture
- IP Address Management (IPAM) with Cilium
- Cilium Component Roles
- Datapath Models
Resources
- Getting Started with Cilium - Lab 🥼
- Cilium - Rethinking Linux Networking and Security for the Age of Microservices 📖
- Cilium 1.0: Bringing the BPF Revolution to Kubernetes Networking and Security 📖
- Cilium Component Overview - Cilium Docs 📖
- Cilium eBPF Datapath - Cilium Docs 📖
- IP Address Management (IPAM) - Cilium Docs 📖
- Cilium Technical Deep Dive: Under the Hood - Talk 📺
- Cilium's BPF kernel datapath revamped - Talk 📺
- Terminology - Cilium Docs 📖
Network Policy - 18%
Topics
- Interpret Cilium Network Polices and Intent
- Understand Cilium's Identity-based Network Security Model
- Policy Enforcement Modes
- Policy Rule Structure
- Kubernetes Network Policies versus Cilium Network Policies
Resources
- Identity Based - Cilium Docs 📖
- Network Policy Use Cases 📖
- From IP to identity: making cattle out of pets in cloud native 📖
- Zero Trust Security with Cilium 📖
- Network Policy - Cilium Docs 📖
- Policy Enforcement Mode - Cilium Docs 📖
- Why is Kubernetes Network Policy important? 📺
- Birth of Kubernetes Network Policy 📺
- NetworkPolicy Tutorial 📖
- eCHO Episode 43: Deep dive on FQDN Policy 📺
- Network Policy Editor 📖
Service Mesh - 16%
Topics
- Know How to use Ingress or Gateway API for Ingress Routing
- Service Mesh Use Cases
- Understand the Benefits of Gateway API over Ingress
- Encrypting Traffic in Transit with Cilium
- Sidecar-based versus Sidecarless Architectures
Resources
- How eBPF will solve Service Mesh – Goodbye Sidecars 📖
- Cilium Service Mesh Use Cases 📖
- Hello eBPF! Goodbye Sidecars? 📺
- Cilium Service Mesh – Everything You Need to Know 📖
- Cilium Ingress Controller - Lab 🥼
- Cilium Transparent Encryption with IPSec and WireGuard - Lab 🥼
- Gateway API Support - Cilium Docs 📖
- Cilium Gateway API - Lab 🥼
- Advanced Gateway API Use Cases - Lab 📖
- Ingress Controllers or the Kubernetes Gateway API? Which Is Right for You? 📖
- A Deep Dive into Cilium Gateway API: The Future of Ingress Traffic Routing 📖
- Mutual Authentication in Cilium - Cilium Docs 📖
- Mutual Authentication in Cilium - Lab 🥼
Network Observability - 10%
Topics
- Understand the Observability Capabilities of Hubble
- Enabling Layer 7 Protocol Visibility
- Know How to Use Hubble from the Command Line or the Hubble UI
Resources
- eCHO episode 2: Introduction to Hubble 📺
- Observability Use Cases 📖
- Setting up Hubble Observability - Cilium Docs 📖
- Layer 7 Protocol Visibility - Cilium Docs 📖
- Back to Basics – L7 Flow Visibility 📺
- Cilium IPv6 Networking and Observability - Lab 🥼
Cluster Mesh - 10%
Topics
- Understand the Benefits of Cluster Mesh for Multi-cluster Connectivity
- Achieve Service Discovery and Load Balancing Across Clusters with Cluster Mesh
Resources
- Cilium Cluster Mesh Use Cases 📖
- Setting Up Cluster Mesh - Cilium Docs 📖
- Cilium Cluster Mesh - Lab 🥼
- Connecting Klusters on the Edge with Deep Dive into Cilium Cluster Mesh - Talk 📺
- An Introduction to Cilium Cluster Mesh 📺
- eCHO episode 41: Cilium Cluster Mesh 📺
- eCHO Episode 94: Cluster API and Cilium Cluster Mesh 📺
eBPF - 10%
Topics
- Understand the Role of eBPF in Cilium
- eBPF Key Benefits
- eBPF-based Platforms versus IPtables-based Platforms
Resources
- Why is the kernel community replacing iptables with BPF? 📖
- What is eBPF? 📖
- CNI Benchmark: Understanding Cilium Network Performance 📖
- eBPF - The Future of Networking & Security 📖
- Learning eBPF 📖
- Getting started with eBPF - Lab 🥼
- eBPF - Host Routing - Cilium Docs 📖
BGP and External Networking 6%
Topics
- Egress Connectivity Requirements
- Understand Options to Connect Cilium-managed Clusters with External Networks
Resources
- Cilium BGP Use Cases 📖
- Cilium BGP Control Plane - Cilium Docs 📖
- Cilium BGP Service Advertisement 📺
- BGP on Cilium - Lab 🥼
- Cilium LoadBalancer IPAM and BGP Service Advertisement - Lab 🥼
- Advanced BGP Features - Lab 🥼
- BGP with Cilium 📖
- Connecting your Kubernetes island to your network with Cilium BGP 📖
- Cilium Egress Gateway - Cilium Docs 📖
- Cilium Egress Gateway - Lab 🥼
- Cilium L2 Announcements - Cilium Docs 📖
- Cilium LoadBalancer IPAM and L2 Service Announcement - Lab 🥼
Next Steps
Finished this guide and want to learn more? Dive deep into the world of Cilium with more comprehensive hands-on labs.
