Cilium: Cloud Native Networking, Security and Observability

Cilium is used for connecting, securing and observing Kubernetes clusters. Its architecture is built on eBPF, which underpins high-performance networking and security, and it integrates with Kubernetes and other cloud native platforms. Capabilities covered by its associated certification include network policies, load balancing, service discovery, security policy deployment and observability tooling for monitoring and troubleshooting network traffic. CNCF's case studies include an account of how Datadog uses Cilium and eBPF to power their data plane.

• eBPF-based data plane for networking and security
• Network policies, load balancing and service discovery
• Security policy enforcement in Kubernetes clusters
• Observability tools for monitoring network traffic
• Integration with Kubernetes and other cloud native platforms

The Cilium Certified Associate (CCA) exam confirms a user's knowledge of connecting, securing and observing Kubernetes clusters using Cilium. It is an entry-level certification designed for platform or cloud engineers with interests in networking, security and observability. The exam is intended for candidates looking at deploying Cilium in their environment, and demonstrates that the holder can make an informed decision on how Cilium could be installed and configured on Kubernetes clusters. The certification was built in collaboration with Isovalent, the company founded by the creators of the Cilium Project.

• Entry-level certification for platform and cloud engineers
• Focus on networking, security and observability with Cilium
• Built in collaboration with Isovalent

Passing the CCA validates a set of knowledge areas spanning Cilium architecture, configuration and operations. These include the use of eBPF for high-performance networking and security, and awareness of best practices for deploying and managing Cilium in production environments. The exam curriculum is divided into weighted domains.

• Cilium architecture and components, including eBPF use
• Integration with Kubernetes and other cloud native platforms
• Configuring and managing Cilium communication in clusters
• Network policies, load balancing and service discovery
• Deploying Cilium security policies
• Cilium observability tools for monitoring and troubleshooting
• Foundational understanding of eBPF technology
• Best practices for production deployment and management

Holders of the Linux Foundation Kubernetes and Cloud Native Associate (KCNA), Certified Kubernetes Administrator (CKA) or Certified Kubernetes Application Developer (CKAD) certifications are described as ideal candidates for the CCA. The exam is delivered online and costs $250; a separate price of ¥1,858 (tax inclusive) is listed for the English-proctored official exam in China. CNCF offers wholesale pricing on its exams to training companies purchasing in bulk.

• Cost: $250, online exam
• ¥1,858 (tax inclusive) for the English-proctored option
• Suited to KCNA, CKA or CKAD certification holders
• Bulk wholesale pricing available to training companies

Candidates register for the exam through the CCA page on the CNCF site, and further detail on the exam plus sign-up for updates is available on the Linux Foundation Training and Certification website. CNCF has open sourced the curriculum around which the CCA exam was created to guide exam preparation. Additional published resources accompany the certification.

• Linux Foundation Global Certification & Confidentiality Agreement
• Candidate Handbook
• Frequently Asked Questions
• Curriculum Overview

CNCF is the open source, vendor-neutral hub of cloud native computing and, as part of the Linux Foundation, provides support, oversight and direction for cloud native projects including Kubernetes, Envoy and Prometheus. The foundation hosts graduated, incubating and sandbox projects and administers training and certification programmes such as the CCA. Cilium features in CNCF case study material on end user adoption.

• CNCF is part of the Linux Foundation
• Hosts graduated, incubating and sandbox projects
• Publishes case studies including Datadog's use of Cilium and eBPF