Angel Azuara Eizaguirre

Building robust and secure clusters is one of the main challenges for those of us who work with cloud infrastructure. In Kubernetes-based environments, it is not enough to deploy the services: we also need to make sure they communicate securely and have a reliable observability system that lets us understand what is going on inside the cluster.

In this article we will see how to set up Cilium in a local environment to manage the network and security of a Kubernetes cluster, including L3/L4/L7 policies with CiliumNetworkPolicy, encryption between nodes with WireGuard and service exposure through the Gateway API. We will also show how to program and deploy eBPF agents inside the cluster, extending what Cilium already does. Finally, we will implement a metrics system built around Hubble, which will export metrics to Prometheus so we can visualize them with Grafana.

Have you ever wondered how to handle user authentication by delegating it to an Identity Provider (IdP), and how to secure communication between your microservices without having to implement that logic yourself? That’s exactly what we’re going to look at in this article.

The motivation for this post comes from the need to address some of the limitations of my bachelor’s thesis. The two main shortcomings were user authentication, which was handled manually by generating a JWT, and the lack of HTTPS in communication between microservices. In this new project we solve both: we delegate authentication to a real IdP, and we secure internal communications with mTLS transparently at the application level.

Introduction

This article covers the implementation of a cloud-native infrastructure deployed on Amazon Web Services (AWS), based on a microservices architecture developed in Go. It also incorporates a CI/CD pipeline that automates the deployment process and ensures high availability, fault tolerance, and service scaling through GitHub workflows and tools such as FluxCD.

Introduction

This project implements a RESTful web service (REST API) in Java using the Spring Framework and Maven.
It was developed as part of the Service-Oriented Systems course in the Computer Science degree. All the source code is available in my GitHub repository.

Introduction

In this article, I explain how a compiler works, from processing the source file to translating it into object code. This post is based on a university project for the course Language Translators. All source code is available in my GitHub repository (link at the end, in the Tools section).