[{"slug":"cilium-bgp","icon":"https://cilium.io/favicon-32x32.png?v=81b4389fe4c26dfd1769148aa2f50bb0","title":"🥈 BGP on Cilium","description":"Learn how to connect your Kubernetes Clusters with your on-premises network using BGP.\n\nAs Kubernetes becomes more pervasive in on-premise environments, users increasingly have both traditional applications and Cloud Native applications in their environments.\n\nIn order to connect them together and allow outside access, a mechanism to integrate Kubernetes and the existing network infrastructure running BGP is needed. Cilium offers native support for BGP, exposing Kubernetes to the outside and all the while simplifying users’ deployments.\n","teaser":"Connect your Cilium-managed nodes to your datacenter network, using BGP!","level":"intermediate","score":4.5454545,"reviews":null,"tags":["bgp"],"challenges":null,"badge":{"name":"BGP on Cilium","description":"This badge certifies that the BGP on Cilium lab by Isovalent has been successfully completed. This lab is made of practical challenges, quizzes, and a final exam. The challenges include: installing Cilium with the BGP control plane enabled, setting up BGP peering policies.","skills":["BGP","Cilium","Kubernetes","Networking"],"url":"https://www.credly.com/org/isovalent/badge/bgp-on-cilium","image_url":"https://images.credly.com/images/b7ca49b5-f8e0-4c58-b3d4-6309de25dc09/tempfile20250605-59-997x5b.png","vanity_slug":"bgp-on-cilium","global_activity_url":"https://isovalent.com/labs/cilium-bgp/","state":"active","allow_duplicate_badges":false,"badges_count":750,"public":true,"allow_delete":false,"allow_archive":true,"cost":"Free","level":"Intermediate","time_to_earn":"Hours","type_category":"Learning","lock_badge_state":false,"recipient_type":"User","show_skill_tag_links":false,"printing_disabled":false,"visibility":"public","variants_allowed":false,"variant_type":"","reporting_tags":["Isovalent Labs","Cloud Network Engineer Journey"],"alignments":null,"recommendations":[{"id":"4372c2db-aaae-4f3b-8627-9d3bf5006070","type":"education","activity_url":"https://isovalent.com/labs/","title":"Isovalent Hands-on labs"},{"id":"cb2f1cc1-6c86-45bb-82bc-9e57c212492a","type":"education","activity_url":"https://isovalent.com/learning-tracks/#cloudNetworkEngineer","title":"Cloud Network Engineer Journey"},{"id":"954de5f4-92bd-4cb6-ad8d-82030865e97a","type":"education","activity_url":"https://labs-map.isovalent.com/","title":"The World of Cilium"}],"badge_template_activities":[{"activity_type":"Course","title":"The badge recipient has followed the BGP on Cilium lab by Isovalent.","activity_url":"https://isovalent.com/labs/cilium-bgp/"},{"activity_type":"Assessment","title":"The badge recipient has correctly answered the quizzes and finished the exam in the BGP on Cilium lab by Isovalent.","activity_url":"https://isovalent.com/labs/cilium-bgp/"}],"linkedin_share_default_message":"View my verified achievement from @Org_Name.","translatable":false,"created_at":"2024-01-26T13:55:04.221Z","updated_at":"2025-06-05T22:18:18.143Z","state_updated_at":"2024-01-26T13:59:04.230Z"},"version":"1.2.5","created_at":"2022-05-31T14:47:30Z","last_update":"2025-10-24T08:15:11Z","duration":"45"},{"slug":"cilium-bgp-advanced","icon":"https://cilium.io/favicon-32x32.png?v=81b4389fe4c26dfd1769148aa2f50bb0","title":"🥇 Advanced BGP Features","description":"BGP support was initially introduced in Cilium 1.10 and subsequent improvements have been made since, such as the recent introduction of IPv6 support in Cilium 1.12 and Service IP Advertisements in Cilium 1.13.\n\nIn Cilium 1.14, we introduced more BGP features, including:\n\n- BGP Timers Customization\n- eBGP Multihop\n- BGP Graceful Restart\n\nIn Cilium 1.15, the following features are being added:\n\n- BGP Peering Security with MD5\n- BGP Communities Support\n\nIn this lab, the user will learn about both these new features and how they can simplify their network connectivity operations.\n","teaser":"Graceful Restart, eBGP Multihop, BGP Timers, MD5 authentication, and BGP communities!","level":"expert","score":4.7,"reviews":null,"tags":["bgp"],"challenges":null,"badge":{"name":"Cilium Advanced BGP","description":"This badge certifies that the Advanced BGP Features lab by Isovalent has been successfully completed. This lab is made of practical challenges, quizzes, and a final exam. The challenges include: eBGP multihop, BGP graceful restarts, securing BGP sessions with MD5 passwords, support for BGP communities.","skills":["BGP","Cilium","eBPF","Kubernetes","Networking"],"url":"https://www.credly.com/org/isovalent/badge/cilium-advanced-bgp","image_url":"https://images.credly.com/images/f971c5f9-5461-4e95-817b-aae8db79f01c/tempfile20250605-83-t21a54.png","vanity_slug":"cilium-advanced-bgp","global_activity_url":"https://isovalent.com/labs/cilium-bgp-advanced/","state":"active","allow_duplicate_badges":false,"badges_count":264,"public":true,"allow_delete":false,"allow_archive":true,"cost":"Free","level":"Advanced","time_to_earn":"Hours","type_category":"Learning","lock_badge_state":false,"recipient_type":"User","show_skill_tag_links":false,"printing_disabled":false,"visibility":"public","variants_allowed":false,"variant_type":"","reporting_tags":["Isovalent Labs","Cloud Network Engineer Journey"],"alignments":null,"recommendations":[{"id":"4372c2db-aaae-4f3b-8627-9d3bf5006070","type":"education","activity_url":"https://isovalent.com/labs/","title":"Isovalent Hands-on labs"},{"id":"4ade9b55-1723-4123-b72d-e3391dbe1094","type":"education","activity_url":"https://isovalent.com/learning-tracks/#platformOps","title":"Platform Ops (Service Mesh) Journey"},{"id":"954de5f4-92bd-4cb6-ad8d-82030865e97a","type":"education","activity_url":"https://labs-map.isovalent.com/","title":"The World of Cilium"}],"badge_template_activities":[{"activity_type":"Course","title":"The badge recipient has followed the Cilium Advanced BGP lab by Isovalent.","activity_url":"https://isovalent.com/labs/cilium-bgp-advanced/"},{"activity_type":"Assessment","title":"The badge recipient has correctly answered the quizzes and finished the exam in the Cilium Advanced BGP lab by Isovalent.","activity_url":"https://isovalent.com/labs/cilium-bgp-advanced/"}],"linkedin_share_default_message":"View my verified achievement from @Org_Name.","translatable":false,"created_at":"2024-01-26T13:59:33.703Z","updated_at":"2025-06-05T22:18:16.315Z","state_updated_at":"2024-01-26T14:01:59.912Z"},"version":"1.2.7","created_at":"2023-06-09T11:43:11Z","last_update":"2025-10-24T08:03:30Z","duration":"45"},{"slug":"cilium-big-tcp","icon":"https://cilium.io/favicon-32x32.png?v=81b4389fe4c26dfd1769148aa2f50bb0","title":"BIG TCP on Cilium","description":"With Cilium, you can now leverage BIG TCP with IPv4 and IPv6 to improve performance through the Linux network stack.\n\nStart the lab to learn more!","teaser":"Boost network performance with BIG TCP support for both IPv4 and IPv6.","level":"","score":4.888889,"reviews":null,"tags":["big tcp","ipv6"],"challenges":null,"badge":{"name":"","description":"","skills":null,"url":"","image_url":"","vanity_slug":"","global_activity_url":"","state":"","allow_duplicate_badges":false,"badges_count":0,"public":false,"allow_delete":false,"allow_archive":false,"cost":"","level":"","time_to_earn":"","type_category":"","lock_badge_state":false,"recipient_type":"","show_skill_tag_links":false,"printing_disabled":false,"visibility":"","variants_allowed":false,"variant_type":"","reporting_tags":null,"alignments":null,"recommendations":null,"badge_template_activities":null,"linkedin_share_default_message":"","translatable":false,"created_at":"","updated_at":"","state_updated_at":""},"version":"1.0.10","created_at":"2023-02-15T10:48:41Z","last_update":"2025-09-24T16:57:24Z","duration":"15"},{"slug":"cilium-cluster-mesh","icon":"https://cilium.io/favicon-32x32.png?v=81b4389fe4c26dfd1769148aa2f50bb0","title":"🥈 Cilium Cluster Mesh","description":"![Cluster Mesh](https://cilium.io/static/8eb8d013689a80b51d9a73d61c6e70f8/3dfec/ogimage.webp)\n\nWith the rise of Kubernetes adoption, an increasing number of clusters is deployed for various needs, and it is becoming common for companies to have clusters running on multiple cloud providers, as well as on-premise.\n\nKubernetes Federation has for a few years brought the promise of connecting these clusters into multi-zone layers, but latency issues are more often than not preventing such architectures.\n\nCilium Cluster Mesh allows you to connect the networks of multiple clusters in such as way that pods in each cluster can discover and access services in all other clusters of the mesh, provided all the clusters run Cilium as their CNI.\n\nThis allows to effectively join multiple clusters into a large unified network, regardless of the Kubernetes distribution each of them is running.\n\nIn this lab, we will see how to set up Cilium Cluster Mesh, and the benefits from such an architecture.","teaser":"Connect multiple Kubernetes clusters using Cilium Cluster Mesh","level":"intermediate","score":4.904762,"reviews":null,"tags":null,"challenges":null,"badge":{"name":"Cilium Cluster Mesh","description":"This badge certifies that the Cilium Cluster Mesh Lab by Isovalent has been successfully completed. This lab is made of practical challenges, quizzes, and a final exam. The challenges include: deploying multiple Kind clusters, installing Cilium on each of them, setting up Cilium Cluster Mesh, meshing the clusters, deploying a sample application, setting the application's service to be global, setting a service to be unshared, and tuning the cluster affinity for a service.","skills":["Cilium","Cluster","Cluster Mesh","Containers","eBPF","Kubernetes","Networking","Security"],"url":"https://www.credly.com/org/isovalent/badge/cilium-cluster-mesh","image_url":"https://images.credly.com/images/00f31c5d-eb40-458f-aa11-22e9ff35deb7/tempfile20250605-95-6sagl8.png","vanity_slug":"cilium-cluster-mesh","global_activity_url":"https://isovalent.com/labs/cilium-cluster-mesh/","state":"active","allow_duplicate_badges":false,"badges_count":1025,"public":true,"allow_delete":false,"allow_archive":true,"cost":"Free","level":"Intermediate","time_to_earn":"Hours","type_category":"Learning","lock_badge_state":false,"recipient_type":"User","show_skill_tag_links":true,"printing_disabled":false,"visibility":"public","variants_allowed":false,"variant_type":"","reporting_tags":["Cloud Architect Journey","Isovalent Labs","Cloud Network Engineer Journey","Platform Engineer Journey"],"alignments":null,"recommendations":[{"id":"4372c2db-aaae-4f3b-8627-9d3bf5006070","type":"education","activity_url":"https://isovalent.com/labs/","title":"Isovalent Hands-on labs"},{"id":"cb2f1cc1-6c86-45bb-82bc-9e57c212492a","type":"education","activity_url":"https://isovalent.com/learning-tracks/#cloudNetworkEngineer","title":"Cloud Network Engineer Journey"},{"id":"a79b8385-aa73-4ba5-98cf-8af041fadadc","type":"education","activity_url":"https://isovalent.com/learning-tracks/#platformEngineer","title":"Platform Engineer Journey"},{"id":"10a431f0-48d6-4ed4-b223-1c3b3d9a47c0","type":"education","activity_url":"https://isovalent.com/learning-tracks/#cloudArchitect","title":"Cloud Architect Journey"},{"id":"954de5f4-92bd-4cb6-ad8d-82030865e97a","type":"education","activity_url":"https://labs-map.isovalent.com/","title":"The World of Cilium"}],"badge_template_activities":[{"activity_type":"Course","title":"The badge recipient has followed the Cilium Cluster Mesh lab by Isovalent.","activity_url":"https://isovalent.com/labs/cilium-cluster-mesh/"},{"activity_type":"Assessment","title":"The badge recipient has correctly answered the quizzes and finished the exam in the Cilium Cluster Mesh lab by Isovalent.","activity_url":"https://isovalent.com/labs/cilium-cluster-mesh/"}],"linkedin_share_default_message":"View my verified achievement from @Org_Name.","translatable":false,"created_at":"2022-08-17T12:03:27.879Z","updated_at":"2025-06-05T21:44:09.052Z","state_updated_at":"2022-12-17T22:02:13.510Z"},"version":"1.2.5","created_at":"2022-05-20T09:02:46Z","last_update":"2025-09-24T15:50:37Z","duration":"60"},{"slug":"cilium-egress-gateway","icon":"https://cilium.io/favicon-32x32.png?v=81b4389fe4c26dfd1769148aa2f50bb0","title":"🥈 Cilium Egress Gateway","description":"Kubernetes changes the way we think about networking. In an ideal Kubernetes world, the network would be entirely flat and all routing and security between the applications would be controlled by the Pod network, using Network Policies.\n\nIn many Enterprise environments, though, the applications hosted on Kubernetes need to communicate with workloads living outside the Kubernetes cluster, which are subject to connectivity constraints and security enforcement. Because of the nature of these networks, traditional firewalling usually relies on static IP addresses (or at least IP ranges). This can make it difficult to integrate a Kubernetes cluster, which has a varying —and at times dynamic— number of nodes into such a network.\n\nCilium’s Egress Gateway feature changes this, by allowing you to specify which nodes should be used by a pod in order to reach the outside world.\n","teaser":"Use Cilium Egress Gateway to access external workloads","level":"intermediate","score":4.818182,"reviews":null,"tags":["enterprise"],"challenges":null,"badge":{"name":"Cilium Egress Gateway","description":"This badge certifies that the Cilium Egress Gateway Lab by Isovalent has been successfully completed. This lab is made of practical challenges, quizzes, and a final exam. The challenges include: installing Cilium on a Kind cluster with egress gateway enabled and exposing using it to set the egress IP for specific services.","skills":["Cilium","Containers","eBPF","Kubernetes","Load Balancer"],"url":"https://www.credly.com/org/isovalent/badge/cilium-egress-gateway","image_url":"https://images.credly.com/images/b649d3b3-29a4-469d-9e28-880df410586a/tempfile20250605-58-qhbtb8.png","vanity_slug":"cilium-egress-gateway","global_activity_url":"https://isovalent.com/labs/cilium-egress-gateway/","state":"active","allow_duplicate_badges":false,"badges_count":555,"public":true,"allow_delete":false,"allow_archive":true,"cost":"Free","level":"Intermediate","time_to_earn":"Hours","type_category":"Learning","lock_badge_state":false,"recipient_type":"User","show_skill_tag_links":false,"printing_disabled":false,"visibility":"public","variants_allowed":false,"variant_type":"","reporting_tags":["Cloud Architect Journey","Isovalent Labs","Cloud Network Engineer Journey","Platform Engineer Journey","Security Professionals Journey"],"alignments":null,"recommendations":[{"id":"4372c2db-aaae-4f3b-8627-9d3bf5006070","type":"education","activity_url":"https://isovalent.com/labs/","title":"Isovalent Hands-on labs"},{"id":"cb2f1cc1-6c86-45bb-82bc-9e57c212492a","type":"education","activity_url":"https://isovalent.com/learning-tracks/#cloudNetworkEngineer","title":"Cloud Network Engineer Journey"},{"id":"5a54e3cb-6f75-446d-abb5-4a296c709bf4","type":"education","activity_url":"https://isovalent.com/learning-tracks/#securityProfessionals","title":"Security Professionals Journey"},{"id":"a79b8385-aa73-4ba5-98cf-8af041fadadc","type":"education","activity_url":"https://isovalent.com/learning-tracks/#platformEngineer","title":"Platform Engineer Journey"},{"id":"10a431f0-48d6-4ed4-b223-1c3b3d9a47c0","type":"education","activity_url":"https://isovalent.com/learning-tracks/#cloudArchitect","title":"Cloud Architect Journey"},{"id":"954de5f4-92bd-4cb6-ad8d-82030865e97a","type":"education","activity_url":"https://labs-map.isovalent.com/","title":"The World of Cilium"}],"badge_template_activities":[{"activity_type":"Course","title":"The badge recipient has followed the Cilium Egress Gateway lab by Isovalent.","activity_url":"https://isovalent.com/labs/cilium-egress-gateway/"},{"activity_type":"Assessment","title":"The badge recipient has correctly answered the quizzes and finished the exam in the Cilium Egress Gateway lab by Isovalent.","activity_url":"https://isovalent.com/labs/cilium-egress-gateway/"}],"linkedin_share_default_message":"View my verified achievement from @Org_Name.","translatable":false,"created_at":"2023-12-12T17:47:43.143Z","updated_at":"2025-06-05T21:43:57.927Z","state_updated_at":"2023-12-13T16:13:44.760Z"},"version":"2.1.5","created_at":"2022-10-07T13:25:42Z","last_update":"2025-10-06T10:11:53Z","duration":"45"},{"slug":"cilium-envoy-l7-proxy","icon":"https://cilium.io/favicon-32x32.png?v=81b4389fe4c26dfd1769148aa2f50bb0","title":"🥇 Cilium Envoy L7 Proxy","description":"Envoy is a powerful L7 proxy which can be used for many Service Mesh needs.\n\nCilium uses Envoy for L7 Network Policies, L7 observability,\nL7 internal load-balancing, and even allows users to configure Envoy for their own needs.\n","teaser":"Envoy-based L7 Proxy in Cilium","level":"","score":4.888889,"reviews":null,"tags":["service mesh","envoy"],"challenges":null,"badge":{"name":"Cilium Envoy L7 Proxy","description":"This badge certifies that the Cilium Envoy L7 Proxy lab by Isovalent has been successfully completed. This lab is made of practical challenges, quizzes, and a final exam. The challenges include: securing traffic at layer 7 with Network Policies, deploying Envoy as a separate DaemonSet, observing layer 7 traffic, load-balancing gRPC traffic in Kubernetes, implementing a circuit breaker, implementing a L7 Network Policy listener with Envoy.","skills":["Cilium","Containers","Envoy","gRPC","Kubernetes","Networking","Network Policies","Service Mesh"],"url":"https://www.credly.com/org/isovalent/badge/cilium-envoy-l7-proxy","image_url":"https://images.credly.com/images/0db918e2-c509-476e-9bb0-9d5374644149/tempfile20250605-67-cwew1e.png","vanity_slug":"cilium-envoy-l7-proxy","global_activity_url":"https://isovalent.com/labs/cilium-envoy-l7-proxy/","state":"active","allow_duplicate_badges":false,"badges_count":281,"public":true,"allow_delete":false,"allow_archive":true,"cost":"Free","level":"Advanced","time_to_earn":"Hours","type_category":"Learning","lock_badge_state":false,"recipient_type":"User","show_skill_tag_links":false,"printing_disabled":false,"visibility":"public","variants_allowed":false,"variant_type":"","reporting_tags":["Isovalent Labs","Platform Ops (Service Mesh) Journey"],"alignments":null,"recommendations":[{"id":"4372c2db-aaae-4f3b-8627-9d3bf5006070","type":"education","activity_url":"https://isovalent.com/labs/","title":"Isovalent Hands-on labs"},{"id":"4ade9b55-1723-4123-b72d-e3391dbe1094","type":"education","activity_url":"https://isovalent.com/learning-tracks/#platformOps","title":"Platform Ops (Service Mesh) Journey"},{"id":"954de5f4-92bd-4cb6-ad8d-82030865e97a","type":"education","activity_url":"https://labs-map.isovalent.com/","title":"The World of Cilium"}],"badge_template_activities":[{"activity_type":"Course","title":"The badge recipient has followed the Cilium Envoy L7 Proxy lab by Isovalent.","activity_url":"https://isovalent.com/labs/cilium-envoy-l7-proxy/"},{"activity_type":"Assessment","title":"The badge recipient has correctly answered the quizzes and finished the exam in the Cilium Envoy L7 Proxy lab by Isovalent.","activity_url":"https://isovalent.com/labs/cilium-envoy-l7-proxy/"}],"linkedin_share_default_message":"View my verified achievement from @Org_Name.","translatable":false,"created_at":"2024-03-08T21:22:26.456Z","updated_at":"2025-06-05T22:18:20.742Z","state_updated_at":"2024-03-11T11:42:09.741Z"},"version":"1.2.9","created_at":"2023-01-16T12:04:26Z","last_update":"2025-10-06T10:11:35Z","duration":"50"},{"slug":"cilium-gateway-api","icon":"https://cilium.io/favicon-32x32.png?v=81b4389fe4c26dfd1769148aa2f50bb0","title":"🥈 Cilium Gateway API","description":"In this short lab, you will learn about Gateway API, a new Kubernetes standard on how to route traffic into a Kubernetes cluster. The Gateway API is the next generation of the Ingress API.\n\nGateway API addresses some the Ingress limitations by providing an extensible, role-based and generic model to configure advanced L7 traffic routing capabilities into a Kubernetes cluster.\n\n![Topology](https://play.instruqt.com/assets/tracks/ndhj358im0mf/6475cefe7240dd9335c2aed1dc6b8f10/assets/api-model.png)\n\nIn this lab, you will learn how you can use the Cilium Gateway API functionality to route HTTP and HTTPS traffic into your Kubernetes-hosted application.\n","teaser":"Introduction and First Steps with Cilium Gateway API","level":"beginner","score":4.6842103,"reviews":null,"tags":["service mesh"],"challenges":null,"badge":{"name":"Cilium Gateway API","description":"This badge certifies that the Cilium Gateway API Lab by Isovalent has been successfully completed. This lab is made of practical challenges, quizzes, and a final exam. The challenges include: routing HTTP traffic into a cluster with the gateway API, and deploying a gateway API to route HTTPS traffic into a cluster.","skills":["Cilium","eBPF","Gateway","Ingress","Kubernetes","L7","Load Balancer","Networking"],"url":"https://www.credly.com/org/isovalent/badge/cilium-gateway-api","image_url":"https://images.credly.com/images/c8229ec6-54c3-420f-8453-12a0e0596c8c/tempfile20250605-57-c5zt7d.png","vanity_slug":"cilium-gateway-api","global_activity_url":"https://isovalent.com/labs/cilium-gateway-api/","state":"active","allow_duplicate_badges":false,"badges_count":1356,"public":true,"allow_delete":false,"allow_archive":true,"cost":"Free","level":"Intermediate","time_to_earn":"Hours","type_category":"Learning","lock_badge_state":false,"recipient_type":"User","show_skill_tag_links":true,"printing_disabled":false,"visibility":"public","variants_allowed":false,"variant_type":"","reporting_tags":["Isovalent Labs","Platform Engineer Journey","Platform Ops (Service Mesh) Journey"],"alignments":null,"recommendations":[{"id":"4372c2db-aaae-4f3b-8627-9d3bf5006070","type":"education","activity_url":"https://isovalent.com/labs/","title":"Isovalent Hands-on labs"},{"id":"a79b8385-aa73-4ba5-98cf-8af041fadadc","type":"education","activity_url":"https://isovalent.com/learning-tracks/#platformEngineer","title":"Platform Engineer Journey"},{"id":"4ade9b55-1723-4123-b72d-e3391dbe1094","type":"education","activity_url":"https://isovalent.com/learning-tracks/#platformOps","title":"Platform Ops (Service Mesh) Journey"},{"id":"954de5f4-92bd-4cb6-ad8d-82030865e97a","type":"education","activity_url":"https://labs-map.isovalent.com/","title":"The World of Cilium"}],"badge_template_activities":[{"activity_type":"Course","title":"The badge recipient has followed the Cilium Gateway API lab by Isovalent.","activity_url":"https://isovalent.com/labs/cilium-gateway-api/"},{"activity_type":"Assessment","title":"The badge recipient has correctly answered the quizzes and finished the exam in the Cilium Gateway API lab by Isovalent.","activity_url":"https://isovalent.com/labs/cilium-gateway-api/"}],"linkedin_share_default_message":"View my verified achievement from @Org_Name.","translatable":false,"created_at":"2023-02-03T16:02:01.520Z","updated_at":"2025-06-05T22:18:23.153Z","state_updated_at":"2023-02-03T16:11:45.568Z"},"version":"1.2.7","created_at":"2022-10-12T16:15:16Z","last_update":"2025-10-06T10:11:19Z","duration":"45"},{"slug":"cilium-gateway-api-advanced","icon":"https://cilium.io/favicon-32x32.png?v=81b4389fe4c26dfd1769148aa2f50bb0","title":"🥇 Advanced Gateway API Use Cases","description":"This lab is a follow-up to the introductory [Cilium Gateway API lab](https://isovalent.com/labs/gateway-api/).\nWe highly recommend you do the Cilium Gateway API lab first, if you haven’t done it already.\n\nIn this one, you will learn about some additional specific use cases for Gateway API:\n - HTTP request \u0026amp; response header rewrite\n - HTTP redirect, rewrite and mirror\n - Cross-namespace routing\n - gRPC routing\n - East-West L7 routing with GAMMA\n","teaser":"Dive deeper into advanced use cases for Cilium's Gateway API.","level":"expert","score":4.6666665,"reviews":null,"tags":["service mesh"],"challenges":null,"badge":{"name":"Cilium Advanced Gateway API Use Cases","description":"This badge certifies that the Advanced Gateway API Use Cases lab by Isovalent has been successfully completed. This lab is made of practical challenges, quizzes, and a final exam. The challenges include: Traffic splitting, HTTP request header rewrite, HTTP response header rewrite, and Cross-namespace routing","skills":["Cilium","eBPF","Gateway","HTTP header rewrite","Ingress","Kubernetes","L7","Load Balancer","Networking","traffic splitting"],"url":"https://www.credly.com/org/isovalent/badge/cilium-advanced-gateway-api-use-cases","image_url":"https://images.credly.com/images/747f2360-8ef8-4bb0-bb91-af09c5d721c2/tempfile20250605-79-30kzgy.png","vanity_slug":"cilium-advanced-gateway-api-use-cases","global_activity_url":"https://isovalent.com/labs/cilium-gateway-api-advanced/","state":"active","allow_duplicate_badges":false,"badges_count":533,"public":true,"allow_delete":false,"allow_archive":true,"cost":"Free","level":"Advanced","time_to_earn":"Hours","type_category":"Learning","lock_badge_state":false,"recipient_type":"User","show_skill_tag_links":false,"printing_disabled":false,"visibility":"public","variants_allowed":false,"variant_type":"","reporting_tags":["Isovalent Labs","Platform Ops (Service Mesh) Journey"],"alignments":null,"recommendations":[{"id":"4372c2db-aaae-4f3b-8627-9d3bf5006070","type":"education","activity_url":"https://isovalent.com/labs/","title":"Isovalent Hands-on labs"},{"id":"4ade9b55-1723-4123-b72d-e3391dbe1094","type":"education","activity_url":"https://isovalent.com/learning-tracks/#platformOps","title":"Platform Ops (Service Mesh) Journey"},{"id":"954de5f4-92bd-4cb6-ad8d-82030865e97a","type":"education","activity_url":"https://labs-map.isovalent.com/","title":"The World of Cilium"}],"badge_template_activities":[{"activity_type":"Course","title":"The badge recipient has followed the Cilium Advanced Gateway API Use Cases lab by Isovalent.","activity_url":"https://isovalent.com/labs/cilium-gateway-api-advanced/"},{"activity_type":"Assessment","title":"The badge recipient has correctly answered the quizzes and finished the exam in the Cilium Advanced Gateway API Use Cases lab by Isovalent.","activity_url":"https://isovalent.com/labs/cilium-gateway-api-advanced/"}],"linkedin_share_default_message":"View my verified achievement from @Org_Name.","translatable":false,"created_at":"2023-04-19T14:20:27.802Z","updated_at":"2025-06-05T22:18:20.064Z","state_updated_at":"2023-04-19T14:39:24.917Z"},"version":"1.2.5","created_at":"2022-11-27T22:32:41Z","last_update":"2025-10-06T10:11:24Z","duration":"60"},{"slug":"cilium-getting-started","icon":"https://cilium.io/favicon-32x32.png?v=81b4389fe4c26dfd1769148aa2f50bb0","title":"🥉 Getting Started with Cilium","description":"Cilium is an open source software for transparently securing the network connectivity between application services deployed using Linux container management platforms like Docker and Kubernetes.\n\n![Cilium at the core](https://cilium.io/static/hero-illustration-82419bb3a3f2525e2718d2bc7e094f91.svg)\n\nAt the foundation of Cilium is a new Linux kernel technology called eBPF, which enables the dynamic insertion of powerful security visibility and control logic within Linux itself. Because eBPF runs inside the Linux kernel, Cilium security policies can be applied and updated without any changes to the application code or container configuration.\n\nIn this track, we provide you a fully fledged Cilium installation on a small cluster, together with a few challenges to solve. See yourself how Cilium works, and how it can help you securing your moon-sized battlestation in a \"Star Wars\"-inspired challenge.","teaser":"Learn how Cilium can provide advanced Kubernetes network security policy","level":"beginner","score":4.8831167,"reviews":null,"tags":null,"challenges":null,"badge":{"name":"Cilium Getting Started","description":"This badge certifies that the Cilium Getting Started Lab by Isovalent has been successfully completed. This lab is made of practical challenges, quizzes, and a final exam. The challenges include: installing Cilium on a Kind cluster, deploying an application, checking network access between components, and creating L3/L4 and L7 Network Policy resources.","skills":["Cilium","Containers","eBPF","Kubernetes","Networking","Security"],"url":"https://www.credly.com/org/isovalent/badge/cilium-getting-started","image_url":"https://images.credly.com/images/d74820be-3dba-40b9-a254-a8e7381bf63d/tempfile20250605-64-wqikcw.png","vanity_slug":"cilium-getting-started","global_activity_url":"https://isovalent.com/labs/cilium-getting-started/","state":"active","allow_duplicate_badges":false,"badges_count":3810,"public":true,"allow_delete":false,"allow_archive":true,"cost":"Free","level":"Foundational","time_to_earn":"Hours","type_category":"Learning","lock_badge_state":false,"recipient_type":"User","show_skill_tag_links":true,"printing_disabled":false,"visibility":"public","variants_allowed":false,"variant_type":"","reporting_tags":["Cloud Architect Journey","Isovalent Labs","Cloud Network Engineer Journey","Platform Engineer Journey","Platform Ops (Service Mesh) Journey","Security Professionals Journey"],"alignments":null,"recommendations":[{"id":"4372c2db-aaae-4f3b-8627-9d3bf5006070","type":"education","activity_url":"https://isovalent.com/labs/","title":"Isovalent Hands-on labs"},{"id":"cb2f1cc1-6c86-45bb-82bc-9e57c212492a","type":"education","activity_url":"https://isovalent.com/learning-tracks/#cloudNetworkEngineer","title":"Cloud Network Engineer Journey"},{"id":"5a54e3cb-6f75-446d-abb5-4a296c709bf4","type":"education","activity_url":"https://isovalent.com/learning-tracks/#securityProfessionals","title":"Security Professionals Journey"},{"id":"a79b8385-aa73-4ba5-98cf-8af041fadadc","type":"education","activity_url":"https://isovalent.com/learning-tracks/#platformEngineer","title":"Platform Engineer Journey"},{"id":"4ade9b55-1723-4123-b72d-e3391dbe1094","type":"education","activity_url":"https://isovalent.com/learning-tracks/#platformOps","title":"Platform Ops (Service Mesh) Journey"},{"id":"10a431f0-48d6-4ed4-b223-1c3b3d9a47c0","type":"education","activity_url":"https://isovalent.com/learning-tracks/#cloudArchitect","title":"Cloud Architect Journey"},{"id":"954de5f4-92bd-4cb6-ad8d-82030865e97a","type":"education","activity_url":"https://labs-map.isovalent.com/","title":"The World of Cilium"}],"badge_template_activities":[{"activity_type":"Course","title":"The badge recipient has followed the Cilium Getting Started lab by Isovalent.","activity_url":"https://isovalent.com/labs/cilium-getting-started/"},{"activity_type":"Assessment","title":"The badge recipient has correctly answered the quizzes and finished the exam in the Cilium Getting Started lab by Isovalent.","activity_url":"https://isovalent.com/labs/cilium-getting-started/"}],"linkedin_share_default_message":"View my verified achievement from @Org_Name.","translatable":false,"created_at":"2022-08-17T11:32:02.564Z","updated_at":"2025-06-05T22:18:21.125Z","state_updated_at":"2022-12-17T22:02:14.340Z"},"version":"1.2.11","created_at":"1970-01-01T00:00:00Z","last_update":"2025-09-24T15:51:48Z","duration":"30"},{"slug":"cilium-host-firewall","icon":"https://cilium.io/favicon-32x32.png?v=81b4389fe4c26dfd1769148aa2f50bb0","title":"🥈 Cilium: Host Firewall","description":"Cilium is an open source software for transparently securing the network connectivity between application services deployed using Linux container management platforms like Docker and Kubernetes.\n\n![Cilium at the core](https://cilium.io/static/hero-illustration-82419bb3a3f2525e2718d2bc7e094f91.svg)\n\nAt the foundation of Cilium is a new Linux kernel technology called eBPF, which enables the dynamic insertion of powerful security visibility and control logic within Linux itself. Because eBPF runs inside the Linux kernel, Cilium security policies can be applied and updated without any changes to the application code or container configuration.\n\nIn this track, you will learn about how to use Cilium Network Policies to configure the Host Firewall, allowing you to filter traffic on the Kubernetes nodes using Cilium resources.","teaser":"Learn how Cilium can provide advanced Kubernetes network security policy","level":"beginner","score":4.714286,"reviews":null,"tags":null,"challenges":null,"badge":{"name":"Cilium Host Firewall","description":"This badge certifies that the Cilium Host Firewall Lab by Isovalent has been successfully completed. This lab is made of practical challenges, quizzes, and a final exam. The challenges include: installing Cilium on a Kind cluster with Host Firewall enabled and setting up global Cilium Network Policies to configure firewalling on cluster nodes.","skills":["Cilium","Containers","eBPF","Firewall","Kubernetes","Security"],"url":"https://www.credly.com/org/isovalent/badge/cilium-host-firewall","image_url":"https://images.credly.com/images/1be81e3e-d2ec-431f-bfdb-3a997b069cb8/tempfile20250605-58-xieo6x.png","vanity_slug":"cilium-host-firewall","global_activity_url":"https://isovalent.com/labs/cilium-host-firewall/","state":"active","allow_duplicate_badges":false,"badges_count":365,"public":true,"allow_delete":false,"allow_archive":true,"cost":"Free","level":"Intermediate","time_to_earn":"Hours","type_category":"Learning","lock_badge_state":false,"recipient_type":"User","show_skill_tag_links":false,"printing_disabled":false,"visibility":"public","variants_allowed":false,"variant_type":"","reporting_tags":["Isovalent Labs","Security Professionals Journey"],"alignments":null,"recommendations":[{"id":"4372c2db-aaae-4f3b-8627-9d3bf5006070","type":"education","activity_url":"https://isovalent.com/labs/","title":"Isovalent Hands-on labs"},{"id":"5a54e3cb-6f75-446d-abb5-4a296c709bf4","type":"education","activity_url":"https://isovalent.com/learning-tracks/#securityProfessionals","title":"Security Professionals Journey"},{"id":"954de5f4-92bd-4cb6-ad8d-82030865e97a","type":"education","activity_url":"https://labs-map.isovalent.com/","title":"The World of Cilium"}],"badge_template_activities":[{"activity_type":"Course","title":"The badge recipient has followed the Cilium Host Firewall lab by Isovalent.","activity_url":"https://isovalent.com/labs/cilium-host-firewall/"},{"activity_type":"Assessment","title":"The badge recipient has correctly answered the quizzes and finished the exam in the Cilium Host Firewall lab by Isovalent.","activity_url":"https://isovalent.com/labs/cilium-host-firewall/"}],"linkedin_share_default_message":"View my verified achievement from @Org_Name.","translatable":false,"created_at":"2023-12-05T18:33:12.456Z","updated_at":"2025-06-05T21:01:53.958Z","state_updated_at":"2023-12-06T09:57:52.988Z"},"version":"1.2.6","created_at":"2022-06-17T10:06:34Z","last_update":"2025-10-06T10:11:07Z","duration":"30"},{"slug":"cilium-ingress-controller","icon":"https://cilium.io/favicon-32x32.png?v=81b4389fe4c26dfd1769148aa2f50bb0","title":"🥈 Cilium Ingress Controller","description":"![No sidecar required](https://cilium.io/static/b0307b499e327eb226dd4f58d2244f2e/905a7/sidecar-sweep.webp)\n\nYou already know that Cilium accelerates networking, and provides security and observability in Kubernetes, using the power of eBPF. Now Cilium is bringing those eBPF strengths to the world of Service Mesh. Cilium Service Mesh features eBPF-powered connectivity, traffic management, security and observability.\n\nIn this lab, you will learn how you can use Cilium to deploy `Ingress`, as well as `EnvoyConfig` resources to dynamically configure the Envoy proxy provided with the Cilium agent.\n\nAnd all of the above without any Envoy sidecar injection into your pods!","teaser":"Introduction and First Steps with Cilium Service Mesh","level":"intermediate","score":4.470588,"reviews":null,"tags":["ingress","service mesh"],"challenges":null,"badge":{"name":"Cilium Ingress Controller","description":"This badge certifies that the Cilium Ingress Controller Lab by Isovalent has been successfully completed. This lab is made of practical challenges, quizzes, and a final exam. The challenges include: deploying applications on a Kind cluster, deploying Kubernetes Ingress resources for both HTTP and gRPC services, and securing the Ingress resources with TLS certificates.","skills":["Cilium","Containers","eBPF","Hubble","Kubernetes","Networking","Service Mesh"],"url":"https://www.credly.com/org/isovalent/badge/cilium-ingress-controller","image_url":"https://images.credly.com/images/97452400-58b1-4982-aba2-29bec73e487c/tempfile20250605-69-udkrvg.png","vanity_slug":"cilium-ingress-controller","global_activity_url":"https://isovalent.com/labs/cilium-ingress-controller/","state":"active","allow_duplicate_badges":false,"badges_count":1261,"public":true,"allow_delete":false,"allow_archive":true,"cost":"Free","level":"Intermediate","time_to_earn":"Hours","type_category":"Learning","lock_badge_state":false,"recipient_type":"User","show_skill_tag_links":true,"printing_disabled":false,"visibility":"public","variants_allowed":false,"variant_type":"","reporting_tags":["Cloud Architect Journey","Isovalent Labs","Platform Ops (Service Mesh) Journey"],"alignments":null,"recommendations":[{"id":"4372c2db-aaae-4f3b-8627-9d3bf5006070","type":"education","activity_url":"https://isovalent.com/labs/","title":"Isovalent Hands-on labs"},{"id":"4ade9b55-1723-4123-b72d-e3391dbe1094","type":"education","activity_url":"https://isovalent.com/learning-tracks/#platformOps","title":"Platform Ops (Service Mesh) Journey"},{"id":"10a431f0-48d6-4ed4-b223-1c3b3d9a47c0","type":"education","activity_url":"https://isovalent.com/learning-tracks/#cloudArchitect","title":"Cloud Architect Journey"},{"id":"954de5f4-92bd-4cb6-ad8d-82030865e97a","type":"education","activity_url":"https://labs-map.isovalent.com/","title":"The World of Cilium"}],"badge_template_activities":[{"activity_type":"Course","title":"The badge recipient has followed the Cilium Ingress Controller lab by Isovalent.","activity_url":"https://isovalent.com/labs/cilium-ingress-controller/"},{"activity_type":"Assessment","title":"The badge recipient has correctly answered the quizzes and finished the exam in the Cilium Ingress Controller lab by Isovalent.","activity_url":"https://isovalent.com/labs/cilium-ingress-controller/"}],"linkedin_share_default_message":"View my verified achievement from @Org_Name.","translatable":false,"created_at":"2022-08-23T09:05:32.938Z","updated_at":"2025-06-05T21:43:58.300Z","state_updated_at":"2022-12-17T22:02:11.929Z"},"version":"2.1.11","created_at":"2022-05-09T08:41:36Z","last_update":"2025-10-10T12:38:00Z","duration":"45"},{"slug":"cilium-ipam","icon":"https://play.instruqt.com/assets/tracks/xp88idchadn7/69be248bd48dcc96e43f6fb978588a71/assets/teacher-bee.png","title":"🥈 Cilium IPAM","description":"Kubernetes pods are transient resources with dynamic IP addresses. For this reason, IPAM is a central component of Kubernetes administration.\n\n![Kubelet, CNI, and Cilium](https://play.instruqt.com/assets/tracks/xp88idchadn7/e3087cd51f8d72ff9012f2d14d2a8e09/assets/CNI.png)\n\nIn tunneling mode, Kubernetes IPAM is usually configured to distribute IP addresses from a reserved private range, which is the most simple option.\n\nIn direct routing mode, where the aim is to integrate the Kubernetes platform into the underlying network fabric, IPAM can become more complex and require more advanced options.\n\nIn this lab, we will explore the various IPAM options provided by Cilium.","teaser":"Learn how Cilium manages IP addresses in both tunnel and direct routing modes, from simple to advanced setups.","level":"beginner","score":4.5,"reviews":null,"tags":null,"challenges":null,"badge":{"name":"Cilium IPAM","description":"This badge certifies that the Cilium IPAM lab by Isovalent has been successfully completed. This lab is made of practical challenges, quizzes, and a final exam. The challenges include: Kubernetes IPAM, Cluster Scope IPAM, Multi-Pool IPAM, CRD-Backed IPAM.","skills":["Cilium","Kubernetes","Networking"],"url":"https://www.credly.com/org/isovalent/badge/cilium-ipam","image_url":"https://images.credly.com/images/84ab986a-89b6-41f0-b8e3-209e6ea115b9/tempfile20250605-77-tltnr7.png","vanity_slug":"cilium-ipam","global_activity_url":"https://isovalent.com/labs/cilium-ipam/","state":"active","allow_duplicate_badges":false,"badges_count":119,"public":true,"allow_delete":false,"allow_archive":true,"cost":"Free","level":"Intermediate","time_to_earn":"Hours","type_category":"Learning","lock_badge_state":false,"recipient_type":"User","show_skill_tag_links":false,"printing_disabled":false,"visibility":"public","variants_allowed":false,"variant_type":"","reporting_tags":["Isovalent Labs","Cloud Network Engineer Journey"],"alignments":null,"recommendations":[{"id":"4372c2db-aaae-4f3b-8627-9d3bf5006070","type":"education","activity_url":"https://isovalent.com/labs/","title":"Isovalent Hands-on labs"},{"id":"cb2f1cc1-6c86-45bb-82bc-9e57c212492a","type":"education","activity_url":"https://isovalent.com/learning-tracks/#cloudNetworkEngineer","title":"Cloud Network Engineer Journey"},{"id":"954de5f4-92bd-4cb6-ad8d-82030865e97a","type":"education","activity_url":"https://labs-map.isovalent.com/","title":"The World of Cilium"}],"badge_template_activities":[{"activity_type":"Course","title":"The badge recipient has followed the Cilium IPAM lab by Isovalent.","activity_url":"https://isovalent.com/labs/cilium-ipam/"},{"activity_type":"Assessment","title":"The badge recipient has correctly answered the quizzes and finished the exam in the Cilium IPAM lab by Isovalent.","activity_url":"https://isovalent.com/labs/cilium-ipam/"}],"linkedin_share_default_message":"View my verified achievement from @Org_Name.","translatable":false,"created_at":"2025-01-08T16:41:03.790Z","updated_at":"2025-06-05T22:18:16.394Z","state_updated_at":"2025-01-09T18:39:59.951Z"},"version":"1.1.5","created_at":"2025-01-09T18:38:43Z","last_update":"2025-10-06T10:12:07Z","duration":"45"},{"slug":"cilium-ipv6","icon":"https://cilium.io/favicon-32x32.png?v=81b4389fe4c26dfd1769148aa2f50bb0","title":"🥈 Cilium IPv6 Networking and Observability","description":"![IPv6 Observability](https://play.instruqt.com/assets/tracks/fwbv2z4l05bs/652572581b5b3cc01aed5b72dae90f94/assets/hubble-ipv6.png)\n\nWith Kubernetes' IPv6 support improving in recent releases and Dual Stack Generally Available in Kubernetes 1.23, it's time to learn about IPv6 on Kubernetes.\n\nYou might be wondering \"How on Earth am I going to be able to operate this?\"\n\nGood news - you're in the right place.\n\nThis lab will walk you through how to deploy a IPv4/IPv6 Dual Stack Kubernetes cluster and install Cilium and Hubble to benefit from their networking and observability capabilities.\nIn particular, visibility of IPv6 flows is absolutely essential.\n\nIPv6's slow adoption is primarily caused by fears it would be hard to operate and manage.\n\nAs you will see, a tool such as Hubble will help operators visualize and understand their IPv6 network better.","teaser":"Learn how simple IPv6 can be installed and operated, with Cilium and Hubble","level":"beginner","score":5,"reviews":null,"tags":["ipv6"],"challenges":null,"badge":{"name":"Cilium IPv6 Networking and Observability","description":"This badge certifies that the Cilium IPv6 Networking and Observability lab by Isovalent has been successfully completed. This lab is made of practical challenges, quizzes, and a final exam. The challenges include: deploying a Kubernetes IPv4/IPv6 dual stack demo cluster and observing IPv6 flows in it.","skills":["Cilium","eBPF","Flows","IPv4","IPv6","Kubernetes","Networking","Observability"],"url":"https://www.credly.com/org/isovalent/badge/cilium-ipv6-networking-and-observability","image_url":"https://images.credly.com/images/fb0a6e4c-55fa-41c2-ae43-3b1ebe7a921c/tempfile20250605-85-21t8t.png","vanity_slug":"cilium-ipv6-networking-and-observability","global_activity_url":"https://isovalent.com/labs/cilium-ipv6/","state":"active","allow_duplicate_badges":false,"badges_count":475,"public":true,"allow_delete":false,"allow_archive":true,"cost":"Free","level":"Intermediate","time_to_earn":"Hours","type_category":"Learning","lock_badge_state":false,"recipient_type":"User","show_skill_tag_links":false,"printing_disabled":false,"visibility":"public","variants_allowed":false,"variant_type":"","reporting_tags":["Cloud Architect Journey","Isovalent Labs","Cloud Network Engineer Journey"],"alignments":null,"recommendations":[{"id":"4372c2db-aaae-4f3b-8627-9d3bf5006070","type":"education","activity_url":"https://isovalent.com/labs/","title":"Isovalent Hands-on labs"},{"id":"cb2f1cc1-6c86-45bb-82bc-9e57c212492a","type":"education","activity_url":"https://isovalent.com/learning-tracks/#cloudNetworkEngineer","title":"Cloud Network Engineer Journey"},{"id":"10a431f0-48d6-4ed4-b223-1c3b3d9a47c0","type":"education","activity_url":"https://isovalent.com/learning-tracks/#cloudArchitect","title":"Cloud Architect Journey"},{"id":"954de5f4-92bd-4cb6-ad8d-82030865e97a","type":"education","activity_url":"https://labs-map.isovalent.com/","title":"The World of Cilium"}],"badge_template_activities":[{"activity_type":"Course","title":"The badge recipient has followed the Cilium IPv6 Networking and Observability lab by Isovalent.","activity_url":"https://isovalent.com/labs/cilium-ipv6/"},{"activity_type":"Assessment","title":"The badge recipient has correctly answered the quizzes and finished the exam in the Cilium IPv6 Networking and Observability lab by Isovalent.","activity_url":"https://isovalent.com/labs/cilium-ipv6/"}],"linkedin_share_default_message":"View my verified achievement from @Org_Name.","translatable":false,"created_at":"2023-02-14T20:46:59.746Z","updated_at":"2025-06-05T22:18:17.632Z","state_updated_at":"2023-02-14T20:56:18.496Z"},"version":"1.2.5","created_at":"2022-09-16T15:30:57Z","last_update":"2025-10-14T17:19:37Z","duration":"30"},{"slug":"cilium-kubevirt","icon":"https://cilium.io/favicon-32x32.png?v=81b4389fe4c26dfd1769148aa2f50bb0","title":"🥇 Cilium for Virtual Machines with KubeVirt","description":"In this lab, you will learn how to leverage KubeVirt to run virtual machines alongside containers in Kubernetes, while using Cilium for secure, scalable networking.\n\nThe lab will guide you through integrating VMs with Kubernetes' CNI via Cilium, implementing Zero Trust security policies, and enabling advanced networking features like live migration.\n\nBy the end, you'll understand how Cilium and KubeVirt provide seamless networking for both containerized and virtualized workloads in a cloud-native environment.\n","teaser":"Run VMs and containers side by side with Cilium-powered networking.","level":"intermediate","score":4.75,"reviews":null,"tags":["kubevirt"],"challenges":null,"badge":{"name":"Cilium for Virtual Machines with KubeVirt","description":"This badge certifies that the Cilium for Virtual Machines with KubeVirt lab by Isovalent has been successfully completed. This lab is made of practical challenges, quizzes, and a final exam. The challenges include: setting up KubeVirt, starting a virtual machine, accessing a virtual machine using Gateway API, securing access to a virtual machine with Cilium Network Policies, live migrating a virtual machine between Kubernetes nodes.","skills":["Cilium","Kubernetes","Networking","Virtual Machines"],"url":"https://www.credly.com/org/isovalent/badge/cilium-for-virtual-machines-with-kubevirt","image_url":"https://images.credly.com/images/76943445-11cb-4721-9ce1-76105179fad0/tempfile20250605-81-wqikcw.png","vanity_slug":"cilium-for-virtual-machines-with-kubevirt","global_activity_url":"https://isovalent.com/labs/cilium-kubevirt/","state":"active","allow_duplicate_badges":false,"badges_count":169,"public":true,"allow_delete":false,"allow_archive":true,"cost":"Free","level":"Advanced","time_to_earn":"Hours","type_category":"Learning","lock_badge_state":false,"recipient_type":"User","show_skill_tag_links":false,"printing_disabled":false,"visibility":"public","variants_allowed":false,"variant_type":"","reporting_tags":["Cloud Architect Journey","Isovalent Labs"],"alignments":null,"recommendations":[{"id":"4372c2db-aaae-4f3b-8627-9d3bf5006070","type":"education","activity_url":"https://isovalent.com/labs/","title":"Isovalent Hands-on labs"},{"id":"10a431f0-48d6-4ed4-b223-1c3b3d9a47c0","type":"education","activity_url":"https://isovalent.com/learning-tracks/#cloudArchitect","title":"Cloud Architect Journey"},{"id":"954de5f4-92bd-4cb6-ad8d-82030865e97a","type":"education","activity_url":"https://labs-map.isovalent.com/","title":"The World of Cilium"}],"badge_template_activities":[{"activity_type":"Course","title":"The badge recipient has followed the Cilium for Virtual Machines with KubeVirt lab by Isovalent.","activity_url":"https://isovalent.com/labs/cilium-kubevirt/"},{"activity_type":"Assessment","title":"The badge recipient has correctly answered the quizzes and finished the exam in the Cilium for Virtual Machines with KubeVirt lab by Isovalent.","activity_url":"https://isovalent.com/labs/cilium-kubevirt/"}],"linkedin_share_default_message":"View my verified achievement from @Org_Name.","translatable":false,"created_at":"2024-10-07T11:12:00.482Z","updated_at":"2025-06-05T22:18:17.382Z","state_updated_at":"2024-10-09T15:32:06.244Z"},"version":"1.1.20","created_at":"2024-10-04T15:36:43Z","last_update":"2025-09-25T12:03:58Z","duration":"45"},{"slug":"cilium-lb-ipam-bgp","icon":"https://cilium.io/favicon-32x32.png?v=81b4389fe4c26dfd1769148aa2f50bb0","title":"🥈 Cilium LoadBalancer IPAM and BGP Service Advertisement","description":"BGP support was initially introduced in Cilium 1.10 and subsequent improvements have been made since, such as the recent introduction of IPv6 support in Cilium 1.12.\n\nIn Cilium 1.13, that support was enhanced with the introduction of Load Balancer IPAM and BGP Service address advertisements.\n\nIn this lab, you will learn about both these new features and how they can simplify your network connectivity operations.","teaser":"LB-IPAM and BGP LoadBalancer Service Advertisement","level":"intermediate","score":4.733333,"reviews":null,"tags":["bgp"],"challenges":null,"badge":{"name":"Cilium LoadBalancer IPAM and BGP Service Advertisement","description":"This badge certifies that the Cilium LoadBalancer IPAM and BGP Service Advertisement lab by Isovalent has been successfully completed. This lab is made of practical challenges, quizzes, and a final exam. The challenges include: creating a BGP-enabled virtual network fabric, learning how to allocate LoadBalancer service IPs and deploying BGP peering policies on Cilium.","skills":["BGP","Cilium","Containers","Hubble","IPAM","Kubernetes","LoadBalancer","Networking","Service Annotations"],"url":"https://www.credly.com/org/isovalent/badge/cilium-loadbalancer-ipam-and-bgp-service-advertisement","image_url":"https://images.credly.com/images/49fec8fc-fe83-4a3e-834b-0dfa938e3ad8/tempfile20250605-58-43yx6m.png","vanity_slug":"cilium-loadbalancer-ipam-and-bgp-service-advertisement","global_activity_url":"https://isovalent.com/labs/cilium-lb-ipam-bgp/","state":"active","allow_duplicate_badges":false,"badges_count":621,"public":true,"allow_delete":false,"allow_archive":true,"cost":"Free","level":"Intermediate","time_to_earn":"Hours","type_category":"Learning","lock_badge_state":false,"recipient_type":"User","show_skill_tag_links":false,"printing_disabled":false,"visibility":"public","variants_allowed":false,"variant_type":"","reporting_tags":["Isovalent Labs","Cloud Network Engineer Journey"],"alignments":null,"recommendations":[{"id":"4372c2db-aaae-4f3b-8627-9d3bf5006070","type":"education","activity_url":"https://isovalent.com/labs/","title":"Isovalent Hands-on labs"},{"id":"cb2f1cc1-6c86-45bb-82bc-9e57c212492a","type":"education","activity_url":"https://isovalent.com/learning-tracks/#cloudNetworkEngineer","title":"Cloud Network Engineer Journey"},{"id":"954de5f4-92bd-4cb6-ad8d-82030865e97a","type":"education","activity_url":"https://labs-map.isovalent.com/","title":"The World of Cilium"}],"badge_template_activities":[{"activity_type":"Course","title":"The badge recipient has followed the Cilium LoadBalancer IPAM and BGP Service Advertisement lab by Isovalent.","activity_url":"https://isovalent.com/labs/cilium-lb-ipam-bgp/"},{"activity_type":"Assessment","title":"The badge recipient has correctly answered the quizzes and finished the exam in the Cilium LoadBalancer IPAM and BGP Service Advertisement lab by Isovalent.","activity_url":"https://isovalent.com/labs/cilium-lb-ipam-bgp/"}],"linkedin_share_default_message":"View my verified achievement from @Org_Name.","translatable":false,"created_at":"2023-01-16T20:44:25.536Z","updated_at":"2025-06-05T22:18:16.577Z","state_updated_at":"2023-01-17T12:48:33.494Z"},"version":"1.2.7","created_at":"2022-12-13T11:00:53Z","last_update":"2025-10-24T08:03:00Z","duration":"45"},{"slug":"cilium-lb-ipam-l2-announcements","icon":"https://cilium.io/favicon-32x32.png?v=81b4389fe4c26dfd1769148aa2f50bb0","title":"🥈 Cilium LoadBalancer IPAM and L2 Service Announcement","description":"In this lab, you will learn about the L2 Load Balancer announcement system in Cilium which allows to publicize LoadBalancer on the underlying network services using ARP.","teaser":"LB-IPAM and L2 Service Announcement","level":"intermediate","score":4.6666665,"reviews":null,"tags":["arp"],"challenges":null,"badge":{"name":"Cilium LB-IPAM \u0026 L2","description":"This badge certifies that the Cilium LB-IPAM and L2 Service Announcement Lab by Isovalent has been successfully completed. This lab is made of practical challenges, quizzes, and a final exam. The challenges include: installing Cilium on a Kind cluster with L2 announcements enabled and exposing a service with LB-IPAM and L2.","skills":["ARP","Cilium","Containers","eBPF","Kubernetes","Load Balancer"],"url":"https://www.credly.com/org/isovalent/badge/cilium-lb-ipam-l2","image_url":"https://images.credly.com/images/decfc438-d202-4b39-909d-286e7ddba5b8/tempfile20250605-82-lddt90.png","vanity_slug":"cilium-lb-ipam-l2","global_activity_url":"https://isovalent.com/labs/cilium-lb-ipam-l2/","state":"active","allow_duplicate_badges":false,"badges_count":519,"public":true,"allow_delete":false,"allow_archive":true,"cost":"Free","level":"Intermediate","time_to_earn":"Hours","type_category":"Learning","lock_badge_state":false,"recipient_type":"User","show_skill_tag_links":false,"printing_disabled":false,"visibility":"public","variants_allowed":false,"variant_type":"","reporting_tags":["Isovalent Labs","Cloud Network Engineer Journey"],"alignments":null,"recommendations":[{"id":"4372c2db-aaae-4f3b-8627-9d3bf5006070","type":"education","activity_url":"https://isovalent.com/labs/","title":"Isovalent Hands-on labs"},{"id":"5a54e3cb-6f75-446d-abb5-4a296c709bf4","type":"education","activity_url":"https://isovalent.com/learning-tracks/#securityProfessionals","title":"Security Professionals Journey"},{"id":"954de5f4-92bd-4cb6-ad8d-82030865e97a","type":"education","activity_url":"https://labs-map.isovalent.com/","title":"The World of Cilium"}],"badge_template_activities":[{"activity_type":"Course","title":"The badge recipient has followed the Cilium LB-IPAM \u0026 L2 lab by Isovalent.","activity_url":"https://isovalent.com/labs/cilium-lb-ipam-l2/"},{"activity_type":"Assessment","title":"The badge recipient has correctly answered the quizzes and finished the exam in the Cilium LB-IPAM \u0026 L2 lab by Isovalent.","activity_url":"https://isovalent.com/labs/cilium-lb-ipam-l2/"}],"linkedin_share_default_message":"View my verified achievement from @Org_Name.","translatable":false,"created_at":"2023-12-07T18:26:48.025Z","updated_at":"2025-06-05T22:18:20.631Z","state_updated_at":"2023-12-08T14:04:57.078Z"},"version":"1.2.4","created_at":"2023-07-24T15:16:48Z","last_update":"2025-09-24T15:51:21Z","duration":"45"},{"slug":"cilium-migrating-from-calico","icon":"https://play.instruqt.com/assets/tracks/rg03x9oveoki/69be248bd48dcc96e43f6fb978588a71/assets/teacher-bee.png","title":"Migrating from Calico","description":"# 🚚 Migrating from Calico\n\nMigrating to Cilium from another CNI is a very common task. But how do we minimize the impact during the migration? How do we ensure pods on the legacy CNI can still communicate to Cilium-managed pods during the migration? How do we execute the migration safely, while avoiding a overly complex approach or using a separate tool such as Multus?\n\nWith the use of the new Cilium CRD `CiliumNodeConfig`, running clusters can be migrated on a node-by-node basis, without disrupting existing traffic or requiring a complete cluster outage or rebuild.\n\nIn this lab, you will migrate your cluster from an existing CNI to Cilium. While we use Calico in this simple lab, you can leverage the same approach for other CNIs.\n\nNote that this feature is still beta and we expect further tooling and automation to be developed to support large cluster migrations.","teaser":"In this lab, you will learn how you can safely migrate your cluster to Cilium.","level":"intermediate","score":5,"reviews":null,"tags":null,"challenges":null,"badge":{"name":"","description":"","skills":null,"url":"","image_url":"","vanity_slug":"","global_activity_url":"","state":"","allow_duplicate_badges":false,"badges_count":0,"public":false,"allow_delete":false,"allow_archive":false,"cost":"","level":"","time_to_earn":"","type_category":"","lock_badge_state":false,"recipient_type":"","show_skill_tag_links":false,"printing_disabled":false,"visibility":"","variants_allowed":false,"variant_type":"","reporting_tags":null,"alignments":null,"recommendations":null,"badge_template_activities":null,"linkedin_share_default_message":"","translatable":false,"created_at":"","updated_at":"","state_updated_at":""},"version":"1.2.2","created_at":"2024-02-09T14:21:20Z","last_update":"2025-09-24T15:51:16Z","duration":"60"},{"slug":"cilium-migrating-from-flannel","icon":"https://cilium.io/favicon-32x32.png?v=81b4389fe4c26dfd1769148aa2f50bb0","title":"Migrating from Flannel","description":"## Migrating Lab\nMigrating to Cilium from another CNI is a very common task. But how do we minimize the impact during the migration? How do we ensure pods on the legacy CNI can still communicate to Cilium-managed during pods during the migration? How do we execute the migration safely, while avoiding a overly complex approach or using a separate tool such as Multus?\n\nWith the use of the new Cilium CRD `CiliumNodeConfig`, running clusters can be migrated on a node-by-node basis, without disrupting existing traffic or requiring a complete cluster outage or rebuild.\n\nIn this lab, you will migrate your cluster from an existing CNI to Cilium. While we use Flannel in this simple lab, you can leverage the same approach for other CNIs.\n\nNote that this feature is still beta and we expect further tooling and automation to be developed to support large cluster migrations.","teaser":"In this lab, you will learn how you can safely migrate your cluster to Cilium.","level":"intermediate","score":5,"reviews":null,"tags":null,"challenges":null,"badge":{"name":"","description":"","skills":null,"url":"","image_url":"","vanity_slug":"","global_activity_url":"","state":"","allow_duplicate_badges":false,"badges_count":0,"public":false,"allow_delete":false,"allow_archive":false,"cost":"","level":"","time_to_earn":"","type_category":"","lock_badge_state":false,"recipient_type":"","show_skill_tag_links":false,"printing_disabled":false,"visibility":"","variants_allowed":false,"variant_type":"","reporting_tags":null,"alignments":null,"recommendations":null,"badge_template_activities":null,"linkedin_share_default_message":"","translatable":false,"created_at":"","updated_at":"","state_updated_at":""},"version":"1.1.7","created_at":"2024-02-12T14:09:28Z","last_update":"2025-09-24T15:50:40Z","duration":"30"},{"slug":"cilium-multicast","icon":"https://isovalent.com/favicon-32x32.png?v=4393c4418a4f5aa1867a1d9636029656","title":"🥈 Isovalent Enterprise for Cilium: Multicast","description":"Multicast support in Kubernetes has finally come to Cilium!\n\nIn this lab, you will discover how to set it up, take advantage of it, and observe multicast traffic in Kubernetes, using Cilium and Tetragon in Isovalent Enterprise.\n","teaser":"Set up and observe multicast traffic in Kubernetes with Cilium and Tetragon, now with full support.","level":"","score":5,"reviews":null,"tags":["enterprise"],"challenges":null,"badge":{"name":"Cilium Multicast","description":"This badge certifies that the Isovalent Enterprise for Cilium: Multicast lab by Isovalent has been successfully completed. This lab is made of practical challenges, quizzes, and a final exam. The challenges include: enabling multicast, setting up multicast groups, making pods communicate over multicast, observing multicast traffic.","skills":["Cilium","Containers","Kubernetes","Multicast","Networking","Tetragon"],"url":"https://www.credly.com/org/isovalent/badge/cilium-multicast","image_url":"https://images.credly.com/images/a1595fe3-d5ed-45ac-b9b5-793e724237d1/tempfile20250605-63-onckka.png","vanity_slug":"cilium-multicast","global_activity_url":"https://isovalent.com/labs/cilium-multicast/","state":"active","allow_duplicate_badges":false,"badges_count":204,"public":true,"allow_delete":false,"allow_archive":true,"cost":"Free","level":"Intermediate","time_to_earn":"Hours","type_category":"Learning","lock_badge_state":false,"recipient_type":"User","show_skill_tag_links":false,"printing_disabled":false,"visibility":"public","variants_allowed":false,"variant_type":"","reporting_tags":["Isovalent Labs","Cloud Network Engineer Journey"],"alignments":null,"recommendations":[{"id":"4372c2db-aaae-4f3b-8627-9d3bf5006070","type":"education","activity_url":"https://isovalent.com/labs/","title":"Isovalent Hands-on labs"},{"id":"cb2f1cc1-6c86-45bb-82bc-9e57c212492a","type":"education","activity_url":"https://isovalent.com/learning-tracks/#cloudNetworkEngineer","title":"Cloud Network Engineer Journey"},{"id":"954de5f4-92bd-4cb6-ad8d-82030865e97a","type":"education","activity_url":"https://labs-map.isovalent.com/","title":"The World of Cilium"}],"badge_template_activities":[{"activity_type":"Course","title":"The badge recipient has followed the Cilium Multicast lab by Isovalent.","activity_url":"https://isovalent.com/labs/cilium-multicast/"},{"activity_type":"Assessment","title":"The badge recipient has correctly answered the quizzes and finished the exam in the Cilium Multicast lab by Isovalent.","activity_url":"https://isovalent.com/labs/cilium-multicast/"}],"linkedin_share_default_message":"View my verified achievement from @Org_Name.","translatable":false,"created_at":"2024-02-15T10:30:22.213Z","updated_at":"2025-06-05T22:18:16.468Z","state_updated_at":"2024-02-15T13:43:32.989Z"},"version":"1.2.8","created_at":"2024-02-13T11:20:40Z","last_update":"2025-09-24T15:50:55Z","duration":"30"},{"slug":"cilium-multi-networking","icon":"https://isovalent.com/favicon-32x32.png?v=4393c4418a4f5aa1867a1d9636029656","title":"🥈 Isovalent Enterprise for Cilium: Multi-Networking","description":"Kubernetes is built on the premise that a Pod should belong to a single network.\n\nWhile this approach may work for the majority of use cases, enterprise and telco often require a more sophisticated and flexible networking model.\n\nThere are many use cases where a Pod may require attachments to multiple networks with different properties via different interfaces.\n\nWith Cilium Multi-Networking, you can connect your Pod to multiple networks, without having to compromise on security and observability.\n\nStart this interactive hands-on lab to experience the benefits of Cilium Multi-Networking.\n","teaser":"Attach Pods to multiple networks with Cilium: ideal for enterprise and telco use cases needing advanced connectivity.","level":"","score":4.6666665,"reviews":null,"tags":["enterprise"],"challenges":null,"badge":{"name":"Cilium Multi Networking","description":"This badge certifies that the Isovalent Enterprise for Cilium: Cilium Multi-Networking lab by Isovalent has been successfully completed. This lab is made of practical challenges, quizzes, and a final exam. The challenges include: deploying a multi-networked application, visualizing its flows, and using Cilium Network Policies with it.","skills":["Cilium","Containers","Hubble","Kubernetes","Networking","Security"],"url":"https://www.credly.com/org/isovalent/badge/cilium-multi-networking","image_url":"https://images.credly.com/images/ed04790c-81d4-4402-809b-87a3065066b6/tempfile20250605-63-myb07d.png","vanity_slug":"cilium-multi-networking","global_activity_url":"https://isovalent.com/labs/cilium-multi-networking/","state":"active","allow_duplicate_badges":false,"badges_count":291,"public":true,"allow_delete":false,"allow_archive":true,"cost":"Free","level":"Intermediate","time_to_earn":"Hours","type_category":"Learning","lock_badge_state":false,"recipient_type":"User","show_skill_tag_links":false,"printing_disabled":false,"visibility":"public","variants_allowed":false,"variant_type":"","reporting_tags":["Isovalent Labs","Cloud Network Engineer Journey"],"alignments":null,"recommendations":[{"id":"4372c2db-aaae-4f3b-8627-9d3bf5006070","type":"education","activity_url":"https://isovalent.com/labs/","title":"Isovalent Hands-on labs"},{"id":"cb2f1cc1-6c86-45bb-82bc-9e57c212492a","type":"education","activity_url":"https://isovalent.com/learning-tracks/#cloudNetworkEngineer","title":"Cloud Network Engineer Journey"},{"id":"954de5f4-92bd-4cb6-ad8d-82030865e97a","type":"education","activity_url":"https://labs-map.isovalent.com/","title":"The World of Cilium"}],"badge_template_activities":[{"activity_type":"Course","title":"The badge recipient has followed the Cilium Multi Networking lab by Isovalent.","activity_url":"https://isovalent.com/labs/cilium-multi-networking/"},{"activity_type":"Assessment","title":"The badge recipient has correctly answered the quizzes and finished the exam in the Cilium Multi Networking lab by Isovalent.","activity_url":"https://isovalent.com/labs/cilium-multi-networking/"}],"linkedin_share_default_message":"View my verified achievement from @Org_Name.","translatable":false,"created_at":"2023-10-20T11:56:11.321Z","updated_at":"2025-06-05T22:18:18.230Z","state_updated_at":"2023-10-20T12:00:09.638Z"},"version":"1.3.4","created_at":"2023-10-04T08:35:53Z","last_update":"2025-09-24T15:51:30Z","duration":"30"},{"slug":"cilium-mutual-authentication","icon":"https://cilium.io/favicon-32x32.png?v=81b4389fe4c26dfd1769148aa2f50bb0","title":"🥈 Mutual Authentication with Cilium","description":"# Mutual Authentication and mTLS background\nMutual Transport Layer Security (mTLS) is a mechanism that ensures the authenticity, integrity, and confidentiality of data exchanged between two entities over a network.\n\nUnlike traditional TLS, which involves a one-way authentication process where the client verifies the server’s identity, mutual TLS adds an additional layer of security by requiring both the client and the server to authenticate each other.\n\nMutual TLS aims at providing authentication, confidentiality and integrity to service-to-service communications.\n\n# Mutual Authentication in Cilium\nSimilarly to Google’s [Application Layer Transport Security](https://cloud.google.com/docs/security/encryption-in-transit/application-layer-transport-security) (ALTS), Cilium’s mTLS-based Mutual Authentication splits the handshake protocol and record protocol apart and performs the handshake out of band of the actual packet flow.\n\nThe mTLS-based authentication layer of Cilium fulfills the authentication requirement of a connection whereas the existing in-kernel encryption layer provides confidentiality and integrity properties to the connection.\n\nTo learn more about Encryption on Cilium, you should take the [Transparent Encryption lab](https://isovalent.com/labs/cilium-transparent-encryption-with-ipsec-and-wireguard/).\n\nThis lab will focus on Mutual Authentication with Cilium.\n","teaser":"Mutual Authentication with Cilium","level":"beginner","score":4.7,"reviews":null,"tags":["mutual","service mesh","mtls","authentication"],"challenges":null,"badge":{"name":"Cilium Mutual Authentication","description":"This badge certifies that the Mutual Authentication with Cilium Lab by Isovalent has been successfully completed. This lab is made of practical challenges, quizzes, and a final exam. The challenges include: deploying workloads on a Kind cluster, enforcing mutual authentication between two workloads, observing mutual authentication with Hubble.","skills":["Cilium","Containers","eBPF","Kubernetes","mTLS","Security"],"url":"https://www.credly.com/org/isovalent/badge/cilium-mutual-authentication","image_url":"https://images.credly.com/images/f63a3bb9-2b43-4eba-8031-7c03c32e367e/tempfile20250605-84-wqikcw.png","vanity_slug":"cilium-mutual-authentication","global_activity_url":"https://isovalent.com/labs/cilium-mutual-authentication/","state":"active","allow_duplicate_badges":false,"badges_count":677,"public":true,"allow_delete":false,"allow_archive":true,"cost":"Free","level":"Intermediate","time_to_earn":"Hours","type_category":"Learning","lock_badge_state":false,"recipient_type":"User","show_skill_tag_links":false,"printing_disabled":false,"visibility":"public","variants_allowed":false,"variant_type":"","reporting_tags":["Cloud Architect Journey","Isovalent Labs","Platform Ops (Service Mesh) Journey","Security Professionals Journey"],"alignments":null,"recommendations":[{"id":"4372c2db-aaae-4f3b-8627-9d3bf5006070","type":"education","activity_url":"https://isovalent.com/labs/","title":"Isovalent Hands-on labs"},{"id":"5a54e3cb-6f75-446d-abb5-4a296c709bf4","type":"education","activity_url":"https://isovalent.com/learning-tracks/#securityProfessionals","title":"Security Professionals Journey"},{"id":"4ade9b55-1723-4123-b72d-e3391dbe1094","type":"education","activity_url":"https://isovalent.com/learning-tracks/#platformOps","title":"Platform Ops (Service Mesh) Journey"},{"id":"10a431f0-48d6-4ed4-b223-1c3b3d9a47c0","type":"education","activity_url":"https://isovalent.com/learning-tracks/#cloudArchitect","title":"Cloud Architect Journey"},{"id":"954de5f4-92bd-4cb6-ad8d-82030865e97a","type":"education","activity_url":"https://labs-map.isovalent.com/","title":"The World of Cilium"}],"badge_template_activities":[{"activity_type":"Course","title":"The badge recipient has followed the Cilium Mutual Authentication lab by Isovalent.","activity_url":"https://isovalent.com/labs/cilium-mutual-authentication/"},{"activity_type":"Assessment","title":"The badge recipient has correctly answered the quizzes and finished the exam in the Cilium Mutual Authentication lab by Isovalent.","activity_url":"https://isovalent.com/labs/cilium-mutual-authentication/"}],"linkedin_share_default_message":"View my verified achievement from @Org_Name.","translatable":false,"created_at":"2023-07-19T09:14:18.525Z","updated_at":"2025-06-05T22:18:17.277Z","state_updated_at":"2023-07-24T15:27:42.012Z"},"version":"1.2.5","created_at":"2023-07-24T09:39:42Z","last_update":"2025-09-24T15:51:37Z","duration":"45"},{"slug":"cilium-network-policies","icon":"https://isovalent.com/favicon-32x32.png?v=4393c4418a4f5aa1867a1d9636029656","title":"🥈 Isovalent Enterprise for Cilium: Network Policies","description":"Achieving zero-trust network connectivity via Kubernetes Network Policy is complex as modern applications have many service dependencies (downstream APIs, databases, authentication services, etc.). With the “default deny” model, a missed dependency leads to a broken application. Moreover, the YAML syntax of Network Policy is often difficult for newcomers to understand. This makes writing policies and understanding their expected behavior (once deployed) challenging.\n\n![Network Policy Transparency](https://isovalent.dreamhosters.com/wp-content/uploads/2022/08/networking-1.svg)\n\nEnter Isovalent Enterprise for Cilium: it provides tooling to simplify and automate the creation of Network Policy based on labels and DNS-aware data from Cilium Hubble. APIs enable integration into CI/CD workflows while visualizations help teams understand the expected behavior of a given policy. Collectively, these capabilities dramatically reduce the barrier to entry to creating Network Policies and the ongoing overhead of maintaining them as applications evolve.\n\nIn this hands-on demo we will walk through some of those challenges and their solutions.","teaser":"Let's use Isovalent Enterprise for Cilium to simplify the creation, editing, and troubleshooting of network policies.","level":"intermediate","score":4.904762,"reviews":null,"tags":["enterprise","networking","policy"],"challenges":null,"badge":{"name":"Cilium Network Policies","description":"This badge certifies that the Isovalent Cilium Enterprise Network Policies Lab by Isovalent has been successfully completed. This lab is made of practical challenges, quizzes, and a final exam challenge. The challenges include: deploying an application on a Kind cluster, checking default network security rules, creating and enforcing Network Policies using the Isovalent Hubble Enterprise UI.","skills":["Cilium","Containers","eBPF","Enterprise","Hubble","Kubernetes","Networking","Network Policies","Security"],"url":"https://www.credly.com/org/isovalent/badge/cilium-network-policies","image_url":"https://images.credly.com/images/a65b3440-a608-4568-b4e0-120bf6c1255f/tempfile20250605-77-my735a.png","vanity_slug":"cilium-network-policies","global_activity_url":"https://isovalent.com/labs/cilium-network-policies/","state":"active","allow_duplicate_badges":false,"badges_count":1046,"public":true,"allow_delete":false,"allow_archive":true,"cost":"Free","level":"Intermediate","time_to_earn":"Hours","type_category":"Learning","lock_badge_state":false,"recipient_type":"User","show_skill_tag_links":true,"printing_disabled":false,"visibility":"public","variants_allowed":false,"variant_type":"","reporting_tags":["Cloud Architect Journey","Isovalent Labs","Platform Engineer Journey","Security Professionals Journey"],"alignments":null,"recommendations":[{"id":"4372c2db-aaae-4f3b-8627-9d3bf5006070","type":"education","activity_url":"https://isovalent.com/labs/","title":"Isovalent Hands-on labs"},{"id":"5a54e3cb-6f75-446d-abb5-4a296c709bf4","type":"education","activity_url":"https://isovalent.com/learning-tracks/#securityProfessionals","title":"Security Professionals Journey"},{"id":"a79b8385-aa73-4ba5-98cf-8af041fadadc","type":"education","activity_url":"https://isovalent.com/learning-tracks/#platformEngineer","title":"Platform Engineer Journey"},{"id":"10a431f0-48d6-4ed4-b223-1c3b3d9a47c0","type":"education","activity_url":"https://isovalent.com/learning-tracks/#cloudArchitect","title":"Cloud Architect Journey"},{"id":"954de5f4-92bd-4cb6-ad8d-82030865e97a","type":"education","activity_url":"https://labs-map.isovalent.com/","title":"The World of Cilium"}],"badge_template_activities":[{"activity_type":"Course","title":"The badge recipient has followed the Cilium Network Policies lab by Isovalent.","activity_url":"https://isovalent.com/labs/cilium-network-policies/"},{"activity_type":"Assessment","title":"The badge recipient has correctly answered the quizzes and finished the exam in the Cilium Network Policies lab by Isovalent.","activity_url":"https://isovalent.com/labs/cilium-network-policies/"}],"linkedin_share_default_message":"View my verified achievement from @Org_Name.","translatable":false,"created_at":"2022-08-17T13:19:56.276Z","updated_at":"2025-06-05T22:18:18.739Z","state_updated_at":"2022-12-17T22:02:15.168Z"},"version":"1.2.6","created_at":"1970-01-01T00:00:00Z","last_update":"2025-09-24T15:51:30Z","duration":"45"},{"slug":"cilium-sctp","icon":"","title":"SCTP on Cilium","description":"SCTP is a popular signalling protocol, used primarily by service providers and mobile operators.\n\nSCTP support for Kubernetes Services, Endpoint and NetworkPolicy was introduced in Kubernetes 1.12 (Beta) and was eventually graduated to Stable in Kubernetes 1.20.\n\nBasic support for SCTP was introduced in Cilium 1.13.\n\nThis lab will walk you through SCTP communications, security and flow visibility.","teaser":"Learn in this short lab how Cilium can transport, secure and visualize SCTP flows.","level":"intermediate","score":5,"reviews":null,"tags":["sctp","security","observability"],"challenges":null,"badge":{"name":"","description":"","skills":null,"url":"","image_url":"","vanity_slug":"","global_activity_url":"","state":"","allow_duplicate_badges":false,"badges_count":0,"public":false,"allow_delete":false,"allow_archive":false,"cost":"","level":"","time_to_earn":"","type_category":"","lock_badge_state":false,"recipient_type":"","show_skill_tag_links":false,"printing_disabled":false,"visibility":"","variants_allowed":false,"variant_type":"","reporting_tags":null,"alignments":null,"recommendations":null,"badge_template_activities":null,"linkedin_share_default_message":"","translatable":false,"created_at":"","updated_at":"","state_updated_at":""},"version":"1.2.2","created_at":"2022-10-06T10:20:36Z","last_update":"2025-09-24T15:50:49Z","duration":"15"},{"slug":"cilium-traffic-optimization","icon":"https://cilium.io/favicon-32x32.png?v=81b4389fe4c26dfd1769148aa2f50bb0","title":"🥈 Cilium Traffic Optimization","description":"Cilium introduced support for Local Redirect Policies in version 1.11, providing a powerful mechanism to control traffic routing within your Kubernetes cluster. Since then, additional improvements have expanded the possibilities for topology-aware load balancing and node-local optimizations.\n\nIn this lab, using a Star Wars-inspired theme based on the iconic \"These are not the droids you're looking for\" scene, you'll explore how these features can enhance service performance and reduce latency.\n\nYou'll start by deploying a sample application, then progress through hands-on exercises that demonstrate the use of Kubernetes' new trafficDistribution feature and Cilium's Local Redirect Policies to redirect traffic locally within nodes. Finally, you'll implement a local DNS cache on each node to improve DNS resolution times.\n\nBy the end of this lab, you'll have a practical understanding of how to use these advanced traffic management features to optimize the flow of traffic across your cluster.\n","teaser":"Master node-local traffic optimization with Cilium's Local Redirect Policies.","level":"intermediate","score":4.5555553,"reviews":null,"tags":null,"challenges":null,"badge":{"name":"Cilium Traffic Optimization","description":"This badge certifies that the Cilium Traffic Optimization lab by Isovalent has been successfully completed. This lab is made of practical challenges, quizzes, and a final exam. The challenges include: setting up Traffic Distribution for a Kubernetes Service, bypassing service backends with a Local Redirect Policy, setting up Node Local DNS.","skills":["Cilium","Kubernetes","Networking"],"url":"https://www.credly.com/org/isovalent/badge/cilium-traffic-optimization","image_url":"https://images.credly.com/images/28c0b871-2b39-4109-b4a8-a7be5d47c0de/tempfile20250605-76-kfdqem.png","vanity_slug":"cilium-traffic-optimization","global_activity_url":"https://isovalent.com/labs/cilium-traffic-optimization/","state":"active","allow_duplicate_badges":false,"badges_count":159,"public":true,"allow_delete":false,"allow_archive":true,"cost":"Free","level":"Intermediate","time_to_earn":"Hours","type_category":"Learning","lock_badge_state":false,"recipient_type":"User","show_skill_tag_links":false,"printing_disabled":false,"visibility":"public","variants_allowed":false,"variant_type":"","reporting_tags":["Isovalent Labs","Cloud Network Engineer Journey"],"alignments":null,"recommendations":[{"id":"4372c2db-aaae-4f3b-8627-9d3bf5006070","type":"education","activity_url":"https://isovalent.com/labs/","title":"Isovalent Hands-on labs"},{"id":"cb2f1cc1-6c86-45bb-82bc-9e57c212492a","type":"education","activity_url":"https://isovalent.com/learning-tracks/#cloudNetworkEngineer","title":"Cloud Network Engineer Journey"},{"id":"954de5f4-92bd-4cb6-ad8d-82030865e97a","type":"education","activity_url":"https://labs-map.isovalent.com/","title":"The World of Cilium"}],"badge_template_activities":[{"activity_type":"Course","title":"The badge recipient has followed the Cilium Traffic Optimization lab by Isovalent.","activity_url":"https://isovalent.com/labs/cilium-traffic-optimization/"},{"activity_type":"Assessment","title":"The badge recipient has correctly answered the quizzes and finished the exam in the Cilium Traffic Optimization lab by Isovalent.","activity_url":"https://isovalent.com/labs/cilium-traffic-optimization/"}],"linkedin_share_default_message":"View my verified achievement from @Org_Name.","translatable":false,"created_at":"2024-09-18T13:38:17.804Z","updated_at":"2025-06-05T22:18:20.066Z","state_updated_at":"2024-09-18T17:10:53.001Z"},"version":"1.2.6","created_at":"2024-09-18T17:09:28Z","last_update":"2025-09-24T15:51:30Z","duration":"45"},{"slug":"cilium-transparent-encryption-with-ipsec-and-wireguard","icon":"https://cilium.io/favicon-32x32.png?v=81b4389fe4c26dfd1769148aa2f50bb0","title":"🥈 Cilium Transparent Encryption with IPSec and WireGuard","description":"Encryption is required for many compliance frameworks. Kubernetes doesn’t natively offer pod-to-pod encryption. To offer encryption capabilities, it’s often required to implement it directly into your applications or deploy a Service Mesh. Both options add complexity and operational headaches.\n\nCilium actually provides \u003cstrong\u003etwo\u003c/strong\u003e options to encrypt traffic between Cilium-managed endpoints: IPsec and WireGuard. In this lab, you will be installing and testing both features and will get to experience how easy it is to encrypt data in transit with Cilium.\n\nYou will also see how to encrypt specific pod-to-pod traffic using Isovalent Enterprise for Cilium.","teaser":"Discover Cilium's two options to encrypt traffic: IPsec and WireGuard.","level":"intermediate","score":4.6153846,"reviews":null,"tags":["enterprise","security"],"challenges":null,"badge":{"name":"Cilium Flow Encryption","description":"This badge certifies that the Cilium Transparent Encryption with IPSec and WireGuard Lab by Isovalent has been successfully completed. This lab is made of practical challenges, quizzes, and a final exam. The challenges include: installing Cilium on a Kind cluster with IPsec for pod-to-pod encryption, rotating IPsec keys, installing Cilium with WireGuard for both pod-to-pod and node-to-node encryption.","skills":["Cilium","Containers","eBPF","IPsec","Kubernetes","Security","WireGuard"],"url":"https://www.credly.com/org/isovalent/badge/cilium-flow-encryption","image_url":"https://images.credly.com/images/6d7b1949-5718-4194-b448-4cf7fdedb057/tempfile20250605-58-b596ep.png","vanity_slug":"cilium-flow-encryption","global_activity_url":"https://isovalent.com/labs/cilium-transparent-encryption-with-ipsec-and-wireguard/","state":"active","allow_duplicate_badges":false,"badges_count":700,"public":true,"allow_delete":false,"allow_archive":true,"cost":"Free","level":"Intermediate","time_to_earn":"Hours","type_category":"Learning","lock_badge_state":false,"recipient_type":"User","show_skill_tag_links":false,"printing_disabled":false,"visibility":"public","variants_allowed":false,"variant_type":"","reporting_tags":["Cloud Architect Journey","Isovalent Labs","Platform Ops (Service Mesh) Journey","Security Professionals Journey"],"alignments":null,"recommendations":[{"id":"4372c2db-aaae-4f3b-8627-9d3bf5006070","type":"education","activity_url":"https://isovalent.com/labs/","title":"Isovalent Hands-on labs"},{"id":"5a54e3cb-6f75-446d-abb5-4a296c709bf4","type":"education","activity_url":"https://isovalent.com/learning-tracks/#securityProfessionals","title":"Security Professionals Journey"},{"id":"4ade9b55-1723-4123-b72d-e3391dbe1094","type":"education","activity_url":"https://isovalent.com/learning-tracks/#platformOps","title":"Platform Ops (Service Mesh) Journey"},{"id":"10a431f0-48d6-4ed4-b223-1c3b3d9a47c0","type":"education","activity_url":"https://isovalent.com/learning-tracks/#cloudArchitect","title":"Cloud Architect Journey"},{"id":"954de5f4-92bd-4cb6-ad8d-82030865e97a","type":"education","activity_url":"https://labs-map.isovalent.com/","title":"The World of Cilium"}],"badge_template_activities":[{"activity_type":"Course","title":"The badge recipient has followed the Cilium Flow Encryption lab by Isovalent.","activity_url":"https://isovalent.com/labs/cilium-transparent-encryption-with-ipsec-and-wireguard/"},{"activity_type":"Assessment","title":"The badge recipient has correctly answered the quizzes and finished the exam in the Cilium Flow Encryption lab by Isovalent.","activity_url":"https://isovalent.com/labs/cilium-transparent-encryption-with-ipsec-and-wireguard/"}],"linkedin_share_default_message":"View my verified achievement from @Org_Name.","translatable":false,"created_at":"2023-07-17T10:02:23.300Z","updated_at":"2025-06-05T22:18:16.469Z","state_updated_at":"2023-07-17T10:06:01.826Z"},"version":"2.2.0","created_at":"2022-08-23T11:05:34Z","last_update":"2025-09-24T15:51:20Z","duration":"30"},{"slug":"cilium-zero-trust-visibility","icon":"https://isovalent.com/favicon-32x32.png?v=4393c4418a4f5aa1867a1d9636029656","title":"🥇 Cilium Enterprise: Zero Trust Visibility","description":"In a Zero Trust approach, securing a Kubernetes cluster using Network Policies\nis a must for production setups.\n\nHowever, coming up with the right Network Policies can be a difficult task,\nespecially in clusters with existing workloads that must not be disturbed.\n\nIn this lab, you will see how to use Hubble metrics to build a Network Policy\nVerdict dashboard in Grafana. This dashboard will show you which flows need\nto be allowed in your policy approach.\n\n![Grafana Dashboard](https://play.instruqt.com/assets/tracks/eyyrll35yhr4/b96908cbfccf41e421f43d65de1316c5/assets/grafana_dashboard.png)\n\nYou will then use the Hubble Network Policy Visualizer to craft Network Policies\nand apply them to your cluster.\n\nFinally, once all your rules are in place, you will enforce them and test them\nwith additional workloads.\n\nOn the way to securing your cluster, you'll learn about multiple functionalities\nof Cilium Network Policies, and how to use them for different types of flows.","teaser":"Learn to set a Zero Trust Network Policy plan with Cilium, Hubble \u0026 Grafana.","level":"expert","score":4,"reviews":null,"tags":["security"],"challenges":null,"badge":{"name":"Cilium Zero Trust Visibility","description":"This badge certifies that the Cilium Zero Trust Visibility Lab by Isovalent has been successfully completed. This lab is made of practical challenges, quizzes, and a final exam. The challenges include: deploying applications on a Kind cluster, observing network traffic using Hubble and Grafana, and securing Kubernetes namespaces with Cilium Network Policies.","skills":["Cilium","Containers","eBPF","Grafana","Hubble","Kubernetes","Networking","Security","Visibility","Zero Trust"],"url":"https://www.credly.com/org/isovalent/badge/cilium-zero-trust-visibility","image_url":"https://images.credly.com/images/d4c66208-b30c-4ccc-be58-275a1626bfde/image.png","vanity_slug":"cilium-zero-trust-visibility","global_activity_url":"https://isovalent.com/labs/cilium-zero-trust-visibility/","state":"active","allow_duplicate_badges":false,"badges_count":343,"public":true,"allow_delete":false,"allow_archive":true,"cost":"Free","level":"Advanced","time_to_earn":"Hours","type_category":"Learning","lock_badge_state":false,"recipient_type":"User","show_skill_tag_links":true,"printing_disabled":false,"visibility":"public","variants_allowed":false,"variant_type":"","reporting_tags":["Isovalent Labs","Security Professionals Journey"],"alignments":null,"recommendations":[{"id":"4372c2db-aaae-4f3b-8627-9d3bf5006070","type":"education","activity_url":"https://isovalent.com/labs/","title":"Isovalent Hands-on labs"},{"id":"5a54e3cb-6f75-446d-abb5-4a296c709bf4","type":"education","activity_url":"https://isovalent.com/learning-tracks/#securityProfessionals","title":"Security Professionals Journey"},{"id":"954de5f4-92bd-4cb6-ad8d-82030865e97a","type":"education","activity_url":"https://labs-map.isovalent.com/","title":"The World of Cilium"}],"badge_template_activities":[{"activity_type":"Course","title":"The badge recipient has followed the Cilium Zero Trust Visibility lab by Isovalent.","activity_url":"https://isovalent.com/labs/cilium-zero-trust-visibility/"},{"activity_type":"Assessment","title":"The badge recipient has correctly answered the quizzes and finished the exam in the Cilium Zero Trust Visibility lab by Isovalent.","activity_url":"https://isovalent.com/labs/cilium-zero-trust-visibility/"}],"linkedin_share_default_message":"View my verified achievement from @Org_Name.","translatable":false,"created_at":"2023-01-31T17:52:46.269Z","updated_at":"2025-06-05T22:18:16.524Z","state_updated_at":"2023-02-01T23:14:43.750Z"},"version":"1.2.6","created_at":"2022-10-31T13:02:52Z","last_update":"2025-09-24T15:51:37Z","duration":"60"},{"slug":"discovery-cloud-architect-aws","icon":"https://isovalent.com/favicon-32x32.png?v=4393c4418a4f5aa1867a1d9636029656","title":"🌳 Discovery: Cloud Architect on AWS","description":"This lab offers an in-depth exploration of AWS cloud architecture, providing valuable insights and hands-on experience. However, due to the high resource demands, this lab is \u003cstrong\u003enot yet publicly available\u003c/strong\u003e.\n\nBy filling out the form on this page, you can request access. Please note that access will not be granted immediately. Unlike other labs, our team will review each request to ensure a smooth experience. Once approved, we will follow up with further instructions on how to get started.\n\nAdditionally, we’re excited to announce an upcoming webinar that will feature this lab and showcase its highlights! (Link to come)\n\nWe appreciate your understanding and look forward to helping you unlock the full potential of AWS with this advanced lab.\n","teaser":"","level":"beginner","score":4.571429,"reviews":null,"tags":null,"challenges":null,"badge":{"name":"Discovery: Cloud Architect on AWS","description":"This badge certifies that the Cloud Architect on AWS Discovery lab by Isovalent has been successfully completed. This lab is made of practical challenges, and a final challenge. The challenges include: Egress Gateway, Network and Runtime Observability, Encryption and Mutual Authentication, and Multicast.","skills":["Cilium","eBPF","Hubble","Kubernetes","Networking","Observability","Security"],"url":"https://www.credly.com/org/isovalent/badge/discovery-cloud-architect-on-aws","image_url":"https://images.credly.com/images/c5855a2d-6a82-47e7-a2fa-30fc11d68642/tempfile20250605-83-hrxr92.png","vanity_slug":"discovery-cloud-architect-on-aws","global_activity_url":"https://isovalent.com/labs/discovery-cloud-architect-aws/","state":"active","allow_duplicate_badges":false,"badges_count":142,"public":true,"allow_delete":false,"allow_archive":true,"cost":"Free","level":"Foundational","time_to_earn":"Hours","type_category":"Learning","lock_badge_state":false,"recipient_type":"User","show_skill_tag_links":false,"printing_disabled":false,"visibility":"public","variants_allowed":false,"variant_type":"","reporting_tags":["Cloud Architect Journey","Isovalent Labs"],"alignments":null,"recommendations":[{"id":"4372c2db-aaae-4f3b-8627-9d3bf5006070","type":"education","activity_url":"https://isovalent.com/labs/","title":"Isovalent Hands-on labs"},{"id":"a79b8385-aa73-4ba5-98cf-8af041fadadc","type":"education","activity_url":"https://isovalent.com/learning-tracks/#platformEngineer","title":"Platform Engineer Journey"},{"id":"954de5f4-92bd-4cb6-ad8d-82030865e97a","type":"education","activity_url":"https://labs-map.isovalent.com/","title":"The World of Cilium"}],"badge_template_activities":[{"activity_type":"Course","title":"The badge recipient has followed the Cloud Architect on AWS Discovery Lab lab by Isovalent.","activity_url":"https://isovalent.com/labs/discovery-cloud-architect-aws/"},{"activity_type":"Assessment","title":"The badge recipient has correctly answered the quizzes and finished the exam in the Cloud Architect on AWS Discovery Lab lab by Isovalent.","activity_url":"https://isovalent.com/labs/discovery-cloud-architect-aws/"}],"linkedin_share_default_message":"View my verified achievement from @Org_Name.","translatable":false,"created_at":"2024-09-03T14:02:27.240Z","updated_at":"2025-06-05T22:18:17.166Z","state_updated_at":"2024-09-03T14:03:43.962Z"},"version":"2.0.18","created_at":"2024-08-28T16:33:16Z","last_update":"2025-09-24T16:33:44Z","duration":"60"},{"slug":"discovery-cloud-architect-azure","icon":"https://isovalent.com/favicon-32x32.png?v=4393c4418a4f5aa1867a1d9636029656","title":"🌳 Discovery: Cloud Architect on Azure","description":"This lab is an introduction to Isovalent Enterprise for Cloud Architects using Microsoft Azure.\n","teaser":"","level":"","score":0,"reviews":null,"tags":null,"challenges":null,"badge":{"name":"Discovery: Cloud Architect on Azure","description":"This badge certifies that the Cloud Architect on Azure Discovery lab by Isovalent has been successfully completed. This lab is made of practical challenges, and a final challenge. The challenges include: Egress Gateway, Network and Runtime Observability, Encryption and Mutual Authentication, and Multicast.","skills":["Cilium","eBPF","Hubble","Kubernetes","Networking","Observability","Security"],"url":"https://www.credly.com/org/isovalent/badge/discovery-cloud-architect-on-azure","image_url":"https://images.credly.com/images/5a974880-ba9c-4224-afa4-e0801f3954c0/tempfile20250605-75-vjycs5.png","vanity_slug":"discovery-cloud-architect-on-azure","global_activity_url":"https://isovalent.com/labs/discovery-cloud-architect-azure/","state":"active","allow_duplicate_badges":false,"badges_count":63,"public":true,"allow_delete":false,"allow_archive":true,"cost":"Free","level":"Foundational","time_to_earn":"Hours","type_category":"Learning","lock_badge_state":false,"recipient_type":"User","show_skill_tag_links":false,"printing_disabled":false,"visibility":"public","variants_allowed":false,"variant_type":"","reporting_tags":["Cloud Architect Journey","Isovalent Labs"],"alignments":null,"recommendations":[{"id":"4372c2db-aaae-4f3b-8627-9d3bf5006070","type":"education","activity_url":"https://isovalent.com/labs/","title":"Isovalent Hands-on labs"},{"id":"a79b8385-aa73-4ba5-98cf-8af041fadadc","type":"education","activity_url":"https://isovalent.com/learning-tracks/#platformEngineer","title":"Platform Engineer Journey"},{"id":"954de5f4-92bd-4cb6-ad8d-82030865e97a","type":"education","activity_url":"https://labs-map.isovalent.com/","title":"The World of Cilium"}],"badge_template_activities":[{"activity_type":"Course","title":"The badge recipient has followed the Cloud Architect on Azure Discovery Lab lab by Isovalent.","activity_url":"https://isovalent.com/labs/discovery-cloud-architect-azure/"},{"activity_type":"Assessment","title":"The badge recipient has correctly answered the quizzes and finished the exam in the Cloud Architect on Azure Discovery Lab lab by Isovalent.","activity_url":"https://isovalent.com/labs/discovery-cloud-architect-azure/"}],"linkedin_share_default_message":"View my verified achievement from @Org_Name.","translatable":false,"created_at":"2024-06-26T16:43:45.942Z","updated_at":"2025-06-05T22:18:17.213Z","state_updated_at":"2024-06-26T17:03:22.134Z"},"version":"2.0.15","created_at":"2024-06-26T08:59:10Z","last_update":"2025-09-25T14:16:33Z","duration":"60"},{"slug":"discovery-cloud-network-engineer","icon":"https://cilium.io/favicon-32x32.png?v=81b4389fe4c26dfd1769148aa2f50bb0","title":"🌳 Discovery: Cloud Network Engineer","description":"In this short hands-on discovery lab designed for Cloud Network Engineers, you will learn, in 15 minutes, several Cilium networking features, including:\n - Dual Stack IPv4/IPv6 support with Cilium\n - BGP\n - Load-Balancer IPAM\n - L2 Service Announcement\n - Egress Gateway\n - And more!\n","teaser":"A 15-minute hands-on intro to Cilium's key networking features—from dual-stack and BGP to Egress Gateway and more.","level":"","score":4.8,"reviews":null,"tags":null,"challenges":null,"badge":{"name":"Discovery: Network Engineer","description":"This badge certifies that the Cloud Network Engineer Discovery lab by Isovalent has been successfully completed. This lab is made of practical challenges, and a final challenge. The challenges include: visualizing IPv4 and IPv6 traffic, connecting with external workloads using BGP, exposing services with LB-IPAM (BGP \u0026 L2), accessing an external workload with Egress Gateway.","skills":["BGP","Cilium","eBPF","Hubble","Kubernetes","Networking","Observability"],"url":"https://www.credly.com/org/isovalent/badge/discovery-network-engineer","image_url":"https://images.credly.com/images/b20b945c-9d60-4b42-bd37-cdc5e93712d3/tempfile20250605-79-qazpfz.png","vanity_slug":"discovery-network-engineer","global_activity_url":"https://isovalent.com/labs/discovery-cloud-network-engineer/","state":"active","allow_duplicate_badges":false,"badges_count":1109,"public":true,"allow_delete":false,"allow_archive":true,"cost":"Free","level":"Foundational","time_to_earn":"Hours","type_category":"Learning","lock_badge_state":false,"recipient_type":"User","show_skill_tag_links":false,"printing_disabled":false,"visibility":"public","variants_allowed":false,"variant_type":"","reporting_tags":["Isovalent Labs","Cloud Network Engineer Journey"],"alignments":null,"recommendations":[{"id":"4372c2db-aaae-4f3b-8627-9d3bf5006070","type":"education","activity_url":"https://isovalent.com/labs/","title":"Isovalent Hands-on labs"},{"id":"cb2f1cc1-6c86-45bb-82bc-9e57c212492a","type":"education","activity_url":"https://isovalent.com/learning-tracks/#cloudNetworkEngineer","title":"Cloud Network Engineer Journey"},{"id":"954de5f4-92bd-4cb6-ad8d-82030865e97a","type":"education","activity_url":"https://labs-map.isovalent.com/","title":"The World of Cilium"}],"badge_template_activities":[{"activity_type":"Course","title":"The badge recipient has followed the Cloud Network Engineer Discovery Lab lab by Isovalent.","activity_url":"https://isovalent.com/labs/discovery-cloud-network-engineer/"},{"activity_type":"Assessment","title":"The badge recipient has correctly answered the quizzes and finished the exam in the Cloud Network Engineer Discovery Lab lab by Isovalent.","activity_url":"https://isovalent.com/labs/discovery-cloud-network-engineer/"}],"linkedin_share_default_message":"View my verified achievement from @Org_Name.","translatable":false,"created_at":"2023-10-31T08:27:32.135Z","updated_at":"2025-06-05T22:18:16.427Z","state_updated_at":"2023-11-02T11:29:32.060Z"},"version":"1.1.18","created_at":"2023-10-18T13:46:09Z","last_update":"2025-10-06T10:11:39Z","duration":"15"},{"slug":"discovery-platform-engineer","icon":"https://cilium.io/favicon-32x32.png?v=81b4389fe4c26dfd1769148aa2f50bb0","title":"🌳 Discovery: Platform Engineer","description":"In this short hands-on discovery lab designed for Platform and DevOps Engineers, you will learn, in 15 minutes, several Cilium features, including:\n - Observability\n - Built-in Ingress and Gateway API\n - Performance Monitoring\n - Integration with Grafana\n - And more!\n","teaser":"In just 15 minutes, get hands-on with Cilium’s observability, Ingress, Gateway API, and Grafana integration.","level":"beginner","score":4.6538463,"reviews":null,"tags":null,"challenges":null,"badge":{"name":"Discovery: Platform Engineer","description":"This badge certifies that the Platform Engineer Discovery lab by Isovalent has been successfully completed. This lab is made of practical challenges, and a final challenge. The challenges include: network observability, L4 load balancer service with LB-IPAM and L2 announcement, L7 Ingress with TLS termination, Gateway API with weighed services, application troubleshooting with Hubble and Grafana.","skills":["Cilium","eBPF","Hubble","Kubernetes","Networking","Observability","Security"],"url":"https://www.credly.com/org/isovalent/badge/discovery-platform-engineer","image_url":"https://images.credly.com/images/ebc5f2cc-1702-4ea0-8d1a-5c6558e6e269/tempfile20250605-65-7h2iy0.png","vanity_slug":"discovery-platform-engineer","global_activity_url":"https://isovalent.com/labs/discovery-platform-engineer/","state":"active","allow_duplicate_badges":false,"badges_count":1396,"public":true,"allow_delete":false,"allow_archive":true,"cost":"Free","level":"Foundational","time_to_earn":"Hours","type_category":"Learning","lock_badge_state":false,"recipient_type":"User","show_skill_tag_links":false,"printing_disabled":false,"visibility":"public","variants_allowed":false,"variant_type":"","reporting_tags":["Isovalent Labs","Platform Engineer Journey"],"alignments":null,"recommendations":[{"id":"4372c2db-aaae-4f3b-8627-9d3bf5006070","type":"education","activity_url":"https://isovalent.com/labs/","title":"Isovalent Hands-on labs"},{"id":"a79b8385-aa73-4ba5-98cf-8af041fadadc","type":"education","activity_url":"https://isovalent.com/learning-tracks/#platformEngineer","title":"Platform Engineer Journey"},{"id":"954de5f4-92bd-4cb6-ad8d-82030865e97a","type":"education","activity_url":"https://labs-map.isovalent.com/","title":"The World of Cilium"}],"badge_template_activities":[{"activity_type":"Course","title":"The badge recipient has followed the Platform Engineer Discovery Lab lab by Isovalent.","activity_url":"https://isovalent.com/labs/discovery-platform-engineer/"},{"activity_type":"Assessment","title":"The badge recipient has correctly answered the quizzes and finished the exam in the Platform Engineer Discovery Lab lab by Isovalent.","activity_url":"https://isovalent.com/labs/discovery-platform-engineer/"}],"linkedin_share_default_message":"View my verified achievement from @Org_Name.","translatable":false,"created_at":"2023-10-31T08:30:29.816Z","updated_at":"2025-06-05T22:18:24.155Z","state_updated_at":"2023-11-03T21:13:09.429Z"},"version":"1.2.8","created_at":"2023-10-18T14:21:52Z","last_update":"2025-09-24T15:52:04Z","duration":"15"},{"slug":"discovery-secops-engineer","icon":"https://cilium.io/favicon-32x32.png?v=81b4389fe4c26dfd1769148aa2f50bb0","title":"🌳 Discovery: SecOps Engineer","description":"In this short hands-on discovery lab designed for SecOps Engineers, you will learn, in 15 minutes, several Cilium and Tetragon security features, including:\n - Network Observability\n - Network Policies\n - Transparent Encryption\n - Mutual Authentication\n - Runtime Security Visibility and Enforcement with Tetragon\n - and more!\n","teaser":"Explore Cilium and Tetragon security features in 15 minutes—from encryption and mutual auth to runtime enforcement.","level":"beginner","score":4.774194,"reviews":null,"tags":null,"challenges":null,"badge":{"name":"Discovery: SecOps Engineer","description":"This badge certifies that the SecOps Engineer Discovery lab by Isovalent has been successfully completed. This lab is made of practical challenges, and a final challenge. The challenges include: observing Network Flows using the Hubble UI, viewing Network Policy verdicts, learning about WireGuard and Mutual Authentication with Cilium, and exploring Runtime Forensics after a Security Incident using Tetragon.","skills":["Cilium","eBPF","Hubble","Kubernetes","L7","Networking","Observability","Security","Tetragon"],"url":"https://www.credly.com/org/isovalent/badge/discovery-secops-engineer","image_url":"https://images.credly.com/images/d54799eb-d613-4113-affa-e89770b53689/tempfile20250605-59-ip94pl.png","vanity_slug":"discovery-secops-engineer","global_activity_url":"https://isovalent.com/labs/discovery-secops-engineer/","state":"active","allow_duplicate_badges":false,"badges_count":865,"public":true,"allow_delete":false,"allow_archive":true,"cost":"Free","level":"Foundational","time_to_earn":"Hours","type_category":"Learning","lock_badge_state":false,"recipient_type":"User","show_skill_tag_links":true,"printing_disabled":false,"visibility":"public","variants_allowed":false,"variant_type":"","reporting_tags":["Isovalent Labs","Security Professionals Journey"],"alignments":null,"recommendations":[{"id":"5a54e3cb-6f75-446d-abb5-4a296c709bf4","type":"education","activity_url":"https://isovalent.com/learning-tracks/#securityProfessionals","title":"Security Professionals Journey"},{"id":"954de5f4-92bd-4cb6-ad8d-82030865e97a","type":"education","activity_url":"https://labs-map.isovalent.com/","title":"The World of Cilium"}],"badge_template_activities":[{"activity_type":"Course","title":"The badge recipient has followed the SecOps Engineer Discovery Lab lab by Isovalent.","activity_url":"https://isovalent.com/labs/discovery-secops-engineer/"},{"activity_type":"Assessment","title":"The badge recipient has correctly answered the quizzes and finished the exam in the SecOps Engineer Discovery Lab lab by Isovalent.","activity_url":"https://isovalent.com/labs/discovery-secops-engineer/"}],"linkedin_share_default_message":"View my verified achievement from @Org_Name.","translatable":false,"created_at":"2023-10-13T09:18:21.614Z","updated_at":"2025-06-05T22:18:22.338Z","state_updated_at":"2023-10-13T09:55:25.617Z"},"version":"1.2.11","created_at":"2023-10-09T11:06:12Z","last_update":"2025-09-24T15:51:44Z","duration":"15"},{"slug":"ebpf-getting-started","icon":"https://ebpf.io/icons-ed4fe493d9e56a7432b914bd83d06e8a/favicon.ico","title":"🥉 Getting started with eBPF","description":"eBPF is the new standard to program Linux kernel capabilities in a safe and efficient manner without requiring to change kernel source code or loading kernel modules. It has enabled a new generation of high performance tooling to be developed covering networking, security, and observability use cases.\n\nThe best way to learn about eBPF is to \u003ca href=\"https://isovalent.com/ebpf/\"\u003eread the book “What is eBPF” by Liz Rice\u003c/a\u003e. And the best way to have your first experience with eBPF programming is to walk through this lab, which takes the opensnoop example out of the book and teaches you to handle an eBPF tool, watch it loading its components and even add your own tracing into the source eBPF code.\n","teaser":"Your first steps with eBPF code","level":"intermediate","score":4.5128207,"reviews":null,"tags":["kernel","bpf","ebpf"],"challenges":null,"badge":{"name":"eBPF Getting Started","description":"This badge certifies that the Getting Started with eBPF Lab by Isovalent has been successfully completed. This lab is made of practical challenges, quizzes, and a final exam. The challenges include: building and running eBPF programs, examining eBPF programs, adding a trace message to an eBPF program.","skills":["eBPF","Linux","Security"],"url":"https://www.credly.com/org/isovalent/badge/ebpf-getting-started","image_url":"https://images.credly.com/images/878c51a2-f21f-4043-bf30-69f7bc9eac7a/tempfile20250605-71-k40crk.png","vanity_slug":"ebpf-getting-started","global_activity_url":"https://isovalent.com/labs/ebpf-getting-started/","state":"active","allow_duplicate_badges":false,"badges_count":1032,"public":true,"allow_delete":false,"allow_archive":true,"cost":"Free","level":"Foundational","time_to_earn":"Hours","type_category":"Learning","lock_badge_state":false,"recipient_type":"User","show_skill_tag_links":false,"printing_disabled":false,"visibility":"public","variants_allowed":false,"variant_type":"","reporting_tags":["Isovalent Labs"],"alignments":null,"recommendations":[{"id":"4372c2db-aaae-4f3b-8627-9d3bf5006070","type":"education","activity_url":"https://isovalent.com/labs/","title":"Isovalent Hands-on labs"}],"badge_template_activities":[{"activity_type":"Course","title":"The badge recipient has followed the Getting Started with eBPF lab by Isovalent.","activity_url":"https://isovalent.com/labs/ebpf-getting-started/"},{"activity_type":"Assessment","title":"The badge recipient has correctly answered the quizzes and finished the exam in the Getting Started with eBPF lab by Isovalent.","activity_url":"https://isovalent.com/labs/ebpf-getting-started/"}],"linkedin_share_default_message":"View my verified achievement from @Org_Name.","translatable":false,"created_at":"2023-07-19T09:17:51.733Z","updated_at":"2025-06-05T21:01:53.007Z","state_updated_at":"2024-04-10T14:03:24.384Z"},"version":"1.2.9","created_at":"2022-03-17T17:32:58Z","last_update":"2025-09-24T15:51:01Z","duration":"30"},{"slug":"ebpf-tutorial","icon":"https://ebpf.io/icons-ed4fe493d9e56a7432b914bd83d06e8a/favicon.ico","title":"Tutorial - Getting started with eBPF","description":"If you enjoy this tutorial and would like to dive deeper, you may like to consider Liz's book published by O'Reilly, [Learning eBPF](https://www.amazon.com/Learning-eBPF-Programming-Observability-Networking/dp/1098135121). You can also download an electronic copy from [Isovalent's web site](https://isovalent.com/learning-ebpf).","teaser":"Hands-on Lab for Liz Rice's Tutorial: Getting Started with eBPF","level":"intermediate","score":4.757576,"reviews":null,"tags":["ebpf"],"challenges":null,"badge":{"name":"","description":"","skills":null,"url":"","image_url":"","vanity_slug":"","global_activity_url":"","state":"","allow_duplicate_badges":false,"badges_count":0,"public":false,"allow_delete":false,"allow_archive":false,"cost":"","level":"","time_to_earn":"","type_category":"","lock_badge_state":false,"recipient_type":"","show_skill_tag_links":false,"printing_disabled":false,"visibility":"","variants_allowed":false,"variant_type":"","reporting_tags":null,"alignments":null,"recommendations":null,"badge_template_activities":null,"linkedin_share_default_message":"","translatable":false,"created_at":"","updated_at":"","state_updated_at":""},"version":"1.2.3","created_at":"2023-05-02T12:40:08Z","last_update":"2025-10-10T08:43:45Z","duration":"60"},{"slug":"foundations-networking","icon":"https://cilium.io/favicon-32x32.png?v=81b4389fe4c26dfd1769148aa2f50bb0","title":"🏗️ Foundations: Getting Started with Kubernetes Networking \u0026 Cilium","description":"Dive into the essentials of Kubernetes networking and cloud-native connectivity in this foundational lab. You'll explore key concepts like pod networking, CNI and IPAM, Kubernetes services, ingress, and network policies, gaining a clear understanding of how they work together to enable seamless communication in a distributed environment.\n\nBeyond the basics, this lab highlights critical aspects such as encryption and the integration of Kubernetes with legacy workloads like BGP and egress gateways. You'll learn how these features extend Kubernetes' networking capabilities to meet diverse infrastructure needs.\n\nFinally, discover how eBPF elevates traditional networking approaches by enhancing scalability, security, and performance. Through practical insights and hands-on exercises, this lab empowers you to master Kubernetes networking fundamentals and explore cutting-edge cloud-native innovations.\n","teaser":"Learn the fundamentals of Kubernetes networking and discover how eBPF elevates cloud-native connectivity.","level":"beginner","score":4.7252746,"reviews":null,"tags":["enterprise"],"challenges":null,"badge":{"name":"Foundations: Kubernetes Networking \u0026 Cilium","description":"This badge certifies that the Foundations Getting Started with Kubernetes Networking \u0026 Cilium lab by Isovalent has been successfully completed. This lab is made of practical challenges, quizzes, and a final exam. The challenges include: Introduction to Cloud Native, the Container Network Interface, IPAM, Kubernetes Services, L7 Routing, Network Observability, Network Policies, and Integrating Kubernetes.","skills":["Cilium","Kubernetes","Networking"],"url":"https://www.credly.com/org/isovalent/badge/foundations-kubernetes-networking-cilium","image_url":"https://images.credly.com/images/d0e84df5-83ab-438b-b51f-c464c78faa52/tempfile20250605-58-6rrhp1.png","vanity_slug":"foundations-kubernetes-networking-cilium","global_activity_url":"https://isovalent.com/labs/foundations-networking/","state":"active","allow_duplicate_badges":false,"badges_count":416,"public":true,"allow_delete":false,"allow_archive":true,"cost":"Free","level":"Foundational","time_to_earn":"Hours","type_category":"Learning","lock_badge_state":false,"recipient_type":"User","show_skill_tag_links":false,"printing_disabled":false,"visibility":"public","variants_allowed":false,"variant_type":"","reporting_tags":["Isovalent Labs"],"alignments":null,"recommendations":[{"id":"4372c2db-aaae-4f3b-8627-9d3bf5006070","type":"education","activity_url":"https://isovalent.com/labs/","title":"Isovalent Hands-on labs"},{"id":"cb2f1cc1-6c86-45bb-82bc-9e57c212492a","type":"education","activity_url":"https://isovalent.com/learning-tracks/#cloudNetworkEngineer","title":"Cloud Network Engineer Journey"},{"id":"954de5f4-92bd-4cb6-ad8d-82030865e97a","type":"education","activity_url":"https://labs-map.isovalent.com/","title":"The World of Cilium"}],"badge_template_activities":[{"activity_type":"Course","title":"The badge recipient has followed the Foundations: Kubernetes Networking \u0026 Cilium lab by Isovalent.","activity_url":"https://isovalent.com/labs/foundations-networking/"},{"activity_type":"Assessment","title":"The badge recipient has correctly answered the quizzes and finished the exam in the Foundations: Kubernetes Networking \u0026 Cilium lab by Isovalent.","activity_url":"https://isovalent.com/labs/foundations-networking/"}],"linkedin_share_default_message":"View my verified achievement from @Org_Name.","translatable":false,"created_at":"2025-02-06T13:51:20.732Z","updated_at":"2025-06-05T22:18:22.932Z","state_updated_at":"2025-02-10T09:23:38.735Z"},"version":"1.3.10","created_at":"2025-01-20T17:04:56Z","last_update":"2025-10-06T10:12:04Z","duration":"90"},{"slug":"hubble-connectivity-visibility","icon":"https://isovalent.com/favicon-32x32.png?v=4393c4418a4f5aa1867a1d9636029656","title":"🥈 Isovalent Enterprise for Cilium: Connectivity Visibility","description":"This lab provides an introduction to Isovalent Enterprise for Cilium capabilities\nrelated to connectivity observability.\n\nThis track primarily focuses on Hubble Flow events that provide label-aware,\nDNS-aware, and API-aware visibility for network connectivity within a Kubernetes environment. In closing, how Hubble Timescape can allow you to roll back the clock, view and analyze historical data.\n\n![Hubble Service Map](https://play.instruqt.com/assets/tracks/fy6x0ovyjopf/2540ac2fa988aa39911dd19f3c9de4a1/assets/service_map.png)\n\nThis data can be consumed via the Hubble UI and Hubble CLI.","teaser":"Learn how Isovalent Enterprise for Cilium can help you visualize services and flows in a Kubernetes cluster.","level":"intermediate","score":3.9285715,"reviews":null,"tags":["enterprise","hubble","observability"],"challenges":null,"badge":{"name":"Hubble Flow Visibility","description":"This badge certifies that the Hubble Connectivity Visibility lab by Isovalent has been successfully completed. This lab is made of practical challenges, quizzes, and a final exam. The challenges include: observing Network Flows using the Hubble UI, enabling DNS visibility, enabling HTTP visibility, and using Hubble Timescape to view historical data.","skills":["Cilium","eBPF","Hubble","Kubernetes","L7","Networking","Observability"],"url":"https://www.credly.com/org/isovalent/badge/hubble-flow-visibility","image_url":"https://images.credly.com/images/73b9049a-1555-4687-8b35-31f3d6e4b0a0/tempfile20250605-71-wqikcw.png","vanity_slug":"hubble-flow-visibility","global_activity_url":"https://isovalent.com/labs/hubble-connectivity-visibility/","state":"active","allow_duplicate_badges":false,"badges_count":483,"public":true,"allow_delete":false,"allow_archive":true,"cost":"Free","level":"Intermediate","time_to_earn":"Hours","type_category":"Learning","lock_badge_state":false,"recipient_type":"User","show_skill_tag_links":true,"printing_disabled":false,"visibility":"public","variants_allowed":false,"variant_type":"","reporting_tags":["Cloud Architect Journey","Isovalent Labs","Cloud Network Engineer Journey","Platform Engineer Journey","Platform Ops (Service Mesh) Journey"],"alignments":null,"recommendations":[{"id":"cb2f1cc1-6c86-45bb-82bc-9e57c212492a","type":"education","activity_url":"https://isovalent.com/learning-tracks/#cloudNetworkEngineer","title":"Cloud Network Engineer Journey"},{"id":"a79b8385-aa73-4ba5-98cf-8af041fadadc","type":"education","activity_url":"https://isovalent.com/learning-tracks/#platformEngineer","title":"Platform Engineer Journey"},{"id":"4ade9b55-1723-4123-b72d-e3391dbe1094","type":"education","activity_url":"https://isovalent.com/learning-tracks/#platformOps","title":"Platform Ops (Service Mesh) Journey"},{"id":"10a431f0-48d6-4ed4-b223-1c3b3d9a47c0","type":"education","activity_url":"https://isovalent.com/learning-tracks/#cloudArchitect","title":"Cloud Architect Journey"}],"badge_template_activities":[{"activity_type":"Course","title":"The badge recipient has followed the Hubble Connectivity Visibility lab by Isovalent.","activity_url":"https://isovalent.com/labs/hubble-connectivity-visibility/"},{"activity_type":"Assessment","title":"The badge recipient has correctly answered the quizzes and finished the exam in the Hubble Connectivity Visibility lab by Isovalent.","activity_url":"https://isovalent.com/labs/hubble-connectivity-visibility/"}],"linkedin_share_default_message":"View my verified achievement from @Org_Name.","translatable":false,"created_at":"2023-08-27T15:32:27.073Z","updated_at":"2025-06-05T22:18:19.003Z","state_updated_at":"2023-10-18T14:06:04.633Z"},"version":"1.1.15","created_at":"2022-03-08T08:14:33Z","last_update":"2025-10-06T10:11:10Z","duration":"45"},{"slug":"hubble-grafana-golden-signals","icon":"https://play.instruqt.com/assets/tracks/a9amhryys7kc/1b03cf51905ad38d4dabd62ab8dc4fe6/assets/hubble_notext_32.png","title":"🥇 Golden Signals with Hubble and Grafana","description":"One of the most important thing when running applications in an environment\nlike Kubernetes is to have good observability and deep insights.\n\nHowever, for many organizations it can be challenging to update existing\napplications to provide the observability you need. With Cilium, you can use\nthe Hubble Layer 7 visibility functionality to get Prometheus metrics for\nyour application without having to modify it at all.\n\nIn this lab you will learn how Cilium can provide metrics for an existing\napplication with and without tracing functionality, and how you can use\nGrafana dashboards provided by Cilium to gain insight into how your\napplication is behaving.","teaser":"Learn to monitor the four Golden Signals for with Cilium, Hubble \u0026 Grafana.","level":"beginner","score":4.285714,"reviews":null,"tags":["enterprise","grafana","hubble","observability"],"challenges":null,"badge":{"name":"Golden Signals with Hubble and Grafana","description":"This badge certifies that the Golden Signals with Hubble and Grafana lab by Isovalent has been successfully completed. This lab is made of practical challenges, quizzes, and a final exam. The challenges include: Visualizing HTTP metrics in Grafana, Troughput, Errors, Latency, and Tracing Integration.","skills":["Cilium","eBPF","Grafana","Hubble","Kubernetes","L7","Networking","Observability","OpenTelemetry","Prometheus"],"url":"https://www.credly.com/org/isovalent/badge/golden-signals-with-hubble-and-grafana","image_url":"https://images.credly.com/images/b032dfda-f989-4639-ba0a-a430de2ec58c/tempfile20250605-58-cmcpw.png","vanity_slug":"golden-signals-with-hubble-and-grafana","global_activity_url":"https://isovalent.com/labs/hubble-grafana-golden-signals/","state":"active","allow_duplicate_badges":false,"badges_count":625,"public":true,"allow_delete":false,"allow_archive":true,"cost":"Free","level":"Advanced","time_to_earn":"Hours","type_category":"Learning","lock_badge_state":false,"recipient_type":"User","show_skill_tag_links":false,"printing_disabled":false,"visibility":"public","variants_allowed":false,"variant_type":"","reporting_tags":["Isovalent Labs","Platform Ops (Service Mesh) Journey"],"alignments":null,"recommendations":[{"id":"4372c2db-aaae-4f3b-8627-9d3bf5006070","type":"education","activity_url":"https://isovalent.com/labs/","title":"Isovalent Hands-on labs"},{"id":"4ade9b55-1723-4123-b72d-e3391dbe1094","type":"education","activity_url":"https://isovalent.com/learning-tracks/#platformOps","title":"Platform Ops (Service Mesh) Journey"},{"id":"954de5f4-92bd-4cb6-ad8d-82030865e97a","type":"education","activity_url":"https://labs-map.isovalent.com/","title":"The World of Cilium"}],"badge_template_activities":[{"activity_type":"Course","title":"The badge recipient has followed the Golden Signals with Hubble and Grafana lab by Isovalent.","activity_url":"https://isovalent.com/labs/hubble-grafana-golden-signals/"},{"activity_type":"Assessment","title":"The badge recipient has correctly answered the quizzes and finished the exam in the Golden Signals with Hubble and Grafana lab by Isovalent.","activity_url":"https://isovalent.com/labs/hubble-grafana-golden-signals/"}],"linkedin_share_default_message":"View my verified achievement from @Org_Name.","translatable":false,"created_at":"2023-05-16T07:56:20.739Z","updated_at":"2025-06-05T21:02:09.530Z","state_updated_at":"2023-05-16T08:00:37.713Z"},"version":"1.2.8","created_at":"2023-02-14T15:12:15Z","last_update":"2025-10-06T10:11:30Z","duration":"45"},{"slug":"ilb-getting-started","icon":"https://cilium.io/favicon-32x32.png?v=81b4389fe4c26dfd1769148aa2f50bb0","title":"🥉 Getting Started with the Isovalent Load Balancer","description":"Step into the world of modern, high-performance load balancing with the Isovalent Load Balancer.\n\nIn this lab, you'll explore a scalable, Kubernetes-based load-balancer that operates across layers 3 to 7.\n\nLearn how eBPF and XDP enable ultra-low latency at L4, while Envoy provides powerful application-aware routing at L7.\n\nYou’ll set up the load balancer, connect it to a BGP-enabled router, and test real traffic distribution across multiple backends.\n\nWhether you're dealing with traditional networks or cloud-native stacks, this lab will show you how to harness the power of the Isovalent Load Balancer for efficiency, scalability, and control.\n","teaser":"Explore scalable, eBPF-powered load balancing across layers 3 to 7.","level":"","score":4.6538463,"reviews":null,"tags":["enterprise","load-balancing","ebpf"],"challenges":null,"badge":{"name":"Getting Started with the Isovalent Load Balancer","description":"This badge certifies that the Getting Started with the Isovalent Load Balancer Lab by Isovalent has been successfully completed. This lab is made of practical challenges, quizzes, and a final exam. The challenges include: Inspecting the Isovalent Load Balancer, HTTP Support, TLS Support, and Day Two Operations.","skills":["Cilium","eBPF","Kubernetes","Load Balancer","Networking"],"url":"https://www.credly.com/org/isovalent/badge/getting-started-with-the-isovalent-load-balancer","image_url":"https://images.credly.com/images/20e0c8d1-33dd-425c-9b61-6a04ff7b8350/tempfile20250605-79-fhcfb0.png","vanity_slug":"getting-started-with-the-isovalent-load-balancer","global_activity_url":"https://isovalent.com/labs/ilb-getting-started/","state":"active","allow_duplicate_badges":false,"badges_count":238,"public":true,"allow_delete":false,"allow_archive":true,"cost":"Free","level":"Foundational","time_to_earn":"Hours","type_category":"Learning","lock_badge_state":false,"recipient_type":"User","show_skill_tag_links":true,"printing_disabled":false,"visibility":"public","variants_allowed":false,"variant_type":"","reporting_tags":["Isovalent Labs","Cloud Network Engineer Journey"],"alignments":null,"recommendations":[{"id":"4372c2db-aaae-4f3b-8627-9d3bf5006070","type":"education","activity_url":"https://isovalent.com/labs/","title":"Isovalent Hands-on labs"},{"id":"cb2f1cc1-6c86-45bb-82bc-9e57c212492a","type":"education","activity_url":"https://isovalent.com/learning-tracks/#cloudNetworkEngineer","title":"Cloud Network Engineer Journey"},{"id":"954de5f4-92bd-4cb6-ad8d-82030865e97a","type":"education","activity_url":"https://labs-map.isovalent.com/","title":"The World of Cilium"}],"badge_template_activities":[{"activity_type":"Course","title":"The badge recipient has followed the Getting Started with the Isovalent Load Balancer lab by Isovalent.","activity_url":"https://isovalent.com/labs/ilb-getting-started/"},{"activity_type":"Assessment","title":"The badge recipient has correctly answered the quizzes and finished the exam in the Getting Started with the Isovalent Load Balancer lab by Isovalent.","activity_url":"https://isovalent.com/labs/ilb-getting-started/"}],"linkedin_share_default_message":"View my verified achievement from @Org_Name.","translatable":false,"created_at":"2025-06-03T14:13:16.750Z","updated_at":"2025-06-05T21:43:58.147Z","state_updated_at":"2025-06-03T15:12:30.588Z"},"version":"1.0.29","created_at":"2025-03-19T14:20:31Z","last_update":"2025-10-07T11:10:24Z","duration":"30"},{"slug":"tetragon-getting-started","icon":"https://play.instruqt.com/assets/tracks/kuoipagntswb/50e6b398924a6369bfe54b2a433a556a/assets/tetragon.png","title":"🥉 Getting Started with Tetragon","description":"Security Observability is a new paradigm that utilizes eBPF, a Linux kernel technology, to allow Security and DevOps teams, SREs, Cloud Engineers, and Solution Architects to gain real-time visibility into Kubernetes and helps to secure your production environment with Tetragon.\n\nTetragon is an open source Security Observability and Runtime Enforcement tool from the makers of \u003ca href=\"https://cilium.io/\" target=\"_blank\" rel=\"noopener noreferrer\"\u003eCilium\u003c/a\u003e. It captures different process and network event types through a user-supplied configuration to enable security observability on arbitrary hook points in the kernel; then translates these events into actionable signals for a Security Team.\n\nThe best way to learn about Security Observability and Cilium Tetragon is to read the book \u003ca href=\"https://isovalent.com/blog/post/2022-04-oreilly-security\" target=\"_blank\" rel=\"noopener noreferrer\"\u003e“Security Observability with eBPF”\u003c/a\u003e by Jed Salazar and Natalia Reka Ivanko. And the best way to have your first experience with Tetragon is to walk through this lab, which takes the Real World Attack example out of the book and teaches you how to detect a container escape step by step!\n","teaser":"Detect container escapes step by step with Cilium Tetragon.","level":"beginner","score":4.769231,"reviews":null,"tags":["tetragon","security"],"challenges":null,"badge":{"name":"Tetragon Getting Started","description":"This badge certifies that the Tetragon Getting Started Lab by Isovalent has been successfully completed. This lab is made of practical challenges, quizzes, and a final exam. The challenges include: installing Tetragon on a Kind cluster and using it to analyze an attack on the cluster, using multiple vectors of lateral attacks.","skills":["Containers","eBPF","Kubernetes","Security","Tetragon"],"url":"https://www.credly.com/org/isovalent/badge/tetragon-getting-started","image_url":"https://images.credly.com/images/1e91188a-506d-4042-8baf-c7db03341e02/tempfile20250605-74-4ma8k6.png","vanity_slug":"tetragon-getting-started","global_activity_url":"https://isovalent.com/labs/tetragon-getting-started/","state":"active","allow_duplicate_badges":false,"badges_count":1117,"public":true,"allow_delete":false,"allow_archive":true,"cost":"Free","level":"Foundational","time_to_earn":"Hours","type_category":"Learning","lock_badge_state":false,"recipient_type":"User","show_skill_tag_links":true,"printing_disabled":false,"visibility":"public","variants_allowed":false,"variant_type":"","reporting_tags":["Isovalent Labs","Security Professionals Journey"],"alignments":null,"recommendations":[{"id":"4372c2db-aaae-4f3b-8627-9d3bf5006070","type":"education","activity_url":"https://isovalent.com/labs/","title":"Isovalent Hands-on labs"},{"id":"5a54e3cb-6f75-446d-abb5-4a296c709bf4","type":"education","activity_url":"https://isovalent.com/learning-tracks/#securityProfessionals","title":"Security Professionals Journey"},{"id":"954de5f4-92bd-4cb6-ad8d-82030865e97a","type":"education","activity_url":"https://labs-map.isovalent.com/","title":"The World of Cilium"}],"badge_template_activities":[{"activity_type":"Course","title":"The badge recipient has followed the Tetragon Getting Started lab by Isovalent.","activity_url":"https://isovalent.com/labs/tetragon-getting-started/"},{"activity_type":"Assessment","title":"The badge recipient has correctly answered the quizzes and finished the exam in the Tetragon Getting Started lab by Isovalent.","activity_url":"https://isovalent.com/labs/tetragon-getting-started/"}],"linkedin_share_default_message":"View my verified achievement from @Org_Name.","translatable":false,"created_at":"2023-07-03T20:39:07.178Z","updated_at":"2025-06-05T22:18:18.751Z","state_updated_at":""},"version":"1.2.4","created_at":"2022-04-25T20:46:26Z","last_update":"2025-09-24T15:50:43Z","duration":"45"},{"slug":"tetragon-security-visibility","icon":"https://isovalent.com/favicon-32x32.png?v=4393c4418a4f5aa1867a1d9636029656","title":"🏅 Isovalent Enterprise for Cilium: Security Visibility","description":"In this scenario, we are going to simulate the exploitation of a nodejs application, with the attacker spawning a reverse shell inside of a container and moving laterally within the Kubernetes environment.\n\n![Process Tree View](https://play.instruqt.com/assets/tracks/whhspdw5oyol/3e1b554a5c5c3178bbe06b61dd8ba9a0/assets/process_tree.png)\n\n\nWe will demonstrate how the combined Process and Network Event Data:\n* identify the suspicious Late Process Execution\n* tie the suspicious processes to a randomly generated External Domain Name\n* trace the Lateral Movement and Data Exfiltration of the attacker post-exploit\n* analyze security events using Tetragon's Application Model CLI tools\n","teaser":"Let's use Isovalent Enterprise for Cilium to view security events in a Kubernetes cluster.","level":"intermediate","score":4.6153846,"reviews":null,"tags":["enterprise","tetragon","application-model","security"],"challenges":null,"badge":{"name":"Tetragon Security Visibility","description":"This badge certifies that the Isovalent Enterprise for Cilium: Security Visibility Lab by Isovalent has been successfully completed. This lab is made of practical challenges, quizzes, and a final exam. The challenges include: deploying a demo application on a Kind cluster, observing process events using Hubble Enterprise's CLI and Web UI, analyzing and exporting JSON logs, identifying and analyzing attacks.","skills":["Cilium","Containers","eBPF","Hubble","Kubernetes","Security","Tetragon"],"url":"https://www.credly.com/org/isovalent/badge/tetragon-security-visibility","image_url":"https://images.credly.com/images/e0662859-4534-44f9-aeca-37510f044e21/tempfile20250605-82-74jjdw.png","vanity_slug":"tetragon-security-visibility","global_activity_url":"https://isovalent.com/labs/tetragon-security-visibility/","state":"active","allow_duplicate_badges":false,"badges_count":422,"public":true,"allow_delete":false,"allow_archive":true,"cost":"Free","level":"Intermediate","time_to_earn":"Hours","type_category":"Learning","lock_badge_state":false,"recipient_type":"User","show_skill_tag_links":false,"printing_disabled":false,"visibility":"public","variants_allowed":false,"variant_type":"","reporting_tags":["Isovalent Labs","Security Professionals Journey"],"alignments":null,"recommendations":[{"id":"4372c2db-aaae-4f3b-8627-9d3bf5006070","type":"education","activity_url":"https://isovalent.com/labs/","title":"Isovalent Hands-on labs"},{"id":"5a54e3cb-6f75-446d-abb5-4a296c709bf4","type":"education","activity_url":"https://isovalent.com/learning-tracks/#securityProfessionals","title":"Security Professionals Journey"},{"id":"954de5f4-92bd-4cb6-ad8d-82030865e97a","type":"education","activity_url":"https://labs-map.isovalent.com/","title":"The World of Cilium"}],"badge_template_activities":[{"activity_type":"Course","title":"The badge recipient has followed the Tetragon Security Visibility lab by Isovalent.","activity_url":"https://isovalent.com/labs/tetragon-security-visibility/"},{"activity_type":"Assessment","title":"The badge recipient has correctly answered the quizzes and finished the exam in the Tetragon Security Visibility lab by Isovalent.","activity_url":"https://isovalent.com/labs/tetragon-security-visibility/"}],"linkedin_share_default_message":"View my verified achievement from @Org_Name.","translatable":false,"created_at":"2023-07-17T17:41:41.264Z","updated_at":"2025-06-05T22:18:21.389Z","state_updated_at":"2023-07-17T17:45:58.644Z"},"version":"2.0.1","created_at":"2022-03-31T15:08:22Z","last_update":"2025-11-05T19:15:44Z","duration":"55"},{"slug":"tetragon-splunk","icon":"https://isovalent.com/favicon-32x32.png?v=4393c4418a4f5aa1867a1d9636029656","title":"🥇 Isovalent Runtime Security: Splunk Integration","description":"Learn how to integrate Isovalent Runtime Security with Splunk to create a comprehensive security observability and enforcement platform.\n\nIn this hands-on lab, you'll deploy a vulnerable Tomcat application and use Isovalent's eBPF-based runtime security capabilities to:\n\n• Monitor identity-aware process and network events in real-time\n• Correlate security data with third-party CVE databases in Splunk\n• Detect and visualize CVE-2020-9484 exploitation attempts\n• Implement distributed exploit protection using Tetragon TracingPolicies\n• Analyze attack patterns and process ancestry trees in Splunk dashboards\n\nYou'll experience the complete security lifecycle from vulnerability discovery to threat mitigation, using Vector for log shipping and Splunk's powerful analytics to gain deep insights into runtime behavior. This expert-level lab demonstrates how Isovalent and Splunk work together to provide compensating runtime controls and advanced threat detection for cloud-native environments.\n","teaser":"Leverage Isovalent Runtime Security with Splunk for advanced threat detection, CVE exploitation monitoring, and real-time attack mitigation","level":"expert","score":4.206897,"reviews":null,"tags":["enterprise","kubernetes","security"],"challenges":null,"badge":{"name":"Tetragon Splunk Visibility","description":"This badge certifies that the Isovalent Enterprise for Cilium: Splunk Integration Lab by Isovalent has been successfully completed. This lab is made of practical challenges, quizzes, and a final exam. The challenges include: sending Tetragon events to Splunk, using Isovalent Splunk dashboards to view vulnerabilities and analyze attacks.","skills":["Containers","eBPF","Kubernetes","Security","Splunk","Tetragon"],"url":"https://www.credly.com/org/isovalent/badge/tetragon-splunk-visibility","image_url":"https://images.credly.com/images/d2d20aaf-6659-44bb-a0a6-9061209e681a/tempfile20250902-71-my2lt8.png","vanity_slug":"tetragon-splunk-visibility","global_activity_url":"https://isovalent.com/labs/tetragon-splunk/","state":"active","allow_duplicate_badges":false,"badges_count":57,"public":true,"allow_delete":false,"allow_archive":true,"cost":"Free","level":"Advanced","time_to_earn":"Hours","type_category":"Learning","lock_badge_state":false,"recipient_type":"User","show_skill_tag_links":true,"printing_disabled":false,"visibility":"public","variants_allowed":false,"variant_type":"","reporting_tags":["Isovalent Labs","Security Professionals Journey"],"alignments":null,"recommendations":[{"id":"4372c2db-aaae-4f3b-8627-9d3bf5006070","type":"education","activity_url":"https://isovalent.com/labs/","title":"Isovalent Hands-on labs"},{"id":"5a54e3cb-6f75-446d-abb5-4a296c709bf4","type":"education","activity_url":"https://isovalent.com/learning-tracks/#securityProfessionals","title":"Security Professionals Journey"},{"id":"954de5f4-92bd-4cb6-ad8d-82030865e97a","type":"education","activity_url":"https://labs-map.isovalent.com/","title":"The World of Cilium"}],"badge_template_activities":[{"activity_type":"Course","title":"The badge recipient has followed the Tetragon Splunk Visibility lab by Isovalent.","activity_url":"https://isovalent.com/labs/tetragon-splunk/"},{"activity_type":"Assessment","title":"The badge recipient has correctly answered the quizzes and finished the exam in the Tetragon Splunk Visibility lab by Isovalent.","activity_url":"https://isovalent.com/labs/tetragon-splunk/"}],"linkedin_share_default_message":"View my verified achievement from @Org_Name.","translatable":false,"created_at":"2025-09-02T13:48:38.419Z","updated_at":"2025-09-02T13:50:30.250Z","state_updated_at":""},"version":"1.0.4","created_at":"2025-09-03T14:00:26Z","last_update":"2025-10-20T21:11:19Z","duration":""},{"slug":"tetragon-tls-visibility","icon":"https://isovalent.com/favicon-32x32.png?v=4393c4418a4f5aa1867a1d9636029656","title":"🥈 Isovalent Enterprise for Cilium: TLS Visibility","description":"In this scenario, we are going to show how Isovalent Enterprise for Cilium can provide visibility into TLS traffic.\n\n![Weak TLS Version](https://play.instruqt.com/assets/tracks/fbgdpcur90dl/909437feb83960ebd1acde25c81b47c3/assets/weak-tls-version.png)\n\nIn Security Audits, a company or team has to verify their application protects data in transit and doesn't leak information during communication, especially when data leaves a sensitive internal network.\nMechanisms like TLS ensure that data is encrypted in transit, but verifying that a TLS configuration is secure becomes a challenge for most companies.\n\nBut simply using TLS is insufficient to provide proper protection or meet compliance requirements.\n\nOften it is required to prove that the appropriate TLS versions, ciphers, key-lengths, and more are in use.\n\nCurrently there is no way to automatically audit whether applications are using a properly setup TLS mechanism. Scanning the app image is not enough, as it is impossible to predict which applications use TLS and what TLS configurations are in place simply based on static configuration files.\n\nIn this lab, you will learn how Isovalent Enterprise for Cilium can:\n* identify the version of TLS being used, informing us if an obsolete and insecure version is being used\n* report on the cipher being used\n* export events in JSON format to SIEM\n","teaser":"Let's use Isovalent Enterprise for Cilium to gain insight into TLS traffic.","level":"intermediate","score":4.125,"reviews":null,"tags":["enterprise","tetragon","tls","security"],"challenges":null,"badge":{"name":"Tetragon TLS Visibility","description":"This badge certifies that the Isovalent Enterprise for Cilium: TLS Visibility Lab by Isovalent has been successfully completed. This lab is made of practical challenges, quizzes, and a final exam. The challenges include: deploying a Tetragon TracingPolicy to visualize TLS and TCP events, analyzing event flows as compact a JSON, finding TLS information from flows.","skills":["Cilium","Containers","eBPF","Hubble","Kubernetes","Security","Tetragon","TLS"],"url":"https://www.credly.com/org/isovalent/badge/tetragon-tls-visibility","image_url":"https://images.credly.com/images/400a2f5c-ceb5-443f-b41f-da5de6958415/tempfile20250605-81-7ghk25.png","vanity_slug":"tetragon-tls-visibility","global_activity_url":"https://isovalent.com/labs/tetragon-tls-visibility/","state":"active","allow_duplicate_badges":false,"badges_count":309,"public":true,"allow_delete":false,"allow_archive":true,"cost":"Free","level":"Intermediate","time_to_earn":"Hours","type_category":"Learning","lock_badge_state":false,"recipient_type":"User","show_skill_tag_links":false,"printing_disabled":false,"visibility":"public","variants_allowed":false,"variant_type":"","reporting_tags":["Isovalent Labs","Security Professionals Journey"],"alignments":null,"recommendations":[{"id":"4372c2db-aaae-4f3b-8627-9d3bf5006070","type":"education","activity_url":"https://isovalent.com/labs/","title":"Isovalent Hands-on labs"},{"id":"5a54e3cb-6f75-446d-abb5-4a296c709bf4","type":"education","activity_url":"https://isovalent.com/learning-tracks/#securityProfessionals","title":"Security Professionals Journey"},{"id":"954de5f4-92bd-4cb6-ad8d-82030865e97a","type":"education","activity_url":"https://labs-map.isovalent.com/","title":"The World of Cilium"}],"badge_template_activities":[{"activity_type":"Course","title":"The badge recipient has followed the Tetragon TLS Visibility lab by Isovalent.","activity_url":"https://isovalent.com/labs/tetragon-tls-visibility/"},{"activity_type":"Assessment","title":"The badge recipient has correctly answered the quizzes and finished the exam in the Tetragon TLS Visibility lab by Isovalent.","activity_url":"https://isovalent.com/labs/tetragon-tls-visibility/"}],"linkedin_share_default_message":"View my verified achievement from @Org_Name.","translatable":false,"created_at":"2023-07-18T06:43:31.415Z","updated_at":"2025-06-05T22:09:09.944Z","state_updated_at":"2023-07-31T18:57:14.028Z"},"version":"1.3.0","created_at":"2022-09-13T16:51:40Z","last_update":"2025-09-24T15:51:21Z","duration":"30"}]