Cisco is integrating eBPF directly into its enterprise hardware and "smart software" to provide kernel-level security.

The New Stack is a publication covering trends and technologies in cloud-native development, DevOps, and software delivery. Developers can learn about containerization, Kubernetes, and cloud computing, as well as explore topics such as microservices architecture, serverless computing, and continuous integration/continuous delivery (CI/CD) pipelines.

The New Stack

Cisco acquired Isovalent in 2024 to integrate eBPF technology into its enterprise networking hardware and software. The company is using eBPF-based tools like Tetragon for vulnerability mitigation and Hypershield for distributed firewalling, enabling live patching of switches without downtime. eBPF allows kernel-level security by filtering malicious actions before they reach applications, eliminating the need for centralized firewalls. This approach addresses modern data center traffic patterns, particularly east-west traffic from Kubernetes and AI workloads. Cisco is also exploring eBPF for Windows endpoints and AI agent security, aiming to create distributed security at every device and application level rather than relying on traditional chokepoint firewalls.

Cisco is using eBPF to rethink firewalls, vulnerability mitigation