Build a Cloud-Style Fabric Lab, Part 8: Cilium
One helm install, three jobs: the pod network, kube-proxy's whole duty in eBPF, and BGP from every node to its leaf pair's anycast gateway. Plus the consent chain that keeps VIP announcements deliberate, and the anycast peering quirk worth knowing.