Case Study: ClickHouse achieves secure multi-tenant isolation with Cilium

How ClickHouse is Using Cilium to Implement Efficient Network Policies

The customer, ClickHouse, faced the challenge of securely isolating tenant processes in its multi-tenant ClickHouse Cloud database service. To keep customer data secure and make efficient use of resources, they needed a powerful tool to implement Kubernetes network policies for strong workload isolation. They turned to the vendor, the Cloud Native Computing Foundation's Cilium, for a solution.

By implementing Cilium, ClickHouse gained the ability to create dedicated network policies for each customer namespace, ensuring complete isolation. The solution's eBPF foundation provided high performance at a massive scale, securing over 10 petabytes of data and 30 trillion records. The Cloud Native Computing Foundation's Cilium also provided additional value through features like ClusterMesh for multi-cluster networking and Hubble for observability and debugging, allowing ClickHouse to efficiently manage its infrastructure.

ClickHouse

Marcel Birkner

Cloud Software Engineer