Modern Kubernetes cluster engineering: bypassing legacy iptables with eBPF socket-layer routing, Cilium service mesh without sidecars, kernel-level L7 security policies, and zero-downtime Pod Disruption Budgets (PDB).