cilium-ebpf
Installation
SKILL.md
Cilium and eBPF
Purpose
Implement Cilium-based Kubernetes networking with eBPF for high-performance networking, security policies, observability, and multi-cluster connectivity.
Architecture Decision Trees
Cilium vs Other CNIs
| Feature | Cilium (eBPF) | Calico | Flannel | Weave |
|---|---|---|---|---|
| kube-proxy replacement | Yes (eBPF) | No | No | No |
| L7 network policies | Yes (Envoy) | No | No | No |
| Encryption | WireGuard/IPsec | WireGuard | No | Yes (encrypt) |
| Cluster mesh | Yes | Yes (multi-interface) | No | Yes |
| Hubble observability | Built-in | No | No | No |
| Bandwidth management | Yes (eBPF) | No | No | No |
| Performance | Near-native | Iptables-based | Overlay | Overlay |
| eBPF-only features | Yes | No | No | No |