cilium-networking

Overview

Cilium provides eBPF-based networking, security, and observability for Kubernetes. Replaces kube-proxy, enforces L3/L4/L7 network policies, and includes Hubble for network visibility.

Capabilities

• eBPF-based CNI (replaces iptables/kube-proxy)
• L3/L4/L7 network policies
• Transparent encryption (WireGuard/IPsec)
• Hubble observability (flow logs, DNS, metrics)
• BGP for hybrid cloud routing
• Service mesh without sidecars

When to Use