Cilium

Cilium is a network, observability and security solution based on the eBPF data plane. By dynamically running the eBPF byte code in the Linux kernel, L3-L7 implements network policies in layers and can replace the kube-proxy component. It offers features such as multi-cluster support, distributed load balancing, and integrated gateways.

CI

cilium · Containers & Kubernetes

STARS25.7K
FORKS4.2K
COMMITS42.8K
CONTRIBUTORS1.3K
VERSIONv1.9.9
UPDATEDtoday
GoEbpfService MeshApache-2.0

Common commercial products in this category: Docker Desktop, Red Hat OpenShift, Amazon EKS

What can it do?
  • You build a flat L3 network structure that covers multiple clusters with local routing or tunneling modes.
  • You implement network policies at L3-L7 level using an identity-based security model independent of network addressing.
  • You use it as a substitute for the kube-proxy component by providing distributed load balancing for interpod and external services.
Heads up
  • • High number of open issues (1,037)
User reviews
  • • NeutralHacker News

    Cilium 1.0: Bringing the BPF Revolution to Kubernetes Networking and Security

    “Hi, A Cilium contributor here. There is a native integration with Istio, you can read tested at the following url: Last week was the Kubecon Europe, Thomas Graf, founder of the project, presented some new improvements made in Envoy and TLS integration. Here are the slides:…”

  • • NeutralHacker News

    Cilium 1.0: Bringing the BPF Revolution to Kubernetes Networking and Security

    “I can’t be the only person thinking “What the hell is BPF?”. I know that probably means I’m not the audience but it wouldn’t hurt them to just state that the very first line. Updated with article about BPF: Really good talk by the Cilium folks that explains these concepts:”

Verified against README · Oct 26, 2026 · source

My note

Alternative pages

More in: Containers & Kubernetes