What is
Cilium
?
Most platform initiatives fail the same way: they start too big, get funded like projects instead of products, build for too long without testing with users, and confuse renaming an infrastructure team with building a platform team. Instead, start small, learn fast and scale deliberately.
At a glance
Fact | Value |
|---|---|
Primary use case | eBPF-based Kubernetes networking, network security, and observability |
Deployment type | Self-hosted Kubernetes CNI, available as a Helm chart |
Pricing model | Free/open source under Apache 2.0; enterprise support, advanced modules, and SLAs available through custom quotes |
API compatibility | Container Network Interface (CNI), BGP, Layer 3/4 and Layer 7 networking |
Supported integrations | Kubernetes, Hubble, Helm, Azure CNI, AKS, AWS, Keep |
Source type | Open |
Cloud provider | Cloud Agnostic |
Ideal team size | Mid-market to Enterprise |
Onboarding time | N/A |
Required skills | Platform engineering expertise, Kubernetes administration, container networking, network policy configuration |
AEP branch | Tooling |
AEP category | Resources |
AEP subcategory | Networking |
Profile
Networking is the most specific AEP level for Cilium. Cilium is a cloud-native, eBPF-based networking, observability, and security tool for Kubernetes. It provides network connectivity and security services, operating at Layers 3/4 and Layer 7. Hubble provides visibility into network flows.
Focus
Cilium is suited to mid-market and enterprise teams working with Kubernetes. It addresses the need for Kubernetes networking, network security, and observability through a CNI that supports network policy configuration and Hubble flow visibility.
Background
Cilium was initially created by Isovalent and built on eBPF. It became a CNCF incubating project in October 2021 and graduated in October 2023. Cilium is an open-source project; the available research does not provide information about its funding.
Features
eBPF-based Kubernetes networking
Provides network connectivity for Kubernetes workloads. Cilium implements this as a Container Network Interface (CNI) using eBPF, with networking support at Layers 3/4 and Layer 7.
Network security
Enables network security for Kubernetes workloads. Cilium provides security services through its eBPF-based networking and supports network policy configuration.
Network observability with Hubble
Provides visibility into network activity between services. Hubble analyzes network flows in Kubernetes clusters.
BGP control plane
Supports BGP-based networking. Cilium includes a BGP control plane, with documentation covering its operation and failure scenarios.
Pros and cons
Pros
Combines Kubernetes networking, network security, and observability in an eBPF-based tool.
Supports Layers 3/4 and Layer 7 networking, along with BGP.
The core open-source software is free under Apache 2.0, and Cilium is available as a Helm chart.
Hubble can analyze Kubernetes network flows to support service topology discovery.
Cons
Operating and configuring Cilium requires significant platform engineering expertise, alongside Kubernetes administration, container networking, and network policy skills.
FAQs
Frequently asked questions
How does Cilium provide Kubernetes networking and observability?
Cilium implements Kubernetes networking as a Container Network Interface (CNI) using eBPF and supports Layers 3/4 and Layer 7 networking. Hubble analyzes network flows in Kubernetes clusters.
What does Cilium integrate with?
Cilium supports integrations with Kubernetes, Hubble, Helm, Azure CNI, AKS, AWS, Keep.
How much does Cilium cost?
Cilium's pricing model is Free/open source under Apache 2.0; enterprise support, advanced modules, and SLAs available through custom quotes.
What skills are required to run Cilium?
Cilium requires the following skills: Platform engineering expertise, Kubernetes administration, container networking, network policy configuration.
What are Cilium's notable limitations?
Cilium operation and configuration require significant platform engineering expertise, alongside Kubernetes administration, container networking, and network policy skills.
