Network Policy
kube-proxy replacement
Hubble for visibility
Metrics for observability
Multi-cluster connectivity
Service Mesh
CNI chaining for policy features on top of other CNI plugins, e.g. AWS VPC CNI
Cilium agent manages the network
All pods are an endpoint
Endpoints are assigned an identity
Identities have labels to describe them