CNI plugin based on eBPF

CNCF incubation project

Additional Features

Network Policy

kube-proxy replacement

Hubble for visibility

Metrics for observability

Multi-cluster connectivity

Service Mesh

CNI chaining for policy features on top of other CNI plugins, e.g. AWS VPC CNI

Cilium Internals

Cilium agent manages the network

All pods are an endpoint

Endpoints are assigned an identity

Identities have labels to describe them