Skip to content
@cilium

Cilium

eBPF-based Networking, Security, and Observability

Hey, this is Cilium 🐝🐝🐝

Our Sign-up Contributing Roadmap Governance

Cilium is an open source, cloud native solution for providing, securing, and observing network connectivity between workloads, fueled by the revolutionary Kernel technology eBPF.

Cilium

Cilium is used to provide and transparently secure network connectivity and load balancing between application workloads such as application containers, processes, or VMs. Cilium operates at Layer 3/4 to provide traditional networking and security services as well as Layer 7 to protect and secure use of modern application protocols such as HTTP, gRPC, and Kafka. Cilium is a part of the Cloud Native Computing Foundation and is their most advanced and widely used CNI for Kubernetes. Check out the Getting Started Guides to try it out.

Cilium has hundreds of adopters around the world including Bell Canada, Capital One, Google, The New York Times, and Yahoo. If you are using Cilium, add yourself to the list today!

Cilium overview diagram

Hubble

Hubble is a fully distributed networking and security observability platform for cloud native workloads. It is built on top of Cilium and eBPF to enable deep visibility into the communication and behavior of services as well as the networking infrastructure in a completely transparent manner. Hubble helps teams understand service dependencies and communication maps, operational monitoring and alerting, application monitoring, and security observability.

Hubble overview diagram

Tetragon

Tetragon enables powerful realtime, eBPF-based Security Observability and Runtime Enforcement. Tetragon detects and is able to react to security-significant events, such as:

  • Process execution events
  • System call activity
  • I/O activity including network & file access

When used in a Kubernetes environment, Tetragon is Kubernetes-aware - that is, it understands Kubernetes identities such as namespaces and pods - so that security event detection can be configured for specific individual workloads.

Tetragon Overview Diagram

Community

Cilium is an open source project that anyone in the community can use, improve, and enjoy. Over 700 people have already contributed to the Cilium project and you can too. We'd love you to join us! Here's a few ways to find out what's happening and get involved:

Join the Cilium workspace on Slack

Follow Cilium on Bluesky, LinkedIn, Mastodon, and Reddit

Discover the Cilium Project Vision and our Community Values

Read about our Contributor Ladder, and check Good First Issues for starting to contribute. You'll find guidance about how to submit feature proposals and code contributions under How to Contribute

Find out more about Cilium project governance

Subscribe to the newsletter

Subscribe to the eBPF and Cilium Community on Youtube

You’ve already found us on Github!

Pinned Loading

  1. cilium cilium Public

    eBPF-based Networking, Security, and Observability

    Go 21.4k 3.2k

  2. tetragon tetragon Public

    eBPF-based Security Observability and Runtime Enforcement

    C 3.9k 410

  3. hubble hubble Public

    Hubble - Network, Service & Security Observability for Kubernetes using eBPF

    Makefile 3.7k 264

  4. ebpf ebpf Public

    ebpf-go is a pure-Go library to read, modify and load eBPF programs and attach them to various hooks in the Linux kernel.

    Go 6.8k 733

  5. pwru pwru Public

    Packet, where are you? -- eBPF-based Linux kernel networking debugger

    C 3.3k 189

  6. cilium-cli cilium-cli Public

    CLI to install, manage & troubleshoot Kubernetes clusters running Cilium

    Makefile 471 210

Repositories

Showing 10 of 128 repositories
  • cilium Public

    eBPF-based Networking, Security, and Observability

    cilium/cilium’s past year of commit activity
    Go 21,384 Apache-2.0 3,160 935 178 Updated Apr 15, 2025
  • tetragon Public

    eBPF-based Security Observability and Runtime Enforcement

    cilium/tetragon’s past year of commit activity
    C 3,895 Apache-2.0 410 151 (17 issues need help) 96 Updated Apr 15, 2025
  • ebpf Public

    ebpf-go is a pure-Go library to read, modify and load eBPF programs and attach them to various hooks in the Linux kernel.

    cilium/ebpf’s past year of commit activity
    Go 6,765 MIT 733 32 (6 issues need help) 14 Updated Apr 15, 2025
  • cilium-cli Public

    CLI to install, manage & troubleshoot Kubernetes clusters running Cilium

    cilium/cilium-cli’s past year of commit activity
    Makefile 471 Apache-2.0 210 17 (3 issues need help) 3 Updated Apr 15, 2025
  • hubble Public

    Hubble - Network, Service & Security Observability for Kubernetes using eBPF

    cilium/hubble’s past year of commit activity
    Makefile 3,733 Apache-2.0 264 40 2 Updated Apr 15, 2025
  • cilium.io Public

    Cilium project website

    cilium/cilium.io’s past year of commit activity
    JavaScript 39 CC-BY-4.0 52 4 6 Updated Apr 15, 2025
  • cilium/little-vm-helper-images’s past year of commit activity
    Dockerfile 17 8 5 5 Updated Apr 15, 2025
  • pwru Public

    Packet, where are you? -- eBPF-based Linux kernel networking debugger

    cilium/pwru’s past year of commit activity
    C 3,254 Apache-2.0 189 26 (8 issues need help) 8 Updated Apr 15, 2025
  • scaffolding Public

    Set of tools and resources for automating performance tests.

    cilium/scaffolding’s past year of commit activity
    Jupyter Notebook 12 Apache-2.0 7 13 (1 issue needs help) 0 Updated Apr 15, 2025
  • proxy Public

    Envoy with Cilium filters

    cilium/proxy’s past year of commit activity
    C++ 157 Apache-2.0 60 13 (1 issue needs help) 8 Updated Apr 15, 2025