Cilium is an open-source networking project that provides networking and security capabilities for containerized applications, microservices, and virtual machines.
Recently Cilium launched a great website about eBPF called ebpf.io. It serves a similar purpose to this list, with an introduction to eBPF.
Official website of Cilium, originally created by [Isovalent](https://isovalent.com/).
GitHub repository of the Cilium project.
Multiple ways to install Cilium in EKS.
Study guide to help the Cilium community prepare for the CNCF's Cilium Certified Associate (CCA) Exam.
A networking plugin for various container runtimes such as Kubernetes, Docker, and Mesos. It leverages Linux kernel features like eBPF to provide fast and secure networking and load balancing for applications.
Technology that allows for dynamic, programmable packet filtering and network analysis in the Linux kernel.
High-performance HTTP, TCP, and gRPC proxy that can be automatically injected into Kubernetes pods. It provides features like load balancing, health checking, and L7 visibility.
Securely connects multiple Kubernetes clusters together using encrypted tunnels. It enables seamless communication and service discovery across clusters while maintaining strong security boundaries.
Network visibility and monitoring tool built by the Cilium community. It provides real-time visibility into network traffic, allowing operators to gain insights into application behavior, troubleshoot connectivity issues, and enforce network security policies.
Kubernetes operator that simplifies the deployment and management of Cilium within a Kubernetes cluster. It automates tasks such as deploying Cilium agents, configuring eBPF policies, and handling upgrades.
Runtime security enforcement and observability tool.
Connects Kubernetes workloads, virtual machines, and physical servers running in the cloud, on-premises, or at the edge.
Create, visualize, and share Kubernetes network policies.
Collects metrics from Cilium and stores them in Prometheus for analysis and alerting.
Helm chart that can be used to deploy Cilium on Kubernetes.
Enables exporting Hubble flow data using OpenTelemetry collector.
eBPF-based Linux kernel networking debugger.
Turns telemetry data into actionable insights, helping you identify and resolve application issues quickly.
Instant Kubernetes-native application observability.
Instant K8s service dependency map, right to your Grafana.
Cilium controller implementation for Nomad.
Enables Cilium-CNI powered by eBPF to provide networking, packet filtering, and observability for modern applications.
Bpfilter offers a new approach to packet filtering in Linux.
Policies that are applicable to the whole cluster (non-namespaced) and provide you with the means to specify nodes as the source and target.
Guide from the Cilium project.
Blog post by Cilium on the motivations behind eBPF and bpfilter, with examples and links to other projects using eBPF and bpfilter.
Slides from a talk by Quentin Monnet with a background on eBPF and comparing bpfilter to iptables.
Featuring a load balancer use case.
[Video](https://www.youtube.com/watch?v=TnJF7ht3ZYc&list=PLkA60AVN3hh8oPas3cq2VA9xB7WazcIgs).
Fast IPv6 container networking with BPF and XDP.
BPF & XDP for containers.
Learning eBPF, published by O'Reilly! Here's where you will find a VM config for the examples.
Leverage Cilium's Tetragon to capture eBPF-based file access logs and send them to Parseable for alerting and further analytics.
A livestream covering all things related to eBPF and Cilium presented by Isovalent's Thomas Graf & Liz Rice.
Comprehensive deep dive guide for networking and security enthusiasts.
Why we use it and why we love it.
Generic introduction to Cilium.
Ivan Pepelnjak interviewing Thomas, October 2016, on eBPF, P4, XDP, and Cilium.
Explore how eBPF allows us to streamline the service mesh, making the data plane more efficient and easier to deploy.
Migrate to Cilium from Amazon VPC CNI with zero downtime.
Kubernetes networking with Cilium CNI and OKE on Oracle Cloud.
Configure Azure CNI powered by Cilium in Azure Kubernetes Service (AKS).
eCHO news in a bi-weekly wrap-up of all things eBPF and Cilium.
Basic example of how to get started with XDP.
eBPF JavaScript-like capabilities to the Linux Kernel.
Prevent overlayfs privilege escalation on Ubuntu kernels with YAML (bpf).
Quick tour of Cilium 1.14 with Istio.
Decoding the packet path with security groups for pods in EKS.
Quick run-through on setting up Cilium, mtls on a self-managed Kubernetes cluster.
Install Cilium in a BYOCNI mode seamlessly and leverage eBPF functionality as compared to iptables.
Walk through the process of creating Cilium-based support for load balancer services in a minimal K3s Kubernetes cluster.
What is it and what can it do?
Tutorial on deploying Cilium and Red Hat OpenShift.
Architecting for resilience: Crafting opinionated EKS clusters with Karpenter & Cilium Cluster Mesh.
Guidance on how to effectively configure Cilium for setting up the Gateway API in Kubernetes environments.
Step-by-step process of migrating from OpenShiftSDN or OVN-Kubernetes to Cilium.
Setting up basic L4 load balancing with Cilium CNI and Ubuiqiti Edge Router.
Full-day co-located event for Cilium users, contributors, and new community members.
Virtual Security Summer School with hands-on labs. Learn how Cilium, Tetragon, and Hubble help improve Kubernetes security.
Events featuring diverse voices, innovative companies, and big ideas.
Find videos, case studies, blogs, books, labs, and analyst reports.
Tracks for cloud network engineers, security professionals, platform engineers, platform ops (service mesh), and cloud architects.
Full bash-based k0s Cilium Clustermesh enabled playground.
Kubernetes Unpacked 022: Kubernetes networking and abstraction with Cilium and eBPF.
How to install and configure the Cilium CNI and enable its advanced cluster mesh feature across Kubernetes clusters.
Tutorials about Cilium and SPIRE integration.
Community curated list of system and network policy templates for KubeArmor and Cilium.
Examples of Kyverno policies for controlling the creation of Cilium network policies.