docs.cilium.io

• name: readthedocs-addons-api-version content: 1
• charset: utf-8
• name: readthedocs-addons-api-version content: 1
• name: viewport content: width=device-width, initial-scale=1
• name: viewport content: width=device-width, initial-scale=1.0
• name: twitter:card content: summary
• name: twitter:site content: @ciliumproject
• name: twitter:title content: Welcome to Cilium’s documentation! — Cilium 1.19.5 documentation
• name: twitter:image content: _static/_static/logo.svg
• name: readthedocs-project-slug content: cilium
• name: readthedocs-version-slug content: stable
• name: readthedocs-resolver-filename content: /
• name: readthedocs-http-status content: 200

• Documentation
• Next
• Component Overview
• Cilium Quick Installation
• Getting Started with the Star Wars Demo
• Terminology
• Getting Help
• Considerations on Node Pool Taints and Unmanaged Pods
• Installation using Helm
• Migrating a cluster to Cilium
• Installation with K8s distributions
• External Installers
• Networking Concepts
• Kubernetes Networking
• BGP
• eBPF Datapath
• Multi-cluster Networking
• Egress Gateway
• Service Mesh
• VXLAN Tunnel Endpoint (VTEP) Integration (beta)
• L2 Announcements / L2 Aware LB (Beta)
• Node IPAM LB
• Use a Specific MAC Address for a Pod
• Multicast Support in Cilium (Beta)
• Securing Networks with Cilium
• Overview of Network Security
• Overview of Network Policy
• Restricting privileged Cilium pod access
• Threat Model
• Network Observability with Hubble
• Running Prometheus & Grafana
• Monitoring & Metrics
• Layer 7 Protocol Visibility
• System Requirements
• Upgrade Guide
• Configuration
• Performance & Scalability
• Troubleshooting
• Governance
• Community Meetings
• Slack
• Special Interest Groups
• Roadmap
• Development
• Release Management
• Testing
• Documentation
• API Reference
• gRPC API Reference
• SDP gRPC API Reference
• Internals
• Command Cheatsheet
• Command Reference
• Helm Reference
• Key-Value Store
• Further Reading
• Glossary
• BPF and XDP Reference Guide
• XFRM Reference Guide
• http://docs.cilium.io/#
• 
• http://docs.cilium.io/gettingstarted/k8s-install-default/#k8s-install-quick
• http://docs.cilium.io/#getting-started
• http://docs.cilium.io/security/policy/#network-policy
• http://docs.cilium.io/#observability
• http://docs.cilium.io/observability/hubble/#hubble-intro
• http://docs.cilium.io/observability/metrics/#metrics
• http://docs.cilium.io/operations/troubleshooting/#admin-guide
• http://docs.cilium.io/reference-guides/bpf/#bpf-guide
• http://docs.cilium.io/api/#api-ref
• http://docs.cilium.io/contributing/development/#dev-guide
• http://docs.cilium.io/security/#security-root
• What is Cilium?
• What is Hubble?
• Why Cilium & Hubble?
• Functionality Overview
• Cilium
• Hubble
• eBPF
• Data Store
• Create the Cluster
• Install the Cilium CLI
• Install Cilium
• Validate the Installation
• Next Steps
• Deploy the Demo Application
• Check Current Access
• Apply an L3/L4 Policy
• Inspecting the Policy
• Apply and Test HTTP-aware L7 Policy
• Clean-up
• Next Steps
• Labels
• Endpoint
• Identity
• Node
• FAQ
• Slack
• GitHub
• Training
• Enterprise support
• Security Bugs
• Helm Installation Methods
• Install Cilium
• Upgrading
• OCI vs Traditional Repository
• Troubleshooting
• Restart unmanaged Pods
• Validate the Installation
• Next Steps
• Background
• Requirements
• Limitations
• Overview
• Migration procedure
• Installation with external etcd
• Installation on OpenShift OKD
• Installation on Broadcom VMware ESXi / NSX
• Installation Using K3s
• Installation k0s Using k0sctl
• Installation Using Kind
• CNI Chaining
• Installation using Azure CNI Powered by Cilium in AKS
• Installation using Kops
• Installation using Kubespray
• Installation using kubeadm
• Installation using Rancher
• Installation using Rancher Kubernetes Engine
• Installation Using Rancher Desktop
• Routing
• IP Address Management (IPAM)
• Masquerading
• Fragment Handling
• Introduction
• Concepts
• Requirements
• Configuration
• Network Policy
• Kubernetes Without kube-proxy
• CiliumCIDRGroup
• Endpoint CRD
• CiliumEndpointSlice
• Kubernetes Compatibility
• Troubleshooting
• Bandwidth Manager
• Kata Containers with Cilium
• Configuring IPAM Modes
• Local Redirect Policy
• Identity Management Mode
• Cilium BGP Control Plane
• LoadBalancer IP Address Management (LB IPAM)
• Using Kube-Router to Run BGP (deprecated)
• Using BIRD to run BGP (deprecated)
• Introduction
• Life of a Packet
• eBPF Maps
• Service LB Map Sizing
• Iptables Usage
• Multi-Cluster (Cluster Mesh)
• Setting up Cluster Mesh
• Load-balancing & Service Discovery
• Multi-Cluster Services API (Beta)
• Network Policy
• Service Affinity
• AKS-to-AKS Clustermesh Preparation
• EKS-to-EKS Clustermesh Preparation
• GKE-to-GKE Clustermesh Preparation
• Egress Gateway
• Egress Gateway Advanced Troubleshooting
• What is Service Mesh?
• Why Cilium Service Mesh?
• Enable VXLAN Tunnel Endpoint (VTEP) integration
• How to test VXLAN Tunnel Endpoint (VTEP) Integration
• Limitations
• Configuration
• Prerequisites
• Limitations
• Policies
• Leader Election
• Troubleshooting
• L2 Pod Announcements
• Enable and use Node IPAM
• Configuring the address
• Prerequisites
• Enable Multicast Feature
• Configure Multicast and Subscriber IPs
• Limitations
• Identity-Aware and HTTP-Aware Policy Enforcement
• Locking Down External Access with DNS-Based Policies
• Standalone DNS Proxy (alpha)
• Inspecting TLS Encrypted Connections with Cilium
• Securing a Kafka Cluster
• Securing gRPC
• Securing Elasticsearch
• Locking Down External Access Using AWS Metadata
• Creating Policies from Verdicts
• Host Firewall
• Introduction
• Identity-Based
• Policy Enforcement
• Proxy Injection
• Transparent Encryption
• Policy Enforcement Modes
• Policy Deny Response Handling
• Rule Basics
• Layer 3 Policies
• Layer 4 Policies
• Layer 7 Policies
• Deny Policies
• Disk based Cilium Network Policies
• Host Policies
• Using Kubernetes Constructs In Policy
• Endpoint Lifecycle
• Troubleshooting
• Caveats
• Setup Cilium
• Scope and Prerequisites
• Methodology
• Reference Architecture
• The Threat Model
• Overall Recommendations
• Setting up Hubble Observability
• Inspecting Network Flows with the CLI
• Service Map & Hubble UI
• Tutorial: Monitoring Generic IP Options with Cilium
• Configuring Hubble exporter
• Configure TLS with Hubble
• Install Prometheus & Grafana
• Deploy Cilium and Hubble with metrics enabled
• How to access Grafana
• How to access Prometheus
• Examples
• Cilium Metrics
• Hubble Metrics
• Cluster Mesh API Server Metrics
• Example Prometheus & Grafana Deployment
• Metrics Reference
• Security Implications
• Limitations
• Summary
• Architecture Support
• Linux Distribution Compatibility & Considerations
• Linux Kernel
• Required Kernel Versions for Advanced Features
• Key-Value store
• clang+LLVM
• Firewall Rules
• Mounted eBPF filesystem
• Routing Tables
• Privileges
• Running pre-flight check (Required)
• Upgrading Cilium
• Version Specific Notes
• Advanced
• http://docs.cilium.io/configuration/#cilium-config-configmap
• Making Changes
• Detecting unapplied ConfigMap changes
• Core Agent
• Security
• Tuning Guide
• CNI Performance Benchmark
• Scalability
• Component & Cluster Health
• Observing Flows with Hubble
• Observing flows with Hubble Relay
• Connectivity Problems
• Policy Troubleshooting
• etcd (kvstore)
• Cluster Mesh Troubleshooting
• Service Mesh Troubleshooting
• Symptom Library
• Useful Scripts
• Reporting a problem
• Weekly Community Meeting
• Monthly APAC Community Meeting
• Slack channels
• How to create a Slack channel
• Release Cadence
• Welcoming New Contributors
• How To Contribute
• Contributing as a Reviewer or Committer
• Development Setup
• Building Container Images
• Code Overview
• Configuring the Datapath
• Run eBPF Tests with Little VM Helper
• Guide to the Hive
• StateDB in Cilium
• Debugging
• Hubble
• Introducing New CRDs
• BGP Control Plane
• Updating dependencies with Renovate
• Organization
• Backporting process
• CI / GitHub Actions
• End-To-End Connectivity Testing
• End-To-End Testing Framework (Legacy)
• Scalability and Performance Testing
• Integration Testing
• BPF Unit and Integration Testing
• Recommendations on documentation structure
• Documentation style
• Documentation testing
• Documentation framework
• Introduction
• How to access the API
• Compatibility Guarantees
• API Reference
• Flow
• Observer
• Peer
• Relay
• Standalone DNS Proxy
• Hubble internals
• Cilium Operator
• eBPF Program Types
• Security Identities
• Command utilities:
• Command examples:
• Kubernetes examples:
• cilium-agent
• cilium-bugtool
• cilium-dbg
• cilium-health
• cilium-operator
• clustermesh-apiserver
• Key-Value Store
• Layout
• Leases
• Caveats and Limitations
• Debugging
• BPF Architecture
• Development Tools
• Debugging and Testing
• Program Types
• Further Reading
• Overview
• XFRM Packet Flows
• Output Description of
• XFRM Errors
• Performance Considerations
• ${version.slug}

• https://www.cilium.io
• https://github.com/cilium/cilium
• https://github.com/cilium/cilium/stargazers
• https://slack.cilium.io/
• Enterprise
• https://cilium.io/labs/categories/getting-started
• https://cilium.io/get-started
• https://cilium.io/get-involved
• https://cilium.io/get-help
• https://cilium.io/adopters
• https://cilium.io/blog
• https://github.com/cncf/artwork/blob/master/examples/incubating.md#cilium-logos
• https://cilium.io/newsletter
• hands-on tutorial
• Sphinx
• theme
• Read the Docs

            Domain Name: cilium.io
Registry Domain ID: REDACTED
Registrar WHOIS Server: whois.1api.net
Registrar URL: http://www.1api.net
Updated Date: 2026-05-12T22:32:42Z
Creation Date: 2016-02-12T14:20:56Z
Registry Expiry Date: 2027-02-12T14:20:56Z
Registrar: 1API GmbH
Registrar IANA ID: 1387
Registrar Abuse Contact Email: [email protected]
Registrar Abuse Contact Phone: +49.68949396850
Domain Status: clientTransferProhibited https://icann.org/epp#clientTransferProhibited
Registry Registrant ID: REDACTED
Registrant Name: REDACTED
Registrant Organization: c/o whoisproxy.com
Registrant Street: REDACTED
Registrant City: REDACTED
Registrant State/Province: VA
Registrant Postal Code: REDACTED
Registrant Country: US
Registrant Phone: REDACTED
Registrant Phone Ext: REDACTED
Registrant Fax: REDACTED
Registrant Fax Ext: REDACTED
Registrant Email: REDACTED
Registry Admin ID: REDACTED
Admin Name: REDACTED
Admin Organization: REDACTED
Admin Street: REDACTED
Admin City: REDACTED
Admin State/Province: REDACTED
Admin Postal Code: REDACTED
Admin Country: REDACTED
Admin Phone: REDACTED
Admin Phone Ext: REDACTED
Admin Fax: REDACTED
Admin Fax Ext: REDACTED
Admin Email: REDACTED
Registry Tech ID: REDACTED
Tech Name: REDACTED
Tech Organization: REDACTED
Tech Street: REDACTED
Tech City: REDACTED
Tech State/Province: REDACTED
Tech Postal Code: REDACTED
Tech Country: REDACTED
Tech Phone: REDACTED
Tech Phone Ext: REDACTED
Tech Fax: REDACTED
Tech Fax Ext: REDACTED
Tech Email: REDACTED
Name Server: ns4.dnsimple-edge.org
Name Server: ns3.dnsimple-edge.io
Name Server: ns2.dnsimple-edge.net
Name Server: ns1.dnsimple-edge.com
DNSSEC: unsigned
URL of the ICANN Whois Inaccuracy Complaint Form: https://icann.org/wicf/
>>> Last update of WHOIS database: 2026-06-29T18:16:01Z         

			User-agent: *

Disallow: /

Allow: /en/stable

Allow: /en/latest

Sitemap: https://docs.cilium.io/en/latest/_static/sitemap-index.xml
        

Teknisk SEO

On-Page SEO

Innhold og UX