Cilium

Definition

Cilium is an open-source networking and security solution for cloud-native environments, particularly Kubernetes. It leverages eBPF (extended Berkeley Packet Filter) technology to provide high-performance networking, security, and observability features. Cilium enables fine-grained security policies, transparent encryption, and deep visibility into application behavior without requiring changes to application code.

Secure Settings Example

apiVersion: cilium.io/v2
kind: CiliumNetworkPolicy
metadata:
  name: allow-specific-namespace
spec:
  endpointSelector:
    matchLabels:
      app: myapp
  ingress:
  - fromEndpoints:
    - matchLabels:
        namespace: trusted-namespace
  egress:
  - toEndpoints:
    - matchLabels:
        namespace: trusted-namespace
  - toPorts:
    - ports:
      - port: "443"
        protocol: TCP
      rules:
        http:
        - method: GET

Insecure Settings Example

apiVersion: cilium.io/v2
kind: CiliumNetworkPolicy
metadata:
  name: allow-all
spec:
  endpointSelector:
    matchLabels:
      app: myapp
  ingress:
  - {}
  egress:
  - {}