Softwr
Cilium logo

Cilium

eBPF-based networking, observability and security for Kubernetes

Overview

What Cilium does

Cilium provides networking, observability and security for Kubernetes using eBPF, which allows programs to run inside the Linux kernel without kernel modules. That underpinning is the point: traditional Kubernetes networking relies on iptables rules that degrade as service counts grow, and eBPF replaces them with kernel-level programs that scale differently. Beyond being a CNI plugin, Cilium offers identity-based network policy, service mesh capability without sidecars, and Hubble for network observability. It is the default CNI on several managed Kubernetes services.

What people use it for

  • Kubernetes networking at a scale where iptables-based CNI performance degrades
  • Network policy expressed on workload identity rather than fragile IP rules
  • Seeing which services actually talk to each other, and what policy is dropping

The honest half

Where it falls short

Concrete and checkable, so you can decide whether any of them matter to you. This is the half of a review a vendor will not write about Cilium.

  • Requires a recent Linux kernel, which rules out older distributions and some managed environments
  • eBPF is genuinely hard to debug when it misbehaves, and the skill is rare on most teams
  • Broad scope — CNI, policy, mesh, observability — means the learning curve covers several domains at once

Cross-shopped

What people choose instead of Cilium

Each pairing was judged by two reviewers asking whether a buyer would genuinely weigh the two against each other. The ones that failed were deleted rather than published.

Pricing

What Cilium costs

Taken from the vendor's own pricing page. Prices move, so check before you buy.

Cilium

Free

  • Full functionality
  • No usage limits
  • Community support

Capabilities

Features

  • eBPF datapath

    Kernel-level packet processing instead of iptables rule chains

  • Identity-based policy

    Network policy on workload identity rather than IP addresses

  • Hubble observability

    Flow-level visibility into what is talking to what and what is being dropped

  • Sidecar-free mesh

    Mesh features without a proxy container in every pod

Answered, with sources

Questions people ask

Each answer names the page it came from, so you can check it rather than take our word for it.

Is Cilium free?

Yes, open source and CNCF-graduated. Isovalent sells an enterprise distribution and support.

What does eBPF change?

It lets Cilium run packet-processing programs inside the kernel instead of relying on iptables rule chains, which behave poorly as the number of services grows.

Does Cilium replace a service mesh?

It can cover much of what a mesh does without sidecars, though full mesh feature sets still favour Istio or Linkerd.

Share

Keep looking

Where to go from Cilium

Best Cloud software for

Compare Cilium with

Other Cloud software

  • Serverless Postgres for modern developers

  • Modern infrastructure as code using programming languages

  • Deploy web applications globally

  • Platform for scaling AI and data workloads on Ray, built by Ray's creators

  • Fast inference and fine-tuning platform for open and custom AI models

  • Daemonless container engine with a Docker-compatible CLI

  • A modern cloud platform for the next generation

  • Manage Secrets and Protect Sensitive Data

  • Cloud and AI security platform unifying code, cloud, and runtime protection.

  • Serverless GPU computing with sub-second cold starts and multi-cloud support

  • Serverless GPU infrastructure for real-time AI inference and applications

  • Low-cost cloud API for running open-source AI models

  • Build fast, reliable, and efficient software at scale

Softwr does not host reviews and shows no star rating for Cilium, because a rating we did not collect is not ours to publish. What is here is the pricing and platform detail from the vendor’s own pages, limitations we could state concretely, and alternatives a reviewer confirmed people weigh against it. Tell us if any of it is wrong.

More on Cilium

Best Cloud software alternatives

Distributed tracing system for microservice latency

High-performance TCP and HTTP load balancer

Highly available Prometheus with long-term object storage

GitOps continuous delivery for Kubernetes

Template-free customisation of Kubernetes YAML

Kubernetes management platform for multiple clusters

Web server with automatic HTTPS by default

Compare Cilium with alternatives