Ciliumvs
Kubernetes


Kubernetes: The platform Cilium plugs into as its networking layer

eBPF-based networking, observability and security for Kubernetes
As of 29 August 2026, Cilium is free to use. CNCF-graduated Kubernetes networking built on eBPF, replacing iptables with kernel-level programs. Softwr lists it under Cloud. Cilium is made by Cloud Native Computing Foundation, available on Self-hosted, Linux.
Overview
Cilium provides networking, observability and security for Kubernetes using eBPF, which allows programs to run inside the Linux kernel without kernel modules. That underpinning is the point: traditional Kubernetes networking relies on iptables rules that degrade as service counts grow, and eBPF replaces them with kernel-level programs that scale differently. Beyond being a CNI plugin, Cilium offers identity-based network policy, service mesh capability without sidecars, and Hubble for network observability. It is the default CNI on several managed Kubernetes services.
The honest half
Concrete and checkable, so you can decide whether any of them matter to you. This is the half of a review a vendor will not write about Cilium.
Cross-shopped
Each pairing was judged by two reviewers asking whether a buyer would genuinely weigh the two against each other. The ones that failed were deleted rather than published.


Kubernetes: The platform Cilium plugs into as its networking layer
Pricing
Taken from the vendor's own pricing page. Prices move, so check before you buy.
Cilium
Free
Capabilities
eBPF datapath
Kernel-level packet processing instead of iptables rule chains
Identity-based policy
Network policy on workload identity rather than IP addresses
Hubble observability
Flow-level visibility into what is talking to what and what is being dropped
Sidecar-free mesh
Mesh features without a proxy container in every pod
Answered, with sources
Each answer names the page it came from, so you can check it rather than take our word for it.
Yes, open source and CNCF-graduated. Isovalent sells an enterprise distribution and support.
It lets Cilium run packet-processing programs inside the kernel instead of relying on iptables rule chains, which behave poorly as the number of services grows.
It can cover much of what a mesh does without sidecars, though full mesh feature sets still favour Istio or Linkerd.
Keep looking
Kubernetes-native storage and data services, priced by the node hour
Cloud cost estimates in pull requests, with governance in the paid tier
Softwr does not host reviews and shows no star rating for Cilium, because a rating we did not collect is not ours to publish. What is here is the pricing and platform detail from the vendor’s own pages, limitations we could state concretely, and alternatives a reviewer confirmed people weigh against it. Tell us if any of it is wrong.
What people switch to, and what they give up
Every tier, and where the cost actually lands
Put it head to head with anything we hold
Its rating, and an embed for your own site
Open source distributed block storage for Kubernetes, incubating at the CNCF
Open source, no licence feeDeployment platform that provisions and operates Kubernetes inside your own cloud account
quoteCloud cost estimates in pull requests, with governance in the paid tier
Free open source tool, then per month by run volumeFree self-hosted platform built on Docker Swarm with a dashboard and automatic certificates
Open source, no licence feeOpen source self-hosted platform that deploys applications and databases to servers you already own
Open source, no licence fee