Cilium

Cilium

@cilium.io

eBPF-based Networking, Security, and Observability Open Source | http://cilium.io | http://ebpf.io | http://github.com/cilium/cilium Newsletter http://cilium.io/newsletter

1.1K followers26 following2K posts

Marino Wijay will make the case at CiliumCon that IPv6 lets AI-scale Kubernetes keep growing since dense AI clusters can exhaust private IPv4 space faster than teams expect. The talk will include production examples and a live demo. See the full schedule: cilium.io/blog/2026/09...

At CiliumConVenkat Gattupalli and Haibing Zhou of OpenAI will share hoe eBPF helped them trace rare packet loss in latency-sensitive inference workloads, and debug and mitigate latency issues. Monday, November 9 | 11:15 - 11:40 AM See the full CiliumCon schedule: cilium.io/blog/2026/09...

Anubhab Majumdar and Vamsi Kalapala will use Cilium Cluster Mesh at CiliumCon to show what makes multi-cluster networking practical at cloud scale, from scoped service export to aligning the data path with network topology. See the full schedule: cilium.io/blog/2026/09...

Liz Rice will give a keynote at CiliumCon about using Tetragon for runtime protection when vulnerabilities outpace patching. The talk will share the latest developments in guardrails and mitigations that can be deployed without downtime. See the full schedule: cilium.io/blog/2026/09...

Kapil Agrawal and Luke Baker of ESnet will return to CiliumCon with an update on running K8s on an IPv6-only network. They'll cover what broke while building out ClusterMesh, BGP, and multi-pool IPAM without IPv4, and how they resolved it. See the full schedule: cilium.io/blog/2026/09...

Join Quang Nguyen and Robin Gögge at CiliumCon next month as they explain how Cilium's sidecarless mTLS works. The session will include a live demo of upstream SPIRE work to bind certificates to a requesting process. See the full schedule: cilium.io/blog/2026/09...

KubeCon and CiliumCon are just over a month away! As you plan your schedule, here's where to find Cilium during the event. There will be end user talks from OpenAI, Walmart Global Tech, and GEICO and from contributors and maintainers on new features. Find the full list: cilium.io/blog/2026/09...

“For AI workloads, network performance directly affects how fast our models train & how efficiently we use our hardware. Cilium offered direct routing without the complexity of managing different networking stacks across our clusters.” How Preferred Networks runs Cilium: www.cncf.io/case-studies...

cncf.ioPreferred NetworksPreferred Networks is one of Japan’s leading artificial intelligence companies, founded in Tokyo in 2014. It develops technology across the entire AI value chain, spanning AI chips…

“Cilium made my job genuinely easier. Hubble tells me what’s happening on the network in seconds. That’s the difference between guessing and knowing.” Read more about why Celonis standardized on Cilium for networking across 150+ Kubernetes clusters: www.cncf.io/case-studies...

cncf.ioCelonisCelonis is the global leader in process intelligence. Industry-leading companies around the world trust Celonis and its global ecosystem of partners to make their AI agents, people, systems…

Splunk deployed Tetragon across Kubernetes clusters running Splunk Cloud Services to serve as the foundation of its runtime security observability program, replacing 3 existing tools. Today, CPU utilization has dropped by 67% and memory utilization by 74%. Learn more: www.cncf.io/case-studies...

cncf.ioSplunkSplunk is a data analytics and observability platform that helps organizations search, monitor, and analyze machine-generated data from IT systems, security infrastructure, and business applications.

“Everything fits like Lego bricks, you can just enable new features.” - Mikael Johansson Lansberg Learn more about how Etraveli replaced proprietary load balancers and eliminated production downtime with Cilium in a new case study: www.cncf.io/case-studies...

🐝 Release Announcement 🐝 Cilium v1.21.0-pre.2 has been released: github.com/cilium/ciliu... Thank you to those who have tested and contributed to the previous pre-releases. There are docs available for those who want to pull this version & try it out: docs.cilium.io/en/v1.21.0-p...

github.comRelease 1.21.0-pre.2 · cilium/ciliumSummary of Changes ⚠️ Due to a release issue, the v1.21.0-pre.1 has not been completed, instead we are publishing v1.21.0-pre.2. This changelog contains the changes from v1.21.0-pre.0 to v1.21.0-pr...

Join Liz Rice and Duffie Cooley to see how Tetragon's runtime observability can monitor process, file, and network activity on GitHub Actions runners to protect CI/CD pipelines. eBPF & Cilium Office Hours 📆 Fri, 11 Sept, 9am PT 📺️ Join live: www.youtube.com/watch?v=rvrN...

youtube.comeCHO Episode 215: Exploring Tetragon in GitHub ActionsJoin Liz Rice and Duffie Cooley to look at using Tetragon in GitHub Actions. CI/CD pipelines are an increasingly popular attack target, and GitHub Actions runners run untrusted code with access to…

Adyen traced intermittent Kubernetes pod setup timeouts on high-resource nodes to Cilium's conntrack garbage collection, and fixed it with a one-line config change. The writeup walks through the diagnosis and the fix. www.adyen.com/knowledge-hu...

adyen.comSolving mysterious Kubernetes pod setup timeouts by tuning conntrack garbage collection - AdyenHow Adyen resolved mysterious Kubernetes pod setup timeouts by optimizing Cilium CNI connection tracking garbage collection configuration.

Join us tomorrow, August 7 at 2pm ET for eCHO Episode 214. Duffie Cooley will talk with Hadrien Patte from Datadog to talk through his work on Cilium 1.20, and before. eBPF & Cilium Office Hours 📆 Friday, August 7 at 2pm ET / 8pm CEST 📺️ Join live: www.youtube.com/watch?v=MlwG...

youtube.comEpisode 214: Contributing to Cilium 1.20 with Hadrien Patte of DatadogJoin Duffie Cooley as he talks with Hadrien Patte from Datadog about what he's been working on in Cilium 1.20, how he got started contributing to CIlium, and how he finds issues to contribute…

"The biggest value for us is that Cilium simply works, and works well. With our previous CNIs, failures were painful and hard to resolve. Now we know that once Cilium is deployed, it will work. That reliability is genuinely valuable.” Read the case study from Michelin: www.cncf.io/case-studies...

cncf.ioMichelinIn 2024, Michelin’s Container as a Service (CaaS) platform team underwent a full rebuild of the company’s Kubernetes platform using open source software, replacing a vendor-based solution that had…

Join eCHO tomorrow for a look at Cilium 1.20, out at the end of the month. Nico Vibert and Donia Chaiehloudj will cover the latest features and updates. Bring any questions about the release! eBPF & Cilium Office Hours 📆 Friday, 24 July, 9am ET / 3pm CEST 📺️ Join live: youtube.com/live/Sk1mhWm...

The final post in Cilium's CI/CD hardening series by André Martins and Feroz Salam is out, covering isolating credentials and signing releases, and the gaps that are still open. Read more: www.cncf.io/blog/2026/06... #Cilium #eBPF #Kubernetes #SupplyChainSecurity

🐝 Release announcement 🐝 Cilium release candidate v1.20.0-rc.0 has is now live! This is the first candidate for the v1.20 release. Learn more: github.com/cilium/ciliu... There are v1.20.0-rc.0 OSS docs available if you want to pull this version and try it out: docs.cilium.io/en/v1.20.0-r...

github.comRelease 1.20.0-rc.0 · cilium/ciliumSummary of Changes Minor Changes: Adds a new policy entity, cluster-mesh, which selects all endpoints in all meshed clusters. Also, makes the cluster and cluster-mesh create significantly fewer po...

eCHO Episode 212: Securing OpenClaw with Tetragon This Friday, join Duffie Cooley as he walks through securing OpenClaw with Tetragon with a new hands-on lab. Duffie will demonstrate the what happens if OpenClw goes rogue, observe the damage with Tetragon, and write runtime enforcement policies.

Part 2 of Cilium's CI/CD security series is live on the Cloud Native Computing Blog. André Martins and Feroz Salam walk through how the project locks down its dependency chain. Most of the takeaways apply to any project running on GitHub Actions, not just Cilium. www.cncf.io/blog/2026/06...

ExternalAuth is coming to Cilium's Gateway API implementation in v1.20. Join tomorrow's eCHO episode, where Nico Vibert and Daniel Finneran preview a new hands-on lab on the feature. eBPF & Cilium Office Hours 📆 Friday, June 26, 3pm CEST 📺️ Join live: www.youtube.com/watch?v=fFVX...

André Martins and Feroz Salam wrote up how Cilium hardens its CI/CD pipeline. Part 1, now live on the Cloud Native Computing Foundation Blog, covers access control: who can trigger builds and what code CI is allowed to execute. Read more: www.cncf.io/blog/2026/06...

The CFP for #CiliumCon at #KubeCon North America 2026 closes Sun, June 21st. If you're working on #Cilium, #eBPF, networking, security, or observability in #cloudnative environments, we'd love for you to submit a talk. 📝 Learn more: events.linuxfoundation.org/kubecon-clou...

events.linuxfoundation.orgCiliumCon | LF EventsCilium is an open source, widely-used, and highly scalable cloud native networking, observability, and security solution based on the kernel technology eBPF, that connects workloads in Kubernetes and…

OpenAI runs #Cilium as its default #Kubernetes networking stack across multiple cloud environments and bare metal. They turned to Cilium for a consistent CNI, L4/L7 policy without sprawl, and Hubble for production visibility. Read the full case study: isovalent.com/blog/post/op...

isovalent.comOpenAI Uses Isovalent for a Common Networking for AI InfrastructureOpenAI uses Isovalent Networking for Kubernetes, built on Cilium, for consistent networking, policy, and troubleshooting across AI infrastructure.

🐝 Release Announcement 🐝 Cilium v1.20.0-pre.3 has been released! github.com/cilium/ciliu... A big thank you to everyone who contributed to & tested the previous pre-releases. 🙏 There are v1.20.0-pre.3 OSS docs available for those who want to pull & try it: docs.cilium.io/en/v1.20.0-p...

github.comRelease 1.20.0-pre.3 · cilium/ciliumSummary of Changes Major Changes: Gateway API: ExternalAuth filter support for HTTPRoutes Cilium now supports the ExternalAuth filter type in HTTPRoutes (GEP-1494). Routes can delegate authorizat...

At #CiliumCon Europe 2026, Weizhou Lan walked through how DaoCloud uses #Cilium and Spiderpool to enforce global north-south bandwidth limits for tenants in multi-replica gateway deployments, something there's no native solution for today. 📺️ Watch for details: youtube.com/watch?v=uAOGDiCFG68

youtube.comLightning Talk: Closing the Gap: Fair North–South Bandwidth Management for Tenants - Weizhou LanConnect with our current graduated, incubating, and sandbox projects as the community gathers to further the education and advancement of cloud native computing. Learn more at…

Multi-Pool IPAM is stable in Cilium 1.19. Tomorrow, Duffie Cooley will cover what's new on eCHO: label selectors for PodIPPools, IPsec across pools in direct routing mode, and new masquerade controls for source NAT. #eBPF & #Cilium Office Hours 📺️ Join live: www.youtube.com/watch?v=vF62...

youtube.comeCHO Episode 210: Exploring Multi-Pool IPAM with Cilium 1.19Join Duffie Cooley for a deep dive into Multi-Pool IPAM, now stable in Cilium 1.19. He'll explore what's new: label selector support for PodIPPools giving teams fine-grained control over IP…

A lot is actively in development across the Cilium project. Martynas Pumputis ran through the highlights at CiliumCon Europe 2026, from datapath plugins to Big TCP over UDP tunnels, multihoming, clang-free, hybrid routing, scale-to-zero, & more. 📺 Watch the talk: www.youtube.com/watch?v=QR-2...

youtube.comLightning Talk: What's Happening in Cilium? Current Projects You Need To See - Martynas PumputisConnect with our current graduated, incubating, and sandbox projects as the community gathers to further the education and advancement of cloud native computing. Learn more at…

Scaling Tetragon can have a hidden cost: every policy allocates BPF maps in kernel memory, even for features you're not using. SUSE spent time in the Tetragon codebase actually fixing this and got several fixes merged. Learn more in this talk from #CiliumCon Europe: www.youtube.com/watch?v=bgCg...

youtube.comOne Policy To Rule Them All? Scaling Tetragon Without Flooding Your Cluster - Alessio BiancalanaConnect with our current graduated, incubating, and sandbox projects as the community gathers to further the education and advancement of cloud native computing. Learn more at https://kubecon.io One…

Etraveli Group handles hundreds of millions of flight searches daily across on-prem data centers. At CiliumCon 2026, Mikael Johansson Länsberg walked through how they replaced a legacy solution with Cilium's LB-IPAM, BGP control plane & Gateway API. 📺 www.youtube.com/watch?v=KWS-...

youtube.comCloud Native Promises, On-Premises: Bump Your Load Balancing To V2 With... Mikael Johansson LänsbergConnect with our current graduated, incubating, and sandbox projects as the community gathers to further the education and advancement of cloud native computing. Learn more at…

Cilium reposted

🎉 OPEN SOURCE PROJECT ANNOUNCEMENT: @cilium.io We're excited to welcome Cilium to the Community & Open Source Area at Cloud Native Days Italy 2026! What is Cilium? An open-source project powered by eBPF to provide networking, security, and observability for cloud-native environments.

Multi-cluster networking can get complicated fast. At CiliumCon, Arthur Outhenin-Chalandre (Ledger) and Quentin Swiech (S3NS) walked through #Cilium ClusterMesh inproduction & shared a GitOps-ready blueprint, including a live demo with FluxCD. 📺 www.youtube.com/watch?v=ENgE...

youtube.comConnecting the World: Your Hands-on Guide To Cilium Cl... Arthur Outhenin-Chalandre & Quentin SwiechConnect with our current graduated, incubating, and sandbox projects as the community gathers to further the education and advancement of cloud native computing. Learn more at…

Join Nico Vibert and Dan Finneran this Friday for a for a sneak peek at a lab demonstrating how #Tetragon can protect against an #OpenClaw agent trying to access or share private data. #eBPF & #Cilium Office Hours 📆 Friday, May 8, 9am ET / 3pm CEST 📺️ Join live: www.youtube.com/watch?v=G2R3...

Kubernetes didn't win because it was standardized. It became the standard because it solved real problems. Watch Bill Mulligan's keynote from CiliumCon Europe 2026, which applies that same logic to what's next: eBPF and Tetragon. 📺 www.youtube.com/watch?v=XQuL...

youtube.comCiliumCon | Sponsored Keynote - Built in the Open: Why Cisco Is Betting on eBPF, Ci... Bill MulliganConnect with our current graduated, incubating, and sandbox projects as the community gathers to further the education and advancement of cloud native computing. Learn more at…

Can #Cilium's primary CNI run entirely on a DPU? Can it be done with minimal code changes, no added complexity for users, & full hardware acceleration? At the most recent CiliumCon, Vijay Inavolu from Marvell walked through the architecture and performance results ➡️ www.youtube.com/watch?v=S9W8...

youtube.comLightning Talk: Accelerating Cilium: Our Journey on Offloading Cilium To DPU - Vijay InavoluConnect with our current graduated, incubating, and sandbox projects as the community gathers to further the education and advancement of cloud native computing. Learn more at…

It's always DNS. Even at the edge. Roche runs Kubernetes clusters in hospitals and labs where customer-managed DNS won't resolve public domains. See how Cilium quietly intercepts failing DNS requests and reroutes them w/o firewall or app changes. 📺

youtube.comIt Is Always DNS… Even at the Edge: Taming Proxy-Only Lookups Wi... Hector Monsalve & Thomas GosteliConnect with our current graduated, incubating, and sandbox projects as the community gathers to further the education and advancement of cloud native computing. Learn more at https://kubecon.io It…