Cilium

eBPF CNI and sidecar-free service mesh with L7 policy, Hubble observability and optional transparent encryption.

Provider: default
Kind: Service mesh
Category: Operations
Official docs: https://docs.cilium.io/en/stable/security/network/encryption/

Properties · 5 set by this component

property	type	values	required	kind default	this component
circuitBreaking	boolean	—	no	false	▸ false
controlPlanes	integer	—	no	—	inherited
hubbleObservability · component property	boolean	—	no	false	inherited
kubeProxyReplacement · component property	boolean	—	no	false	inherited
managed	boolean	—	no	false	▸ false
mtls	boolean	—	no	false	▸ false
retries	boolean	—	no	false	▸ false
sidecar	boolean	—	no	true	▸ false
transparentEncryption · component property	enum	none \| ipsec \| wireguard	no	none	inherited

Rules that apply · 0

Every rule whose selector covers this component's kind or its category. Whether a rule fires depends on the design: its properties, its edges and its groups.

No rule reads this kind yet. That is a gap, not a guarantee.

Use it in a design

nodes:
  - { id: "cilium", component: "cilium" }

Other Service mesh products · 11

AWS App Meshaws-app-meshawsservice-mesh Amazon VPC Latticeaws-vpc-latticeawsservice-mesh Consul Connectconsul-connectservice-mesh Daprdaprservice-mesh Envoy sidecarenvoy-sidecarservice-mesh Istioistioservice-mesh Kmeshkmeshservice-mesh Kumakumaservice-mesh Linkerdlinkerdservice-mesh Generic service meshservice-meshservice-mesh Cloud Service Meshgoogle-cloud-service-meshgcpservice-mesh

Source

1# yaml-language-server: $schema=../../schema/component.schema.json
2# Cilium: eBPF CNI and service mesh. Sidecar-free datapath (per-node Envoy only for L7),
3# transparent encryption (IPsec/WireGuard) is opt-in per "Encryption" in the Cilium docs.
4schemaVersion: "1"
5type: "component"
6id: "cilium"
7kind: "service-mesh"
8provider: "default"
9docs: "https://docs.cilium.io/en/stable/security/network/encryption/"
10defaults:
11  managed: false
12  sidecar: false
13  mtls: false
14  retries: false
15  circuitBreaking: false
16properties:
17  transparentEncryption:
18    type: "enum"
19    values: ["none", "ipsec", "wireguard"]
20    default: "none"
21  hubbleObservability:
22    type: "boolean"
23    default: false
24  kubeProxyReplacement:
25    type: "boolean"
26    default: false

The same page as markdown, for an agent: /catalogue/components/cilium.md