Cilium Architecture

Cilium Architecture An architecture diagram generated by Archify. Kubernetes API · NetworkPolicy · Service · Architecture component Kubernetes API NetworkPolicy · Service Cilium Agent · per-node DaemonSet · Architecture component Cilium Agent per-node DaemonSet XDP programs · DDoS defense · eBPF dataplane XDP programs DDoS defense TC programs · Network policy · load balancing · eBPF dataplane TC programs Network policy · load balancing Socket programs · Socket-level routing · eBPF dataplane Socket programs Socket-level routing watches policies · endpoints Load eBPF programs eBPF dataplane Legend Backend Security

How it works

  • • The agent turns Kubernetes state into eBPF programs
  • • All packet processing happens inside the kernel

Key functions

  • • Load balancing that replaces kube-proxy
  • • Identity-based network policy · DDoS defense