Cilium Service Mesh Architecture

Cilium Service Mesh Architecture An architecture diagram generated by Archify. Control Plane API · Cilium Operator · Architecture component Control Plane API Cilium Operator Cilium Agent · per node · Architecture component Cilium Agent per node eBPF Programs · kernel, L3/L4 · Architecture component eBPF Programs kernel, L3/L4 Node Envoy · shared L7 proxy · Architecture component Node Envoy shared L7 proxy Pod Traffic · workload connections · Architecture component Pod Traffic workload connections sync config program kernel configure L7 L3/L4 traffic redirect L7 Legend Backend External

Control

  • • the Cilium Agent runs per node and syncs with the control plane API

Data path

  • • eBPF programs handle L3/L4 traffic directly in the kernel
  • • a single shared node Envoy provides L7 features when needed