Hubble Architecture

Hubble Architecture An architecture diagram generated by Archify. eBPF Programs · Kernel datapath · Kubernetes Cluster › Node 1 eBPF Programs Kernel datapath Cilium Agent · Node daemon · Kubernetes Cluster › Node 1 Cilium Agent Node daemon Hubble Observer · Inside Cilium Agent · Kubernetes Cluster › Node 1 Hubble Observer Inside Cilium Agent eBPF Programs · Kernel datapath · Kubernetes Cluster › Node 2 eBPF Programs Kernel datapath Cilium Agent · Node daemon · Kubernetes Cluster › Node 2 Cilium Agent Node daemon Hubble Observer · Inside Cilium Agent · Kubernetes Cluster › Node 2 Hubble Observer Inside Cilium Agent Hubble Relay · Cluster-wide aggregation · Kubernetes Cluster Hubble Relay Cluster-wide aggregation Hubble UI · Visualization dashboard · Kubernetes Cluster Hubble UI Visualization dashboard Hubble CLI · Local installation · Outside the cluster Hubble CLI Local installation Prometheus · Scrapes Hubble Metrics · Outside the cluster Prometheus Scrapes Hubble Metrics Grafana · Metrics dashboards · Outside the cluster Grafana Metrics dashboards flow events flow events flow data aggregated flows hubble observe metrics dashboard queries Kubernetes Cluster Node 1 Node 2 Outside the cluster Legend Frontend Backend Database Security External

Flow path

  • • Hubble Observer is embedded in the Cilium Agent and collects flows per node
  • • Hubble Relay (Deployment) aggregates flows across the whole cluster
  • • Hubble UI (Deployment) and the locally installed Hubble CLI show the aggregated result

Metrics path

  • • Hubble Metrics are also embedded in the Cilium Agent and expose Prometheus metrics
  • • dns, drop, tcp, flow, icmp and http metrics are enabled through Helm values
  • • Grafana dashboards visualize the metrics scraped by Prometheus