Cilium

@cilium.io

eBPF-based Networking, Security, and Observability Open Source | http://cilium.io | http://ebpf.io | http://github.com/cilium/cilium Newsletter http://cilium.io/newsletter

"The biggest value for us is that Cilium simply works, and works well. With our previous CNIs, failures were painful and hard to resolve. Now we know that once Cilium is deployed, it will work. That reliability is genuinely valuable.” Read the case study from Michelin: www.cncf.io/case-studies...

Michelin

In 2024, Michelin’s Container as a Service (CaaS) platform team underwent a full rebuild of the company’s Kubernetes platform using open source software, replacing a vendor-based solution that had…

cncf.io

Join eCHO tomorrow for a look at Cilium 1.20, out at the end of the month. Nico Vibert and Donia Chaiehloudj will cover the latest features and updates. Bring any questions about the release! eBPF & Cilium Office Hours 📆 Friday, 24 July, 9am ET / 3pm CEST 📺️ Join live: youtube.com/live/Sk1mhWm...

Bild

🐝 Release announcement 🐝 Cilium release candidate v1.20.0-rc.0 has is now live! This is the first candidate for the v1.20 release. Learn more: github.com/cilium/ciliu... There are v1.20.0-rc.0 OSS docs available if you want to pull this version and try it out: docs.cilium.io/en/v1.20.0-r...

Release 1.20.0-rc.0 · cilium/cilium

Summary of Changes Minor Changes: Adds a new policy entity, cluster-mesh, which selects all endpoints in all meshed clusters. Also, makes the cluster and cluster-mesh create significantly fewer po...

github.com

eCHO Episode 212: Securing OpenClaw with Tetragon This Friday, join Duffie Cooley as he walks through securing OpenClaw with Tetragon with a new hands-on lab. Duffie will demonstrate the what happens if OpenClw goes rogue, observe the damage with Tetragon, and write runtime enforcement policies.

Bild

Part 2 of Cilium's CI/CD security series is live on the Cloud Native Computing Blog. André Martins and Feroz Salam walk through how the project locks down its dependency chain. Most of the takeaways apply to any project running on GitHub Actions, not just Cilium. www.cncf.io/blog/2026/06...

Bild

ExternalAuth is coming to Cilium's Gateway API implementation in v1.20. Join tomorrow's eCHO episode, where Nico Vibert and Daniel Finneran preview a new hands-on lab on the feature. eBPF & Cilium Office Hours 📆 Friday, June 26, 3pm CEST 📺️ Join live: www.youtube.com/watch?v=fFVX...

Bild

André Martins and Feroz Salam wrote up how Cilium hardens its CI/CD pipeline. Part 1, now live on the Cloud Native Computing Foundation Blog, covers access control: who can trigger builds and what code CI is allowed to execute. Read more: www.cncf.io/blog/2026/06...

Bild

OpenAI runs #Cilium as its default #Kubernetes networking stack across multiple cloud environments and bare metal. They turned to Cilium for a consistent CNI, L4/L7 policy without sprawl, and Hubble for production visibility. Read the full case study: isovalent.com/blog/post/op...

OpenAI Uses Isovalent for a Common Networking for AI Infrastructure

OpenAI uses Isovalent Networking for Kubernetes, built on Cilium, for consistent networking, policy, and troubleshooting across AI infrastructure.

isovalent.com

🐝 Release Announcement 🐝 Cilium v1.20.0-pre.3 has been released! github.com/cilium/ciliu... A big thank you to everyone who contributed to & tested the previous pre-releases. 🙏 There are v1.20.0-pre.3 OSS docs available for those who want to pull & try it: docs.cilium.io/en/v1.20.0-p...

Release 1.20.0-pre.3 · cilium/cilium

Summary of Changes Major Changes: Gateway API: ExternalAuth filter support for HTTPRoutes Cilium now supports the ExternalAuth filter type in HTTPRoutes (GEP-1494). Routes can delegate authorizat...

github.com

At #CiliumCon Europe 2026, Weizhou Lan walked through how DaoCloud uses #Cilium and Spiderpool to enforce global north-south bandwidth limits for tenants in multi-replica gateway deployments, something there's no native solution for today. 📺️ Watch for details: youtube.com/watch?v=uAOGDiCFG68

Lightning Talk: Closing the Gap: Fair North–South Bandwidth Management for Tenants - Weizhou Lan

Connect with our current graduated, incubating, and sandbox projects as the community gathers to further the education and advancement of cloud native computing. Learn more at…

youtube.com

Multi-Pool IPAM is stable in Cilium 1.19. Tomorrow, Duffie Cooley will cover what's new on eCHO: label selectors for PodIPPools, IPsec across pools in direct routing mode, and new masquerade controls for source NAT. #eBPF & #Cilium Office Hours 📺️ Join live: www.youtube.com/watch?v=vF62...

eCHO Episode 210: Exploring Multi-Pool IPAM with Cilium 1.19

Join Duffie Cooley for a deep dive into Multi-Pool IPAM, now stable in Cilium 1.19. He'll explore what's new: label selector support for PodIPPools giving teams fine-grained control over IP…

youtube.com

A lot is actively in development across the Cilium project. Martynas Pumputis ran through the highlights at CiliumCon Europe 2026, from datapath plugins to Big TCP over UDP tunnels, multihoming, clang-free, hybrid routing, scale-to-zero, & more. 📺 Watch the talk: www.youtube.com/watch?v=QR-2...

Lightning Talk: What's Happening in Cilium? Current Projects You Need To See - Martynas Pumputis

Connect with our current graduated, incubating, and sandbox projects as the community gathers to further the education and advancement of cloud native computing. Learn more at…

youtube.com

Scaling Tetragon can have a hidden cost: every policy allocates BPF maps in kernel memory, even for features you're not using. SUSE spent time in the Tetragon codebase actually fixing this and got several fixes merged. Learn more in this talk from #CiliumCon Europe: www.youtube.com/watch?v=bgCg...

One Policy To Rule Them All? Scaling Tetragon Without Flooding Your Cluster - Alessio Biancalana

Connect with our current graduated, incubating, and sandbox projects as the community gathers to further the education and advancement of cloud native computing. Learn more at https://kubecon.io One…

youtube.com

Etraveli Group handles hundreds of millions of flight searches daily across on-prem data centers. At CiliumCon 2026, Mikael Johansson Länsberg walked through how they replaced a legacy solution with Cilium's LB-IPAM, BGP control plane & Gateway API. 📺 www.youtube.com/watch?v=KWS-...

Cloud Native Promises, On-Premises: Bump Your Load Balancing To V2 With... Mikael Johansson Länsberg

Connect with our current graduated, incubating, and sandbox projects as the community gathers to further the education and advancement of cloud native computing. Learn more at…

youtube.com

🎉 OPEN SOURCE PROJECT ANNOUNCEMENT: @cilium.io We're excited to welcome Cilium to the Community & Open Source Area at Cloud Native Days Italy 2026! What is Cilium? An open-source project powered by eBPF to provide networking, security, and observability for cloud-native environments.

Multi-cluster networking can get complicated fast. At CiliumCon, Arthur Outhenin-Chalandre (Ledger) and Quentin Swiech (S3NS) walked through #Cilium ClusterMesh inproduction & shared a GitOps-ready blueprint, including a live demo with FluxCD. 📺 www.youtube.com/watch?v=ENgE...

Connecting the World: Your Hands-on Guide To Cilium Cl... Arthur Outhenin-Chalandre & Quentin Swiech

Connect with our current graduated, incubating, and sandbox projects as the community gathers to further the education and advancement of cloud native computing. Learn more at…

youtube.com

Kubernetes didn't win because it was standardized. It became the standard because it solved real problems. Watch Bill Mulligan's keynote from CiliumCon Europe 2026, which applies that same logic to what's next: eBPF and Tetragon. 📺 www.youtube.com/watch?v=XQuL...

CiliumCon | Sponsored Keynote - Built in the Open: Why Cisco Is Betting on eBPF, Ci... Bill Mulligan

Connect with our current graduated, incubating, and sandbox projects as the community gathers to further the education and advancement of cloud native computing. Learn more at…

youtube.com

Can #Cilium's primary CNI run entirely on a DPU? Can it be done with minimal code changes, no added complexity for users, & full hardware acceleration? At the most recent CiliumCon, Vijay Inavolu from Marvell walked through the architecture and performance results ➡️ www.youtube.com/watch?v=S9W8...

Lightning Talk: Accelerating Cilium: Our Journey on Offloading Cilium To DPU - Vijay Inavolu

Connect with our current graduated, incubating, and sandbox projects as the community gathers to further the education and advancement of cloud native computing. Learn more at…

youtube.com

It's always DNS. Even at the edge. Roche runs Kubernetes clusters in hospitals and labs where customer-managed DNS won't resolve public domains. See how Cilium quietly intercepts failing DNS requests and reroutes them w/o firewall or app changes. 📺

It Is Always DNS… Even at the Edge: Taming Proxy-Only Lookups Wi... Hector Monsalve & Thomas Gosteli

Connect with our current graduated, incubating, and sandbox projects as the community gathers to further the education and advancement of cloud native computing. Learn more at https://kubecon.io It…

youtube.com