Cilium Proxy
by pcloudhosting
Version 1.18.3+ Free Support on Ubuntu 24.04
Cilium Proxy is an integrated Layer 7 (L7) proxy component within the Cilium networking and security platform for Kubernetes. It is based on the Envoy proxy and is automatically deployed as part of a Cilium installation. Cilium Proxy enables advanced traffic management, visibility, and security by enforcing application-layer policies for protocols such as HTTP, HTTPS, gRPC, and Kafka using eBPF-powered networking.
Features of Cilium Proxy:
- Provides Layer 7 (L7) traffic visibility and policy enforcement.
- Based on Envoy proxy, tightly integrated with Cilium.
- Enables fine-grained security policies for HTTP, gRPC, and other protocols.
- Supports transparent proxying without application changes.
- Works with eBPF for high-performance and scalable traffic handling.
- Integrates with mTLS for secure service-to-service communication.
Common Cilium Proxy Commands:
$ kubectl get pods -n kube-system | grep cilium-envoy $ kubectl describe pod -n kube-system cilium-envoy-xxxxx $ kubectl logs -n kube-system cilium-envoy-xxxxx $ kubectl get ds cilium-envoy -n kube-system
To Check Cilium Proxy (Envoy) Version:
$ kubectl exec -n kube-system -it ds/cilium-envoy -- envoy --version
Access Cilium Proxy Information:
- Proxy Pod Status:
kubectl get pods -n kube-system - Proxy Logs:
kubectl logs -n kube-system cilium-envoy-xxxxx - Proxy DaemonSet:
kubectl get ds cilium-envoy -n kube-system
Disclaimer: Cilium Proxy is open-source software distributed under the Apache License 2.0 and is part of the Cilium project. It is based on the Envoy proxy and maintained by the Cilium community and Isovalent. The software is provided "as is" without any warranties or guarantees. Users are responsible for proper configuration, security policies, and compliance with Kubernetes best practices.