Cilium

Cilium 是一种网络、可观测性和安全解决方案，采用基于 eBPF 的数据平面。它提供了一个简单扁平的第 3 层网络，能够以本地路由或覆盖模式跨越多个集群。它具有 L7 协议感知功能，可使用与网络寻址分离的基于身份的安全模型在 L3-L7 上执行网络策略。「Cilium is a networking, observability, and security solution with an eBPF-based dataplane. It provides a simple flat Layer 3 network with the ability to span multiple clusters in either a native routing or overlay mode. It is L7-protocol aware and can enforce network policies on L3-L7 using an identity based security model that is decoupled from network addressing.」