Owner

cilium

28 indexed repositories · View on GitHub

cilium
eBPF-based Networking, Security, and Observability

Go · 25360 stars
ebpf
ebpf-go is a pure-Go library to read, modify and load eBPF programs and attach them to various hooks in the Linux kernel.

Go · 7962 stars
tetragon
eBPF-based Security Observability and Runtime Enforcement

C · 5018 stars
hubble
Hubble - Network, Service & Security Observability for Kubernetes using eBPF

Makefile · 4340 stars
pwru
Packet, where are you? -- eBPF-based Linux kernel networking debugger

C · 3829 stars
cilium-cli
CLI to install, manage & troubleshoot Kubernetes clusters running Cilium

Makefile · 597 stars
hubble-ui
Observability & Troubleshooting for Kubernetes Services

TypeScript · 537 stars
proxy
Envoy with Cilium filters

C++ · 190 stars
little-vm-helper
tool for building and running VMs for development and testing

Go · 129 stars
statedb
In-memory state database for Go

Go · 102 stars
cilium.io
Cilium project website

JavaScript · 72 stars
design-cfps
Repo to store Cilium CFP design docs

45 stars
workerpool
Run tasks concurrently with limits

Go · 35 stars
certgen
A convenience tool to generate and store certificates for Hubble Relay mTLS

Go · 30 stars
little-vm-helper-images

Dockerfile · 28 stars
fake
A Go library to generate random data for testing and/or performance evaluation

Go · 28 stars
image-tools
Dockerfiles for cilium-runtime and cilium-builder dependencies

Shell · 28 stars
hive
Hive dependency injection

Go · 27 stars
community
Here you can find community content around Cilium

Shell · 25 stars
ci-kernels
A collection of kernels used for CI builds

Shell · 19 stars
8 more repositories live on View on GitHub

Beginner friendly Everything

Open All

bug : Field-filter failure delivers unredacted events instead of failing closed Open

Difficulty 4/5 3-5 days Newbie friendliness 56/100

cilium/tetragon#5685 · Opened Sep 19, 2026
CI: ci-kpr-aks flakes on NodePort readiness when the exec stream times out Open

Difficulty 3/5 1-2 days Newbie friendliness 74/100

cilium/cilium#48859 · 1 comment · Opened Sep 18, 2026
Add support for specifying ListenerSet in addition to HTTPRoutes in Helm chart Open

kind/cfp kind/feature

Difficulty 3/5 1-2 days Newbie friendliness 67/100

cilium/cilium#48856 · 1 comment · 2 reactions · Opened Sep 18, 2026
Convert `DEBUG_TAGGED` to runtime config Open

area/datapath area/loader kind/enhancement

Difficulty 5/5 Over a week Newbie friendliness 25/100

cilium/cilium#48855 · Opened Sep 18, 2026
Migrate map spec macros Open

area/datapath kind/enhancement kind/meta

Difficulty 5/5 Over a week Newbie friendliness 35/100

cilium/cilium#48853 · 1 reaction · Opened Sep 18, 2026
Convert `ENABLE_IPV6` to runtime config Open

area/datapath area/loader kind/enhancement

Difficulty 5/5 Over a week Newbie friendliness 25/100

cilium/cilium#48852 · Opened Sep 18, 2026
Convert `ENABLE_IPV4` to runtime config Open

area/datapath area/loader kind/enhancement

Difficulty 5/5 Over a week Newbie friendliness 20/100

cilium/cilium#48851 · Opened Sep 18, 2026
Convert `ENABLE_DSR` to runtime config Open

area/datapath area/loader kind/enhancement

Difficulty 4/5 3-5 days Newbie friendliness 35/100

cilium/cilium#48850 · Opened Sep 18, 2026
Convert `ENABLE_NODEPORT_ACCELERATION` to runtime config Open

area/datapath area/loader kind/enhancement

Difficulty 4/5 3-5 days Newbie friendliness 35/100

cilium/cilium#48849 · Opened Sep 18, 2026
Convert `ENABLE_NODEPORT` to runtime config Open

area/datapath area/loader kind/enhancement

Difficulty 4/5 3-5 days Newbie friendliness 35/100

cilium/cilium#48848 · Opened Sep 18, 2026
Convert `POLICY_VERDICT_NOTIFY` to runtime config Open

area/datapath area/loader kind/enhancement

Difficulty 4/5 3-5 days Newbie friendliness 35/100

cilium/cilium#48847 · Opened Sep 18, 2026
Convert `TRACE_NOTIFY` to runtime config Open

area/datapath area/loader kind/enhancement

Difficulty 4/5 3-5 days Newbie friendliness 30/100

cilium/cilium#48845 · Opened Sep 18, 2026
Convert `DROP_NOTIFY` to runtime config Open

area/datapath area/loader kind/enhancement

Difficulty 4/5 3-5 days Newbie friendliness 35/100

cilium/cilium#48844 · Opened Sep 18, 2026
Convert `DEBUG` to runtime config Open

area/datapath area/loader kind/enhancement

Difficulty 5/5 Over a week Newbie friendliness 25/100

cilium/cilium#48843 · Opened Sep 18, 2026
Convert `ENABLE_BANDWIDTH_MANAGER` (`option.Config.EnableBandwidthManager`) to runtime config Open

area/datapath area/loader kind/enhancement

Difficulty 4/5 3-5 days Newbie friendliness 35/100

cilium/cilium#48842 · Opened Sep 18, 2026
Convert `ENABLE_EGRESS_GATEWAY` to runtime config Open

area/datapath area/loader kind/enhancement

Difficulty 4/5 3-5 days Newbie friendliness 25/100

cilium/cilium#48841 · Opened Sep 18, 2026
Convert `TUNNEL_MODE` (`option.Config.TunnelingEnabled()`) to runtime config Open

area/datapath area/loader kind/enhancement

Difficulty 4/5 3-5 days Newbie friendliness 35/100

cilium/cilium#48840 · Opened Sep 18, 2026
Convert `ENABLE_ROUTING` (per-endpoint: `e.RequireRouting()`) to runtime config Open

area/datapath area/loader kind/enhancement

Difficulty 4/5 3-5 days Newbie friendliness 35/100

cilium/cilium#48839 · Opened Sep 18, 2026
Convert `ENABLE_NAT_46X64_GATEWAY` (`option.Config.EnableNat46X64Gateway`) to runtime config Open

area/datapath area/loader kind/enhancement

Difficulty 4/5 3-5 days Newbie friendliness 35/100

cilium/cilium#48838 · Opened Sep 18, 2026
Convert `ENABLE_NAT_46X64` (`option.Config.NodePortNat46X64`) to runtime config Open

area/datapath area/loader kind/enhancement

Difficulty 4/5 3-5 days Newbie friendliness 35/100

cilium/cilium#48837 · Opened Sep 18, 2026
Convert `ENABLE_IP_MASQ_AGENT_IPV6` (`option.Config.EnableIPMasqAgent`) to runtime config Open

area/datapath area/loader kind/enhancement

Difficulty 4/5 3-5 days Newbie friendliness 35/100

cilium/cilium#48836 · Opened Sep 18, 2026
Convert `ENABLE_IP_MASQ_AGENT_IPV4` (`option.Config.EnableIPMasqAgent`) to runtime config Open

area/datapath area/loader kind/enhancement

Difficulty 4/5 3-5 days Newbie friendliness 35/100

cilium/cilium#48835 · Opened Sep 18, 2026
Convert `ENABLE_MASQUERADE_IPV6` (`option.Config.EnableIPv6Masquerade`) to runtime config Open

area/datapath area/loader kind/enhancement

Difficulty 3/5 1-2 days Newbie friendliness 38/100

cilium/cilium#48834 · Opened Sep 18, 2026
Convert `ENABLE_MASQUERADE_IPV4` (`option.Config.EnableIPv4Masquerade`) to runtime config Open

area/datapath area/loader kind/enhancement

Difficulty 4/5 3-5 days Newbie friendliness 35/100

cilium/cilium#48833 · Opened Sep 18, 2026
Convert `ENABLE_HOST_FIREWALL` (`option.Config.EnableHostFirewall`) to runtime config Open

area/datapath area/loader kind/enhancement

Difficulty 4/5 3-5 days Newbie friendliness 25/100

cilium/cilium#48832 · Opened Sep 18, 2026
Convert `ENABLE_MKE` (`option.Config.EnableMKE`) to runtime config Open

area/datapath area/loader kind/enhancement

Difficulty 4/5 3-5 days Newbie friendliness 35/100

cilium/cilium#48831 · Opened Sep 18, 2026
Convert `ENABLE_SOCKET_LB_PEER` (`option.Config.EnableSocketLBPeer`) into runtime config Open

area/datapath area/loader kind/enhancement

Difficulty 4/5 3-5 days Newbie friendliness 35/100

cilium/cilium#48830 · Opened Sep 18, 2026
Convert `ENABLE_SOCKET_LB_HOST_ONLY` (`h.kprCfg.EnableSocketLB`) into runtime config Open

area/datapath area/loader kind/enhancement

Difficulty 4/5 3-5 days Newbie friendliness 30/100

cilium/cilium#48829 · Opened Sep 18, 2026
Convert `ENABLE_SOCKET_LB_FULL` (`h.kprCfg.EnableSocketLB`) to runtime config Open

area/datapath area/loader kind/enhancement

Difficulty 4/5 3-5 days Newbie friendliness 35/100

cilium/cilium#48828 · Opened Sep 18, 2026
Convert `ENABLE_L7_LB` (`option.Config.EnableEnvoyConfig`) to runtime config Open

area/datapath area/loader kind/enhancement

Difficulty 4/5 3-5 days Newbie friendliness 25/100

cilium/cilium#48827 · Opened Sep 18, 2026
Convert `DSR_ENCAP_MODE` (GENEVE, IPIP - `cfg.LBConfig.DSRDispatch`) to runtime config Open

area/datapath area/loader kind/enhancement

Difficulty 4/5 3-5 days Newbie friendliness 35/100

cilium/cilium#48826 · Opened Sep 18, 2026
Convert `ENABLE_SRV6_SRH_ENCAP` (`option.Config.SRv6EncapMode`) to runtime config Open

area/datapath area/loader kind/enhancement

Difficulty 4/5 3-5 days Newbie friendliness 35/100

cilium/cilium#48825 · Opened Sep 18, 2026
Convert `ENABLE_SRV6` (`option.Config.EnableSRv6`) to runtime config Open

area/datapath area/loader kind/enhancement

Difficulty 4/5 3-5 days Newbie friendliness 35/100

cilium/cilium#48824 · Opened Sep 18, 2026
Convert `ENABLE_SCTP` (`option.Config.EnableSCTP`) to runtime config Open

area/datapath area/loader kind/enhancement

Difficulty 4/5 3-5 days Newbie friendliness 35/100

cilium/cilium#48823 · 1 comment · Opened Sep 18, 2026
images/runtime: the Ubuntu base image's /usr/bin/pebble is the only Go 1.26.5 binary left in cilium:v1.20.2 (8 HIGH stdlib CVEs in a binary Cilium never runs) — bump the ubuntu:26.04 digest or drop the binary Open

area/build area/supply-chain kind/community-report

Difficulty 2/5 1-3 hours Newbie friendliness 78/100

cilium/cilium#48811 · 1 comment · Opened Sep 17, 2026
feature: allow matchUserCaller to match on the immediate caller on arm64 Open

Difficulty 5/5 Over a week Newbie friendliness 25/100

cilium/tetragon#5662 · Opened Sep 17, 2026
bug : logger.Fatal exits 255 and skips deferred cleanup (pidfile, metrics, sensor unload) Open

Difficulty 2/5 1-3 hours Newbie friendliness 85/100

cilium/tetragon#5659 · 1 comment · Opened Sep 17, 2026
Cluster Mesh docs: workloads do not need a restart after a cluster ID/name change, but Hubble server certs do need regenerating Open

kind/bug kind/community-report needs/triage

Difficulty 3/5 1-2 days Newbie friendliness 72/100

cilium/cilium#48800 · 1 comment · Opened Sep 17, 2026
Gateway API services no longer L2 announced in 1.20.2 Open

kind/bug kind/community-report needs/triage

Difficulty 4/5 3-5 days Newbie friendliness 56/100

cilium/cilium#48799 · 2 comments · 1 reaction · Opened Sep 17, 2026
Cilium connectivity tests with DNS egress rules are broken in Gardener Kubernetes clusters Open

kind/bug kind/community-report needs/triage

Difficulty 3/5 1-2 days Newbie friendliness 72/100

cilium/cilium#48794 · 1 comment · Opened Sep 17, 2026
docs: add MTU and PMTU guidance for DSR dispatch modes Open

area/documentation area/mtu feature/dsr

cilium/cilium#48784 · 1 assignee · Opened Sep 17, 2026
bpf: testing: provide test coverage for tc skb packets that are gso aggregated. Open

Difficulty 4/5 3-5 days Newbie friendliness 55/100

cilium/cilium#48782 · Opened Sep 16, 2026
1.19: unconditional NOTRACK for tunnel traffic breaks nodes that forward + SNAT vxlan for other nodes (ClusterMesh over an overlay VPN) Open

Difficulty 4/5 3-5 days Newbie friendliness 55/100

cilium/cilium#48781 · 1 comment · Opened Sep 16, 2026
[bug] lbipam : operator panics when a service with a sharing-key requests a reserved first/last IP Open

kind/bug kind/community-report needs/triage

Difficulty 2/5 1-3 hours Newbie friendliness 86/100

cilium/cilium#48779 · 1 comment · Opened Sep 16, 2026
1.20.2 regression: socket-LB programs fail CO-RE relocation on kernels without BTF, starving the endpoint API and blocking all pod networking Open

affects/main affects/v1.20 area/datapath area/loader kind/regression

Difficulty 4/5 3-5 days Newbie friendliness 52/100

cilium/cilium#48778 · 6 comments · Opened Sep 16, 2026
Incorrect validation: `reserved:.*` required even with only exclusive label patterns Open

kind/bug kind/community-report needs/triage

Difficulty 3/5 1-2 days Newbie friendliness 76/100

cilium/cilium#48776 · 1 comment · Opened Sep 16, 2026
TestProgramVerifierOutputOnError fails on mainline Open

bug

cilium/ebpf#2105 · 1 assignee · Opened Sep 16, 2026
bug : daemon panic on empty/all-NUL matchArgs values in NUL-strip selectors Open

Difficulty 3/5 1-2 days Newbie friendliness 84/100

cilium/tetragon#5650 · 2 comments · Opened Sep 16, 2026
L7 regex NACK loop starves the agent API and blocks all pod creation on the node Open

area/agent area/proxy kind/bug kind/community-report sig/policy

cilium/cilium#48773 · 4 comments · 1 assignee · Opened Sep 16, 2026
bpf: clarify Map.Lookup value ownership and reduce lookup allocations Open

area/datapath kind/cfp kind/feature kind/tech-debt

Difficulty 4/5 3-5 days Newbie friendliness 48/100

cilium/cilium#48760 · 1 comment · Opened Sep 16, 2026

Showing the newest 100

This page lists what was indexed most recently. Advanced filter has the whole inventory, narrowed by language, difficulty and how long a task takes.

Open advanced filter

cilium

Showing the newest 100

Get new issues in your inbox