Welcome to Cilium’s documentation! The documenta�on is divided into the following sec�ons: Ge�ng Started Guides: Provides a simple tutorial for running a small Cilium setup on your laptop. Intended as code or documenta�on. Ge�ng Started Introduc�on to Cilium What is Cilium? Why Cilium? Func�onality Overview Ge�ng Started Guides Installa�on Security Tutorials Advanced Networking Opera�ons Is�o Other Requirements Configura�on Network Policy Endpoint CRD Kubernetes Compa�bility Troubleshoo�ng Is�o Ge�ng Started Using Is�o Docker Cilium with Docker & libnetwork Mesos Cilium with Mesos/Marathon Envoy Envoy Go

Running 0 75s echo-585798dd9d-tn9t4 1/1 Running 0 75s echo-585798dd9d-xmr4p 1/1 Running 0 75s probe-866bb6f696-9lhfw 1/1 Running 0 75s probe-866bb6f696-br4dr Running 0 75s echo-585798dd9d-tn9t4 1/1 Running 0 75s echo-585798dd9d-xmr4p 1/1 Running 0 75s probe-866bb6f696-9lhfw 1/1 Running 0 75s probe-866bb6f696-br4dr Running 0 75s echo-585798dd9d-tn9t4 1/1 Running 0 75s echo-585798dd9d-xmr4p 1/1 Running 0 75s probe-866bb6f696-9lhfw 1/1 Running 0 75s probe-866bb6f696-br4dr

echo-a-5995597649-f5d5g 1/1 Running 0 4m51s echo-b-54c9bb5f5c-p6lxf 1/1 Running 0 4m50s echo-b-host-67446447f7-chvsp connectivity provided by Cilium and NetworkPolicy applies to them: kubectl get pods --all-namespaces -o custom- columns=NAMESPACE:.metadata.namespace,NAME:.metadata.name,HOSTNETWORK:. spec.hostNetwork --no-headers=true echo-a-5995597649-f5d5g 1/1 Running 0 4m51s echo-b-54c9bb5f5c-p6lxf 1/1 Running 0 4m50s echo-b-host-67446447f7-chvsp

1/1 Running 0 66s pod-to-a-allowed-cnp-58b7f7fb8f-lkq7p 1/1 Running 0 66s pod-to-a-denied-cnp-6967cb6f7f-7h9fn hubble release: curl -LO "https://raw.githubusercontent.com/cilium/hubble/master/stable.txt" set /p HUBBLE_VERSION=o custom- columns=NAMESPACE:.metadata.namespace,NAME:.metadata.name,HOSTNETWORK:. spec.hostNetwork --no-headers=true

to prevent conflict behavior. kubectl -n kube-system patch daemonset aws-node --type='strategic' - p='{"spec":{"template":{"spec":{"nodeSelector":{"io.cilium/aws-node- enabled":"true"}}}}}' Install Cilium: connectivity provided by Cilium and NetworkPolicy applies to them: $ kubectl get pods --all-namespaces -o custom- columns=NAMESPACE:.metadata.namespace,NAME:.metadata.name,HOSTNETWORK:. spec.hostNetwork --no-headers=true 1/1 Running 0 66s pod-to-a-allowed-cnp-58b7f7fb8f-lkq7p 1/1 Running 0 66s pod-to-a-denied-cnp-6967cb6f7f-7h9fn

db65b4d-x74nz 1/1 Running 0 68s host-to-b-multi-node-headless-77c64bc7d8-kgf8p 1/1 Running 0 67s pod-to-a-allowed-cnp-87b5895c8-bfw4x 1/1 1/1 Running 0 68s pod-to-external-fqdn-allow-google-cnp-b7b6bcdcb-97p75 1/1 Running 0 68s Note If you deploy the connectivity check to a single node cluster connectivity provided by Cilium and NetworkPolicy applies to them: kubectl get pods --all-namespaces -o custom- columns=NAMESPACE:.metadata.namespace,NAME:.metadata.name,HOSTNETWORK:. spec.hostNetwork --no-headers=true

to prevent conflict behavior. kubectl -n kube-system patch daemonset aws-node --type='strategic' - p='{"spec":{"template":{"spec":{"nodeSelector":{"io.cilium/aws-node- enabled":"true"}}}}}' Install Cilium: connectivity provided by Cilium and NetworkPolicy applies to them: $ kubectl get pods --all-namespaces -o custom- columns=NAMESPACE:.metadata.namespace,NAME:.metadata.name,HOSTNETWORK:. spec.hostNetwork --no-headers=true 1/1 Running 0 66s pod-to-a-allowed-cnp-58b7f7fb8f-lkq7p 1/1 Running 0 66s pod-to-a-denied-cnp-6967cb6f7f-7h9fn