🐝 Cilium & Hubble eBPF Mesh

Sidecarless Kernel-Level L3/L4/L7 Routing, Transparent mTLS & Network Observability

● eBPF Datapath Active

Mesh Architecture

Sidecarless eBPF

mTLS Encryption

Kernel Transparent

L7 Policy Engine

HTTP/gRPC/Kafka/NATS

Network Overhead

< 0.1% CPU

Live Kernel Flow Telemetry (Hubble eBPF Observer)

Source: ingress-nginx → Dest: portal-ui:80 (HTTP/1.1)FORWARDED (eBPF bypass)
Source: fastapi-app → Dest: nats:4222 (TCP/NATS)FORWARDED (SockOps 0-copy)
Source: trino → Dest: hive-metastore:9083 (Thrift)FORWARDED (mTLS Verified)
Source: agent-crewai → Dest: litellm:4000 (HTTP POST)FORWARDED (L7 Audited)
Source: otel-collector → Dest: loki:3100 (OTLP/gRPC)FORWARDED (Kernel Trace)