An eBPF-based networking layer for Kubernetes that's become the default choice for teams that outgrow basic CNI plugins - genuinely changes what's possible for cluster networking and security.
Where cilium fits, based on its real tags and topics.
git clone https://github.com/cilium/cilium.gitSee the repository's README for language-specific setup steps.
|cii| |go-report| |clomonitor| |artifacthub| |slack| |go-doc| |rtd| |apache| |bsd| |gpl| |fossa| |gateway-api| |codespaces|
Cilium is a networking, observability, and security solution with an eBPF-based dataplane. It provides a simple flat Layer 3 network with the ability to span multiple clusters in either a native routing or overlay mode. It is L7-protocol aware and can enforce network policies on L3-L7 using an identity-based security model that is decoupled from network addressing.
Cilium implements distributed load balancing for traffic between pods and to external services, and is able to fully replace kube-proxy, using efficient hash tables in eBPF, allowing for almost unlimited scale. It also supports advanced functionality like integrated ingress and egress gateways, bandwidth management, and service mesh, and provides deep network and security visibility and monitoring.
Category: ☁️ Cloud
Difficulty: Advanced
Part of: Cloud & Infrastructure
“The default choice for production React today - server components, file-based routing, and first-class deployment story make it the fastest path from idea to shipped app.”
The Postgres development platform. Supabase gives you a dedicated Postgres database to build your web, mobile, and AI applications.
“A genuinely open-source Firebase alternative - real Postgres underneath, with auth, storage, and realtime built in rather than a proprietary database.”
“Utility-first CSS that's become the default styling approach for new projects - fast to write, easy to keep consistent, no dead CSS to prune later.”
Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more
“A fast, all-in-one vulnerability scanner - containers, filesystems, git repos, and Terraform/IaC misconfigurations all covered by one CLI tool.”
“The industry-standard container orchestrator - not always necessary at small scale, but the default assumption for any serious cloud-native platform team.”
“The standard tool for infrastructure-as-code across every major cloud provider - one declarative language instead of provider-specific consoles or scripts.”
“The de facto package manager for Kubernetes - packages, templates, and versions a whole application's manifests as one installable chart.”
“A full-featured service mesh - real power for large microservice fleets, though it's genuinely overkill below a certain scale.”
“The community-governed, truly open-source continuation of Terraform's original license - worth knowing if vendor lock-in on your infrastructure tooling is a real concern.”
“Turns cloud infrastructure into Kubernetes-native resources - powerful for platform teams building an internal developer platform on top of K8s.”
“The most capable open-source relational database available - strong standards compliance, extensions for nearly everything (including full-text search and vectors), and a default choice for good reason.”
“Unifies dozens of LLM providers behind a single API, making model switching almost effortless in production.”
“The standard library for working with open-weight models - thousands of pretrained models are one line of code away.”
“The modern default frontend build tool - native ESM in dev means a dev server that starts and reloads almost instantly, even on large apps.”
“The open-source engine behind Docker - understanding containers here pays off no matter which orchestrator sits on top later.”
“The most widely adopted framework for chaining LLM calls, tools, and retrieval into real applications - a near-default starting point for RAG and agent projects.”
