opera�ng at the HTTP-layer in addi�on to providing tradi�onal Layer 3 and Layer 4 segmenta�on. The use of BPF enables Cilium to achieve all of this in a way that is highly scalable even for large-scale io/en/stable/policy/#layer-7] in our documenta�on for the latest list of supported protocols and examples on how to use it. Secure service to service communication based on identities Modern distributed applica�ons rely VXLAN and Geneve are baked in but all encapsula�on formats supported by Linux can be enabled. When to use this mode: This mode has minimal infrastructure and integra�on requirements. It works on almost any

operating at the HTTP-layer in addition to providing traditional Layer 3 and Layer 4 segmentation. The use of BPF enables Cilium to achieve all of this in a way that is highly scalable even for large-scale io/en/stable/policy/#layer-7] in our documentation for the latest list of supported protocols and examples on how to use it. Secure service to service communication based on identities Modern distributed applications rely and Geneve are baked in but all encapsulation formats supported by Linux can be enabled. When to use this mode: This mode has minimal infrastructure and integration requirements. It works on almost any

detailed visibility as required by users. Hubble has been created and specifically designed to make best use of these new BPF powers. Hubble can answer questions such as: Service dependencies & communication operating at the HTTP-layer in addition to providing traditional Layer 3 and Layer 4 segmentation. The use of BPF enables Cilium to achieve all of this in a way that is highly scalable even for large-scale io/en/stable/policy/#layer-7] in our documentation for the latest list of supported protocols and examples on how to use it. Secure service to service communication based on identities Modern distributed applications rely

operating at the HTTP-layer in addition to providing traditional Layer 3 and Layer 4 segmentation. The use of BPF enables Cilium to achieve all of this in a way that is highly scalable even for large-scale io/en/stable/policy/#layer-7] in our documentation for the latest list of supported protocols and examples on how to use it. Secure service to service communication based on identities Modern distributed applications rely and Geneve are baked in but all encapsulation formats supported by Linux can be enabled. When to use this mode: This mode has minimal infrastructure and integration requirements. It works on almost any

detailed visibility as required by users. Hubble has been created and specifically designed to make best use of these new eBPF powers. Hubble can answer questions such as: Service dependencies & communication operating at the HTTP-layer in addition to providing traditional Layer 3 and Layer 4 segmentation. The use of eBPF enables Cilium to achieve all of this in a way that is highly scalable even for large-scale io/en/stable/policy/#layer-7] in our documentation for the latest list of supported protocols and examples on how to use it. Secure service to service communication based on identities Modern distributed applications rely

detailed visibility as required by users. Hubble has been created and specifically designed to make best use of these new eBPF powers. Hubble can answer questions such as: Service dependencies & communication operating at the HTTP-layer in addition to providing traditional Layer 3 and Layer 4 segmentation. The use of eBPF enables Cilium to achieve all of this in a way that is highly scalable even for large-scale io/en/stable/policy/#layer-7] in our documentation for the latest list of supported protocols and examples on how to use it. Secure service to service communication based on identities Modern distributed applications rely

detailed visibility as required by users. Hubble has been created and specifically designed to make best use of these new eBPF powers. Hubble can answer questions such as: Service dependencies & communication operating at the HTTP-layer in addition to providing traditional Layer 3 and Layer 4 segmentation. The use of eBPF enables Cilium to achieve all of this in a way that is highly scalable even for large-scale io/en/stable/policy/#layer-7] in our documentation for the latest list of supported protocols and examples on how to use it. Secure service to service communication based on identities Modern distributed applications rely

packet ipv6 case: soure identity-> FLowLabel field of ipv6 header ipv4 tunnel case: soure identity->vxlan VNI field tc eBPF look up identiy by source ip for ipv4 native-routing case tc eBPF insert