Hubble

Hubble is a fully distributed networking and security observability platform for cloud native workloads, built on top of Cilium and eBPF. It offers deep visibility into the communication and behavior of services as well as the networking infrastructure in a completely transparent manner. Hubble serves as a utility to observe and inspect recent Cilium routed traffic within a Kubernetes cluster.

Use cases include monitoring network flows, inspecting service interactions, and analyzing security events in Kubernetes environments. It is particularly valuable for operators and security teams managing cloud native deployments who need detailed insights into network activity without impacting performance.

The tool integrates seamlessly with Cilium, leveraging eBPF technology to capture and observe traffic at the kernel level, providing real-time observability data.

Hubble operates on top of Cilium and utilizes eBPF (extended Berkeley Packet Filter) to enable transparent, deep visibility into Kubernetes network traffic. It observes flows and events from Hubble servers, inspecting Cilium-routed traffic in the cluster. eBPF programs provide kernel-level observability without modifying applications or requiring agents on workloads.