A fully distributed networking and security observability platform for Kubernetes, built on Cilium and eBPF.
Hubble is a networking and security observability platform for Kubernetes that provides deep visibility into service communication and infrastructure behavior. It leverages eBPF and Cilium to transparently monitor network flows, service dependencies, and security events without requiring application modifications. It helps answer questions about service dependencies, operational monitoring, application performance, and security observability.
Platform engineers, SREs, and DevOps professionals managing Kubernetes clusters who need granular visibility into network traffic, service dependencies, and security policy enforcement.
Developers choose Hubble for its eBPF-based, transparent observability that provides deep insights with minimal overhead, its ability to visualize service dependencies and network flows, and its integration with Cilium for comprehensive security and networking visibility.
Hubble - Network, Service & Security Observability for Kubernetes using eBPF
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.
Leverages eBPF for deep visibility without application changes, minimizing overhead as emphasized in the README's philosophy section.
Provides zero-effort discovery of service graphs at L3/L4 and L7 levels, enabling visualization and filtering demonstrated in the Service Map feature.
Supports extensive allowlist and denylist filters for precise flow analysis, shown with JSON-encoded FlowFilters in the README examples.
Offers visibility into network policy violations and security events by building on Cilium, highlighted in the Network Policy Observation section.
The Hubble UI component is marked as beta in the Component Stability table, indicating it may lack stability and features for critical production use.
Hubble is tightly integrated with Cilium and cannot function with other CNI plugins, limiting flexibility for clusters not using Cilium.
Requires deployment of Cilium and eBPF, involving a steeper learning curve and configuration compared to simpler monitoring tools like basic Prometheus exporters.