- Home
- eBPF Observability Tools
- Hubble
Hubble
What it is
Hubble is a networking and security observability platform for cloud-native workloads, built on Cilium and eBPF. It maps Kubernetes service dependencies across network and application layers, then lets users visualize and filter data flows. Those flows can include TCP connections, DNS queries, HTTP requests, Kafka communication, and other protocols. Hubble’s monitoring examples cover network behavior, policy activity, HTTP rates and latency, and DNS requests and responses. Security views can show policy-blocked connections, services reached from outside a cluster, and services resolving particular DNS names. Visibility can be scoped to a node, a cluster, or multiple clusters; Hubble Relay supports cluster-wide and Cluster Mesh views. The API normally runs on the node with the Cilium agent, and the CLI queries it through a local Unix Domain Socket. Hubble UI provides browser-based views. The project is open source under the Apache License and is self-hosted. The CLI, Server, Metrics, and Relay are stable; the UI remains beta and warrants caution in critical production workloads.
For and against
For
- Maps Kubernetes service dependencies and data flows
- Shows TCP, DNS, HTTP, Kafka, and other flows
- Supports node, cluster, and multi-cluster visibility
- Open source under the Apache License
Against
- Hubble UI is beta
- Only the latest CLI version is maintained
- API operates on the Cilium agent's node by default
The verdict
Hubble brings service mapping, flow visibility, and security observations to Cilium-based Kubernetes environments. Its stable components and beta UI have different readiness levels, so production users should account for that distinction.
Who it suits
Hubble suits teams running Kubernetes workloads that need network-flow and security visibility across nodes or clusters. It is also relevant to operators who want service maps and browser-based flow filtering.
Plans and prices
Hubble
Open source · Apache License
Read 5 Oct 2026 · github.com
On the record
- API access
- By default, the Hubble API operates on the node where the Cilium agent runs, and the Hubble CLI queries it through a local Unix Domain Socket.docs.cilium.io · read 5 Oct 2026
- Compatibility
- The Hubble CLI is backward compatible with supported Cilium releases, and only the latest Hubble CLI version is maintained.github.com · read 5 Oct 2026
- Deployment scope
- Hubble can provide visibility at node, cluster, or multi-cluster scope; Hubble Relay enables cluster-wide or Cluster Mesh visibility.docs.cilium.io · read 5 Oct 2026
- Flow visibility
- It provides visibility into individual TCP connections, DNS queries, HTTP requests, Kafka communication, and other network and application protocol flows.github.com · read 5 Oct 2026
- Integrations
- Hubble is built on Cilium and eBPF; Cilium documentation names Prometheus and Grafana among monitoring systems that integrate with its metrics and alerting.docs.cilium.io · read 5 Oct 2026
- License
- The project is open source and licensed under the Apache License.github.com · read 5 Oct 2026
- Metrics
- Its monitoring examples include network behavior, network policy observation, HTTP request and response rates and latency, and DNS request and response monitoring.github.com · read 5 Oct 2026
- Purpose
- Hubble is a distributed networking and security observability platform for cloud native workloads, built on Cilium and eBPF.github.com · read 5 Oct 2026
- Security configuration
- The documentation describes configuring TLS for the Hubble API and TLS client certificates when connecting Hubble UI to a TLS-enabled Relay.docs.cilium.io · read 5 Oct 2026
- Security observability
- Hubble can show connections blocked by network policy, services accessed from outside a cluster, and services resolving particular DNS names.github.com · read 5 Oct 2026
- Service maps
- It automatically discovers Kubernetes service dependencies at L3/L4 and L7 and visualizes and filters data flows as a service map.github.com · read 5 Oct 2026
- Stability
- The repository lists Hubble CLI, Server, Metrics, and Relay as stable, while Hubble UI is beta and should be used with caution in critical production workloads.github.com · read 5 Oct 2026
- Support
- The project directs users to the Cilium Slack #hubble channel to ask questions and share experiences with developers and users.github.com · read 5 Oct 2026
- Web interface
- Hubble UI is a web interface for visualizing and filtering service dependencies and data flows, accessed through a browser.docs.cilium.io · read 5 Oct 2026
