Inspect endpoint internals cilium
Dump full endpoint state: identity, policy enforcement, BPF maps; run inside cilium pod
cilium-dbg endpoint get <id> -o json | jq '.status.policy'
more cilium
all 23 commands →
Datapath load balancer table
cilium-dbg bpf lb list
Conntrack table entries
cilium-dbg bpf ct list global | head
Trace policy by identity
cilium-dbg policy trace --src-identity <id> --dst-identity <id> --dport <port>
Verbose agent health
cilium status --verbose
Observe TCP egress to FQDN
hubble observe --protocol tcp --from-pod <ns>/<pod> --to-fqdn '*.example.com'