cilium commands

23 commands, each with a one-line explanation. Click a command to copy it, or its title for details.

Commands 23 shown

  • Cilium status
    cilium status --wait

    Check health of all Cilium components; wait until ready

    network

  • Cilium connectivity test
    cilium connectivity test

    Run built-in end-to-end connectivity tests

    network · debug

  • List Cilium endpoints
    cilium endpoint list

    Show all Cilium-managed endpoints with security identity

    network

  • Hubble observe flows
    hubble observe --pod <ns>/<pod> -f

    Live-stream network flows for a specific pod

    hubble · network · debug

  • Hubble dropped flows
    hubble observe --verdict DROPPED -f

    Show only dropped/denied flows cluster-wide

    hubble · network · debug

  • Hubble observe namespace
    hubble observe --namespace <ns> --since 5m

    Show flows for all pods in a namespace over last 5 minutes

    hubble · network

  • List network policies
    kubectl get ciliumnetworkpolicies,networkpolicies -A

    All Cilium and standard NetworkPolicy resources

    network

  • Hubble status
    hubble status

    Show Hubble relay and observer status

    hubble

  • Monitor Cilium agent
    cilium monitor --type drop

    Real-time packet drops from Cilium dataplane

    network · debug

  • Enable Hubble UI
    cilium hubble enable --ui

    Enable Hubble observability with the web UI

    cni · hubble · ui

  • Hubble observe flows
    hubble observe --follow

    Stream live network flows through Hubble

    cni · hubble · flows

  • Test connectivity
    cilium connectivity test

    Run a full connectivity test suite in the cluster

    cni · connectivity · test

  • List endpoints
    cilium endpoint list

    Show all Cilium endpoints with their status

    cni · endpoints

  • Monitor network events
    cilium monitor --type drop

    Show dropped packets in real time

    cni · monitor · drop

  • Inspect BGP peers
    cilium bgp peers

    List BGP peers managed by Cilium BGP control plane

    cni · bgp · networking

  • Inspect endpoint internals
    cilium-dbg endpoint get <id> -o json | jq '.status.policy'

    Dump full endpoint state: identity, policy enforcement, BPF maps; run inside cilium pod

    debug · k8s · network

  • Datapath load balancer table
    cilium-dbg bpf lb list

    List service VIP-to-backend mappings in BPF; verify kube-proxy-free LB programming

    network · k8s · troubleshooting

  • Conntrack table entries
    cilium-dbg bpf ct list global | head

    Inspect BPF connection-tracking entries; spot stale/leaking flows on a node

    debug · network · troubleshooting

  • Trace policy by identity
    cilium-dbg policy trace --src-identity <id> --dst-identity <id> --dport <port>

    Explain allow/deny verdict between two security identities; debug NetworkPolicy drops

    security · debug · k8s

  • Verbose agent health
    cilium status --verbose

    Full per-node health: datapath mode, IPAM, BPF maps, controllers; first stop on issues

    monitoring · troubleshooting · k8s

  • Observe TCP egress to FQDN
    hubble observe --protocol tcp --from-pod <ns>/<pod> --to-fqdn '*.example.com'

    Live L3/L7 flows from a pod to a DNS name; validate FQDN-based egress policy

    observability · dns · network

  • ClusterMesh status
    cilium clustermesh status --wait

    Check cross-cluster connectivity and remote endpoint/identity sync health

    network · troubleshooting · k8s

  • BPF NAT table
    cilium-dbg bpf nat list | head

    List BPF masquerade/NAT entries; debug SNAT port exhaustion or egress source IP

    network · debug · troubleshooting