Datapath load balancer table

List service VIP-to-backend mappings in BPF; verify kube-proxy-free LB programming

cilium-dbg bpf lb list
tool
cilium23 commands
tags
ciliumnetworkk8stroubleshooting

More cilium commands

  • Conntrack table entries
    cilium-dbg bpf ct list global | head

    Inspect BPF connection-tracking entries; spot stale/leaking flows on a node

  • Trace policy by identity
    cilium-dbg policy trace --src-identity <id> --dst-identity <id> --dport <port>

    Explain allow/deny verdict between two security identities; debug NetworkPolicy drops

  • Verbose agent health
    cilium status --verbose

    Full per-node health: datapath mode, IPAM, BPF maps, controllers; first stop on issues

  • Observe TCP egress to FQDN
    hubble observe --protocol tcp --from-pod <ns>/<pod> --to-fqdn '*.example.com'

    Live L3/L7 flows from a pod to a DNS name; validate FQDN-based egress policy

  • ClusterMesh status
    cilium clustermesh status --wait

    Check cross-cluster connectivity and remote endpoint/identity sync health

all 23 cilium commands