Observe TCP egress to FQDN

Live L3/L7 flows from a pod to a DNS name; validate FQDN-based egress policy

hubble observe --protocol tcp --from-pod <ns>/<pod> --to-fqdn '*.example.com'
tool
cilium23 commands
tags
ciliumobservabilitydnsnetwork

More cilium commands

  • ClusterMesh status
    cilium clustermesh status --wait

    Check cross-cluster connectivity and remote endpoint/identity sync health

  • BPF NAT table
    cilium-dbg bpf nat list | head

    List BPF masquerade/NAT entries; debug SNAT port exhaustion or egress source IP

  • Cilium status
    cilium status --wait

    Check health of all Cilium components; wait until ready

  • Cilium connectivity test
    cilium connectivity test

    Run built-in end-to-end connectivity tests

  • List Cilium endpoints
    cilium endpoint list

    Show all Cilium-managed endpoints with security identity

all 23 cilium commands