Hubble

Hubble is a fully distributed network, service, and security observability platform built natively on top of Cilium and eBPF, designed to provide deep runtime visibility into Kubernetes microservice communications. Understanding network flow relationships, service dependencies, and security policy drops within modern container clusters is notoriously difficult due to the transient nature of pods and microservices. Hubble leverages eBPF probes embedded directly inside the Linux operating system kernel to capture real-time network telemetry, application protocol metadata, and TLS handshake metrics without requiring code changes or sidecar proxy injection. The platform visualizes real-time service dependency maps through an intuitive web-based graphical user interface, illustrating exactly how microservices communicate with one another and external APIs. DevOps and security teams use Hubble to identify misconfigured network policies, detect application connectivity failures, pinpoint DNS resolution bottlenecks, and investigate anomalous communications in real time. Hubble exports rich Prometheus metrics and OpenTelemetry data, integrating smoothly with enterprise monitoring stacks and SIEM platforms. By delivering granular, low-overhead observability into container traffic flows, HTTP status codes, and security enforcement events, Hubble simplifies Kubernetes troubleshooting, accelerates security incident investigations, and validates Zero Trust policy enforcement.