Alternatives to Hubble
A network, service and security observability tool for Kubernetes clusters running Cilium, built on eBPF. The listings below can replace it for an important use case. Each note says what changes if you switch.
The original
Hubble
A network, service and security observability tool for Kubernetes clusters running Cilium, built on eBPF.
Replacements
Listings that take over the same core job as Hubble.
Kubeshark
An eBPF-based traffic analyzer that captures and indexes network traffic inside Kubernetes clusters.
Kubeshark captures Kubernetes traffic with eBPF on any cluster rather than requiring Cilium, and adds TLS decryption and a web dashboard.
Similar software
Related functionality, not a direct replacement.
netshoot
A Docker and Kubernetes container image packed with network troubleshooting tools for debugging container networking.
ntopng
Web-based network traffic probe that shows real-time and historical flows by host, protocol and application.
CoreDNS
A DNS server written in Go that builds its behavior from a chain of plugins.
GoFlow2
A NetFlow, IPFIX and sFlow collector written in Go that normalises flow data into one format.
Malcolm
A self-hosted network traffic analysis suite that turns PCAP files, Zeek logs and Suricata alerts into searchable dashboards.
