Isovalent Enterprise for Cilium

What Isovalent Enterprise for Cilium is

Isovalent Enterprise for Cilium is an enterprise distribution of Cilium, Hubble, and Tetragon, created and supported by Cilium’s creators. It provides network-layer connectivity and security for multi-cloud and on-premises environments, with network policies that include DNS-aware, Layer 7, and deny rules for traffic control and micro-segmentation. Hubble adds live network-flow visibility, policy visualization, and an interface for troubleshooting and network management. Tetragon contributes runtime enforcement and security observability, including protocol enforcement, IP and port whitelisting, and automatic application-aware policy generation. Cluster Mesh connects clusters across AWS, Azure, Google Cloud Platform, and on-premises environments; the product also supports sidecar-free service-to-service communication and advanced load balancing. The deployment model is hybrid, with a distributed control plane, policy segmentation, and a northbound API. Supported protocols include VXLAN, Geneve, BGP, IPsec, WireGuard, HTTP, TCP, and UDP. It is for Linux and self-hosted environments. Azure deployment guidance covers Azure Marketplace, an Azure Resource Manager template, and Azure CLI. Enterprise support and professional services are available to help deploy and manage Cilium in production. Pricing is on request.

Who it suits

It suits organizations operating Linux-based, self-hosted or hybrid environments that need network security and connectivity across cloud and on-premises clusters. Teams seeking network visibility, runtime security, or help deploying and managing Cilium in production may also find its capabilities relevant.

Limits

Hubble UI, DNS Proxy HA, and Tetragon are not enabled by default when creating or upgrading an AKS cluster with the product.

Getting started

1. Visit the Isovalent Enterprise for Cilium website.
2. Use the Azure deployment guidance through Azure Marketplace, an Azure Resource Manager template, or Azure CLI.
3. For AKS cluster creation or upgrades, account for Hubble UI, DNS Proxy HA, and Tetragon being disabled by default.
4. Contact sales to request pricing.

Verdict

Choose Isovalent Enterprise for Cilium if your organization needs enterprise networking, policy controls, observability, and runtime security across cloud and on-premises clusters. Its enterprise support and professional services may suit teams deploying Cilium in production. Look elsewhere if you need published pricing or a platform beyond Linux and self-hosted environments.