
Isovalent Enterprise for Cilium
Isovalent Enterprise for Cilium is a paid, self-hosted Linux distribution combining Cilium, Hubble, and Tetragon, developed and supported by Cilium’s creators.
What Isovalent Enterprise for Cilium is
Isovalent Enterprise for Cilium is a paid, self-hosted Linux distribution combining Cilium, Hubble, and Tetragon, developed and supported by Cilium’s creators. Cilium supplies network-layer networking and security for multi-cloud and on-premises environments. Enterprise policies include DNS-aware, Layer 7, and deny rules for fine-grained control and micro-segmentation. Hubble presents real-time network-flow visibility, policy visualisation, and an interface for troubleshooting and network management. Tetragon adds runtime enforcement and security observability, including protocol enforcement, IP and port whitelisting, and automatic application-aware policy generation. Cluster Mesh links clusters across AWS, Azure, Google Cloud Platform, and on-premises environments. The product also offers sidecar-free service communication and advanced load balancing. It uses hybrid deployment and a distributed control plane, with support for VXLAN, Geneve, BGP, IPsec, WireGuard, HTTP, TCP, and UDP. Pricing is available on request.
Good
- DNS-aware and Layer 7 network policies
- Real-time flow visibility through Hubble
- Runtime enforcement with Tetragon
- Cluster connectivity across cloud and on-premises
- Sidecar-free service communication and load balancing
Watch out
- Paid pricing requires a request
- Hubble UI is not enabled by default
- DNS Proxy HA is not enabled by default
- Tetragon is not enabled by default
Who it suits
It suits organisations running Linux, self-hosted, multi-cloud, or on-premises clusters that need integrated networking, policy, observability, and runtime security. Teams deploying through Azure Marketplace, an Azure Resource Manager template, or Azure CLI may also find its deployment guidance relevant.
Verdict
Isovalent Enterprise for Cilium brings networking, observability, and runtime security into one enterprise distribution. Its paid, self-hosted model and default feature enablement requirements should be checked before deployment.
Plans and prices
From Isovalent Enterprise for Cilium's own pricing page, checked 8 Oct 2026.
| Plan | Price | What it gives you |
|---|---|---|
| Isovalent Enterprise for Cilium | Priced on request | Enterprise networking, security, and observability features and support · Contact sales |
The facts
Each one read from Isovalent Enterprise for Cilium's own pages, with the date it was checked.
What it does
- Cluster connectivity
- Cluster Mesh connects clusters across public clouds including AWS, Azure, and Google Cloud Platform, as well as on-premises environments.checked 8 Oct 2026
- Deployment
- The cited deployment guidance covers installation through Azure Marketplace, an Azure Resource Manager template, or Azure CLI.checked 8 Oct 2026
- Feature enablement
- The page says Hubble UI, DNS Proxy HA, and Tetragon are not enabled by default when creating or upgrading an AKS cluster with the product.checked 8 Oct 2026
- Networking
- Cilium provides networking and security at the network layer, while supporting multi-cloud and on-premises environments.checked 8 Oct 2026
- Network policy
- Enterprise network policy includes DNS-aware, Layer 7, and deny policies for fine-grained traffic control and micro-segmentation.checked 8 Oct 2026
- Observability
- Hubble provides real-time network flow visibility, policy visualization, and a user interface for troubleshooting and network management.checked 8 Oct 2026
- Product
- It is an enterprise-grade, hardened distribution of Cilium, Hubble, and Tetragon, built and supported by the Cilium creators.checked 8 Oct 2026
- Runtime security
- Tetragon adds runtime enforcement and security observability.checked 8 Oct 2026
- Security capabilities
- Tetragon supports protocol enforcement, IP and port whitelisting, and automatic application-aware policy generation.checked 8 Oct 2026
- Service mesh
- The product provides sidecar-free service-to-service communication and advanced load balancing.checked 8 Oct 2026
- Support
- The vendor describes enterprise-grade support from its experts and professional services to help deploy and manage Cilium in production.checked 8 Oct 2026
The company
- Company
- Isovalent says it was founded by the creators and maintainers of Cilium and eBPF.checked 8 Oct 2026
- Ownership
- Cisco announced completion of its acquisition of Isovalent on December 21, 2023.checked 8 Oct 2026
Alternatives to Isovalent Enterprise for Cilium
- 1
Antrea
Free planOpen sourceAPILinuxSelf-hostedWindows7.2Free plan - 2

Akamai Guardicore Segmentation
WebAPILinuxSelf-hosted6.4 - 3
Hopr
Free planLinuxSelf-hosted6.4From $35 a month - 4

ColorTokens Xshield
WebAPILinuxmacOS6.3 - 5
Cisco Catalyst Center
WebAPILinuxmacOS6.2 - 6

Istio
Free planLinuxmacOSSelf-hosted6.2Free plan
