Cello CNI
github.com
Spec sheet
- Purpose
- Cello is a Kubernetes CNI plugin based on the Volcengine VPC network that lets cluster workloads communicate within the VPC.Read 7 Oct 2026 · github.com
- Support
- The project directs questions and contributions to GitHub issues or pull requests and also mentions maintainer email and a Feishu group.Read 7 Oct 2026 · github.com
- License
- Cello is distributed under the Apache 2.0 license.Read 7 Oct 2026 · github.com
- Cloud integration
- Cello requires Volcengine IAM permissions to call ECS and VPC APIs for instance, ENI, IP address, and subnet operations.Read 7 Oct 2026 · github.com
- Communication
- Both network modes support Pod-to-Pod and Pod-to-Node communication.Read 7 Oct 2026 · github.com
- Configuration
- Cello supports cluster-wide and node-specific configuration, and selected settings can be changed at runtime without restarting Cello Pods.Read 7 Oct 2026 · github.com
- Deployment requirements
- The README specifies Volcengine ECS with kernel 4.19 or later, notes testing on veLinux 1.0 with kernel 5.10, and recommends kubeadm for Kubernetes installation.Read 7 Oct 2026 · github.com
- Installation
- The README instructs users to configure Cello and install it with Helm 3.0 or later.Read 7 Oct 2026 · github.com
- Network policy
- The project says its Cilium components support NetworkPolicy and use eBPF programs on a Pod's primary device.Read 7 Oct 2026 · github.com
- Pod networking
- Cello uses secondary ENIs to build Pod networks and supports shared ENI and ENI multi-IP modes.Read 7 Oct 2026 · github.com
- Resource limit
- Pod capacity depends on the ECS instance type and ENI quotas; exclusive ENI mode supports fewer Pods than shared ENI mode.Read 7 Oct 2026 · github.com
- Scheduling
- Cello reports available network resources through a Kubernetes device plugin so the scheduler can place Pods on nodes with resources.Read 7 Oct 2026 · github.com
- Security reporting
- The security policy asks reporters to contact ByteDance's security team or [email protected] and not file public GitHub issues for vulnerabilities.Read 7 Oct 2026 · github.com
- Services
- Cello integrates Cilium in place of kube-proxy and supports ClusterIP, NodePort, and LoadBalancer services.Read 7 Oct 2026 · github.com
Plans and prices
Cello CNI Free Open source under Apache 2.0 · Requires Volcengine ECS and Kubernetes · Helm 3.0 required Read 7 Oct 2026 · github.com
Where Specifiction places it
- Container Networking Software#6 of 287.9
Alternatives to Cello CNIAll alternatives →
Aviatrix Kubernetes Firewall 8.5 Visit 
Calico Open Source Free plan 8.0 Visit 
Cilium Free plan 7.8 Visit