Cilium vs HPE Aruba Networking Fabric Composer

Cilium is an open-source, cloud-native system for providing, securing, and observing network connectivity between workloads using eBPF. Its networking capabilities include CNI, Layer 4 load balancing, Cluster Mesh, kube-proxy replacement, BGP, service mesh, Gateway API, IPv6, host firewall, and ingress. Network policies can enforce identity-aware rules from L3 through L7, including DNS- and HTTP-aware filtering. Security features include runtime protection and transparent encryption of managed host and endpoint traffic using IPsec, WireGuard, or ztunnel; ztunnel support is marked beta. For visibility, Cilium lists service maps, metrics and tracing export, network flow logs, and protocol visibility. Hubble, built on Cilium and eBPF, provides visibility into service communication and behavior. Documentation describes Prometheus and Grafana integrations and Kubernetes support for services including GKE, AKS, EKS, OpenShift, RKE, k3s, and Alibaba ACK. Its container image requires AMD64 or AArch64 hosts running Linux kernel 5.10 or later, or an equivalent kernel such as 4.18 on RHEL 8.10. For environments above 500 nodes, the quick installation guide directs readers to large-environment guidance or specific datapath modes.

HPE Aruba Networking Fabric Composer is a paid, API-based orchestration solution for day-to-day operations across rack-scale compute and storage infrastructure. It provides unified network and security management for HPE Aruba Networking CX platforms, including switch configurations and firewall policies. Guided workflows automate discovery, leaf-spine deployment, VSX, BGP or OSPF underlay, BGP EVPN overlay, VLAN groups, VRF, EVPN, firmware services, and micro-segmentation. Version 7.4.0 supports up to 500 switches. Integration packs include NetEdit, HPE iLO Amplifier, ODIM, HPE SimpliVity, Nutanix Prism, Pensando PSM, and VMware environments. Fabric Composer centrally orchestrates segmentation, stateless ACLs, and stateful distributed-firewall policies, with separate NetOps and SecOps roles for Aruba CX 10K switches. It is delivered as an ISO or virtual-machine OVA for virtual or physical hosts, running as one instance or a highly available three-node cluster. Audit logs record actions, users, roles, endpoints, and session details.