Cilium vs ONOS

Cilium is an open-source, cloud-native system for providing, securing, and observing network connectivity between workloads using eBPF. Its networking capabilities include CNI, Layer 4 load balancing, Cluster Mesh, kube-proxy replacement, BGP, service mesh, Gateway API, IPv6, host firewall, and ingress. Network policies can enforce identity-aware rules from L3 through L7, including DNS- and HTTP-aware filtering. Security features include runtime protection and transparent encryption of managed host and endpoint traffic using IPsec, WireGuard, or ztunnel; ztunnel support is marked beta. For visibility, Cilium lists service maps, metrics and tracing export, network flow logs, and protocol visibility. Hubble, built on Cilium and eBPF, provides visibility into service communication and behavior. Documentation describes Prometheus and Grafana integrations and Kubernetes support for services including GKE, AKS, EKS, OpenShift, RKE, k3s, and Alibaba ACK. Its container image requires AMD64 or AArch64 hosts running Linux kernel 5.10 or later, or an equivalent kernel such as 4.18 on RHEL 8.10. For environments above 500 nodes, the quick installation guide directs readers to large-environment guidance or specific datapath modes.

ONOS is an open-source software-defined networking platform that provides a control plane for managing network components and running communication-service modules. Its µONOS architecture supports device configuration, monitoring and maintenance, forwarding-plane programming, topology validation, and fine-grained performance metrics. A symmetric cluster of identical instances distributes work across servers and is designed to handle instance failures; the architecture is described as highly available and dynamically scalable. Control and configuration interfaces include P4/P4Runtime, gNMI/OpenConfig, and gNOI, with gRPC connecting modular microservices. OpenFlow is the primary southbound protocol, and OVSDB, NETCONF, and SNMP are also named for device configuration. The microservices are designed for cloud and data center infrastructure using Kubernetes, with Docker images and Helm charts listed as deployment tools. A cloud-native web GUI uses Angular and gRPC Web to access backend modules. ONOS is free and published under the Apache License 2.0. It is aimed mainly at service-provider networks, with data-center and campus networks also identified as possible uses. Production downloads are recommended as a release tar.gz package or Docker image; the listed LTS release is X-Wing 2.7.0, dated July 16, 2021.