https://cybertoolchain.io/tools/hubble New releases and features in hubble, tracked by The Cyber Toolchain. en Mon, 11 Aug 2025 17:06:44 GMT https://github.com/cilium/hubble/releases/tag/v1.18.0 https://github.com/cilium/hubble/releases/tag/v1.18.0 Mon, 11 Aug 2025 17:06:44 GMT Hubble v1.18.0 adds policy-name visibility in flow output and IPIP tunnel datapath support. • Adds `--print-policy-names` flag to `hubble observe` to display the names of CiliumNetworkPolicies (CNPs/CCNPs) that allowed or denied traffic. • Sends server version via gRPC response metadata, enabling clients to inspect the Hubble server version. • Attaches datapath to IPIP tunnel devices, extending network visibility to IPIP tunnels. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/hubble https://github.com/cilium/hubble/releases/tag/v1.17.0 https://github.com/cilium/hubble/releases/tag/v1.17.0 Fri, 07 Feb 2025 13:01:14 GMT Hubble CLI v1.17.0 adds native port-forwarding and cross-cluster flow filters • Adds native automatic port-forwarding in the Hubble CLI, replacing the previous kubectl-based implementation • Adds `from` and `to` cluster filters for filtering flows by source or destination cluster in multi-cluster environments • Drops 32-bit binary builds; only 64-bit targets are now produced Breaking changes: • 32-bit binaries are no longer built; users on 32-bit platforms will not receive Hubble CLI binaries going forward. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/hubble https://github.com/cilium/hubble/releases/tag/v1.16.4 https://github.com/cilium/hubble/releases/tag/v1.16.4 Thu, 21 Nov 2024 17:17:10 GMT hubble v1.16.4 adds a 'release' Make target • Adds a `release` Make target to streamline the release process Full history on Cyber Toolchain: https://cybertoolchain.io/tools/hubble https://github.com/cilium/hubble/releases/tag/v1.16.0 https://github.com/cilium/hubble/releases/tag/v1.16.0 Thu, 25 Jul 2024 16:02:30 GMT Hubble v1.16 adds CEL expression filters, drop-reason filtering, and node-label visibility to flow observation. • Adds `--cel-expression` filter flag to `hubble observe` for powerful, custom expression-based flow filtering using Common Expression Language. • Supports `drop_reason_desc` in flow filters, enabling filtering of flows by human-readable drop reason descriptions. • Exposes node labels in Hubble flow data, giving practitioners richer context for node-level traffic analysis. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/hubble https://github.com/cilium/hubble/blob/main/CHANGELOG.md https://github.com/cilium/hubble/blob/main/CHANGELOG.md Mon, 06 May 2024 00:00:00 GMT Hubble v1.16 adds CEL filter support and drop reason descriptions to flow filtering • Adds `--cel-expression` flag to `hubble observe` for advanced flow filtering using Common Expression Language syntax. • Adds `drop_reason_desc` field support in hubble flow filters, allowing practitioners to match flows by descriptive drop reason rather than numeric codes. • Moves cilium/hubble codebase into the main cilium/cilium repository. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/hubble https://github.com/cilium/hubble/releases/tag/v0.13.0 https://github.com/cilium/hubble/releases/tag/v0.13.0 Mon, 15 Jan 2024 13:23:17 GMT hubble v0.13.0 adds cluster, pod, service, HTTP header/URL, and timeout filters to observe • Adds `--cluster` flag to filter flows by cluster name • Adds flags to filter by pods and services in any namespace via `--namespace` and `--pod` • Adds `--http-headers` filter to hubble observe for matching HTTP request headers • Adds `--http-url` filter to hubble observe for matching HTTP URLs • Adds `--request-timeout` flag to configure timeout for unary RPCs • Displays server-provided flow rates in the output Full history on Cyber Toolchain: https://cybertoolchain.io/tools/hubble https://github.com/cilium/hubble/releases/tag/v0.12.0 https://github.com/cilium/hubble/releases/tag/v0.12.0 Mon, 10 Jul 2023 14:31:14 GMT hubble v0.12.0 adds `hubble list namespaces`, basic auth, the `--input-file` flag, SCTP support, UUID filter, traffic direction filter, and `HUBBLE_COMPAT=legacy-json-output` • Adds `hubble list namespaces` command to enumerate available Hubble namespaces. • Introduces the `--input-file` flag on `hubble observe`, which supports reading flows from a file or stdin, replacing previous automatic stdin detection. • Enables SCTP protocol inspection in `hubble observe` via the new `--protocol sctp` option. • Adds the `--uuid` filter to `hubble observe` for narrowing results by packet UUID. • Adds the `--direction` filter to `hubble observe` (e.g., `ingress`, `egress`) for traffic direction filtering. • Introduces the `HUBBLE_COMPAT=legacy-json-output` environment variable to restore legacy JSON output format. Breaking changes: • Automatic stdin detection is removed; use `--input-file -` explicitly if you were relying on it. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/hubble https://github.com/cilium/hubble/releases/tag/v0.11.1 https://github.com/cilium/hubble/releases/tag/v0.11.1 Tue, 24 Jan 2023 17:33:32 GMT Adds `HUBBLE_COMPAT=legacy-json-output` env var to enable legacy JSON output format • Add `HUBBLE_COMPAT=legacy-json-output` environment variable to enable legacy JSON output Full history on Cyber Toolchain: https://cybertoolchain.io/tools/hubble https://github.com/cilium/hubble/releases/tag/v0.11.0 https://github.com/cilium/hubble/releases/tag/v0.11.0 Wed, 11 Jan 2023 15:00:09 GMT Hubble v0.11 adds SockLB visibility, workload/traceID filters, and `-o jsonpb` format • Adds support for Cilium SockLB events to observe socket-level service address translations • Displays traffic direction in `-o compact` output for policy verdict events Breaking changes: • The deprecated JSON formatter is removed; JSON output now uses `jsonpb`, requiring jq queries like `.source` to be rewritten as `.flow.source` Full history on Cyber Toolchain: https://cybertoolchain.io/tools/hubble https://github.com/cilium/hubble/releases/tag/v0.10.0 https://github.com/cilium/hubble/releases/tag/v0.10.0 Wed, 22 Jun 2022 16:51:50 GMT Hubble v0.10 adds `--first` for earlier flows, named identity filters, and `-o jsonpb` output. • Adds `--first` flag to query for earlier flows and events • Supports named reserved identities for `{,from-,to-}identity` filters • Deprecates `-o json` in favor of `-o jsonpb` Full history on Cyber Toolchain: https://cybertoolchain.io/tools/hubble https://github.com/cilium/hubble/releases/tag/v0.9.0 https://github.com/cilium/hubble/releases/tag/v0.9.0 Tue, 30 Nov 2021 21:07:25 GMT hubble v0.9.0 adds colored CLI output, custom flow filters via --allowlist/--denylist, new `hubble status` formats, and `hubble record` stop conditions • `cmd/observe` now produces colored terminal output by default when connected to a compatible Cilium agent. Breaking changes: • The default value for the `--last` flag in `hubble observe` follow mode is removed (it no longer defaults to displaying only the last 20 flows). Full history on Cyber Toolchain: https://cybertoolchain.io/tools/hubble