Comparison

Cilium vs Linkerd

On the evidence we track, Linkerd leads this comparison with a composite score of 80/100. Scores are only directly comparable because these tools share a category; the full breakdown and every source is below.

Machine formatsJSONMarkdownGraphQLor send Accept: application/json
Attribute comparison across 2 tools
Attribute74Cilium80LinkerdLeader
Vioscale score74 / 100low · 16%80 / 100low · 15%
Commits last 30d10099
Github stars24,83711,470
Options{"self_hosted":true}{"on_prem":true,"self_hosted":true}
LongCilium is an open source, cloud native solution for providing, securing, and observing network connectivity between workloads, fueled by the revolutionary Kernel technology eBPF.Linkerd is a service mesh that adds security, observability, and reliability to Kubernetes clusters. 100% open source, CNCF graduated, and written in Rust, it is designed for simplicity without the complexity of other meshes.
Capabilities{"proxy":"ebpf","data_plane":"sidecarless_ebpf","multicluster":true,"cncf_maturity":"graduated","commercial_support":true,"gateway_api_support":true,"built_in_observability":true}{"proxy":"linkerd2","data_plane":"sidecar","vm_support":false,"multicluster":true,"cncf_maturity":"graduated","automatic_mtls":true,"fault_injection":true,"spiffe_identity":false,"traffic_splitting":true,"commercial_support":true,"built_in_observability":true}
PrimaryGoGo
SpdxApache-2.0Apache-2.0
Support-{"cli":true}
Pricing{"type":"open_source","freeTier":true,"sourceUrl":"https://cilium.io","retrievedAt":"2026-08-01T15:34:37.516Z"}{"type":"open_source","summary":"Open source. Enterprise support available.","freeTier":true,"sourceUrl":"https://linkerd.io","retrievedAt":"2026-08-01T15:37:44.117Z"}
Free tierYesYes
Modelopen_sourcecommercial
Price levelfreefree
Transparent-Yes
Cadence days56

Capabilities

Feature-by-feature on the axes that matter for service mesh. “-” means undocumented, not absent.

Capability comparison for Service Mesh
CapabilityCiliumLinkerd
Architecture
Data planeSidecarless (eBPF)Sidecar
ProxyeBPFlinkerd2-proxy
Security
Automatic mutual TLS-
SPIFFE / SPIRE identity-
Traffic
Traffic splitting / canary-
Fault injection / resilience-
Scale
Multi-cluster federation
Portability
VM support (beyond Kubernetes)-
Observability
Built-in observability
Standards
Gateway API / GAMMA support-
Extensibility
WASM extensibility--
Compliance
FIPS mode--
Ecosystem
CNCF maturityGraduatedGraduated
Ops
Commercial support / enterprise edition

Comparison generated from independently-sourced facts. Every value links to its source and retrieval date. See the method.