Why Cilium-native?
If Cilium is already your CNI, the flows, identities and policy verdicts you need are already there. Paqtra reads them through Hubble and the Kubernetes API, and adds node-local enrichment from the BPF map inventory. It shows you the path, the drop reason and the policy that caused it in one place.
Paqtra never competes with Cilium's datapath. It does not write Cilium BPF maps, attach or replace Cilium programs, or act as a second CNI. Policy changes go through CiliumNetworkPolicy objects, and Cilium enforces them. Paqtra doesn't collect application payloads, argv or Secret contents.
Open source, and honest about its limits
Licensed under Apache 2.0. CI runs Rust format, clippy and tests, the web API and UI builds, and the chart and CLI smoke scripts. Paqtra is observe-first by design, and its boundaries are written down and enforced in review.
Read the security notes →
Need more than visibility?
Paqtra is the free community edition of PacketWolf, Zyvor's commercial Cilium platform. PacketWolf adds kernel process attribution, threat detection, gated containment with rollback, a Kubernetes operator, an AI network copilot, enterprise sign-in and consoles for VMs and standalone containers.
Compare Paqtra and PacketWolfTry it on your cluster
You need a Kubernetes cluster with Cilium and Hubble enabled. Docker Compose, Helm and a remote K3s script are covered in the quickstart.
Read the quickstart