Cilium network policy kubectl‑capture feature replaced our tcpdump sidecars for debugging

Cilium kubectl-capture Replaces tcpdump Sidecars for Network Policy Debugging Debugging Kubernetes network policy issues has long been a pain point for platform teams. For years, the go-to solution was injecting tcpdump sidecars into pods to capture traffic — but this approach came with significant tradeoffs. Enter Cilium’s kubectl-capture feature: a native, eBPF-powered tool that eliminates the need for sidecars entirely, streamlining how we debug network policy enforcement. The Problem with tc