StackShareStackShare
Follow on
StackShare

Discover and share technology stacks from companies around the world.

Follow on

© 2025 StackShare. All rights reserved.

Product

  • Stacks
  • Tools
  • Feed

Company

  • About
  • Contact

Legal

  • Privacy Policy
  • Terms of Service
  1. Stackups
  2. Utilities
  3. Security
  4. Security
  5. Cilium vs Raccoon

Cilium vs Raccoon

OverviewComparisonAlternatives

Overview

Cilium
Cilium
Stacks38
Followers81
Votes1
GitHub Stars22.8K
Forks3.4K
Raccoon
Raccoon
Stacks1
Followers2
Votes0
GitHub Stars3.3K
Forks418

Cilium vs Raccoon: What are the differences?

What is Cilium? API-aware networking and security for containers. Open source software for providing and transparently securing network connectivity and loadbalancing between application workloads such as application containers or processes.

What is Raccoon? A high performance offensive security tool for reconnaissance and vulnerability scanning. It is a tool made for reconnaissance and information gathering with an emphasis on simplicity. It will do everything from fetching DNS records, retrieving WHOIS information, obtaining TLS data, detecting WAF presence and up to threaded dir busting and subdomain enumeration. Every scan outputs to a corresponding file.

Cilium and Raccoon can be categorized as "Security" tools.

Some of the features offered by Cilium are:

  • Identity Based Security - Cilium visibility and security policies are based on the container orchestrator identity (e.g., Kubernetes labels). Never again worry about network subnets or container IP addresses when writing security policies, auditing, or troubleshooting.
  • Blazing Performance - BPF is the underlying Linux superpower to do the heavy lifting on the datapath by providing sandboxed programmability of the Linux kernel with incredible performance.
  • API-Protocol Visibility + Security - Traditional firewalls only see and filter packets based on network headers like IP address and ports. Cilium can do this as well, but also understands and filters the individual HTTP, gRPC, and Kafka requests that stitch microservices together.

On the other hand, Raccoon provides the following key features:

  • DNS details
  • DNS visual mapping using DNS dumpster
  • WHOIS information

Cilium and Raccoon are both open source tools. It seems that Cilium with 5.32K GitHub stars and 588 forks on GitHub has more adoption than Raccoon with 1.77K GitHub stars and 268 GitHub forks.

Share your Stack

Help developers discover the tools you use. Get visibility for your team's tech choices and contribute to the community's knowledge.

View Docs
CLI (Node.js)
or
Manual

Detailed Comparison

Cilium
Cilium
Raccoon
Raccoon

Open source software for providing and transparently securing network connectivity and loadbalancing between application workloads such as application containers or processes.

It is a tool made for reconnaissance and information gathering with an emphasis on simplicity. It will do everything from fetching DNS records, retrieving WHOIS information, obtaining TLS data, detecting WAF presence and up to threaded dir busting and subdomain enumeration. Every scan outputs to a corresponding file.

Identity Based Security - Cilium visibility and security policies are based on the container orchestrator identity (e.g., Kubernetes labels). Never again worry about network subnets or container IP addresses when writing security policies, auditing, or troubleshooting.; Blazing Performance - BPF is the underlying Linux superpower to do the heavy lifting on the datapath by providing sandboxed programmability of the Linux kernel with incredible performance.; API-Protocol Visibility + Security - Traditional firewalls only see and filter packets based on network headers like IP address and ports. Cilium can do this as well, but also understands and filters the individual HTTP, gRPC, and Kafka requests that stitch microservices together.; Designed for Scale - Cilium was designed for scale, with no node-to-node interactions required when new pods are deployed, and all coordination through a highly scalable key-value store.
DNS details; DNS visual mapping using DNS dumpster; WHOIS information; TLS Data - supported ciphers, TLS versions, certificate details and SANs; Port Scan; Services and scripts scan; URL fuzzing and dir/file detection; Subdomain enumeration - uses Google dorking, DNS dumpster queries, SAN discovery and bruteforce; Web application data retrieval: CMS detection, Web server info and X-Powered-By, robots.txt and sitemap extraction, Cookie inspection, Extracts all fuzzable URLs, Discovers HTML forms, Retrieves all Email addresses, Scans target for vulnerable S3 buckets and enumerates them for sensitive files; Detects known WAFs; Supports anonymous routing through Tor/Proxies; Uses asyncio for improved performance; Saves output to files - separates targets by folders and modules by files
Statistics
GitHub Stars
22.8K
GitHub Stars
3.3K
GitHub Forks
3.4K
GitHub Forks
418
Stacks
38
Stacks
1
Followers
81
Followers
2
Votes
1
Votes
0
Pros & Cons
Pros
  • 1
    Sidecarless
No community feedback yet
Integrations
Kafka
Kafka
gRPC
gRPC
Istio
Istio
Docker
Docker
Kubernetes
Kubernetes
Apache Mesos
Apache Mesos
macOS
macOS

What are some alternatives to Cilium, Raccoon?

Let's Encrypt

Let's Encrypt

It is a free, automated, and open certificate authority brought to you by the non-profit Internet Security Research Group (ISRG).

Sqreen

Sqreen

Sqreen is a security platform that helps engineering team protect their web applications, API and micro-services in real-time. The solution installs with a simple application library and doesn't require engineering resources to operate. Security anomalies triggered are reported with technical context to help engineers fix the code. Ops team can assess the impact of attacks and monitor suspicious user accounts involved.

Instant 2FA

Instant 2FA

Add a powerful, simple and flexible 2FA verification view to your login flow, without making any DB changes and just 3 API calls.

ORY Hydra

ORY Hydra

It is a self-managed server that secures access to your applications and APIs with OAuth 2.0 and OpenID Connect. It is OpenID Connect Certified and optimized for latency, high throughput, and low resource consumption.

Virgil Security

Virgil Security

Virgil consists of an open-source encryption library, which implements CMS and ECIES(including RSA schema), a Key Management API, and a cloud-based Key Management Service.

ExpeditedSSL

ExpeditedSSL

Stop pouring through MAN pages and outdated blog posts that don't take into account new requirements. With our add-on, you can go from install to confirmed installation in as little as twenty minutes: using nothing but your browser.

Clef

Clef

Clef is secure two-factor — built for consumers. Easy to use, integrate, and pay for.

Wazuh

Wazuh

It is a free, open source and enterprise-ready security monitoring solution for threat detection, integrity monitoring, incident response and compliance.

Detectify

Detectify

Detectify is a web security service that simulates automated hacker attacks on your website, detecting critical security issues before real hackers do. We provide you with descriptive reports of the results so that you can continue to build safe products

SSLMate

SSLMate

SSLMate is the easiest way for developers and sysadmins to buy SSL certificates.

Related Comparisons

Postman
Swagger UI

Postman vs Swagger UI

Mapbox
Google Maps

Google Maps vs Mapbox

Mapbox
Leaflet

Leaflet vs Mapbox vs OpenLayers

Twilio SendGrid
Mailgun

Mailgun vs Mandrill vs SendGrid

Runscope
Postman

Paw vs Postman vs Runscope