---
title: "Get configuration of Cilium daemon"
method: GET
path: "/config"
tags: ["daemon"]
---

# Get configuration of Cilium daemon

`GET /config`

Returns the configuration of the Cilium daemon.

## Response `200`

Success

- DaemonConfiguration — Response to a daemon configuration request.
  - `spec` DaemonConfigurationSpec — The controllable configuration of the daemon.
    - `options` ConfigurationMap — Map of configuration key/value pairs.
    - `policy-enforcement` 'default' | 'always' | 'never' — The policy-enforcement mode
  - `status` DaemonConfigurationStatus — Response to a daemon configuration request. Contains the addressing information, k8s, node monitor and immutable and mutable configuration settings.
    - `realized` DaemonConfigurationSpec — The controllable configuration of the daemon.
      - `options` ConfigurationMap — Map of configuration key/value pairs.
      - `policy-enforcement` 'default' | 'always' | 'never' — The policy-enforcement mode
    - `immutable` ConfigurationMap — Map of configuration key/value pairs.
    - `addressing` NodeAddressing — Addressing information of a node for all address families +k8s:deepcopy-gen=true
      - `ipv6` NodeAddressingElement — Addressing information
        - `enabled` boolean — True if address family is enabled
        - `ip` string — IP address of node
        - `alloc-range` string — Address pool to be used for local endpoints
        - `address-type` string — Node address type, one of HostName, ExternalIP or InternalIP
      - `ipv4` NodeAddressingElement — Addressing information
        - `enabled` boolean — True if address family is enabled
        - `ip` string — IP address of node
        - `alloc-range` string — Address pool to be used for local endpoints
        - `address-type` string — Node address type, one of HostName, ExternalIP or InternalIP
    - `k8s-endpoint` string
    - `k8s-configuration` string
    - `nodeMonitor` MonitorStatus — Status of the node monitor
      - `cpus` integer — Number of CPUs to listen on for events.
      - `npages` integer — Number of pages used for the perf ring buffer.
      - `pagesize` integer — Pages size used for the perf ring buffer.
      - `lost` integer — Number of samples lost by perf.
      - `unknown` integer — Number of unknown samples.
    - `kvstoreConfiguration` KVstoreConfiguration — Configuration used for the kvstore
      - `type` string — Type of kvstore
      - `options` object — Configuration options
    - `deviceMTU` integer — MTU on workload facing devices
    - `routeMTU` integer — MTU for network facing routes
    - `enableRouteMTUForCNIChaining` boolean — Enable route MTU for pod netns when CNI chaining is used
    - `packetizationLayerPMTUDMode` string — Specifies what mode PLPMTUD probing on the pod netns should be set to (if empty will do nothing).
    - `datapathMode` 'veth' | 'netkit' | 'netkit-l2' — Operational datapath mode
    - `configuredDatapathMode` 'auto' | 'veth' | 'netkit' | 'netkit-l2' — Configured datapath mode
    - `ipam-mode` string — Configured IPAM mode
    - `masquerade` boolean
    - `masqueradeProtocols` object — Status of masquerading feature
      - `ipv4` boolean — Status of masquerading for IPv4 traffic
      - `ipv6` boolean — Status of masquerading for IPv6 traffic
    - `installUplinkRoutesForDelegatedIPAM` boolean — Install ingress/egress routes through uplink on host for Pods when working with delegated IPAM plugin.
    - `daemonConfigurationMap` unknown
    - `GSOMaxSize` integer — Maximum IPv6 GSO size on workload facing devices
    - `GROMaxSize` integer — Maximum IPv6 GRO size on workload facing devices
    - `GSOIPv4MaxSize` integer — Maximum IPv4 GSO size on workload facing devices
    - `GROIPv4MaxSize` integer — Maximum IPv4 GRO size on workload facing devices
    - `deviceHeadroom` integer — Headroom buffer margin on workload facing devices
    - `deviceTailroom` integer — Tailroom buffer margin on workload facing devices
    - `ipLocalReservedPorts` string — Comma-separated list of IP ports should be reserved in the workload network namespace
    - `enableBBRHostNamespaceOnly` boolean — True if BBR is enabled only in the host network namespace

---

[API](https://skmtc.net/cilium/apis/cilium-api.md) · [All operations](https://skmtc.net/cilium/apis/cilium-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/cilium/cilium-api/revisions/351336b27221/schema)