Cloud native networking and network security

Tools for understanding, measuring, and applying network policies effectively in kubernetes

Network Policy Agent is a daemonset that is responsible for enforcing configured network policies on the cluster.

Demos for several kubernetes security features

View your Kubernetes NetworkPolicy manifests as graph in Lens IDE

Community curated list of System and Network policy templates for the KubeArmor and Cilium

Content for the "Intelligent Cloud Bootcamp: Advanced Kubernetes" workshop

A lightweight operator to manage FQDN based egress network policies

A controller(CES) for controlling container egress traffic. Working with F5 AFM.

Kubesonde: network policy testing and verification in K8s

This workshop shows how to create Network Policies for Pods in Kubernetes.

A tool to visualize network policy information from the Kubernetes Master API

OWASP x Project Calico x Okta Container and Kubernetes Security Policy Design

Helm-ET is a network policy generator for third-party Helm charts

network-policy-generator

Go CLI for PCI-DSS network segmentation. Validates YAML policies, enforces via eBPF (Linux) or pf (macOS), syncs to AWS/Azure, and generates compliance reports.

Cilium examples using KIND clusters

A small controller to generate nftables rules based on network policies and services

Cross-platform zero-trust microsegmentation engine enforcing network policies at the kernel level (eBPF, WFP, pf) with etcd-backed policy distribution and hybrid cloud security orchestration (AWS/GCP/Azure).

In this guide, you'll learn about the Kubernetes project that delivers a scalable ReactJS and NodeJS backend, backed by a MongoDB database (statefulset with encrypted EBS). Monitoring (Prometheus, Grafana) and alerting (kube-state-metrics, Alertmanager) provide deep insights. Advanced security includes network policies restricting access to MongoDB

Pretty fast XDP-based URPF implementation that leverages hierarchical data structures to perform high-speed packet filtering with rate limiting support.

Kubernetes CKS practice scenarios and hands-on security labs for Certified Kubernetes Security Specialist exam prep. Free sample includes CIS hardening and control plane security scenarios. Full premium guide with advanced runtime, RBAC, Falco and zero-trust labs available.

Secure kubernetes with network policies

CIS Benchmark audit automation, RBAC templates, and network policy enforcement for Kubernetes clusters

This repo provides network policies for an Apigee hybrid installation.

CLI and kubectl plugin to summarize and filter Kubernetes and Cilium networkPolicies

This operator help to secure kubernetes namespace in multi-tenancy

No description provided.

A high-performance Kubernetes security and observability stack powered by eBPF. Uses Cilium for kube-proxy-free networking and Falco for kernel-level threat detection.

Network Policies on EKS Cluster