Cloud native networking and network security

Tools for understanding, measuring, and applying network policies effectively in kubernetes

Network Policy Agent is a daemonset that is responsible for enforcing configured network policies on the cluster.

Demos for several kubernetes security features

View your Kubernetes NetworkPolicy manifests as graph in Lens IDE

Community curated list of System and Network policy templates for the KubeArmor and Cilium

Content for the "Intelligent Cloud Bootcamp: Advanced Kubernetes" workshop

A lightweight operator to manage FQDN based egress network policies

Kubesonde: network policy testing and verification in K8s

A controller(CES) for controlling container egress traffic. Working with F5 AFM.

This workshop shows how to create Network Policies for Pods in Kubernetes.

eBPF egress firewall for Kubernetes — see and enforce what every pod talks to (domains, HTTP paths, headers, IPs), attributed per pod, enforced in the kernel. No sidecar, no proxy, no TLS MITM.

An application container validation runtime for pre-Kubernetes deployment workflows

A tool to visualize network policy information from the Kubernetes Master API

Helm-ET is a network policy generator for third-party Helm charts

OWASP x Project Calico x Okta Container and Kubernetes Security Policy Design

Kubernetes operator: auto-generate NetworkPolicy from traffic patterns (learning/enforcing modes)

Cross-platform zero-trust microsegmentation engine enforcing network policies at the kernel level (eBPF, WFP, pf) with etcd-backed policy distribution and hybrid cloud security orchestration (AWS/GCP/Azure).

Cilium examples using KIND clusters

Go CLI for PCI-DSS network segmentation. Validates YAML policies, enforces via eBPF (Linux) or pf (macOS), syncs to AWS/Azure, and generates compliance reports.