From the course: Securing Containers and Kubernetes Ecosystem

Unlock the full course today

Join today to access over 22,600 courses taught by industry experts or purchase this course individually.

Container network security

Container network security - Kubernetes Tutorial

From the course: Securing Containers and Kubernetes Ecosystem

Start my 1-month free trial

Container network security

- [Instructor] Any real business application won't be complete without containers talking to each other. And this communication is enabled by container networking. Now, Docker and Kubernetes take different approaches. In Kubernetes, each pod is assigned an IP address and is expected to communicate with other pods seamlessly regardless of where the pod is running, on the same node or on separate nodes. Kubernetes, however, does not provide the network functionality on its own. Rather, it depends on the container network interface or CNI plugin, which must be set up by an admin separately. So to secure inter-container communication, or to be precise, inter-pod communication in Kubernetes, you need to apply network policies. Through these network policies, you can control what traffic can flow between pods. We will address the network security controls for Kubernetes in the next chapter. But that still leaves us to deal with…

Contents