Skip to content

Antrea-managed security policies in the public cloud

License

Notifications You must be signed in to change notification settings

antrea-io/nephe

Nephe

Overview

Nephe supports security policy enforcement across different Public Clouds. It translates and enforces Antrea NetworkPolicies on Public Cloud Virtual Machines using Cloud Network Security Groups. Nephe deploys a nephe-controller Pod in a Kubernetes cluster. Antrea must be the CNI of the Kubernetes cluster.

Dependencies

  • Docker: Nephe is developed and tested with Docker version 20.10.17.
  • Antrea: Antrea provides Antrea NetworkPolicy (ANP) CRD, and Antrea Controller computes ANPs on cloud virtual machines for Nephe.
  • Cert-Manager: Provides in cluster authentication for nephe-controller CR webhook servers.

Getting Started

Getting started with Nephe is simple and fast. You can follow the Getting Started guide to try it out.

Contributing

The Antrea community welcomes new contributors. We are waiting for your PRs!

License

Nephe is licensed under the Apache License, version 2.0