by Nico Kabar
Tools, Demos, and How-To
Declarative Network Security for Kubernetes with Calico
In this session, we will go over the core concepts in K8s network policies and calico network policies. Compare and contrast between the two models, and highlight when to use one versus the other. Takeaways: Kubernetes Network Policy enables applications to declare segmentation controls to restrict access to authorized workloads. Calico Network Policy is a sophisticated superset of Kubernetes network policy that includes a number of advanced policy features facilitating real world use cases. Calico provides a scalable implementation of network policy and proven in very large-scale production deployments yet simple to use and operate.