All Tools
C
Dev ToolsFreemiumOpen Source
CALICO
Kubernetes CNI and network policy for cluster security
Apache-2.0
ABOUT
Default Kubernetes networking is allow-all, so every pod can reach every model server and vector DB. Calico is a CNI plus network-policy engine (iptables or eBPF) that isolates namespaces and workloads so inference APIs and training jobs only accept the traffic you explicitly allow.
INTEGRATION GUIDE
1. Enforce NetworkPolicy so only the API gateway can reach a model-serving namespace
2. Run Calico as the cluster CNI for GPU nodes that need stable pod networking
3. Isolate training, feature-store, and inference namespaces on a shared cluster
4. Use Calico eBPF dataplane for high-QPS east-west traffic without kube-proxy
TAGS
kubernetescninetworkingsecuritynetwork-policymlopsopen-source