Nephe

Overview

Nephe supports security policy enforcement across different Public Clouds. It translates and enforces Antrea NetworkPolicies on Public Cloud Virtual Machines using Cloud Network Security Groups. Nephe deploys a nephe-controller Pod in a Kubernetes cluster. Antrea must be the CNI of the Kubernetes cluster.

Dependencies

• Docker: Nephe is developed and tested with Docker version 20.10.17.
• Antrea: Provides Antrea NetworkPolicy (ANP) CRD, a controller that computes ANP spans, and an agent as K8s CNI.
• Cert-Manager: Provides in cluster authentication for nephe-controller CR webhook servers.

Getting Started

Getting started with Nephe is simple and fast. You can follow the Getting Started guide to try it out.

Contributing

The Antrea community welcomes new contributors. We are waiting for your PRs!

• Before contributing, please get familiar with our Code of Conduct.
• Check out the Contributing Guide for information about setting up your development environment and our contribution workflow.
• Learn about Nephe's Architecture and Design. Your feedback is more than welcome!
• Check out Open Issues.

License

Nephe is licensed under the Apache License, version 2.0