Introduction

Deka Guard is one of the services available in Service Portal Cloudeka that allows you to create, manage, and enforce network communication rules within a Kubernetes environment. Deka Guard provides several key functions, including the following:

1. Filtering Traffic Between Pods (Ingress & Egress)

   You can restrict pods to communicate only with specific pods, IP addresses, or ports.

2. Label and Namespace-based Network Segmentation

   You can define which labels and namespaces are allowed to communicate with each other, enabling network isolation between applications.

3. Default Deny & Whitelisting Rules

   By default, Deka Guard enforces rules to deny all traffic, but you explicitly allow only the specific access that is required.

4. GUI Management

   Compared to writing YAML manually, Deka Guard simplifies policy management through a user-friendly interface.