> For the complete documentation index, see [llms.txt](https://docs.cloudeka.ai/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.cloudeka.ai/guidance-for-enterprise/deka-gpu/deka-gpu-deka-guard/introduction.md).

# Introduction

Deka Guard is one of the services available in Service Portal Cloudeka that allows you to create, manage, and enforce network communication rules within a Kubernetes environment. Deka Guard provides several key functions, including the following:

1. **Filtering Traffic Between Pods (Ingress & Egress)**

   You can restrict pods to communicate only with specific pods, IP addresses, or ports.
2. **Label and Namespace-based Network Segmentation**

   You can define which labels and namespaces are allowed to communicate with each other, enabling network isolation between applications.
3. **Default Deny & Whitelisting Rules**

   By default, Deka Guard enforces rules to deny all traffic, but you explicitly allow only the specific access that is required.
4. **GUI Management**

   Compared to writing YAML manually, Deka Guard simplifies policy management through a user-friendly interface.