Topic: cilium

2026

1. August 17, 202623 min read

   Kubernetes security in production · 02/04

   Network policies and Cilium: building a defensible default-deny

   The NetworkPolicy API ships with Kubernetes; enforcing it is the CNI's job. What Cilium adds, what stays standard, and how to reach default-deny by watching real flows before blocking any.