https://cilium.netlify.app/component---src-pages-use-cases-host-firewall-jsx-589e3990b9cac17a0dd9.js

1"use strict";(self.webpackChunkcilium_io=self.webpackChunkcilium_io||[]).push([[1306],{1448:function(e,t,a){var l=a(6942),i=a.n(l),n=a(6540);const r={xl:"text-4xl lg:text-5xl xl:text-[64px]",lg:"text-4xl lg:text-5xl",md:"text-3xl lg:text-4xl",sm:"text-2xl lg:text-3xl font-semibold",xs:"text-xl lg:text-2xl","2xs":"text-lg lg:text-xl","3xs":"text-base"},c={common:"font-bold",normal:"font-normal"},o={gray:"!text-base lg:text-base uppercase text-gray-1 leading-none lg:leading-none font-semibold tracking-wide"},s=e=>{let{className:t,tag:a,size:l,theme:s,asHTML:m,children:d,fontWeight:g}=e;const u=i()(c[g],r[l],o[s],t);return m?n.createElement(a,{className:u,dangerouslySetInnerHTML:{__html:d}}):n.createElement(a,{className:u},d)};s.defaultProps={className:null,asHTML:!1,size:"md",fontWeight:"common",theme:null},t.A=s},1651:function(e,t,a){a.d(t,{A:function(){return s}});var l=a(6942),i=a.n(l),n=a(6540),r=a(6423),c=a(6478);const o=e=>{let{title:t,description:a,imageSrc:l,imageWidth:o,imageHeight:s,imageAlt:m,imageRight:d,videoSrc:g,withBackground:u,className:p}=e;const h=Array.isArray(a)?a:[a];return n.createElement("section",{className:i()(u&&"bg-gray-4")},n.createElement(r.A,{className:i()("grid grid-cols-12 gap-y-6 gap-x-6 pb-10 md:pb-20 lg:pb-28 xl:gap-x-8 xl:pb-32",p)},n.createElement("div",{className:i()("col-span-full lg:col-span-5 flex flex-col justify-center",d?"lg:col-start-1":"lg:col-start-8")},n.createElement(c.A,{className:"mb-5 leading-tight lg:leading-tight xl:leading-tight dark:text-white text-black",tag:"h3",size:"md"},t),h.map((e,t)=>n.createElement("p",{key:t,className:i()("text-lg leading-normal dark:text-gray-2 text-black",t<h.length-1&&"mb-2"),dangerouslySetInnerHTML:{__html:e}}))),n.createElement("div",{className:i()("col-span-full col-start-1 pt-6 md:col-span-8 md:col-start-3 lg:col-span-7 lg:pt-0",d?"pl-0 lg:pl-10 xl:pl-[72px]":"pr-0 lg:col-start-1 lg:row-start-1 lg:pr-10 xl:pr-[72px]")},l&&n.createElement("img",{className:"h-auto w-full",width:o,height:s,src:l,loading:"lazy",alt:m}),g&&n.createElement("iframe",{className:"w-full",width:"560",height:"315",src:g,title:"YouTube video player",allow:"accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture; web-share",referrerPolicy:"strict-origin-when-cross-origin",allowFullScreen:!0}))))};o.defaultProps={imageRight:!0,withBackground:!1,videoSrc:null,imageWidth:592,imageHeight:350,imageSrc:null,imageAlt:null,className:null};var s=o},2120:function(e,t,a){a.r(t),a.d(t,{Head:function(){return p},default:function(){return u}});var l=a(6540),i=a(1651),n=a(6443),r=a(6002),c=a(8838),o=(a.p,a.p+"static/networking-bee-a1d1d998f1845d04c3c48b24c096030c.png"),s=a(7169);const m={title:"Host Firewall",category:"Networking",tagline:"Host Security That Scales With Kubernetes",subHeading:"How can I secure the host namespace with same consistent security model?",description:"Kubernetes nodes are the backbone of any cluster, but securing them presents unique challenges beyond the capabilities of traditional firewalls. Without granular host-level controls, nodes are vulnerable to unauthorized access, exposing critical cluster components, like kube-apiserver or etcd, to potential breaches. Static firewall rules struggle to adapt to the dynamic nature of Kubernetes environments, leaving gaps in protection during workload changes or updates. Additionally, misconfigurations in restrictive policies can disrupt essential communications, while limited visibility into host-level traffic makes monitoring and troubleshooting difficult.",imageSrc:o,imageAlt:"Networking Bee",imageWidth:350,imageHeight:350},d={title:"Consistent Security for Nodes and Pods",description:"Traditionally, securing Kubernetes environments required managing separate security models for nodes and pods, resulting in operational complexity and potential blind spots. Cilium Host Firewall eliminates this inconsistency by applying the same network policy model to the host. This approach extends Kubernetes declarative, policy-driven security model to the nodes hosting your workloads, delivering seamless, consistent protection across your entire environment. By leveraging YAML manifests, administrators can define, apply, and manage host-level policies with the same ease and precision as Kubernetes Network Policies, creating a unified approach to 

1securing both pods and their underlying hosts.",videoSrc:"https://www.youtube.com/embed/GLLLcz398K0"},g={title:"Host Security That Scales With Kubernetes",description:"Cilium Host Firewall empowers administrators to enforce fine-grained policies for node-level traffic. By matching on node labels, you can create targeted rules that allow or deny traffic based on specific needs, such as permitting only SSH or ICMP traffic to specific nodes. This level of control ensures that your nodes are protected from unauthorized access while maintaining the flexibility required for smooth operations. Cilium Host Firewall ensures consistent, granular, and adaptable security for every node in your cluster, giving you the confidence to scale securely in even the most demanding environments.",videoSrc:"https://www.youtube.com/embed/AWAf3H4Qwq8",imageRight:!1};var u=()=>l.createElement(s.A,{theme:"gray"},l.createElement(n.A,m),l.createElement(i.A,d),l.createElement(i.A,g),l.createElement(r.A,{className:"mt-10 md:mt-20 lg:mt-32",theme:"gray",isTitleCentered:!0}));const p=e=>{let{location:{pathname:t}}=e;const a={title:m.title,description:m.tagline,slug:t};return l.createElement(c.A,{data:a})}},6002:function(e,t,a){a.d(t,{A:function(){return f}});var l=a(6942),i=a.n(l),n=a(6540),r=a(6423),c=a(6478),o=a(6244),s=a.p+"static/lab-ffb720036dd9213aee66555a118d9696.svg",m=a.p+"static/blue-sky-3e5941963f72c4cc04f891ad8259a430.svg",d=a.p+"static/github-6176d1aa7836bc99d7dffc9196467ea6.svg",g=a.p+"static/linkedin-e5d02dee85aa7c39ceb7612376031afa.svg",u=a.p+"static/slack-c41494e8ea3e5e56faba3d75c855f1cb.svg",p=a.p+"static/youtube-3eaaeb3c54f3634c0f265f136d87ba68.svg";const h=[{icon:u,title:"Join our Slack channel",titleWidth:"xl:w-32",url:"https://slack.cilium.io",target:"_blank"},{icon:d,title:"Contribute on GitHub",titleWidth:"xl:w-24",url:"https://github.com/cilium/cilium",target:"_blank"},{icon:m,title:"Follow us on Bluesky",url:"https://bsky.app/profile/cilium.io",target:"_blank"},{icon:p,title:"Watch Echo Livestream",url:"https://www.youtube.com/channel/UCJFUxkVQTBJh3LD1wYBWvuQ",target:"_blank"},{icon:g,title:"Follow us on LinkedIn",titleWidth:"xl:w-24",url:"https://www.linkedin.com/company/cilium/",target:"_blank"},{icon:s,title:"Explore Cilium Labs",titleWidth:"xl:w-32",url:"/labs/categories/getting-started/"}],b={white:{wrapper:"bg-white",card:"bg-transparent border-gray-3 border"},gray:{wrapper:"bg-gray-4",card:"bg-white shadow-card"}},y=e=>{let{className:t,theme:a,isTitleCentered:l}=e;return n.createElement("section",{className:i()("overflow-hidden py-10 sm:overflow-visible md:py-20 lg:pt-28 lg:pb-32 bg-gray-4 dark:bg-gray-900",t,b[a].wrapper)},n.createElement(r.A,null,n.createElement(c.A,{className:i()(l&&"text-center  dark:text-gray-3 text-black "),tag:"h2"},"Community"),n.createElement("ul",{className:"mt-7 grid grid-cols-1 gap-4 sm:grid-cols-2 md:mt-10 md:gap-5 lg:mt-14 lg:grid-cols-3 lg:mb-1.5 xl:grid-cols-6 xl:gap-8"},h.map((e,t)=>{let{icon:l,title:r,url:c,target:s,titleWidth:m}=e;return n.createElement("li",{key:t},n.createElement(o.A,{to:c,target:s,className:i()("flex items-center rounded-lg p-6 md:flex-col md:pb-8 md:pt-7 lg:pt-9 lg:pb-11 xl:p-7 bg-white dark:bg-gray-2",b[a].card),type:"text",theme:"black"},n.createElement("img",{className:"shrink-0 h-9 w-9 md:h-11 md:w-11",src:l,alt:"",width:"36",height:"36",loading:"lazy"}),n.createElement("span",{className:i()("ml-4 text-center font-bold leading-snug truncate md:m-0 md:mt-[18px] md:text-lg md:leading-snug lg:whitespace-normal xl:mt-3.5 xl:text-base xl:leading-tight",m)},r)))}))))};y.defaultProps={className:null,isTitleCentered:!1,theme:"white"};var f=y},6443:function(e,t,a){a.d(t,{A:function(){return m}});var l=a(6942),i=a.n(l),n=a(6540),r=a(6423),c=a(6478);const o=e=>{let{category:t}=e;return n.createElement("span",{className:i()("w-fit rounded py-2 px-2.5 text-sm font-semibold uppercase leading-none tracking-wider",{"bg-additional-green/10 text-additional-green":"Networking"===t},{"bg-additional-red/10 text-additional-red":"Security"===t},{"bg-additional-blue/10 text-additional-blue":"Observability"===t})},t)},s=e=>{let{category:t,title:a,tagline:l,subHeading:s,description:m,imageSrc:d,imageAlt:g,imageWidth:u,imageHeight:p,videoSrc:h}=e;return n.createElement("section",{className:"mb-10 bg-gray-4 dark:bg-[#111827] md:mb-20 lg:mb-28"},n.createElement(r.A,{className:"grid grid-cols-12 gap-y-6 gap-x-6 pt-5 pb-10 md:pt-16 md:pb-20 lg:pb-[138px] xl:gap-x-8"},n.createElement("div",{className:i()(d||h?"col-span-full lg:col-span-6":"col-span-full lg:col-span-8")},n.createElement(o,{category:t}),n.createElement(c.A,{className:"mt-6 mb-3 leading-tight lg:leading-tight xl:!text-44 xl:leading-tight dark:text-white text-black",tag:"h1",size:"md"},a),n.createElement("small",{className:"text-xl leading-normal dark:text-gray-2 text-black"},l),n.createElement(c.A,{className:"pt-5 mt-5 mb-2 font-semibold border-t border-gray-3  dark:border-gray-1 dark:text-white text-black",tag:"h2",size:"3xs"},s),n.createElement("p",{className:"text-base leading-normal dark:text-gray-2 text-black",dangerouslySetInnerHTML:{__html:m}})),(d||h)&&n.createElement("div",{className:i()("col-span-full col-start-1 pt-6 pl-0 md:col-span-8 md:col-start-3 lg:col-span-6 lg:pt-8 lg:pl-8",d&&"place-self-ce

1nter ")},d&&n.createElement("img",{className:"max-h-[350px]",width:u,height:p,src:d,alt:g,loading:"eager"}),h&&n.createElement("iframe",{className:"w-full",width:560,height:315,src:h,title:"YouTube video player",allow:"accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture; web-share",referrerPolicy:"strict-origin-when-cross-origin",allowFullScreen:!0}))))};s.defaultProps={videoSrc:null,imageSrc:null,imageAlt:null,imageWidth:592,imageHeight:350};var m=s},6478:function(e,t,a){a.d(t,{A:function(){return l.A}});var l=a(1448)},8838:function(e,t,a){a.d(t,{A:function(){return n}});var l=a(4794),i=a(6540);var n=function(e){let{data:{title:t,description:a,image:n,slug:r}={},type:c="website",author:o,datePublished:s,dateModified:m,noindex:d=!1,facebook:g,jsonLd:u,children:p}=void 0===e?{}:e;const{site:{siteMetadata:{siteTitle:h,siteDescription:b,siteUrl:y,siteImage:f,authorTwitterAccount:x}}}=(0,l.useStaticQuery)("2330559035"),w=null!=t?t:h,E=null!=a?a:b,k=r?`${y}${r}`:y,v=n?function(e,t){return t+e.childImageSharp.resize.src}(n,y):y+f,N=d?"noindex, nofollow":"index, follow";return i.createElement(i.Fragment,null,i.createElement("title",null,w),i.createElement("meta",{name:"description",content:E}),i.createElement("meta",{name:"robots",content:N}),i.createElement("link",{rel:"canonical",href:k}),i.createElement("meta",{property:"og:url",content:k}),i.createElement("meta",{property:"og:title",content:w}),i.createElement("meta",{property:"og:description",content:E}),i.createElement("meta",{property:"og:image",content:v}),i.createElement("meta",{property:"og:type",content:c}),g&&i.createElement("meta",{property:"fb:app_id",content:g.appId}),"article"===c&&i.createElement(i.Fragment,null,o&&i.createElement("meta",{property:"article:author",content:o}),s&&i.createElement("meta",{property:"article:published_time",content:s}),m&&i.createElement("meta",{property:"article:modified_time",content:m})),i.createElement("meta",{name:"twitter:card",content:"summary_large_image"}),i.createElement("meta",{name:"twitter:site",content:x}),i.createElement("meta",{name:"twitter:title",content:w}),i.createElement("meta",{name:"twitter:description",content:E}),i.createElement("meta",{name:"twitter:image",content:v}),i.createElement("meta",{name:"twitter:url",content:k}),o&&i.createElement("meta",{name:"twitter:creator",content:o}),u&&i.createElement("script",{type:"application/ld+json",dangerouslySetInnerHTML:{__html:JSON.stringify(u)}}),p)}}}]);
2//# sourceMappingURL=component---src-pages-use-cases-host-firewall-jsx-589e3990b9cac17a0dd9.js.map