Network isolation
Pods in different networks cannot communicate unless explicitly peered.
Lace
Multi-tenant Kubernetes networking through network isolation and an eBPF/SRv6 data plane.
Features
Section titled “Features”Cross-network routing
Flexible directional peering between any networks, including overlapping CIDRs.
eBPF data plane
High performance data plane with low overhead.
SRv6 overlay
Cross-node traffic encapsulated over any IPv6 underlay with L3 node adjacency.
Dual-stack
Native IPv4 and IPv6.
NetworkPolicy support
Ingress and egress policy on top of out-of-the-box network isolation.