Envoy

Docker Hardened Image

Envoy is a high-performance L7 proxy and communication bus that enables observability, advanced load balancing, and service mesh capabilities across modern cloud-native architectures.

HAProxy

Docker Hardened Image

The Reliable, High Performance TCP/HTTP Load Balancer

ExternalDNS

Docker Hardened Image

ExternalDNS synchronizes exposed Kubernetes Services and Ingresses with DNS providers.

FRRouting

Docker Hardened Image

FRRouting (FRR) is a free and open source routing protocol suite supporting BGP, OSPF, IS-IS, RIP, EIGRP, LDP, BFD, Babel, PIM, VRRP, NHRP, and PBR. This Docker Hardened Image provides FRR routing daemons with vtysh CLI for network routing, management, and protocol implementation in a security-focused container.

Cilium Operator Generic

Docker Hardened Image

Cluster-wide operator managing Cilium networking and security policies

Tigera Operator

Docker Hardened Image

Kubernetes operator for managing Calico and Calico Enterprise installations.

Kubernetes Cluster Autoscaler

Docker Hardened Image

Cluster Autoscaler is a tool that automatically adjusts the size of the Kubernetes cluster.

Istio Proxy v2

Docker Hardened Image

Istio proxy (Envoy with Istio extensions) - high-performance service mesh sidecar proxy

Cilium Operator

Docker Hardened Image

Operator managing Cilium networking and security policies

Istio Ztunnel

Docker Hardened Image

The ztunnel component of Istio's ambient mesh

Istio Install CNI

Docker Hardened Image

Istio CNI installer image and daemonset for Kubernetes environments

Envoy Gateway

Docker Hardened Image

Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway.

Cilium Operator AWS

Docker Hardened Image

cilium-operator-aws leverages AWS-native networking capabilities while providing advanced network security and observability features

Cilium Operator Azure

Docker Hardened Image

Cilium Operator for Azure environments

Calico Node

Docker Hardened Image

Calico's per-host DaemonSet container image. Provides CNI networking and policy for Kubernetes.

Cilium

Docker Hardened Image

Cilium is a networking, observability, and security solution with an eBPF-based dataplane.

Calico Kube Controllers

Docker Hardened Image

Calico controller manager that reconciles IPAM, network policy, and Calico CRD state.

Cilium Envoy

Docker Hardened Image

Envoy proxy for Cilium with minimal Envoy extensions and Cilium policy enforcement filters.

Cilium Clustermesh API Server

Docker Hardened Image

Cilium Clustermesh API Server is a load balancing API for Cilium clusters

Istio Pilot

Docker Hardened Image

Istio control plane component that configures proxies and handles service discovery

Contour

Docker Hardened Image

Contour is a Kubernetes ingress controller using Envoy proxy to provide dynamic configuration updates and high performance load balancing. It supports Ingress, HTTPProxy, and Gateway API.

kube-vip

Docker Hardened Image

Virtual IP and load balancer for Kubernetes

Istioctl

Docker Hardened Image

Istioctl image for managing Istio deployments

etcd

Docker Hardened Image

Etcd is a strongly consistent, distributed key-value store that provides reliable data storage

Cilium Hubble Relay

Docker Hardened Image

Relay server for aggregating and exposing Hubble observability data

Calico CNI

Docker Hardened Image

Calico CNI plugin provides networking and network policy for Kubernetes clusters

CoreDNS

Docker Hardened Image

CoreDNS is a DNS server that chains plugins. It is written in Go and is designed to be fast and flexible. CoreDNS is used in cloud-native environments and is the default DNS server in Kubernetes.

Tailscale

Docker Hardened Image

Tailscale lets you securely connect devices and containers without exposing them to the public internet.

NGINX Ingress Controller

Docker Hardened Image

NGINX Ingress Controller for Kubernetes from the nginx/kubernetes-ingress project. Provides a production-grade Ingress controller based on NGINX, with support for Kubernetes Ingress resources and NGINX custom resources (VirtualServer, VirtualServerRoute, TransportServer) when enabled.

MetalLB Speaker

Docker Hardened Image

MetalLB speaker component announces LoadBalancer services to the network using Layer 2 ARP or BGP routing protocols on bare metal Kubernetes clusters.