Network isolation
Pods in different networks cannot communicate unless explicitly peered.
Lace
Modern Kubernetes CNI plugin with first class tenancy support.
Features
Section titled “Features”Cross-network routing
Directional peering between any networks, including overlapping CIDRs.
eBPF data plane
Forwarding, services and policy run in the kernel, without kube-proxy or iptables.
SRv6 overlay
Cross-node traffic encapsulated over any IPv6 underlay with L3 node adjacency.
Dual-stack
Native IPv4 and IPv6.
Services and NetworkPolicy
Full conformance with the Kubernetes spec, in every network.