
Aviatrix Kubernetes Firewall
Aviatrix Kubernetes Firewall governs ingress, egress, and east-west traffic for Kubernetes workloads across clusters, clouds, and other environments.
What Aviatrix Kubernetes Firewall is
Aviatrix Kubernetes Firewall governs ingress, egress, and east-west traffic for Kubernetes workloads across clusters, clouds, and other environments. It applies Zero Trust controls at the cloud network layer outside Kubernetes, avoiding sidecars, agents, CNI replacement, and application changes. Policies can target pods, namespaces, services, and labels through Kubernetes-native identities, helping limit lateral movement and incident impact. The firewall supports AWS, Microsoft Azure, Google Cloud, and on-premises environments, including EKS, AKS, and GKE. A centralized control plane manages multicloud and multicluster policy, with automation through Terraform, Kubernetes custom resource definitions, GitOps, and policy in Kubernetes manifests. Traffic visibility includes observability and anomaly detection. Listed security features include distributed firewalling, threat prevention, advanced NAT, URL filtering, egress control, micro-segmentation, TLS decryption, and DNS firewalling. Advanced NAT addresses overlapping IP ranges. Policy-based egress filtering is described for PCI DSS, HIPAA, and SOC 2. Pricing is on request, with a free 30-day trial.
Good
- Controls ingress, egress, and east-west traffic
- No sidecars, agents, or CNI replacement
- Supports AWS, Azure, Google Cloud, and on-premises
- Centralized multicloud policy control
- Free 30-day trial
Watch out
- Pricing requires a request
- Designed for enterprise Kubernetes at scale
- No free plan beyond trial
Who it suits
Aviatrix Kubernetes Firewall suits enterprises operating Kubernetes at scale across hybrid or multicloud environments. It is aimed at teams needing centralized traffic governance, identity-based policies, and egress controls.
Verdict
Aviatrix Kubernetes Firewall centralizes Kubernetes traffic policy without changing applications or cluster networking components. Its enterprise focus and request-based pricing make the trial useful for evaluating fit.
Plans and prices
From Aviatrix Kubernetes Firewall's own pricing page, checked 7 Oct 2026.
| Plan | Price | What it gives you |
|---|---|---|
| 30-day free trial | Free | 30 days · trial offer shown on product page |
The facts
Each one read from Aviatrix Kubernetes Firewall's own pages, with the date it was checked.
What it does
- Cloud and Kubernetes coverage
- The product page depicts Amazon EKS, Azure AKS, and Google GKE environments.checked 7 Oct 2026
- Cloud environments
- Aviatrix says the firewall supports Kubernetes workloads across AWS, Azure, Google Cloud, and on-premises environments.checked 7 Oct 2026
- Compliance
- Aviatrix describes policy-based egress filtering for PCI DSS, HIPAA, and SOC 2.checked 7 Oct 2026
- Deployment impact
- Aviatrix says the approach requires no sidecars, agents, CNI replacement, or application changes.checked 7 Oct 2026
- Egress and compliance
- Policy-based egress filtering is described as supporting compliance with PCI-DSS, HIPAA, and SOC 2 standards.checked 7 Oct 2026
- Enforcement location
- The product applies Zero Trust controls at the cloud network layer, outside Kubernetes clusters.checked 7 Oct 2026
- Enforcement model
- Security is enforced outside the Kubernetes cluster, without sidecars, agents, CNI replacement, or application changes.checked 7 Oct 2026
- Identity-based security
- Policy enforcement based on Kubernetes-native identities provides dynamic, workload-aware security.checked 7 Oct 2026
- Identity policies
- Policy targeting includes Kubernetes pods, namespaces, services, and labels, using Kubernetes-native identity.checked 7 Oct 2026
- Integrations
- Aviatrix describes Terraform and Kubernetes custom resource definitions as ways to automate firewall policy deployment.checked 7 Oct 2026
- Intended customers
- Aviatrix says the firewall is designed for enterprises operating Kubernetes at scale, particularly in hybrid and multicloud environments.checked 7 Oct 2026
- Policy automation
- A centralized control plane streamlines policy definition and enforcement across multicloud and multicluster environments.checked 7 Oct 2026
- Policy controls
- The product uses explicit, policy-driven controls to limit lateral movement and reduce the blast radius of incidents.checked 7 Oct 2026
- Policy integration
- The page describes GitOps and Kubernetes Resource Model integration, with policy as code in Kubernetes manifests.checked 7 Oct 2026
- Pricing
- The Kubernetes Firewall page advertises a free 30-day trial but does not state a purchase price.checked 7 Oct 2026
- Purpose
- Aviatrix Kubernetes Firewall secures Kubernetes traffic across clusters, clouds, and environments.checked 7 Oct 2026
- Security certifications
- Aviatrix’s Trust Center lists SOC 2 and ISO 27001 under audits and certifications.checked 7 Oct 2026
- Security features
- The page lists distributed firewalling, threat prevention, advanced NAT, URL filtering, egress control, micro-segmentation, TLS decryption, and DNS firewalling.checked 7 Oct 2026
- Support
- Aviatrix’s contact page links to a Support Portal and lists the support phone number +1 (888) 311-8328.checked 7 Oct 2026
- Traffic coverage
- It provides unified governance for ingress, egress, and east-west traffic across clusters and environments.checked 7 Oct 2026
The company
- Company support
- Aviatrix’s company page identifies Doug Merritt as CEO.checked 7 Oct 2026
- Headquarters
- Santa Clara, California, United Stateschecked 28 Sep 2026
Where it runs
- Overlapping IP ranges
- Advanced NAT capabilities resolve overlapping IP address ranges between clusters and the wider network.checked 7 Oct 2026
- Overlapping IPs
- Advanced NAT is shown resolving overlapping address ranges between AKS and EKS clusters.checked 7 Oct 2026
Alternatives to Aviatrix Kubernetes Firewall
- 1
Antrea
Free planOpen sourceAPILinuxSelf-hostedWindows7.2Free plan - 2
Network Service Mesh
Free planOpen sourceAPILinuxSelf-hosted7.0Free plan - 3
kube-network-policies
Free planLinuxSelf-hosted6.2Free plan - 4

Calico Open Source
Free planLinuxSelf-hostedWindows6.1Free plan - 5

Cilium
Free planLinuxSelf-hosted6.0Free plan - 6
CNI Plugins
Free planLinuxWindows6.0Free plan
