Antrea
7.2#1 in microsegmentation softwareFree planFree planAPILinuxSelf-hostedWindows
Visit
| Fact | Antrea | Elisity Microsegmentation |
|---|---|---|
| Deployment | A standard installation is performed by applying one YAML manifest, with Helm and cloud-specific guides also documented. | Elisity says its Virtual Edge software runs at the access layer or in virtual environments and synchronizes policies to existing infrastructure without additional hardware. |
| Integrations | The documentation lists integrations and guides for Prometheus, Octant, Multus, and Fluentd. | The integrations page lists Armis, Claroty, CrowdStrike, Microsoft Defender, ServiceNow, Active Directory, Splunk, and network vendors including Cisco, Juniper, Aruba, and Arista. |
| Purpose | Antrea implements the Container Network Interface and Kubernetes NetworkPolicy to provide pod networking and security for Kubernetes workloads. | Elisity describes its product as identity-based microsegmentation that limits lateral movement across users, workloads, and devices. |
| Support | The project directs users to its Kubernetes Slack channel, mailing lists, community meetings, and office hours. | The customer terms include software support and maintenance during the subscription term at no additional fees, as part of a Software Order. |
Antrea suits Kubernetes operators who need pod networking, network policy controls or multi-cluster capabilities. It requires Open vSwitch on every node, and its traffic encryption feature applies to Linux nodes rather than Windows nodes.
It suits organizations in healthcare, manufacturing, industrial, and commercial sectors seeking identity-based network segmentation across mixed IT, IoT, OT, and IoMT environments. Teams should be prepared to deploy Access Software to an access-layer switch or virtual machine and access the Cloud Control Center in a browser.