Antrea
7.2#1 in microsegmentation softwareFree planFree planAPILinuxSelf-hostedWindows
Visit| Fact | Antrea | Submariner |
|---|---|---|
| Deployment | A standard installation is performed by applying one YAML manifest, with Helm and cloud-specific guides also documented. | Submariner is installed and managed through a Kubernetes Operator, with subctl and Helm charts as deployment tools; the docs recommend subctl. |
| Project status | Antrea identifies itself as a Cloud Native Computing Foundation sandbox project. | Submariner is a Cloud Native Computing Foundation sandbox project. |
| Purpose | Antrea implements the Container Network Interface and Kubernetes NetworkPolicy to provide pod networking and security for Kubernetes workloads. | Submariner connects Pods and Services across Kubernetes clusters on-premises or in the cloud. |
| Support | The project directs users to its Kubernetes Slack channel, mailing lists, community meetings, and office hours. | The project directs users to GitHub, Kubernetes Slack, community meetings, and the submariner-dev and submariner-users mailing lists for help and discussion. |
No prices published.
Antrea suits Kubernetes operators who need pod networking, network policy controls or multi-cluster capabilities. It requires Open vSwitch on every node, and its traffic encryption feature applies to Linux nodes rather than Windows nodes.
It suits teams operating multiple Kubernetes clusters across clouds, data centers, or regions. Users should be comfortable with self-hosted deployment and infrastructure administration.