Project Calico: Kubernetes Security as SaaS

First created for OpenStack, Calico simplified moving data packets over cloud networks using Internet Protocol (IP) routing, rather than switching, virtual networks, overlay networks, or other more complicated approaches. Since IP only gives you coarse-grained isolation across nodes, Calico added a real-time distributed filtering engine to control how the nodes talk to each one.

Read full article on The New Stack