Envoy Contrib

Docker Hardened Image

Envoy built with the contrib extensions, adding protocol filters such as Postgres, MySQL, Kafka, SIP, and RocketMQ on top of the core high-performance L7 proxy.

wait-for-it

Docker Hardened Image

A pure bash script to test and wait on the availability of a TCP host and port. Useful for synchronizing the spin-up of interdependent services in Docker Compose.

Cilium Helm chart

Docker Hardened Image

eBPF-based Networking, Security, and Observability for Kubernetes

cloudflared

Docker Hardened Image

Cloudflare Tunnel client that connects origin services to the Cloudflare network without opening inbound ports.

Stunnel

Docker Hardened Image

stunnel is a TLS proxy that adds SSL/TLS encryption to TCP services with no native TLS support, forwarding plaintext traffic between clients and backends without modifying the underlying application.

Tigera Operator Helm chart

Docker Hardened Image

Helm chart for installing the Tigera operator to deploy and manage Calico.

JupyterHub K8s Network Tools

Docker Hardened Image

A minimal iptables init container image for JupyterHub on Kubernetes.

OpenTelemetry eBPF Reducer

Docker Hardened Image

Aggregates and enriches network telemetry from OpenTelemetry eBPF collectors, exporting metrics via Prometheus or OTLP/gRPC.

Calico Third-Party CNI Plugins

Docker Hardened Image

Upstream CNI plugins staged by Calico onto cluster nodes (host-local, portmap, loopback, tuning, flannel).

Calico

Docker Hardened Image

Calico combined binary for networking and network security in Kubernetes, bundling the Calico components and the CSI node driver registrar.

AWS Load Balancer Controller Helm chart

Docker Hardened Image

The AWS Load Balancer Controller manages AWS Elastic Load Balancers for Kubernetes clusters, provisioning ALBs for Ingress resources and NLBs for Service resources.

AWS VPC CNI Helm chart

Docker Hardened Image

The AWS VPC CNI plugin provides native Amazon VPC networking for Kubernetes pods on Amazon EKS and EC2 nodes.

Linkerd Proxy

Docker Hardened Image

The Linkerd service mesh data plane proxy, with its identity agent and init-container tools.

Telepresence

Docker Hardened Image

Telepresence connects a local development machine to a remote Kubernetes cluster, so you can run and debug one service locally while it talks to the rest of the cluster. This image is the client, used as the daemon container for telepresence connect --docker.

Linkerd Controller

Docker Hardened Image

The Linkerd control plane controller, with its destination, identity, proxy injector and policy controller.