antrea-io/antrea

Health v2 · maintenance only

Adoption not part of the score

1807 stars · 491 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

Antrea is a Kubernetes-native CNI plugin that provides pod networking and NetworkPolicy enforcement using Open vSwitch as the data plane. It offers overlay networking (VXLAN/Geneve), traffic encryption, network flow visibility, and advanced security features for Kubernetes clusters.

Use cases

• set up pod networking for a kubernetes cluster
• enforce network policies and microsegmentation between pods
• create overlay networks with vxlan or geneve encapsulation
• encrypt node-to-node traffic with ipsec or wireguard
• get network flow visibility and traceability in kubernetes
• replace iptables-based cni with a faster ovs-based data plane
• run kubernetes networking across clouds and windows nodes

When to choose

• you need a kubernetes-native CNI with efficient NetworkPolicy enforcement
• you want OVS performance benefits over iptables at scale
• you need cross-cloud, cross-OS (including Windows) unified pod networking
• you want advanced features like traffic encryption, flow visibility, or Traceflow

When to avoid

• you are not running Kubernetes
• your nodes lack the Open vSwitch kernel module
• you need a minimal CNI without extra networking features
• you rely on a CNI plugin unsupported by Antrea's architecture

Facets

service · maturity stable

networking security container-orchestration middleware networking security cloud-computing windows go cloud self-hosted cni open-vswitch network-policy kubernetes-networking overlay-network cncf microsegmentation traffic-encryption containers devops kubernetes linux docker

Member repositories

For agents

markdown · JSON · MCP: product_card(name="antrea-io/antrea")