Suggestions appear as you type. Use the up and down arrows to choose one and Enter to open it.

This page's audience our own tag's counts — open to see them
–Visits
–Page views
–Clicks to vendors
–Time on page
–Reading now
Clicks to vendors, by tool
  • –
Top countries
  • –
Devices
  • –

– · visits, page views and clicks counted by our own tag, which counts more than our checked analytics; every figure rounded down · how we count

kube-network-policies

Free#24 of 27 in Container Networking Software

kube-network-policies: Open-source Kubernetes policy enforcement with DNS matching and administrative controls. Ranked #24 of 27 in Container Networking Software by our editors (6.5/10); pricing: Open source; best for kubernetes NetworkPolicy enforcement.

6.5/10Editor score
Explore the project
kube-network-policies6.5 Explore the project

At a glance

  • Editor score
    6.5 / 10
  • Pricing
    Open source
  • Best for
    Kubernetes NetworkPolicy enforcement
  • Paid from
    Free
  • Network policies
    Yes
  • Facts checked
    20 Sep 2026
kube-network-policies screenshot

  • Where it wins

    • Enforces ingress and egress policies, including administrative policy resources
    • Supports DNS-based matching through a policy-aware DNS cache
    • Offers raw manifest and Helm installation with structured JSON logging

  • Where it doesn't

    • Runs on Linux and is designed for Kubernetes environments
    • Uses userspace NFQUEUE processing rather than operating as a CNI plugin
    • Has a narrower verified platform and integration scope than broader networking tools

Our verdict on kube-network-policies

kube-network-policies is an open-source userspace controller for Kubernetes network policy enforcement. It is intended for cluster operators and developers who need standard namespace-level NetworkPolicies or cluster-wide administrative guardrails through AdminNetworkPolicy and BaselineAdminNetworkPolicy resources. The project evaluates both ingress and egress traffic, and it is designed to coexist with an existing CNI provider rather than replace one. Its stated platform coverage includes Kubernetes, KIND, and Linux, with self-hosted deployment in a Kubernetes cluster.

Its main distinction is the packet-processing path. kube-network-policies uses nftables rules to divert traffic into NFQUEUE, where packets are intercepted and evaluated in userspace before being allowed or dropped. That approach supports standard Kubernetes policies alongside administrative controls, while DNS-cache support enables domain-based policy matching. Structured JSON logs record traffic decisions, giving operators a machine-readable view of enforcement behavior. These features make the project a focused option for teams that need policy evaluation beyond basic namespace rules, especially when domain matching and centralized administrative boundaries matter.

Installation is available through raw Kubernetes manifests or Helm, so teams can choose a direct manifest workflow or package-based deployment. The trade-off is scope: kube-network-policies is a policy enforcement controller, not a CNI plugin, and its verified platform and integration coverage is narrower than products built around a broader networking ecosystem. Choose it when Kubernetes NetworkPolicy enforcement, administrative policies, DNS matching, and transparent logging are the priority. Choose another tool when the requirement is an all-in-one CNI, a wider set of platform integrations, or networking functionality beyond policy enforcement.

Your product? Our editors can test kube-network-policies in depth and publish a review, labelled as paid · from $149/mo →

kube-network-policies pricing

Plans Open sourceFree Free to use — no paid tier required for the core job.
See plans on kube-network-policies.sigs.k8s.io

kube-network-policies fact sheet

Free planNot verified
Paid fromFree
CNI pluginNo
Network policiesYes
Egress controlYes
Multi-cluster networkingNot verified
Encryption in transitNot verified
Supported platformsKubernetes, KIND, Linux
DeploymentSelf-hosted
PlatformsLinux
SupportCommunity, Docs
Built forSmall business, Mid-market, Enterprise (editorial estimate)
PricingOpen source
Websitekube-network-policies.sigs.k8s.io
Facts checked20 Sep 2026

Alternatives to kube-network-policies

See all kube-network-policies alternatives →

Used kube-network-policies? Be the first to review it

The editor score above is our own research. What this page doesn't have yet is a reader's view — what you used kube-network-policies for, what worked and what didn't. No stars are seeded and no review is paid for; an editor reads every one before it appears.

Write a reviewTwo minutes · verified accounts only · read by an editor before it appears

Reviews come only from verified accounts. Sign in or create an account first — your e-mail is never shown.

Your rating

0 characters · at least 80, up to 3,000

Posted from your verified account. Reviews appear after an editor reads them, usually within two working days.

Featured on iTechGuides

Featured on iTechGuides — kube-network-policies 6.5/10

kube-network-policies is listed in our Container Networking Software directory. Add the badge to your site — it links back to this page.

<a href="https://www.itechguides.com/products/kube-network-policies/"><img src="https://www.itechguides.com/best/badge/kube-network-policies.svg" alt="Featured on iTechGuides" width="230" height="46"></a>

Reviewed by iTechGuides Editors · Editorial team · Updated Oct 2026

Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.

Last updated · How we research and update