Submariner

At a glance

• Editor score
  Not yet scored
• Pricing
  Free plan
• Best for
  Free cross-cluster Kubernetes connectivity
• Free plan
  Yes
• Paid from
  None
• Network policies
  No
• Facts checked
  20 Sep 2026

• Where it wins

  • Cross-cluster Pod and Service connectivity with Lighthouse discovery
  • IPsec or WireGuard encryption, plus Globalnet for overlapping CIDRs
  • Gateway high availability with active/passive failover

• Where it doesn't

  • Delivered as self-hosted open-source software
  • Does not provide explicit support for NetworkPolicy objects
  • Optional VXLAN tunnels are unencrypted

Our verdict on Submariner

Submariner is an open-source networking project for teams operating multiple Kubernetes clusters across on-premises environments, public clouds, or hybrid infrastructure. It connects Pods and Services with cross-cluster Layer 3 networking and adds service discovery through Lighthouse. The project fits deployments built for scale, geo-redundancy, fault isolation, or hybrid infrastructure, especially where clusters need direct workload and service connectivity without adopting a broader commercial networking platform.

Its ecosystem fit is a central strength. Submariner documents compatibility with Kubernetes network policies while stating that it does not provide explicit support for NetworkPolicy objects. It is designed to work with Kubernetes environments using OpenShift-SDN, Weave, Flannel, Canal, Calico, or OVN, and across AWS, GKE, Azure, GCP, vSphere, and OpenStack. Deployment and management are handled through the Submariner Operator, with subctl or Helm available for installation and administration. This makes it suitable for teams already managing their own Kubernetes infrastructure and selecting their own underlying network stack.

The feature set is focused on multi-cluster connectivity rather than general cluster networking. Encrypted tunnels use IPsec or WireGuard, while optional VXLAN tunnels are unencrypted. Globalnet addresses overlapping cluster CIDRs, and global egress can assign egress IPs to clusters, namespaces, or selected Pods. Gateway Engine high availability adds active/passive failover. Choose Submariner when free, self-hosted cross-cluster connectivity and service discovery are the priority. Choose another option when you need a general CNI, explicit NetworkPolicy support, or a managed commercial service.

Submariner pricing

Submariner fact sheet

Alternatives to Submariner

• CiliumA broad open-source networking and observability layer for Kubernetes environments.—
• Calico Open SourceA free, broad Kubernetes networking stack with policy, encryption, and multi-cluster support.—
• AntreaA strong open-source choice for advanced Kubernetes networking, policy, and visibility.—

See all Submariner alternatives →

Featured on iTechGuides

Submariner is listed in our Container Networking Software directory. Add the badge to your site — it links back to this page.

<a href="https://www.itechguides.com/products/submariner/"><img src="https://www.itechguides.com/best/badge/submariner.svg" alt="Featured on iTechGuides" width="230" height="46"></a>

Reviewed by iTechGuides Editors · Editorial team · Updated Sep 2026

Advertiser disclosure: iTechGuides is reader-supported. We may earn a commission when you click some links. It never changes a score or a verdict. How we rank.