Which of the following are true regarding Antrea? (Select all that apply)
Antrea is VMware's Kubernetes-native Container Network Interface (CNI) utilized for micro-segmenting container pods.
Option A is True: Architecturally, Antrea deploys an antrea-agent component on every single Kubernetes Worker Node (typically as a DaemonSet). This agent is responsible for programming the Open vSwitch (OVS) datapath on that specific node to enforce pod routing and security policies.
Option B is True: A massive advantage of integrating Antrea with vDefend (NSX) is unified security. The vDefend management plane synchronizes Kubernetes inventory (Pods, Namespaces). This allows security administrators to write 'mixed' Distributed Firewall rules within a single policy framework---for example, permitting traffic from a traditional Virtual Machine (e.g., a DB server) directly to a Kubernetes Pod (e.g., a Web frontend) using dynamic tagging.
(Option C is False because the flow is reversed: the Controller computes the policies and pushes them down to the Agents. Option D is False because data plane agents run on worker/compute nodes, not the management cluster).
=========================
Lenny
4 days agoPearly
9 days agoTran
14 days agoTarra
19 days agoRonnie
25 days agoHenriette
30 days agoLigia
1 month agoErnestine
1 month agoPura
2 months agoSage
2 months agoMarguerita
2 months agoClorinda
2 months agoApolonia
2 months agoIzetta
2 months agoElinore
4 months agoWilda
4 months agoSarah
4 months ago