Skip to content

RouteSentry – securely routes selected pod traffic through fail‑closed, encrypted VPN tunnels

License

Notifications You must be signed in to change notification settings

aww1021/routesentry

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

3 Commits
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 

Repository files navigation

RouteSentry 🚀

RouteSentry

RouteSentry – securely routes selected pod traffic through fail-closed, encrypted VPN tunnels. This tool enhances network security in cloud-native environments, ensuring that your Kubernetes pods communicate safely.

Table of Contents

Features

  • Secure Traffic Routing: RouteSentry ensures that selected pod traffic is routed through encrypted VPN tunnels.
  • Fail-Closed Mechanism: In case of failure, traffic routing will stop, preventing data leaks.
  • Cloud-Native Compatibility: Designed to work seamlessly with Kubernetes environments.
  • Zero-Trust Architecture: Enforces strict access controls and ensures that only authorized pods can communicate.
  • Lightweight Sidecar: Easily integrates with existing Kubernetes deployments without significant overhead.
  • Network Security: Leverages nftables for enhanced security measures.

Getting Started

To get started with RouteSentry, download the latest release from the Releases section. Execute the downloaded file to set up RouteSentry in your environment.

Installation

  1. Download the Latest Release: Visit the Releases section to find the latest version.
  2. Execute the Installer: Run the installer file to set up RouteSentry on your system.
# Example command to run the installer
./routesentry-installer
  1. Verify Installation: Check if RouteSentry is installed correctly by running:
routesentry --version

Usage

Once installed, you can start using RouteSentry to secure your pod traffic. Below are some basic commands to help you get started.

Start RouteSentry

To start RouteSentry, use the following command:

routesentry start

Stop RouteSentry

To stop RouteSentry, run:

routesentry stop

Check Status

To check the status of RouteSentry, use:

routesentry status

Example Configuration

Here is an example of a basic configuration file for RouteSentry:

apiVersion: v1
kind: ConfigMap
metadata:
  name: routesentry-config
data:
  config.yaml: |
    vpn:
      enabled: true
      type: wireguard
    failClosed: true
    trustedPods:
      - pod-a
      - pod-b

Configuration

RouteSentry allows you to customize its behavior through configuration files. The main configuration options include:

  • VPN Type: Choose between different VPN types like WireGuard.
  • Fail-Closed: Enable or disable the fail-closed mechanism.
  • Trusted Pods: List of pods that are allowed to communicate through the VPN.

Contributing

We welcome contributions to RouteSentry! If you would like to contribute, please follow these steps:

  1. Fork the repository.
  2. Create a new branch for your feature or bug fix.
  3. Make your changes and commit them.
  4. Push your changes to your fork.
  5. Submit a pull request.

Please ensure your code follows our coding standards and includes appropriate tests.

License

RouteSentry is licensed under the MIT License. See the LICENSE file for more information.

Contact

For any questions or support, feel free to reach out:

Thank you for using RouteSentry! We hope it helps you secure your Kubernetes traffic effectively. Don't forget to check the Releases section for the latest updates and features.

About

RouteSentry – securely routes selected pod traffic through fail‑closed, encrypted VPN tunnels

Topics

Resources

License

Stars

Watchers

Forks

Packages

No packages published

Contributors 2

  •  
  •