wait-for-it

Docker Hardened Image

A pure bash script to test and wait on the availability of a TCP host and port. Useful for synchronizing the spin-up of interdependent services in Docker Compose.

Envoy Contrib

Docker Hardened Image

Envoy built with the contrib extensions, adding protocol filters such as Postgres, MySQL, Kafka, SIP, and RocketMQ on top of the core high-performance L7 proxy.

Stunnel

Docker Hardened Image

stunnel is a TLS proxy that adds SSL/TLS encryption to TCP services with no native TLS support, forwarding plaintext traffic between clients and backends without modifying the underlying application.

Tigera Operator Helm chart

Docker Hardened Image

Helm chart for installing the Tigera operator to deploy and manage Calico.

JupyterHub K8s Network Tools

Docker Hardened Image

A minimal iptables init container image for JupyterHub on Kubernetes.

OpenTelemetry eBPF Reducer

Docker Hardened Image

Aggregates and enriches network telemetry from OpenTelemetry eBPF collectors, exporting metrics via Prometheus or OTLP/gRPC.

Cilium Helm chart

Docker Hardened Image

eBPF-based Networking, Security, and Observability for Kubernetes

Calico

Docker Hardened Image

Calico combined binary for networking and network security in Kubernetes, bundling the Calico components and the CSI node driver registrar.

AWS Load Balancer Controller Helm chart

Docker Hardened Image

The AWS Load Balancer Controller manages AWS Elastic Load Balancers for Kubernetes clusters, provisioning ALBs for Ingress resources and NLBs for Service resources.

AWS VPC CNI Helm chart

Docker Hardened Image

The AWS VPC CNI plugin provides native Amazon VPC networking for Kubernetes pods on Amazon EKS and EC2 nodes.

Calico Third-Party CNI Plugins

Docker Hardened Image

Upstream CNI plugins staged by Calico onto cluster nodes (host-local, portmap, loopback, tuning, flannel).