Microsegmentation with cSRX in AWS

With micro-segmentation (East and the West firewall) application interacting in the same EKS, VPC is secured with the supported application layer security provided by cSRX Container Firewall. Multus-CNI and flannel is used to support multiple interfaces per POD for micro-segmentation. Multus-CNI and flannel leverages the Linux native CNI support of bridge and the MAC VLAN to connect to external interfaces.

Figure 1 illustrates AWS EKS microsegmentation with cSRX in AWS.

Figure 1: AWS EKS Microsegmentation AWS EKS Microsegmentation