IP-based vs Identity-based Security

IP-based vs Identity-based Security An architecture diagram generated by Archify. IP-based Policy · traditional firewall model · IP-based Security (Traditional) IP-based Policy traditional firewall model 10.0.1.5 → 10.0.2.10 · Allow · IP-based Security (Traditional) 10.0.1.5 → 10.0.2.10 Allow Policy update required · whenever a Pod IP changes · IP-based Security (Traditional) · problem Policy update required whenever a Pod IP changes problem Identity-based Policy · Cilium model · Identity-based Security (Cilium) Identity-based Policy Cilium model frontend → backend · Allow · Identity-based Security (Cilium) frontend → backend Allow Unaffected by IP changes · identity follows labels · Identity-based Security (Cilium) · benefit Unaffected by IP changes identity follows labels benefit match on IP on IP churn match on identity identity stays stable IP-based Security (Traditional) Identity-based Security (Cilium) Legend Backend Security External