We can use NSX to provide micro segmentation of the container workloads.
Security Group
First we need to create security groups for virtual machines, use of security groups with dynamic membership can help us ensure that containers have the right level of security policies applied to them.
For the time being, i have only a container created.
Distributed Firewall Configuration
Now, we”ll create some rules and allow only required traffic:
- We will allow only the protocol HTTP
Click on Firewall and ADD Rule and input Name rule.
Now we’ll configure Source and Destination:
Source:
Destination:
Service:
In web traffic: Allow and click Publish.
With this, only o container diy_linux will be able to communicate with the web server (diy_linux…) only allow traffic on a specific port (http/https).
That’s all for now!
Leave a Reply