> For the complete documentation index, see [llms.txt](https://book.konstantinsecurity.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://book.konstantinsecurity.com/readme/architect/kubernetes/network-security.md).

# Network security

[Cilium](/readme/architect/kubernetes/network-security/cilium.md)

[NeuVector by SUSE](https://gitlab.com/johnmkane/tech-recipe-book/-/blob/main/Book/Architect/Kubernetes/Security%20Center%20&%20Cluster%20IaC/NeuVector%20by%20SUSE/README.md)

[Control Plane Hardening (API restriction)](https://gitlab.com/johnmkane/tech-recipe-book/-/blob/main/Book/Architect/Kubernetes/Network%20security/Network%20security/Control%20Plane%20Hardening%20\(API%20restriction\).md)

[Network policy recipes](/readme/architect/kubernetes/network-security/network-policy-recipes.md)

[Service mesh](/readme/architect/kubernetes/network-security/service-mesh.md)

[mTLS Autocert](/readme/architect/kubernetes/network-security/mtls-autocert.md)

```jsx
//--- disable all Ingres

apiVersion: networking.k8s.io/v1
kind: NetworkPolicy
metadata:
 name: default-deny-ingress
spec:
 podSelector: {}
 policyTypes:
   - Ingress
```