Security orchestration in Kubernetes with Verefoo

With reference to the conventional networking communication mechanism, nowadays the so called "virtualized networks" are introducing some changes in the way the networks are built and modelled: instead of some dedicated hardware components, it is possible to decouple the network functions from physical devices and run them inside VMs as written-code software. On the other side, with the cloudification, the functionalities introduced by the virtualized network were brought into a new context: the network functions will be deployed as containers in some specific virtual machine. One of the main aspect that this paper aims to cover and discuss is the reflection of the network rules, produced by the Verefoo tool, inside Kubernetes, with the consequent development of a microservices architecture to keep both Verefoo and Kubernetes aligned.