> ## Documentation Index
> Fetch the complete documentation index at: https://docs.aviatrix.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Kubernetes Firewall

> Aviatrix Kubernetes Firewall extends Distributed Cloud Firewall (DCF) security policies to containerized applications by including Kubernetes Pod and Service addresses in SmartGroups.

<Check>
  Currently, DCF contains both Preview and GA features. See{" "}
  <a href={"/docs/enterprise/" + "10.1" + "/reference/dcf/dcf-capabilities"}>Distributed Cloud Firewall Supported Capabilities by Controller Version</a>{" "}
  for more information.
</Check>

Aviatrix Kubernetes Firewall extends network security, cost efficiency, and
deployment flexibility to containerized applications. It integrates with
Kubernetes and adapts automatically to scale changes without manual
intervention. Using DCF's features, users can establish security policies based
on native container workload identities.

By extending SmartGroup capabilities to include Kubernetes attributes such as
Pod and Service addresses, DCF rules can provide security coverage across both
Kubernetes and VM environments.

Aviatrix optimizes IP address use within Kubernetes clusters, preventing address
exhaustion and simplifying deployment processes. NAT capabilities enable
connectivity for Pods, spanning both cloud and on-premises environments.

<Note>
  Currently Aviatrix Kubernetes Firewall only enforces DCF rules on traffic from
  the Kubernetes clusters to anywhere outside the VPC/VNet.
</Note>

To implement Aviatrix Kubernetes Firewall:

* <a href={"/docs/enterprise/" + "10.1" + "/reference/dcf/kubernetes-prerequisites"}>Kubernetes Prerequisites and Permissions</a>
* <a href={"/docs/enterprise/" + "10.1" + "/guides/security/dcf/kubernetes-resource-discovery"}>Discovery of Kubernetes Resources</a>
* <a href={"/docs/enterprise/" + "10.1" + "/guides/security/dcf/kubernetes-onboard"}>Onboard Kubernetes Clusters</a>
* <a href={"/docs/enterprise/" + "10.1" + "/guides/security/dcf/dcf-kubernetes"}>Create Kubernetes SmartGroups</a>
* <a href={"/docs/enterprise/" + "10.1" + "/concepts-architectures/components/dcf/dcf-rulesets-about"}>Create Distributed Cloud Firewall Rules</a>