Why does Cilium identity model scale better than traditional iptables-style filtering in dynamic microservices environments?

Question

Accepted Answer

B. It ties policy to service or pod identity instead of brittle IP addresses and can filter at layer 7. The Cilium intro contrasts identity-based policy with traditional IP-address filtering and notes that Cilium can also filter at the application layer such as HTTP. Option a is wrong because relying on static node IPs would not solve the churn problem in dynamic microservices environments.

Why does Cilium identity model scale better than traditional iptables-style filtering in dynamic microservices environments?

Related Questions

Discussion