2V0-71.23 Question 220
Single answerYou are deploying a Tanzu Kubernetes Grid (TKG) cluster and need to select an appropriate Container Network Interface (CNI) plugin. Your organization requires advanced network policies, encryption of pod-to-pod communication, and integration with cloud-native load balancers. Which CNI option would best meet these requirements?
- A
Calico
- B
Antrea
- C
Flannel
- D
Weave Net
Show answer and explanation
Correct answer: A
Explanation
Calico is the best CNI option for this scenario because it not only supports advanced network policies but also provides encryption for pod-to-pod communication and integration with cloud-native load balancers. These features align with the organization's requirements, making it the optimal choice over other CNI options like Antrea, Flannel, and Weave Net.
- A. Correct.
Calico is a suitable choice as it supports advanced network policy enforcement, encryption for pod-to-pod communication, and integration with cloud-native load balancers. It is widely used in production Kubernetes environments.
- B. Incorrect.
Antrea provides network policy support but lacks the maturity and features like encryption and comprehensive integration with cloud-native load balancers compared to Calico.
- C. Incorrect.
Flannel is a simple CNI plugin focusing on pod networking but does not support advanced network policies, encryption, or integration with cloud-native load balancers.
- D. Incorrect.
Weave Net supports encryption but does not offer robust network policy enforcement or integration with cloud-native load balancers required in this scenario.