# Wormhole: Network Security for Kubernetes

DevFeed: [Wormhole: Network Security for Kubernetes](<https://devfeed.tech/articles/wormhole-network-security-for-kubernetes-29976.md>)

Original publisher: [Read original article](<https://goteleport.com/blog/wormhole-security/>)

Author: info@goteleport.com (Kevin Nisbet)

Published: 2019-05-30T00:00:00Z

Content type: opinion

Language: en

Sources: [Teleport](<https://devfeed.tech/sources/teleport.md>)

Topics: [Kubernetes](<https://devfeed.tech/topics/kubernetes.md>), [network security](<https://devfeed.tech/topics/network-security.md>), [Encryption](<https://devfeed.tech/topics/encryption.md>), [Virtual Private Network](<https://devfeed.tech/topics/vpn.md>)

Tags: [encryption](<https://devfeed.tech/tags/encryption.md>), [kubernetes](<https://devfeed.tech/tags/kubernetes.md>), [network-security](<https://devfeed.tech/tags/network-security.md>), [network-traffic](<https://devfeed.tech/tags/network-traffic.md>), [prometheus](<https://devfeed.tech/tags/prometheus.md>), [security](<https://devfeed.tech/tags/security.md>), [vpn](<https://devfeed.tech/tags/vpn.md>)

## AI overview

This article examines Wormhole, a Kubernetes networking plugin that uses WireGuard to transparently encrypt internal cluster communications. It discusses how Kubernetes network plugins and applications may trust the underlying network, and how observing cluster DNS queries and Prometheus metrics traffic can expose operational information. The article explains the security and information-leakage considerations behind encrypting internal traffic.

## Source excerpt

Discussion on Wormhole - networking plugin for Kubernetes. How do Kubernetes solutions trust the underlying network? - What about WireGuard/Wormhole?