Stunnel

Docker Hardened Image

stunnel is a TLS proxy that adds SSL/TLS encryption to TCP services with no native TLS support, forwarding plaintext traffic between clients and backends without modifying the underlying application.

AuthService

Docker Hardened Image

Envoy external authorization service that moves OIDC/OAuth2 token acquisition out of application code and into the Istio mesh

Tigera Operator Helm chart

Docker Hardened Image

Helm chart for installing the Tigera operator to deploy and manage Calico.

OpenTelemetry eBPF Reducer

Docker Hardened Image

Aggregates and enriches network telemetry from OpenTelemetry eBPF collectors, exporting metrics via Prometheus or OTLP/gRPC.

Envoy Contrib

Docker Hardened Image

Envoy built with the contrib extensions, adding protocol filters such as Postgres, MySQL, Kafka, SIP, and RocketMQ on top of the core high-performance L7 proxy.