Skip to main content

Illumio Segmentation for Containers

What's New in 5.9.0

Here's a summary of the new and enhanced features in this release.

IPVS Support

We now support IPVS mode for kube-proxy, enabling high-performance, kernel-level load balancing for large or rapidly changing clusters. This release supports these CNIs, with more coming in future releases:

  • Calico

  • Amazon VPC CNI (AWS native CNI)

This provides full, transparent support for IPVS kube‑proxy mode, giving you consistent visibility, enforcement, and reporting.

The benefits of IPVS kube-proxy mode include:

  • Automatic Detection of Kube-proxy Mode

    Illumio automatically identifies whether a cluster is running IPVS or iptables and applies the correct data‑plane behavior with no manual configuration, simplifying deployment and reducing operational complexity.

  • Flow Capture and Policy Enforcement

    Illumio now captures, classifies, and enforces flows across nodes, pods, and services when operating in IPVS environments, ensuring policy across all traffic paths.

  • Traffic Visibility and Reporting

    Traffic visibility, enforcement behavior, and policy reporting are aligned across kube‑proxy modes, providing a uniform operational experience regardless of cluster implementation.

You can verify IPVS mode detection in C-VEN logs by searching for IPVS has been detected.