bytedance/vArmor

What it solves

vArmor is a cloud-native container hardening system designed to strengthen container isolation and reduce the kernel attack surface. It prevents container escape, lateral movement, and unauthorized network access, which is particularly critical for multi-tenant environments or when high-risk vulnerabilities cannot be immediately patched.

How it works

It uses a Kubernetes Operator pattern to manage security policies via CRD APIs. The system implements "enforcers" based on several Linux security technologies:

• Kernel-level control: Leverages AppArmor LSM, BPF LSM, and Seccomp to control file access, process execution, and syscalls.
• Network control: Uses an Envoy-based sidecar proxy to intercept and control egress traffic at L4 (TCP) and L7 (HTTP/HTTPS), supporting TLS MITM for decrypted inspection and HTTP header injection.

Who it’s for

• Kubernetes administrators managing multi-tenant clusters where hardware virtualization is too costly.
• Security engineers looking to protect critical business containers from privilege escalation and lateral movement.
• AI developers deploying LLM-based applications or AI Agents that require strict outbound network controls to prevent prompt injection-induced tool abuse or data exfiltration.

Highlights

• AI Agent Protection: Combines kernel and application-protocol level controls to mitigate risks like unauthorized API calls and key leakage.
• L7 Network Visibility: Provides advanced egress control (TLS MITM, SNI-based filtering) that standard Kubernetes NetworkPolicies do not offer.
• Flexible Enforcement: Supports both "Allow-by-Default" (minimizing performance impact) and "Deny-by-Default" models.
• Built-in Rules: Includes ready-to-use rules to simplify security profile creation for non-experts.