Prototype KubeClaw is a learning project exploring what a secure, scalable Kubernetes environment for AI agents looks like. It is not production ready and not beta. Expect breaking changes and unreviewed assumptions. Read the project status.

Introduction

Understand KubeClaw’s architecture, network model, and security boundaries.

Start here to understand the design decisions behind KubeClaw before provisioning infrastructure.

Architecture

Node roles, private network layout, and how traffic reaches an IPv6-only cluster.

Security Model

The three security layers: Hetzner firewalls, host hardening, and Kubernetes network policies.

DNS and NAT64

How DNS64 and NAT64 give IPv6-only nodes and pods transparent access to IPv4-only services.