--- title: "Containerized Air-Gapped Edge Platform Architecture" source: "https://wordpress-1075849-4005834.cloudwaysapps.com/blog/containerized-air-gapped-edge-platform-architecture/" --- [Technical Blog](https://wordpress-1075849-4005834.cloudwaysapps.com/category/technical-blog/) # Containerized Air-Gapped Edge Platform Architecture By [Vamsi Chemitiganti](https://wordpress-1075849-4005834.cloudwaysapps.com/blog/author/vamsi/) on Jun 11, 2019 • 5 min read An emerging use case for containerized platforms has been the ability to deploy applications in what is termed as an ***air-gapped*** deployment. This deployment pattern is particularly pronounced around edge computing (more on that later in the blog series) – though there exist significant differences between edge clusters and air-gapped deployments. ## What Are Air-gapped Applications? Air-gapped applications are those that run isolated from datacenter or internet connectivity.  In verticals such as telco, retail, real estate & healthcare, intelligent applications are deployed around really small or ‘micro’ data centers with a view of performing customer-centric operations at a retail store, oil rig or customer premises. These operations have value only in the interaction time available – for instance, the customer’s attention is captive & round tripping to the main data center introduces the risk of losing the sale/purchase, etc. These include use cases such as real-time promotions/couponing, image/audio recognition, sensor measurement, and real-time fraud detection. The idea is that the application at the point of customer contact has an amount of intelligence built into it. These applications also perform analysis to ensure that data volumes sent to the main application are ’thin’ and curated. A large percentage of these applications introduce another unique requirement – they need to be able air-gapped i.e at times be able to tolerate intermittent lack of connectivity to the data center. This is typically for business and sometimes for security considerations. ## Key Architectural Requirements for Air-gapped Applications So, what are some of the key requirements of air-gapped applications from an architectural perspective? - Support a truly distributed architecture that can accommodate a mix of business workloads of various kinds running at a location – e.g. web servers, microservices fronted by APIs, functions-as-a-service, NoSQL datastores and data analytics (machine learning & AI) - Given the resource-constrained nature of such deployments, the ability to support efficient usage of hardware resources across multiple deployments is key. The platform needs to accommodate running on a mix of CPUs, FPGA accelerators, GPUs, etc. - The ability to support multi-tenancy from both an application and a user standpoint both from a resource as well as a security standpoint - Support automated lifecycle management of applications and platform – remote installation, platform & app updates, service mesh based traffic shaping for applications based on usage patterns, performance monitoring/logging & troubleshooting, disaster recovery, and failover. Such automation should not depend on constant connectivity to the remote datacenter - Support a Dev-SecOps style of development and updating of both application & platform releases. Most times, connectivity is not available and that implies an ability to pull in application updates from a remote or a proxied local Git repository (usually via secure TLS proxy). In extreme cases where the environment is completely offline, there is usually some provision to use USB or CDs albeit in a secure manner Considering the requirements, above, containers and Kubernetes provide the ideal foundation for building these applications. Containers are much more efficient in their usage of resources such as CPU, Memory, and Network – provided by an underlying OS. Kubernetes works as well on a bare metal system (with just an OS and no Virtualization layer) as well as on any underlying hypervisor. Administrators can set up virtual clusters with namespaces that correspond to users with specific resource quotas. ## The Air-gapped Architecture Model The recommended architecture for Air-gapped solutions is based on micro service and serverless functions running on a containerized platform. ![Air-gapped architecture diagram showing microservices in Docker containers, orchestrated by Kubernetes, behind firewalls,](/app/uploads/2019/06/AirGapped_Arch.jpeg) It is also recommended to keep all of the subsystems as shown in the above diagram to communicate over open interfaces – APIs (REST using JSON). The architecture also has the ability to work (unified ops/dev) with existing hybrid cloud platforms that this blog has already discussed to a lot of depth. - Single or Multiple Masters running nearest to the customer - Workers in the Edge Locations running on Baremetal or an IaaS layer (VMware or OpenStack) or a traditional hypervisor (KVM or VMware) - Edges do not have a lot of computing power and thus run only one cluster per edge site - Typically Gateways installed at the Air gapped Edges that communicate with the equipment when connectivity is restored. Note that Gateways are an optional aspect of the architecture - The state of the application is stored at the Edge due to the air-gapped constraints - The need to perform independent updates and traffic shaping for Edge Applications ## Conclusion The rate of innovation on the container platforms scene has been nothing short of astounding. Thus, enterprises are looking to standardize on using Kubernetes as the platform to build, deploy and maintain their applications that need to run in a hybrid cloud environment.  Kubernetes is the new Operating System (OS) layer to standardize not just traditional datacenter applications but also hybrid clouds & edge/airgapped implementations. This trend helps derisk enterprises from the diversity of platforms they must support. The next post will introduce and discuss Klusterkit, a new and exciting open source project that aims to standardize airgapped cloud-native efforts on  k8s while simplifying support for Day-1, Day-2 operations. Klusterkit has been developed & open-sourced at Platform9 by  [Arun Sriraman](http://github.com/sarun87)and [Daniel Lipovetsky.](http://github.com/dlipovetsky) This article originated from [http://www.vamsitalkstech.com/?p=7717](http://www.vamsitalkstech.com/?p=7717) [Vamsi Chemitiganti](http://www.linkedin.com/in/vamsi-kiran-chemitiganti-43a7052) is a Tigera guest blogger. Vamsi Chemitiganti is Chief Strategist at Platform9 Systems. Vamsi works with Platform9’s Client CXOs and Architects to help them on key business transformation initiatives. He holds a BS in Computer Science and Engineering as well as an MBA from the University of Maryland, College Park. ————————————————- [**Free Online Training**](https://wordpress-1075849-4005834.cloudwaysapps.com/events/) Access Live and On-Demand Kubernetes Tutorials [**Calico Enterprise – Free Trial**](https://www.calicocloud.io/home) Solve Common Kubernetes Roadblocks and Advance Your Enterprise Adoption [Open Source](https://wordpress-1075849-4005834.cloudwaysapps.com/tags/open-source/) Add Tigera as a preferred source on Google to see more of our content in your search results. [![Add as a preferred source on Google](https://wordpress-1075849-4005834.cloudwaysapps.com/app/themes/tigera2021/dist/img/google-preferred-source-light.png)](https://www.google.com/preferences/source?q=tigera.io) ## Related posts [![Join Calico at KubeCon Europe 2026: AI Agents, Silent Discos, and Dutch Delights!](https://wordpress-1075849-4005834.cloudwaysapps.com/app/uploads/2026/02/Blog-Kubecon-Euro-2026-.png)](https://wordpress-1075849-4005834.cloudwaysapps.com/blog/calico-at-kubecon-cloudnativecon-europe2026/) [Company Blog](https://wordpress-1075849-4005834.cloudwaysapps.com/category/company-blog/) #### [Join Calico at KubeCon Europe 2026: AI Agents, Silent Discos, and Dutch Delights!](https://wordpress-1075849-4005834.cloudwaysapps.com/blog/calico-at-kubecon-cloudnativecon-europe2026/) By [Tigera Team](https://wordpress-1075849-4005834.cloudwaysapps.com/blog/author/marketingtigera-io/) on Feb 25, 2026 The cloud-native community is heading to the historic canals and vibrant tech scene of Amsterdam for KubeCon + CloudNativeCon Europe 2026! From March 23–26, Amsterdam will be buzzing with the latest in Kubernetes, platform engineering,... [Read more](https://wordpress-1075849-4005834.cloudwaysapps.com/blog/calico-at-kubecon-cloudnativecon-europe2026/) [![Project Calico 3.30+ Hackathon: Show Us What You Can Build!](https://wordpress-1075849-4005834.cloudwaysapps.com/app/uploads/2026/02/Blog-Hackathon-.png)](https://wordpress-1075849-4005834.cloudwaysapps.com/blog/project-calico-3-30-hackathon-show-us-what-you-can-build/) #### [Project Calico 3.30+ Hackathon: Show Us What You Can Build!](https://wordpress-1075849-4005834.cloudwaysapps.com/blog/project-calico-3-30-hackathon-show-us-what-you-can-build/) By [Tigera Team](https://wordpress-1075849-4005834.cloudwaysapps.com/blog/author/marketingtigera-io/) on Feb 17, 2026 Build the Future of Cloud-Native Networking! 🚀 The Calico community moves fast. With the releases of Calico 3.30 and 3.31, brings improvements in scalability, network security, and visibility. Now, we want to see what YOU... [Read more](https://wordpress-1075849-4005834.cloudwaysapps.com/blog/project-calico-3-30-hackathon-show-us-what-you-can-build/) [![Why Kubernetes Flat Networks Fail at Scale—and Why Your Cluster Needs a Security Hierarchy](https://wordpress-1075849-4005834.cloudwaysapps.com/app/uploads/2026/01/Why-Kubernetes-Flat-Networks-Fail-at-Scale.png)](https://wordpress-1075849-4005834.cloudwaysapps.com/blog/why-kubernetes-flat-networks-fail-at-scale-and-why-your-cluster-needs-a-security-hierarchy/) #### [Why Kubernetes Flat Networks Fail at Scale—and Why Your Cluster Needs a Security Hierarchy](https://wordpress-1075849-4005834.cloudwaysapps.com/blog/why-kubernetes-flat-networks-fail-at-scale-and-why-your-cluster-needs-a-security-hierarchy/) By [Reza Ramezanpour](https://wordpress-1075849-4005834.cloudwaysapps.com/blog/author/rezar/) on Jan 28, 2026 Kubernetes networking offers incredible power, but scaling that power often transforms a clean architecture into a tangled web of complexity. Managing traffic flow between hundreds of microservices across dozens of namespaces presents a challenge that... [Read more](https://wordpress-1075849-4005834.cloudwaysapps.com/blog/why-kubernetes-flat-networks-fail-at-scale-and-why-your-cluster-needs-a-security-hierarchy/)