Today’s blog post is by Edward Chang. Edward is a user group researcher for Project Calico. Before working with Tigera, Edward volunteered as a Software Developer at one of the …
Securing the “Hipster Shop” with Calico Network Policies Read More »
The Calico 3.13 release introduced an exciting new eBPF based data plane option targeted at those ready to adopt newer kernel versions and wanting to push the Linux kernel’s latest …
Hands on with Calico’s eBPF data plane native service handling Read More »
Services are one of the key Kubernetes primitives you need to understand to glue microservices together and expose your applications outside of the cluster. The Service resource provides an abstract …
Everything you need to know about Kubernetes Services networking Read More »
When you are first starting out with Kubernetes running on Google Cloud, pod networking is probably not the first thing you think about. Nevertheless, there are many choices and decisions …
Everything you need to know about Kubernetes networking on Google Cloud Read More »
When you are first starting out with Kubernetes running in Azure, pod networking is probably not the first thing you think about. Nevertheless, there are many choices and decisions to …
Everything you need to know about Kubernetes networking on Azure Read More »
When you are first starting out with Kubernetes running in AWS, pod networking is probably not the first thing you think about. Nevertheless, at some point you are going to …
Everything you need to know about Kubernetes pod networking on AWS Read More »
In this article we’ll explore Calico’s denial-of-service (DoS) mitigation features, including XDP-optimisation support introduced in Calico v3.7. Using Calico Policy for DoS mitigation During a DoS attack, a cluster can …
Introducing XDP-optimized denial-of-service mitigation Read More »
Wouldn’t it be great if your Kubernetes services were directly routable, even from outside the cluster? For our Calico v3.4 release, we are excited to announce a new feature that …
Managing IP addresses is an essential, but often overlooked, aspect of container networking. Each networking plugin has its own approach to IP address management (IPAM, for short). The simplest approaches, …
Security is a moving target. Each year we see more sophisticated attacks and ever larger scale breaches. At the same time, enterprises are calling for more deployment flexibility—across availability zones …