docs.projectcalico.orgProject Calico Documentation

Toggle navigation Releases Home Resources Getting Started Documentation   Tutorials & Examples   Online Workshops -- Videos & Webinars Training Releases Blog Community Slack   StackOverflow -- Upcoming Events Newsletter GitHub Jobs Blog Support Introduction Getting started Networking Security Maintenance Reference Release notes Introduction About Calico Sample deployments Getting started Kubernetes Quickstart System requirements Managed public cloud Amazon Elastic Kubernetes Service (EKS) Google Kubernetes Engine (GKE) IBM Cloud Kubernetes Service (IKS) Microsoft Azure Kubernetes Service (AKS) Installation Introduction Installing Calico for policy and networking (recommended) Installing Calico for policy (advanced) Enabling application layer policy for Istio Customizing the manifests Self-managed public cloud Self-managed Kubernetes in AWS Self-managed Kubernetes in GCE Self-managed Kubernetes in Azure Flannel Installing Calico for policy and flannel for networking Migrating a cluster from flannel to Calico Calico the hard way Introduction Standing up Kubernetes The Calico datastore Configure IP pools Install CNI plugin Install Typha Install calico/node Configure BGP peering Test networking Test network policy End user RBAC Istio integration OpenShift System requirements Installation OpenStack Overview System requirements Installation Overview Ubuntu Red Hat Enterprise Linux DevStack Verifying your deployment Bare metal hosts System requirements Installation Overview Container install Binary install with package manager Binary install without package manager Running calico/node with an init system calicoctl Installing calicoctl Configuring calicoctl Overview Configuring calicoctl to connect to an etcd datastore Configuring calicoctl to connect to the Kubernetes API datastore Networking Determine best networking option Configure networking Configure BGP peering Configure overlay networking Configure MTU to maximize network performance Configure workload access outside cluster Use IPVS kube-proxy Accelerate Istio network performance Customize IP address management Get started with IP address management Configure IP autodetection Enable dual stack Enable IPv6 Advertise Kubernetes service IP addresses Add a floating IP to a pod Use specific IP address for a pod Assign IP addresses based on topology Migrate from one IP pool to another Interoperate with legacy firewalls using IP ranges Calico networking for OpenStack Set up a development machine IP addressing and connectivity Endpoint labels and operator policy Configure systems for use with Calico Detailed semantics Floating IPs Service IPs Host routes Multiple regions Kuryr Calico's interpretation of Neutron API calls Calico Enterprise Network visibility Federation User console Security Adopt a zero trust network model for security Get started Calico policy Get started with Calico network policy Get started with Calico network policy for OpenStack Kubernetes policy Get started with Kubernetes network policy Enable default deny for Kubernetes pods Kubernetes policy, demo Kubernetes policy, basic tutorial Kubernetes policy, advanced tutorial Policy rules Overview Use namespace in policy rules Use service accounts in policy rules Use external IPs or networks in policy rules Use ICMP/ping in policy rules Policy for hosts Protect hosts Protect host tutorial Apply policy to host forwarded traffic Policy for services Apply policy to Kubernetes node ports Apply policy to services exposed externally as cluster IPs Policy for Istio Enforce network policy using Istio Use HTTP methods and paths in policy rules Enforce network policy using Istio tutorial Policy for extreme traffic Enable extreme high-connection workloads Defend against DoS attacks Secure Calico component communications Configure encryption and authentication Schedule to well-known nodes Secure Calico Prometheus endpoints Calico Enterprise Network visibility Advanced egress access controls Advanced compliance controls Federation Threat defense User console Policy workflow Maintenance Upgrading Kubernetes OpenStack Decommissioning a node Monitor Calico component metrics Component logs Troubleshooting Reference Installation calicoctl Overview create replace apply delete get patch label convert ipam Overview release show node Overview run status diags checksystem version Resource definitions Overview BGP configuration BGP peer Felix configuration Global network policy Global network set Host endpoint IP pool Network policy Network set Node Profile Workload endpoint Configuring etcd RBAC Overview Generating certificates Creating users and roles Segmenting etcd on Kubernetes (basic) Segmenting etcd on Kubernetes (advanced) Calico key and path prefixes calico/node Felix Configuration Prometheus statistics Typha Overview Configuration Dikastes Calico CNI plugins Calico Kubernetes controllers Configuration on public clouds Amazon Web Services Azure Google Compute Engine IBM Cloud Host endpoints Overview Creating policy for basic connectivity Creating host endpoint objects Selector-based policies Failsafe rules Pre-DNAT policy Apply on forwarded traffic Summary Connection tracking Architecture Introduction Data path Network design Calico over Ethernet fabrics Calico over IP fabrics Frequently asked questions Getting involved Attributions Application layer policy attributions calicoctl attributions CNI plugin attributions confd attributions Felix attributions calico/node attributions Typha attributions Release notes Toggle nav Edit this page LESS THAN 1 MINUTE READ -- You are being redirected to the latest release of Calico Docs. Provide Feedback Get Help via Slack Training...