This document applies to the HEAD of the calico-containers source tree.
View the calico-containers documentation for the latest release here.
Calico can be used as a network plugin for Kubernetes using the Container Network Interface to provide connectivity for workloads in a Kubernetes cluster. Calico is particularly suitable for large Kubernetes deployments on bare metal or private clouds, where the performance and complexity costs of overlay networks can become significant. It can also be used in public clouds.
To start using Calico Networking in your existing Kubernetes cluster, check out our integration tutorial.
To build a new Kubernetes cluster with Calico networking, try one of the following guides:
Quick-start guides:
Bare-metal guides:
Calico can provide network policy for Kubernetes clusters using the v1alpha1 Kubernetes network-policy API.
This feature is currently in alpha and disabled by default. The following guide explains how to enable and use Calico policy on Kubernetes.
Calico also supports network policy using annotaions. This method is deprecated, and as such is not recommended.
- Calico policy using Annotations [Deprecated]
- The kube-proxy must be started in
iptables
proxy mode.