Calico
Calico is an open-source networking and network-security platform for connecting and enforcing policies among containers, virtual machines, and hosts.
Google Anthos in Action
Calico is an open-source networking and network-security solution for containers, virtual machines, and host-based workloads.
- How it is used
- Implements Kubernetes NetworkPolicies in GKE Dataplane v1.
- How deep it goes
- Identifies Calico’s enforcement role and iptables dependency, but does not detail its configuration or internals.
- Examples
- Compares network policy enforcement and Service resolution in a GKE dataplane feature table.
- What you can do after
- Evaluate/understand it as the iptables-based network policy component when comparing GKE Dataplane v1 with v2.
Acing the Certified Kubernetes Administrator Exam, Second Edition
Calico is a container networking and network-policy platform that provides Kubernetes pod connectivity and policy enforcement.
- How it is used
- Provides Kubernetes pod connectivity and enforces network policies through the cluster’s CNI implementation.
- How deep it goes
- Explains CNI responsibilities and operational checks, but stops short of a detailed Calico installation or policy manifest.
- Examples
- Uses kube-system pod listings, kubectl inspection, pod communication, and default ingress and egress network-policy examples.
- What you can do after
- Operate/configure CNI networking by identifying plugins, checking components, and troubleshooting installation, replacement, and policy-support issues.
Read how Acing the Certified Kubernetes Administrator Exam, Second Edition explains Calico →
Related concepts
- gke dataplane v1used by · GKE Dataplane v1 is the GKE networking implementation based on kube-proxy, iptables, and Calico.
- network policyimplements · A network policy is a set of rules that permits or denies network traffic to and from selected workloads or endpoints.
- CNI pluginkind of · A CNI plugin is an executable component that configures container network interfaces and connectivity according to the Container Network Interface specification.
- Container Network Interfaceimplements · The Container Network Interface is a standard specification and plugin interface for configuring network connectivity and resources for containers.
These guides are generated from the text of Manning books by Manning's knowledge graph and link to the sections they draw on. The full books are available on liveBook and at manning.com.