Calico Open Source Provides a Robust, Highly Scalable, and High-Performance Container Networking and Security Solution for AKS
SAN FRANCISCO, April 20, 2022 /PRNewswire/ — Tigeracreator and maintainer of Calico Open Source, the most widely used container networking and security solution and the foundation for trustless workload security, today announced the availability of Calico Container Networking Interface (CNI) for Azure Kubernetes Service (AKS ), Microsoft’s managed Kubernetes service. In addition to using Calico’s networking and security policy engine, AKS users will now be able to use Calico Open Source as a CNI for robust, scalable, and higher performance networking for their environments with a choice of Windows, eBPF and Linux data plans.
The release of Calico CNI follows Microsoft’s BYO (Bring Your Own) CNI initiative, which allows enterprises to choose their own CNI to meet their unique needs. Administrators get access to Tigera’s full support for Calico Open Source and can deploy Tigera’s Calico Cloud Native Application Protection Platform (CNAPP) for zero-trust active container security during the build, deploy and run stages through their Azure Marketplace portal.
“With Calico Open Source as part of the Bring Your Own CNI (BYOCNI) initiative, Tigera is the first to bring a robust, efficient, interoperable, and high-performance CNI solution to AKS users,” says Amit Gupta, Vice President of Business Development and Product Management, Tigera. “Organizations that rely on AKS for their Kubernetes service can now benefit from Calico CNI for networking and security for all their cloud-native applications. Additionally, we are pleased to offer AKS users the benefits from Calico CNAPP for their deployments, to reduce the attack surface of untrusted applications, detect known and zero-day threats, and actively mitigate the risk of exposure.”
Improved performance and increased security
Calico Open Source serves as the foundation for Zero Trust workload security for tens of thousands of enterprises. Calico CNI is a widely used container networking interface recognized for its performance, scalability, flexibility, power, efficiency, and support for multiple data planes, including eBPF, Linux, and Windows. Now users can build trustless workload security, access best-in-class runtime threat defense, and ensure container security with the foundation of Calico CNI in AKS. Users also have the option to seamlessly deploy Calico CNAPP for comprehensive protection of their containerized workloads on AKS.
Calico, as the CNI for AKS, will solve industry-wide problems and provide users with key benefits.
- Top-notch security and traffic throughput: Calico’s rich security policy model makes it easy to restrict communication between endpoints as needed. With built-in support for WireGuard encryption, securing pod-to-pod traffic on the network comes with lower overall CPU utilization and occupancy and higher performance. Depending on user preference, Calico uses Windows, eBPF, or Linux data plane to provide high-performance networking.
- Choice and flexibility: Regardless of the data plan they use, users get the same easy-to-use basic networking, security policy, and IP address management capabilities that have made Calico Open Source the go-to solution. networking and security policy for mission-critical cloud-native applications.
- Ease of use: Calico is the best suited solution to mitigate IP address exhaustion on AKS as one of the most deployed CNIs on the market offering zero trust for workload security. Calico CNI’s IP Address Management Plugin (IPAM) allocates IP addresses for Pods over one or more configurable IP address ranges, dynamically allocating small blocks of IP addresses per node as needed. The result is more efficient use of IP address space compared to many other IPAM CNI plugins, including the localhost IPAM plugin, which is used in many container networking solutions .
Unified networking capabilities across disparate cloud environments
For enterprises adopting multi-cloud or hybrid environments, Calico CNI ensures that these organizations have a single security policy from AKS, Amazon Elastic Kubernetes Service (EKS), GCP, Rancher, Red Hat OpenShift, VMware Tanzu , Upstream Kubernetes, and other supported distributions without the need to learn about an additional CNI plugin. Users can have unified networking capabilities across disparate cloud environments, leveraging Calico CNI IPAM capabilities in the same way in AKS as in other managed cloud distributions.
Price and availability
The Calico project is a fundamentally open source solution, and using Calico CNI, Calico IPAM, or Calico Networking and Security Policies on Azure AKS is free. For more comprehensive protection, AKS users can easily upgrade to Calico CNAPP through Azure Marketplace to automatically prevent, detect, troubleshoot, and mitigate risk of exposure to security issues during the build, deploy, and deploy stages. ‘execution. To learn more, watch a broadcast on demand from Tigera’s recent webinar with Microsoft. Users can also sign up for a free trial of Calico Cloud at Azure Marketplace.
Tigera provides the industry’s only active cloud-native application protection platform (CNAPP) with comprehensive observability for containers, Kubernetes, and the cloud. The company’s platform automatically prevents, detects, troubleshoots and mitigates the risk of exposure to security issues during the build, deployment and execution stages. Tigera offers its platform as a fully managed SaaS (Calico Cloud) or a self-managed service (Calico Enterprise). Its open-source offer, Calico Open Source, is the most widely adopted container networking and security solution. Tigera’s platform specifies security and observability as code to ensure consistent application of security policies, enabling DevOps, platform, and security teams to protect workloads, detect threats, ensure ongoing compliance, and resolve service issues in real time.
Power more than 100M containers on over 2 million nodes in 166 countries, Calico software is supported by all major cloud providers and Kubernetes distributions, and is used by leading companies such as AT&T, Discover, Merck, ServiceNow, HanseMerkur , RealPage, L3Harris and Mindbody.
Catherine Benfield for Tiger