---
title: "Calico Delivers “Wow Effect” with 6x Faster Encryption than Any Other Solution&#8230;    Confirms Leadership in Latest Independent CNI Benchmark Tests"
source: "https://www.tigera.io/blog/calico-delivers-wow-effect-with-6x-faster-encryption-than-any-other-solution-confirms-leadership-in-latest-independent-cni-benchmark-tests/"
---

[Company Blog](https://www.tigera.io/category/company-blog/)

# Calico Delivers “Wow Effect” with 6x Faster Encryption than Any Other Solution… Confirms Leadership in Latest Independent CNI Benchmark Tests

By [John Armstrong](https://www.tigera.io/blog/author/john-armstrong/) on Nov 20, 2020 • 3 min read

Benchmark tests measure a repeatable set of quantifiable results that serve as a point of reference against which products and services can be compared. Since 2018, [Alexis Ducastel,](http://www.linkedin.com/in/alexisducastel/) a Kubernetes CKA/CKAD and the founder of InfraBuilder, has been running independent benchmark tests of Kubernetes network plugins (CNI) over a 10Gbit/s network.

The latest benchmark in this periodic series of tests was published in September, and was based on CNI versions that were up-to-date as of August 2020. Only CNIs that can be set up with a single yaml file were tested and compared, and included the following:

- Antrea v.0.9.1

- [Calico v3.16](http://docs.projectcalico.org/release-notes/)

- Canal v3.16 (Flannel network + Calico Network Policies)

- Cilium 1.8.2

- Flannel 0.12.0

- Kube-router latest (2020–08–25)

- WeaveNet 2.7.0

We are thrilled to report that among all of the CNI’s tested, Calico was the clear winner, excelling in nearly every category and delivering superlative results which are summarized in the chart below. In fact, Calico is the CNI of choice in the primary use cases presented by the author in the report’s summary.

![CNI benchmark chart shows Calico excels in performance, resource consumption, and security compared to Antrea, Canal,](https://www.tigera.io/app/uploads/2020/11/CNI-benchmark-comparison_Aug2020.png)

The exceptional performance of Calico encryption was described as having the “real wow effect” among all of the CNI comparisons. Strong network security should not come with a performance penalty. The benchmark test showed that ***Calico with encryption enabled is 6x faster than any other solution in the market!***

![K8S CNI Benchmark: Calico's encrypted performance is 6x faster than other solutions. Bar chart compares CNIs' bandwidth](https://www.tigera.io/app/uploads/2020/11/CNI-Encryption-benchmark_Aug2020.png)

Calico uses [WireGuard](http://www.wireguard.com/), which runs as a module inside the Linux kernel and provides better performance and lower CPU utilization than IPsec and OpenVPN tunneling protocols. You can activate WireGuard encryption anytime after deploying Calico on your cluster, as well as disable it as needed, a feature described in the report as being “incredibly user-friendly”.

![Calico supports WireGuard in the Linux kernel, as shown by the Linux icon. It also supports eBPF and Windows](https://www.tigera.io/app/uploads/2020/11/KubeCon-graphic.png)

As the industry standard for Kubernetes networking and network security, Calico powers more than one million Kubernetes nodes each and every day. [Calico is the only CNI with the ability to support three data planes from a single, unified control plane](https://www.tigera.io/blog/announcing-ebpf-mode-ga/). Whether you choose eBPF, native Linux, or a Windows data plane, Calico delivers blazing fast performance and exceptional scalability, as the latest benchmark tests confirm.

At Tigera, we’ve always considered Calico to be the best-in-class CNI. But don’t take our word for it. Check out the [complete results from the latest benchmark tests of Kubernetes CNIs](http://itnext.io/benchmark-results-of-kubernetes-network-plugins-cni-over-10gbit-s-network-updated-august-2020-6e1b757b9e49). You can also run the benchmark on your own cluster with the release of the [Kubernetes Network Benchmark Tool](http://github.com/InfraBuilder/k8s-bench-suite) from InfraBuilder.

[**Free Online Training**](https://www.tigera.io/events/)

Access Live and On-Demand Kubernetes Training

[**Calico Enterprise – Free Trial**](https://www.calicocloud.io/home)

Kubernetes Networking, Security and Observability in Hybrid and Multi-Clouds

[Open Source](https://www.tigera.io/tags/open-source/)[Project Calico](https://www.tigera.io/tags/project-calico/)[Announcements](https://www.tigera.io/tags/announcements/)

## Related posts

[![Meet Mylo: An AI-native way to work with Calico](https://www.tigera.io/app/uploads/2026/09/Meet-Mylo-An-AI-native-way-to-work-with-Calico.png)](https://www.tigera.io/blog/meet-mylo-an-ai-native-way-to-work-with-calico/)

[Technical Blog](https://www.tigera.io/category/technical-blog/)

#### [Meet Mylo: An AI-native way to work with Calico](https://www.tigera.io/blog/meet-mylo-an-ai-native-way-to-work-with-calico/)

By [Phil DiCorpo](https://www.tigera.io/blog/author/phil-dicorpo/)
on Sep 3, 2026

A library of Calico tools and skills — delivered through the Calico MCP Server What if your hardest network question took ten minutes instead of ten days? Anyone who has operated Kubernetes networking at scale...

[Read more](https://www.tigera.io/blog/meet-mylo-an-ai-native-way-to-work-with-calico/)

[![Why We Built Lynx: Bringing Control to the Age of AI Agents](https://www.tigera.io/app/uploads/2026/06/Introducing-Lynx-NEW-TEMPLATE-2026-Tigera-brand.png)](https://www.tigera.io/blog/why-we-built-lynx-bringing-control-to-the-age-of-ai-agents/)

#### [Why We Built Lynx: Bringing Control to the Age of AI Agents](https://www.tigera.io/blog/why-we-built-lynx-bringing-control-to-the-age-of-ai-agents/)

By [Ratan Tipirneni](https://www.tigera.io/blog/author/ratan/)
on Jun 17, 2026

For a decade, one idea has guided everything we’ve built at Tigera: How do you secure a dynamic system with a lot of moving parts that is changing rapidly, with a programmatic approach? Calico has...

[Read more](https://www.tigera.io/blog/why-we-built-lynx-bringing-control-to-the-age-of-ai-agents/)

[![What’s new in Calico: Spring 2026 Release](https://www.tigera.io/app/uploads/2026/06/Whats-New-in-Calico-NEW-TEMPLATE-2026.png)](https://www.tigera.io/blog/whats-new-in-calico-spring-2026-release/)

#### [What’s new in Calico: Spring 2026 Release](https://www.tigera.io/blog/whats-new-in-calico-spring-2026-release/)

By [Veronika Smolik](https://www.tigera.io/blog/author/veronika-smolik/)
on Jun 2, 2026

Kubernetes has come a long way since its debut in 2014. It’s gone from running a couple of containerized microservices to orchestrating fleets of production workloads spanning everything from AI agents to full scale VMs...

[Read more](https://www.tigera.io/blog/whats-new-in-calico-spring-2026-release/)

<!-- plugin=object-cache-pro client=phpredis metric#hits=3191 metric#misses=34 metric#hit-ratio=99.0 metric#bytes=1573834 metric#prefetches=0 metric#store-reads=170 metric#store-writes=20 metric#store-hits=169 metric#store-misses=23 metric#sql-queries=37 metric#ms-total=573.30 metric#ms-cache=34.06 metric#ms-cache-avg=0.1802 metric#ms-cache-ratio=5.9 sample#redis-hits=39853175 sample#redis-misses=11245930 sample#redis-hit-ratio=78.0 sample#redis-ops-per-sec=59 sample#redis-evicted-keys=0 sample#redis-used-memory=82800904 sample#redis-used-memory-rss=83202048 sample#redis-memory-fragmentation-ratio=1.0 sample#redis-connected-clients=1 sample#redis-tracking-clients=0 sample#redis-rejected-connections=0 sample#redis-keys=25302 -->
