By Alex PollittSep 23, 2019CaaS, Calico, Kubernetes, Scaling
IBM Cloud has made a massive shift to Kubernetes. From an initial plan for a hosted Kubernetes public cloud offering it has snowballed to tens of thousands of production Kubernetes clusters running across more than 60 data centers around the globe, hosting 90% of the...
By Spike CurtisSep 5, 2019Calico, Security
AquaSec’s Daniel Sagi recently authored a blog post about DNS spoofing in Kubernetes. TLDR is that if you use default networking in Kubernetes you might be vulnerable to ARP spoofing which can allow pods to spoof (impersonate) the IP addresses of other pods. Since so...
By Casey DavenportJul 9, 2019Calico
We are very excited to announce Calico v3.8. Here are some highlights from the release. IPAM utilization reporting You can now view IP address usage for each IP pool using calicoctl. This allows you to more easily manage the IP space in your cluster, providing a...
By Alex PollittJun 13, 2019Calico, eBPF, Networking, Open Source
Calico provides users flexibility by detecting and choosing the right tool for the right job. One of our core values at Tigera is Our customer is the hero of our story. We consider the OpenSource users of Project Calico our customers and we intently listen to their...
By Shaun CramptonJun 4, 2019Calico, Cybersecurity, Networking
In this article, we’ll explore Calico’s denial-of-service (DoS) mitigation features, including XDP-optimisation support introduced in Calico v3.7. Using Calico Policy for DoS mitigation During a DoS attack, a cluster can receive massive numbers of...
By Casey DavenportMay 1, 2019Calico
We are very excited to announce Calico v3.7. Here are some highlights from the release. Native support for VXLAN encapsulation Calico now includes native support for encapsulating traffic between workloads using VXLAN, in addition to existing support for IP in IP...
