--- title: "High-availability connectivity for Kubernetes with dual ToR" source: "https://www.tigera.io/blog/high-availability-connectivity-for-kubernetes-with-dual-tor/" --- [Technical Blog](https://www.tigera.io/category/technical-blog/) # High-availability connectivity for Kubernetes with dual ToR By [John Armstrong](https://www.tigera.io/blog/author/john-armstrong/) on Jul 23, 2021 • 3 min read Dual ToR (top of rack) peering provides a redundant path for customers with cluster applications that cannot tolerate service downtime or failure and require a high-availability solution. While Calico ToR connectivity has existed for some time, Calico Enterprise now supports connectivity with dual ToR switches. From an operational standpoint, a cluster that is peered to two ToR switches will still have an active link even if one switch becomes unavailable, thus ensuring the cluster always has a network connection. Because of the two ToR switches per rack, the whole setup is often referred to as “dual ToR.” More specifically, Calico: - Enables cluster operators to connect with, and take advantage of, dual ToR switches - Provides two active, independent planes of connectivity between cluster nodes when a dual plane cluster is connected via dual ToR switches - Automates the process of bootstrapping and configuring BGP peering between cluster nodes and ToR switches before Kubernetes networking is started and the Calico BGP daemon (BIRD) takes over ![Diagram of dual ToR switches in two racks, showing two active planes of connectivity between cluster nodes. BGP peering is](https://www.tigera.io/app/uploads/2021/06/high-availability-kubernetes-how-it-works.png)Calico’s HA Kubernetes solution architecture Each rack has 2 independent ToR/switches, and each node in the rack is connected (over independent Ethernets) to both of those switches. ## Benefits of dual ToR switch connectivity For cluster operators using BGP who need reliable, consistent connectivity to resources outside of the cluster as well as cluster nodes on different racks, Calico Enterprise dual ToR peering offers several benefits. - Ensures high availability with active-active redundant connectivity planes between cluster nodes and ToR switches. Kubernetes cannot do this on its own. - Prevents service downtime so that, if a link or software component breaks somewhere in one of the planes, cluster nodes can still communicate over the other plane, and the cluster as a whole continues to operate normally - Eliminates a complex, time-consuming manual process, and reduces operational overhead by automating the bootstrapping and configuration of BGP peering between cluster nodes and ToR switches ## Deploying Calico’s high-availability solution We have introduced some automation into the process and greatly simplified the deployment. For a dual ToR cluster to operate seamlessly when there is a break on one of the planes, there are some prerequisites. To ensure rapid outage detection, a dual ToR cluster needs Calico BGP peer resources to specify how each node should peer with its ToR switches. The remaining parts of the dual ToR network design are implemented as properties of those BGP peerings, and as corresponding properties on the BGP configuration between and within the ToRs and core infrastructure.   *Looking for more information? [Deploy a Dual ToR Cluster](http://docs.tigera.io/networking/dual-tor) provides detailed instructions on how to deploy a dual plane cluster to provide redundant connectivity between your workloads for on-premises deployments.*   [Products](https://www.tigera.io/tags/products/) ## Related posts [![Meet Mylo: An AI-native way to work with Calico](https://www.tigera.io/app/uploads/2026/09/Meet-Mylo-An-AI-native-way-to-work-with-Calico.png)](https://www.tigera.io/blog/meet-mylo-an-ai-native-way-to-work-with-calico/) #### [Meet Mylo: An AI-native way to work with Calico](https://www.tigera.io/blog/meet-mylo-an-ai-native-way-to-work-with-calico/) By [Phil DiCorpo](https://www.tigera.io/blog/author/phil-dicorpo/) on Sep 3, 2026 A library of Calico tools and skills — delivered through the Calico MCP Server What if your hardest network question took ten minutes instead of ten days? Anyone who has operated Kubernetes networking at scale... [Read more](https://www.tigera.io/blog/meet-mylo-an-ai-native-way-to-work-with-calico/) [![The Safest Place to Run an AI Agent Is On a Cluster That Doesn’t Trust It](https://www.tigera.io/app/uploads/2026/08/The-Safest-Place-to-Run-an-AI-Agent-Is-On-a-Cluster-That-Doesnt-Trust-It.png)](https://www.tigera.io/blog/the-safest-place-to-run-an-ai-agent-is-on-a-cluster-that-doesnt-trust-it/) #### [The Safest Place to Run an AI Agent Is On a Cluster That Doesn’t Trust It](https://www.tigera.io/blog/the-safest-place-to-run-an-ai-agent-is-on-a-cluster-that-doesnt-trust-it/) By [Alister Baroi](https://www.tigera.io/blog/author/alister-baroi/) on Aug 27, 2026 Every organization running AI agents has already made a hosting decision. Most made it by accident. The sales team switched on the agent built into their CRM. Engineering is piloting a coding agent in a... [Read more](https://www.tigera.io/blog/the-safest-place-to-run-an-ai-agent-is-on-a-cluster-that-doesnt-trust-it/) [![AI Red Team Agents Automate Attacks on your AI Agents. Runtime Policies Automate their Defense.](https://www.tigera.io/app/uploads/2026/08/AI-Red-Team-Agents-Automate-Attacks-on-your-AI-Agents.-Runtime-Policies-Automate-their-Defense.png)](https://www.tigera.io/blog/ai-red-team-agents-automate-attacks-on-your-ai-agents-runtime-policies-automate-their-defense/) #### [AI Red Team Agents Automate Attacks on your AI Agents. Runtime Policies Automate their Defense.](https://www.tigera.io/blog/ai-red-team-agents-automate-attacks-on-your-ai-agents-runtime-policies-automate-their-defense/) By [Alister Baroi](https://www.tigera.io/blog/author/alister-baroi/) on Aug 24, 2026 The AI red teaming market grew up fast this year. OpenAI bought Promptfoo, Cisco and Microsoft shipped automated attack suites, and a seed-stage startup publicly compromised 50 of 55 live customer service bots. These platforms... [Read more](https://www.tigera.io/blog/ai-red-team-agents-automate-attacks-on-your-ai-agents-runtime-policies-automate-their-defense/)