--- title: "How NRP Scales Global Scientific Research with Calico" source: "https://www.tigera.io/blog/how-nrp-scales-global-scientific-research-with-calico/" description: "Explore Calico Open Source at National Research Platform and its role in global high-performance computing and networking." --- [Company Blog](https://www.tigera.io/category/company-blog/) # How NRP Scales Global Scientific Research with Calico By [John Alexander](https://www.tigera.io/blog/author/john-alexander/) on Oct 15, 2025 • 4 min read ![NRP logo](https://www.tigera.io/app/uploads/2025/10/NRP_LOGO-cropped-300x61.png) The National Research Platform (NRP) operates a globally distributed, high-performance computing and networking environment, with an average of 15,000 pods across 450 nodes supporting more than 3,000 scientific project namespaces. With its head node in San Diego, NRP connects research institutions and data centers worldwide via links ranging from 10 to 400 Gbps, serving more than 5,000 users in 70+ locations. - Non-profit company - Uses Calico Open Source NRP is a partnership of more than 50 institutions, led by researchers at UC San Diego, University of Nebraska-Lincoln, and Massachusetts Green High Performance Computing Center and includes contributions by the National Science Foundation, the Department of Energy, the Department of Defense, and many research universities and R&E networking organizations in the US and around the world. ![Kubernetes pod and node statistics at NRP](https://www.tigera.io/app/uploads/2025/10/NRP_stats.jpeg) ## Challenges ### Complex Network Visibility and Debugging NRP needed a way to diagnose connectivity problems across globally distributed storage nodes. Frequent changes to edge network configurations, ACLs, firewalls, and static routes caused blocked ports, forcing manual troubleshooting with tools such as nmap and iperf. This process slowed down root-cause analysis and problem resolution. ### Balancing Performance with Granular Security at Scale Scientific workflows demanded maximum throughput over 100/400 Gbps links and jumbo frames. Traditional host firewalls introduced unacceptable performance penalties, preventing researchers from mounting data and forcing the team to disable them. NRP required a centralized, high-performance network security solution that could enforce fine-grained policies at scale without degrading throughput. ### Managing Advanced Heterogeneous Networking NRP’s workflows relied on advanced capabilities such as Layer 2 paths over WAN using ESnet Sense and AutoGOLE, dual-stack IPv4/IPv6 support, and experiments with multipath BGP. They also needed integration with specialized hardware such as FPGAs and smartNICs for P4 packet processing. Managing this mix of protocols, services, and hardware required a flexible CNI that could support complex, multi-layer orchestration. ## Solutions ### Enhanced Observability with Calico Telemetry With the release of Calico Open Source 3.30, the National Research Platform (NRP) intends to adopt new telemetry and observability features to replace a patchwork of existing tools. One key open source observability tool is **Calico’s Goldmane API**, which enables gRPC-based ingestion of flow logs. The other is **Calico Whisker UI**, an open source tool for visualizing network flow data, these features provide deep visibility into Kubernetes network traffic. For NRP, this means they can easily see which network policies were being applied to each flow and identify issues without relying on manual tools like `nmap` or `iperf`. Instead of spending hours debugging, engineers can passively detect problems and quickly resolve them, reducing operational overhead while improving network reliability. ### Performant Network Policy Enforcement Calico’s network policies and host endpoints enabled NRP to centralize security across pods and nodes. Using Global Network Policy and a central gateway, NRP could enforce policies cluster-wide without relying on host firewalls. This preserved high throughput while delivering the required security granularity. ### Flexible Kubernetes Networking Calico’s flexibility as a CNI (Container Network Interface) allowed NRP to handle jumbo frames across mixed networks (IPv4-only, dual-stack, and low-MTU nodes) using three Calico daemonsets. Integration with Multus delegated Layer 2 networking while Calico managed Layer 3 routing. This made it possible to establish high-performance “hyperchannels” across ESnet, conduct BGP experiments, and support P4 packet analysis with FPGAs and smartNICs. ## Results - **Optimized performance and security:** NRP eliminated host firewalls, maintaining throughput while enforcing network policies with Calico. - **Enhanced research capabilities:** Flexible orchestration enabled integration of WAN services, IPv4/IPv6 dual-stack, and advanced hardware acceleration. - **Scalability and reliability:** Calico delivered a scalable foundation that supports one of the largest distributed Kubernetes clusters for scientific research. ### Customer Perspective “Calico is absolutely central to our operations; it allows us to control all network security and manage host-level firewalls across our entire cluster. This is critical because traditional firewalls severely degrade performance, which we simply cannot afford with our high-speed data flows.” — Dima Mishin, Full Stack DevOps, Architect and Magician, San Diego Supercomputer Center at NRP ## What’s Next NRP plans to extend its use of Calico telemetry to replicate advanced services such as ESnet High Touch Service, enabling deep flow analysis and troubleshooting without relying on specialized hardware. With Calico as its Kubernetes networking and security backbone, NRP is positioned to support the next generation of large-scale scientific computing. See how NRP tackles complex network challenges and scales its global scientific research with Calico. [Click here to watch our user story](https://www.youtube.com/watch?v=ZaPoVg-vwuo&t=312s). [Open Source](https://www.tigera.io/tags/open-source/)[Project Calico](https://www.tigera.io/tags/project-calico/) ## Related posts [![What’s new in Calico: Spring 2026 Release](https://www.tigera.io/app/uploads/2026/06/Whats-New-in-Calico-NEW-TEMPLATE-2026.png)](https://www.tigera.io/blog/whats-new-in-calico-spring-2026-release/) #### [What’s new in Calico: Spring 2026 Release](https://www.tigera.io/blog/whats-new-in-calico-spring-2026-release/) By [Veronika Smolik](https://www.tigera.io/blog/author/veronika-smolik/) on Jun 2, 2026 Kubernetes has come a long way since its debut in 2014. It’s gone from running a couple of containerized microservices to orchestrating fleets of production workloads spanning everything from AI agents to full scale VMs... [Read more](https://www.tigera.io/blog/whats-new-in-calico-spring-2026-release/) [![Kubernetes Operational Maturity: Secure and Resilient Cluster Federation with Cluster Mesh](https://www.tigera.io/app/uploads/2026/05/Kubernetes-Operational-Maturity-Secure-and-Resilient-Cluster-Federation-with-Cluster-Mesh.png)](https://www.tigera.io/blog/kubernetes-operational-maturity-secure-and-resilient-cluster-federation-with-cluster-mesh/) [Technical Blog](https://www.tigera.io/category/technical-blog/) #### [Kubernetes Operational Maturity: Secure and Resilient Cluster Federation with Cluster Mesh](https://www.tigera.io/blog/kubernetes-operational-maturity-secure-and-resilient-cluster-federation-with-cluster-mesh/) By [Veronika Smolik](https://www.tigera.io/blog/author/veronika-smolik/) on May 25, 2026 Practically no one runs a single Kubernetes cluster in production these days. Maybe that’s how it started but data sovereignty requirements, acquisitions, AI initiatives and the need for edge servers, among other considerations, have pulled... [Read more](https://www.tigera.io/blog/kubernetes-operational-maturity-secure-and-resilient-cluster-federation-with-cluster-mesh/) [![What’s New in Calico v3.32](https://www.tigera.io/app/uploads/2026/05/Green-Please-use-a-different-background-color-alternately-1.png)](https://www.tigera.io/blog/whats-new-in-calico-v3-32/) #### [What’s New in Calico v3.32](https://www.tigera.io/blog/whats-new-in-calico-v3-32/) By [Reza Ramezanpour](https://www.tigera.io/blog/author/rezar/) on May 13, 2026 We’re excited to announce the release of Calico Open Source v3.32! 🎉 This release corresponds with Kubernetes v1.36 (Codename Haru) and it goes beyond just sharing a cat as the mascot of the release, it... [Read more](https://www.tigera.io/blog/whats-new-in-calico-v3-32/)