--- title: "Calico’s eBPF data plane" source: "https://www.tigera.io/blog/introducing-the-calico-ebpf-dataplane-2/" --- [Company Blog](https://www.tigera.io/category/company-blog/) # Calico’s eBPF data plane By [Andy Wright](https://www.tigera.io/blog/author/andywright/) on Apr 14, 2020 • 3 min read eBPF is a hot topic right now; most of the infrastructure-focused conferences and events have included talks on eBPF over the past year, which is creating a lot of interest in the technology. ## What’s eBPF? You might be wondering what eBPF is. eBPF stands for “extended Berkeley Packet Filter” which is a feature in modern Linux kernels that allows you to write mini-programs that are attached to low-level hooks in the Linux kernel, that execute based on certain events (e.g. filtering network traffic). While Calico is primarily focused on networking and security use cases, eBPF is a broad technology that applies to many other use cases as well. ## Calico eBPF data plane We’ve always been tracking eBPF and it’s potential to enhance Calico, however, most users have not been ready for it. Improving on Calico’s already excellent data plane using eBPF requires the latest Linux kernels, that are not always available to our enterprise customers that require a vendor-supported Linux distribution to run in production. Nevertheless, we decided to add an eBPF data plane to support those users that are able to use the latest Linux kernels, as well as provide a future-proofed path for those who will wait until their vendor-supported Linux distributions will support the latest eBPF features. A year ago, the engineering team at Tigera embarked on a project to add eBPF support to Project Calico. We started by prioritizing common real-world use cases that could benefit from eBPF features: - Calico 3.7 uses eBPF to improve an existing Calico use case for [mitigation of denial of service (DOS) attacks](https://www.tigera.io/blog/introducing-xdp-optimized-denial-of-service-mitigation/). - Calico 3.8 introduced [Envoy sidecar acceleration](https://www.tigera.io/blog/tigera-adds-ebpf-support-to-calico/) that helps improve the performance of a service mesh. - [Calico 3.13](https://www.tigera.io/blog/whats-new-in-calico-v3-13/) introduced a full eBPF data plane. The standard Linux networking pipeline has been tried and proven, and will likely be the choice for most enterprise users for several more years. Calico will continue to support and enhance its capabilities that leverage the standard Linux networking stack we are all familiar with. And for those who are ready to use the latest eBPF features, Calico is there for you too; with the same easy to use networking, network policy, and IP address management capabilities that have earned Calico the phrase “it just works”. Get more details and see the [results of our performance testing](https://www.tigera.io/blog/introducing-the-calico-ebpf-dataplane/) on the ProjectCalico.org blog. ————————————————- [**Free Online Training**](https://www.tigera.io/events/) Access Live and On-Demand Kubernetes Tutorials [**Calico Enterprise – Free Trial**](https://www.calicocloud.io/home) Solve Common Kubernetes Roadblocks and Advance Your Enterprise Adoption [eBPF](https://www.tigera.io/tags/ebpf/)[Products](https://www.tigera.io/tags/products/)[Project Calico](https://www.tigera.io/tags/project-calico/) ## Related posts [![Would You Notice? Five AI Agent Incidents and Who Actually Caught Them](https://www.tigera.io/app/uploads/2026/10/22-notice-featured-.png)](https://www.tigera.io/blog/would-you-notice-five-ai-agent-incidents-and-who-actually-caught-them/) [Technical Blog](https://www.tigera.io/category/technical-blog/) #### [Would You Notice? Five AI Agent Incidents and Who Actually Caught Them](https://www.tigera.io/blog/would-you-notice-five-ai-agent-incidents-and-who-actually-caught-them/) By [Alister Baroi](https://www.tigera.io/blog/author/alister-baroi/) on Oct 22, 2026 In short, between April and July 2026, AI agents under evaluation at Anthropic, Google, Meta, OpenAI and the UK AI Security Institute reached systems outside their test environments, and on 30th September OpenAI said it... [Read more](https://www.tigera.io/blog/would-you-notice-five-ai-agent-incidents-and-who-actually-caught-them/) [![Meet Mylo: An AI-native way to work with Calico](https://www.tigera.io/app/uploads/2026/09/Meet-Mylo-An-AI-native-way-to-work-with-Calico.png)](https://www.tigera.io/blog/meet-mylo-an-ai-native-way-to-work-with-calico/) #### [Meet Mylo: An AI-native way to work with Calico](https://www.tigera.io/blog/meet-mylo-an-ai-native-way-to-work-with-calico/) By [Phil DiCorpo](https://www.tigera.io/blog/author/phil-dicorpo/) on Sep 3, 2026 A library of Calico tools and skills — delivered through the Calico MCP Server What if your hardest network question took ten minutes instead of ten days? Anyone who has operated Kubernetes networking at scale... [Read more](https://www.tigera.io/blog/meet-mylo-an-ai-native-way-to-work-with-calico/) [![The Safest Place to Run an AI Agent Is On a Cluster That Doesn’t Trust It](https://www.tigera.io/app/uploads/2026/08/The-Safest-Place-to-Run-an-AI-Agent-Is-On-a-Cluster-That-Doesnt-Trust-It.png)](https://www.tigera.io/blog/the-safest-place-to-run-an-ai-agent-is-on-a-cluster-that-doesnt-trust-it/) #### [The Safest Place to Run an AI Agent Is On a Cluster That Doesn’t Trust It](https://www.tigera.io/blog/the-safest-place-to-run-an-ai-agent-is-on-a-cluster-that-doesnt-trust-it/) By [Alister Baroi](https://www.tigera.io/blog/author/alister-baroi/) on Aug 27, 2026 Every organization running AI agents has already made a hosting decision. Most made it by accident. The sales team switched on the agent built into their CRM. Engineering is piloting a coding agent in a... [Read more](https://www.tigera.io/blog/the-safest-place-to-run-an-ai-agent-is-on-a-cluster-that-doesnt-trust-it/)