--- title: "Now GA: Data-in-Transit Encryption in Calico v3.15" source: "https://www.tigera.io/blog/now-ga-data-in-transit-encryption-in-calico-v3-15/" description: "Data-in-transit encryption is now generally available with Calico v3.15." --- [Technical Blog](https://www.tigera.io/category/technical-blog/) # Now GA: Data-in-Transit Encryption in Calico v3.15 By [John Armstrong](https://www.tigera.io/blog/author/john-armstrong/) on Jul 09, 2020 • 2 min read We’re excited to announce that the latest release of Calico includes encryption for data-in-transit. Calico is the open source networking and network security solution for containers, virtual machines, and host-based workloads, offering connectivity and security for container workloads. ## Data-in-transit encryption One of Calico’s best-known security features is its implementation of Kubernetes Network Policy, providing a way to secure container workloads by restricting traffic to and from trusted sources. This enables the traffic to be controlled, however, the traffic itself had previously remained vulnerable to interception. A common solution to this problem is to encrypt traffic at the application layer using protocols like Transport Layer Security (TLS). Traffic can also be encrypted at a lower infrastructure level using IPsec. However, these approaches introduce an additional layer of complexity. Calico avoids that complexity by utilizing [WireGuard](http://www.wireguard.com/) to implement data-in-transit encryption. ![Traffic encryption illustrated by a padlock between binary data blocks](https://www.tigera.io/app/uploads/2020/07/Encrypt-Data-in-transit-1.png) ## How it works WireGuard is run as a module inside the Linux kernel and provides better performance and lower power consumption than IPsec and OpenVPN tunneling protocols. The Linux version of WireGuard reached a stable production release in March and was introduced as a tech preview in the 3.14 release of Project Calico. We are pleased to announce that WireGuard encryption is now generally available with Calico v3.15. If your network security requires that all traffic in your cluster be encrypted, Calico offers an easy way to do that. All you need is a Kubernetes cluster with WireGuard installed on the host operating system. You’ll find a complete list of supported operating systems and installation instructions on the [WireGuard website](http://www.wireguard.com/install/). Once you have that taken care of, you can enable WireGuard on Calico. Want to give it a try? [Check out this blog, which will walk you through the simple steps to enable data-in-transit encryption in Calico](https://www.tigera.io/blog/introducing-wireguard-encryption-with-calico/). With minimal effort, you can provide necessary protection for sensitive data in your Kubernetes cluster. ————————————————- [**Free Online Training**](https://www.tigera.io/events/) Access Live and On-Demand Kubernetes Tutorials [**Calico Enterprise – Free Trial**](https://www.calicocloud.io/home) Solve Common Kubernetes Roadblocks and Advance Your Enterprise Adoption [Open Source](https://www.tigera.io/tags/open-source/)[Project Calico](https://www.tigera.io/tags/project-calico/)[Announcements](https://www.tigera.io/tags/announcements/) ## Related posts [![Meet Mylo: An AI-native way to work with Calico](https://www.tigera.io/app/uploads/2026/09/Meet-Mylo-An-AI-native-way-to-work-with-Calico.png)](https://www.tigera.io/blog/meet-mylo-an-ai-native-way-to-work-with-calico/) #### [Meet Mylo: An AI-native way to work with Calico](https://www.tigera.io/blog/meet-mylo-an-ai-native-way-to-work-with-calico/) By [Phil DiCorpo](https://www.tigera.io/blog/author/phil-dicorpo/) on Sep 3, 2026 A library of Calico tools and skills — delivered through the Calico MCP Server What if your hardest network question took ten minutes instead of ten days? Anyone who has operated Kubernetes networking at scale... [Read more](https://www.tigera.io/blog/meet-mylo-an-ai-native-way-to-work-with-calico/) [![Why We Built Lynx: Bringing Control to the Age of AI Agents](https://www.tigera.io/app/uploads/2026/06/Introducing-Lynx-NEW-TEMPLATE-2026-Tigera-brand.png)](https://www.tigera.io/blog/why-we-built-lynx-bringing-control-to-the-age-of-ai-agents/) [Company Blog](https://www.tigera.io/category/company-blog/) #### [Why We Built Lynx: Bringing Control to the Age of AI Agents](https://www.tigera.io/blog/why-we-built-lynx-bringing-control-to-the-age-of-ai-agents/) By [Ratan Tipirneni](https://www.tigera.io/blog/author/ratan/) on Jun 17, 2026 For a decade, one idea has guided everything we’ve built at Tigera: How do you secure a dynamic system with a lot of moving parts that is changing rapidly, with a programmatic approach? Calico has... [Read more](https://www.tigera.io/blog/why-we-built-lynx-bringing-control-to-the-age-of-ai-agents/) [![What’s new in Calico: Spring 2026 Release](https://www.tigera.io/app/uploads/2026/06/Whats-New-in-Calico-NEW-TEMPLATE-2026.png)](https://www.tigera.io/blog/whats-new-in-calico-spring-2026-release/) #### [What’s new in Calico: Spring 2026 Release](https://www.tigera.io/blog/whats-new-in-calico-spring-2026-release/) By [Veronika Smolik](https://www.tigera.io/blog/author/veronika-smolik/) on Jun 2, 2026 Kubernetes has come a long way since its debut in 2014. It’s gone from running a couple of containerized microservices to orchestrating fleets of production workloads spanning everything from AI agents to full scale VMs... [Read more](https://www.tigera.io/blog/whats-new-in-calico-spring-2026-release/)