---
title: "What’s new in Calico v3.14"
source: "https://www.tigera.io/blog/whats-new-in-calico-v3-14/"
---

[Technical Blog](https://www.tigera.io/category/technical-blog/)

# What’s new in Calico v3.14

By [Casey Davenport](https://www.tigera.io/blog/author/caseydavenport/) on May 14, 2020 • 3 min read



We’re very excited to announce Calico v3.14.0, which includes a bunch of great features including automatic host endpoint management and a tech preview of Wireguard encryption. Thank you to all of the contributors to this release! For detailed release notes please go [here](http://docs.projectcalico.org/v3.14/release-notes). Below are some highlights from the release.






## Automatic host endpoint management






Calico v3.14 provides a new controller for automatically managing HostEndpoints for your Kubernetes nodes. This makes it easy to use Calico’s host policy enforcement features in dynamic environments where cluster nodes may come and go – for example, AWS instance auto scaling groups.
To try it out, take a look at the new [how-to guide.](http://docs.projectcalico.org/security/kubernetes-nodes)






## Even more host endpoint policy






In addition to the automatic provisioning of host endpoints discussed above, we’ve enhanced support for protecting both Kubernetes pods and hosts using Calico’s unified policy model. Calico host endpoints come in two flavors – interface-specific host endpoints which represent a single interface on a node, or wildcard host endpoints which represent all interfaces on the node. To-date, wildcard host endpoints have supported only pre-DNAT global network policies. In Calico v3.14, we’ve extended support to include other policy types as well, enabling you to more easily apply network policy to your hosts.






Note that this feature includes a change to the default behavior for wildcard host endpoints – make sure to read the [upgrade documentation](http://docs.projectcalico.org/maintenance/upgrading) if you are currently using wildcard host endpoints in your cluster.






## Encryption using Wireguard technology preview






In a zero-trust network, encrypting data on the wire provides a fundamental layer of security to your cluster. However, the difficulties presented in managing and configuring encryption for containers at-scale means it is often out of reach for Kubernetes users. We’re really excited to share that Calico v3.14 includes the ability to enable host-to-host encryption for pod traffic using Wireguard. While it’s not yet ready for production due to a few gaps and limited testing, it’s a great preview of what’s to come and we’ll be working hard to promote this feature to GA in future releases.






To give it a spin, head on over to the [encryption how-to guide](http://docs.projectcalico.org/security/try-node-to-node-encryption).






## Configure and monitor IP borrowing






Calico will handle dynamically borrowing addresses from other nodes in order to maximize usage of the IP address space. However, there are times when this behavior is not desirable. For example, if your network infrastructure does not allow advertisement of the resulting /32 routes.






In Calico v3.14, you can now disable IP borrowing by enabling strict IP affinity using calicoctl. You can also use calicoctl to see what, if any, addresses have been borrowed from other nodes.






## Calico Enterprise






If you like Calico, you’ll love Calico Enterprise. Calico v3.14 will be available in the next release of Calico Enterprise. Read more about Calico Enterprise and sign up for a trial on Tigera’s website: [https://www.tigera.io/tigera-products/calico-commercial-editions/](https://www.tigera.io/tigera-products/calico-commercial-editions/)



[Open Source](https://www.tigera.io/tags/open-source/)[Release](https://www.tigera.io/tags/release/)[Project Calico](https://www.tigera.io/tags/project-calico/)

## Related posts

[![What’s new in Calico: Spring 2026 Release](https://www.tigera.io/app/uploads/2026/06/Whats-New-in-Calico-NEW-TEMPLATE-2026.png)](https://www.tigera.io/blog/whats-new-in-calico-spring-2026-release/)

[Company Blog](https://www.tigera.io/category/company-blog/)

#### [What’s new in Calico: Spring 2026 Release](https://www.tigera.io/blog/whats-new-in-calico-spring-2026-release/)

By [Veronika Smolik](https://www.tigera.io/blog/author/veronika-smolik/)
on Jun 2, 2026

Kubernetes has come a long way since its debut in 2014. It’s gone from running a couple of containerized microservices to orchestrating fleets of production workloads spanning everything from AI agents to full scale VMs...

[Read more](https://www.tigera.io/blog/whats-new-in-calico-spring-2026-release/)

[![Kubernetes Operational Maturity: Secure and Resilient Cluster Federation with Cluster Mesh](https://www.tigera.io/app/uploads/2026/05/Kubernetes-Operational-Maturity-Secure-and-Resilient-Cluster-Federation-with-Cluster-Mesh.png)](https://www.tigera.io/blog/kubernetes-operational-maturity-secure-and-resilient-cluster-federation-with-cluster-mesh/)

#### [Kubernetes Operational Maturity: Secure and Resilient Cluster Federation with Cluster Mesh](https://www.tigera.io/blog/kubernetes-operational-maturity-secure-and-resilient-cluster-federation-with-cluster-mesh/)

By [Veronika Smolik](https://www.tigera.io/blog/author/veronika-smolik/)
on May 25, 2026

Practically no one runs a single Kubernetes cluster in production these days. Maybe that’s how it started but data sovereignty requirements, acquisitions, AI initiatives and the need for edge servers, among other considerations, have pulled...

[Read more](https://www.tigera.io/blog/kubernetes-operational-maturity-secure-and-resilient-cluster-federation-with-cluster-mesh/)

[![What’s New in Calico v3.32](https://www.tigera.io/app/uploads/2026/05/Green-Please-use-a-different-background-color-alternately-1.png)](https://www.tigera.io/blog/whats-new-in-calico-v3-32/)

#### [What’s New in Calico v3.32](https://www.tigera.io/blog/whats-new-in-calico-v3-32/)

By [Reza Ramezanpour](https://www.tigera.io/blog/author/rezar/)
on May 13, 2026

We’re excited to announce the release of Calico Open Source v3.32! 🎉 This release corresponds with Kubernetes v1.36 (Codename Haru) and it goes beyond just sharing a cat as the mascot of the release, it...

[Read more](https://www.tigera.io/blog/whats-new-in-calico-v3-32/)

<!-- plugin=object-cache-pro client=phpredis metric#hits=6177 metric#misses=17 metric#hit-ratio=99.7 metric#bytes=2222160 metric#prefetches=0 metric#store-reads=418 metric#store-writes=17 metric#store-hits=431 metric#store-misses=6 metric#sql-queries=35 metric#ms-total=2401.39 metric#ms-cache=318.27 metric#ms-cache-avg=0.7334 metric#ms-cache-ratio=13.3 -->
