加载中
正在获取最新内容，请稍候...
Project Calico: Cloud Native Networking and Security for Containers, VMs, and Bare-Metal
Explore Project Calico, a leading open-source networking and network security solution designed for containers, virtual machines, and native host-based workloads. Enhance your cloud-native deployments with robust policy enforcement, scalability, and cross-platform compatibility.
Go
Added on 2025年6月15日6,520
Stars1,432
ForksGo
LanguageProject Introduction
Summary
Project Calico is an open-source networking and network security solution for cloud-native applications. It ensures consistent policy enforcement across various platforms, enabling secure and scalable deployments regardless of the underlying infrastructure.
Problem Solved
Managing networking and implementing consistent network security across dynamic, multi-cloud, and hybrid cloud-native environments (like Kubernetes, OpenShift, Docker, and bare metal) is complex. Project Calico addresses this by providing a unified, scalable, and policy-driven approach.
Core Features
Flexible Network Options
Provides high-performance, flexible networking options including BGP and IPIP/VxLAN overlays.
Network Security Policies
Enforces fine-grained network security policies based on labels, namespaces, and selectors.
Observability & Troubleshooting
Offers deep visibility into network traffic and policy effectiveness.
Scalability
Scales horizontally to handle large clusters and complex network topologies.
Tech Stack
Go
Kubernetes API
etcd
BPF
Calicoctl CLI
使用场景
Project Calico is used across a wide range of deployment models and platforms to provide scalable networking and consistent network security policy enforcement.
在 Kubernetes 集群中
Details
Deploy Calico as the CNI plugin for Kubernetes clusters (managed services like GKE, AKS, EKS, or self-hosted) to provide high-performance networking and integrated network policies.
User Value
Enables microsegmentation and secure communication between pods, essential for zero-trust architectures.
用于 Docker 工作负载
Details
Use Calico to provide networking and policy enforcement for Docker containers, whether standalone or managed by orchestration tools.
User Value
Extends policy-driven security benefits beyond Kubernetes to other container environments.
在裸金属或虚拟机环境中
Details
Implement Calico for networking and policy enforcement on bare-metal servers or virtual machines without needing a full orchestration platform.
User Value
Provides consistent network policy enforcement across diverse compute resources.
与现有网络集成
Details
Utilize Calico's BGP capabilities to integrate container networks with existing data center or cloud networks.
User Value
Simplifies routing and network connectivity between cloud-native workloads and traditional infrastructure.
Recommended Projects
You might be interested in these projects
kuberneteskubernetes
Kubernetes is a portable, extensible, open-source platform for managing containerized workloads and services, that facilitates both declarative configuration and automation. It's the leading system for automating deployment, scaling, and management of containerized applications.
Go
11575740721
owncastowncast
Owncast is a self-hosted live video and web chat server for communities and individuals. Take control of your stream and audience.
Go
100791022
kata-containerskata-containers
An open source project building lightweight VMs that provide the workload isolation and security of VMs with the speed and feel of containers. Ideal for security-sensitive or untrusted workloads.
Rust
63261120