Calico

Calico is an open-source networking and network security solution for Kubernetes that implements Kubernetes NetworkPolicy and provides extended policy capabilities through its GlobalNetworkPolicy CRDs. It uses BGP for routing and supports both Linux iptables and eBPF data planes.

Calico enables fine-grained pod-to-pod network segmentation, encrypted inter-node communication via WireGuard, and threat detection through network flow logs.