Skip to main content
Singapore
AIMenta
C

Calico

by Tigera

Open-source Kubernetes CNI plugin and network policy engine with BGP routing, WireGuard encryption, and the most widely deployed network policy implementation in production clusters.

Visit Calico (opens in new tab) Get a recommendation
AIMenta verdict
Recommended
5/5

"Kubernetes network policy and CNI plugin — APAC platform teams use Calico to enforce pod-to-pod network policies across APAC clusters, providing namespace isolation, BGP routing for on-premises APAC workloads, and WireGuard encryption for APAC inter-node traffic."

Features
6
Use cases
1
Watch outs
3
What it does

Key features

  • Kubernetes NetworkPolicy enforcement with fine-grained APAC pod-to-pod isolation
  • GlobalNetworkPolicy: cluster-wide and cross-namespace APAC policy rules
  • BGP routing mode for native APAC datacenter fabric integration
  • WireGuard transparent inter-node encryption for APAC data-in-transit compliance
  • EBPF data plane option for high-performance APAC packet processing
  • Tigera Enterprise adds flow visualization and APAC compliance reporting
When to reach for it

Best for

  • APAC platform engineering teams managing production Kubernetes clusters who need mature, widely-supported network policy enforcement, particularly those with on-premises BGP routing requirements.
Don't get burned

Limitations to know

  • ! BGP mode requires APAC network team collaboration for datacenter integration
  • ! Policy debugging complexity increases with rule count in large APAC clusters
  • ! Calico Enterprise features require Tigera commercial licensing
Context

About Calico

Calico is an open-source Kubernetes CNI (Container Network Interface) plugin and network policy engine from Tigera, and is the most widely deployed Kubernetes networking solution in production. APAC platform engineering teams use Calico to implement Kubernetes NetworkPolicy and Calico-specific GlobalNetworkPolicy — defining which pods can communicate with which other pods across APAC namespaces, clusters, and external endpoints.

Calico's BGP (Border Gateway Protocol) routing mode is particularly valuable for APAC enterprises with on-premises Kubernetes clusters that need to integrate with existing APAC datacenter routing infrastructure. Rather than requiring overlay networks (VXLAN/IPIP), Calico can advertise pod CIDR routes directly into the APAC datacenter BGP fabric — providing native routing performance for high-throughput APAC workloads.

Calico's WireGuard integration encrypts inter-node pod traffic transparently without requiring application changes — relevant for APAC financial and healthcare organizations with data-in-transit encryption requirements. Tigera's commercial offering (Calico Enterprise / Calico Cloud) extends the open-source base with flow log visualization, network anomaly detection, and compliance reporting for APAC enterprise governance requirements.

Beyond this tool

Where this category meets practice depth.

A tool only matters in context. Browse the service pillars that operationalise it, the industries where it ships, and the Asian markets where AIMenta runs adoption programs.

Or browse All tools · Encyclopedia · Case studies · Rankings