Translation of this article written by John Armstrong on Jan 20, 2021
As we enter the new year, it's time to reflect on Tigera's accomplishments and how Calico Enterprise has changed over the past year and how it has become the leading security and monitoring solution for Kubernetes networks and microservices . Tigera's enterprise user experience helped identify the most critical user requirements for successfully deploying Kubernetes clusters and successfully moving from pilot to production projects. This knowledge helped Tigera create the Calico Enterprise system, the architecture of which is presented below. Let's take a look at this multi-functional layer cake from the bottom up.
Calico Enterprise Solution Architecture:
Calico Enterprise is native to Kube
C . Calico Enterprise - Kubernetes-native, Kube-native , , , Kubernetes. Kubernetes Kubernetes API API . , Kubernetes, , , , , RBAC. Calico Enterprise, Kubernetes, Kubernetes .
,
Calico Enterprise , . , , Kubernetes, « ». Kubernetes Tigera , Calico Enterprise.
Amazon Elastic Kubernetes Service (EKS) Calico.
Google Kubernetes Engine (GKE) Calico.
Microsoft Azure Kubernetes Service (AKS) Calico.
IBM Cloud Kubernetes Service (IKS) Calico.
? Calico Enterprise ( ) Kubernetes, , . Calico Enterprise , , , . Kubernetes Kubernetes Calico Enterprise, , .
, Data Plane - Linux, Windows eBPF
Calico Enterprise data planes, data planes. Kubernetes data planes, Calico Enterprise. data plane Linux, Linux, eBPF. Windows, , Linux. , Linux, Calico Enterprise eBPF data plane. data plane , Calico Enterprise . , Tigera Calico Enterprise , Kubernetes.
, .
North-South
Calico Enterprise North-South, East-West . Kubernetes North-South , , East-West - , . North-South Kubernetes . Calico Enterprise (policy) DNS / (ingress/egress access controls), North-South . Calico SIEM (Calico Enterprise universal firewall and SIEM integration) - , Kubernetes.
East-West
East-West “ ” , APT (advanced persistent threat). , Calico Enterprise . Calico Enterprise « » (defense-in-depth) : , / . , . , , http, https MongoDB. , .
(Continuous Compliance)
Kubernetes , . (Continuous Compliance) Calico Enterprise (data-in-transit encryption) , . Calico Enterprise (Intrusion Detection), , , (honeypod). Calico Enterprise . , Tigera Calico Enterprise, DGA (Domain Generation Algorithm), DGA . Calico Enterprise , , .
, . Calico Enterprise (Service Graph), , , . , , , DNS , (flow logs) , . , (alerts) . , , , .
, , . CI / CD . Calico Enterprise , (, , , DevOps, SRE, ). , , , . , , , . Calico Enterprise, , .