We are very excited to announce v3.2 of Calico. Some of the highlights of this release are:

GA for Application Layer Policy

With Calico 3.2 we are moving support for application layer policy from “tech preview” to GA. With today’s evolving threat landscape, enterprises are deploying a zero trust network security model to protect their crown jewels. Application layer policy from Tigera Calico, combined with the open source Istio project simplifies authenticating and authorizing network flows using multiple attributes. Learn more about this capability and walkthrough a tutorial here.

IPVS kube-proxy

Calico 3.2 updates support for ipvs proxy from beta to GA. Calico IPVS support is activated automatically if Calico detects that kube-proxy is running in IPVS mode. IPVS kube-proxy promises greater scale and performance. Learn more about how to get started with IPVS using Calico and also some known limitations here.

Labels for OpenStack EndPoints

If using Calico with OpenStack endpoints, each OpenStack VM identified as Calico workload endpoint will now have labels for project name and security groups the virtual machine belongs to. See Calico documentation for more details on this capability.

Multiple Architectures

Thanks to concerted efforts from the community, images are now available for all components for the arm64 and ppc64le architectures.

Learn More

To find out more details about all the features and changes in Calico v3.2, check out the Release Notes! Or, try it out in few minutes by following the Quickstart guide!