I am trying to create an Azure Kubernetes - AKS for production workload.
May be I am misinterpreting the term 'Calico network policy is recommended for dev/test configuration.' is it mean i should NOT use Calico for Production workload AKS?
Azure K8S Calico network policy is recommended for dev/test configuration. Not suitable for Production?
29 Views Asked by JemHah At
1
There are 1 best solutions below
Related Questions in AZURE
- How to update to the latest external Git in Azure Web App?
- I need an azure product that executes my intensive ffmpeg command then dies, and i only get charged for the delta. Any Tips?
- Inject AsyncCollector into a service
- mutual tls authentication between app service and function app
- Azure Application Insights Not Displaying Custom Logs for Azure Functions with .NET 8
- Application settings for production deployment slot in Azure App Services
- Encountered an error (ServiceUnavailable) from host runtime on Azure Function App
- Implementing Incremental consent when using both application and delegated permissions
- Invalid format for email address in WordPress on Azure app service
- Producer Batching Service Bus Vs Kafka
- Integrating Angular External IP with ClusterIP of .NET microservices on AKS
- Difficulty creating a data pipeline with Fabric Datafactory using REST
- Azure Batch for Excel VBA
- How to authenticate only Local and Guest users in Azure AD B2C and add custom claims in token?
- Azure Scale Sets and Parallel Jobs
Related Questions in AZURE-AKS
- Integrating Angular External IP with ClusterIP of .NET microservices on AKS
- Kubernetes : How to connect production and non-production Azure CLI simultaneously through windows system?
- Deploy Docker Image into AKS cluster using Azure Release Pipelines with the parameters like clustername, acr, resourcegroup
- Running Azure Function in AKS with Workload Identity and Eventhub Trigger
- Error while performing acr run build: MONGODB_URI environment variable in .env.local
- How can I deploy Ultralytics YOLOv8 on Azure AKS Specifically on the score.py file?
- Regex for azure kubernetes policy doesn't work
- How to know if API Version upgrade will effect AKS function or not?
- Azure DevOps self-hosted Pipeline Agent that can perform a docker build and push command
- Azure K8S Calico network policy is recommended for dev/test configuration. Not suitable for Production?
- Azure error writing parquet to ADLS Gen 2
- Does number of running pods in namespace cause performance issue?
- Resource Provider for AKS Backup Vault
- Qdrant:vectordb:Which shard is at which node? It seems like all shards are on the two nodes out of 4Replicas
- With Terraform, how do I integrate a basic-sku load balancer and basic-sku public ip address with an azurerm_kubernetes_cluster resource?
Related Questions in CALICO
- Kubernetes cluster on GCE connection refused error
- Logging failed packets with Calico
- Azure K8S Calico network policy is recommended for dev/test configuration. Not suitable for Production?
- How to deny all traffic from other kubernetes namespaces
- How to write test cases for Calico Network Policy
- Is there any way to config calico support multiple VNI in vxlan mode?
- Calico GlobalNetworkPolicy in kubernetes not working as expected
- Static IP to pods in Minikube using Calico CNI
- Pods are not deleted after Deployment is deleted in my Kubernetes Cluster
- Network Policy not enforced on Minikube Calico cluster
- Why is my networkpolicy not being applied on a minikube cluster with calico enabled?
- Calico + ipvs/strict_arp kube-proxy + Metallb l2 mode multi interface problem
- ArgoCD can't sync application: User "system:serviceaccount:calico-apiserver:calico-apiserver" cannot list resource "bgpfilters"
- K8S cluster pod can't solve service name if pod on different node from coredns pod
- Access from the pod to a third-party server IP
Related Questions in CNI
- Intermittent ec2ApiErrCount in EKS CNI Metrics Helper
- cilium cluster mesh mTLS support
- Azure K8S Calico network policy is recommended for dev/test configuration. Not suitable for Production?
- Accessing container IP from inside container
- Implications of Different Cilium Configurations on Istio Integration in Kubernetes
- Is there any way to config calico support multiple VNI in vxlan mode?
- How to use commands of an image (i.e kube ovn commands) of a container inside another container or pod in a kubernets cluster?
- How does Cilium get Pod info when creating a new Pod for setting up labels for endpoints?
- K8s FailedCreatePodSandBox PF device not found
- How to allow access to external IP from kubernetes cluster?
- AWS VPC CNI Addon: Unable to update cni config" err="no networks found in /etc/cni/net.d
- Application scaling on kubernetes
- Kubernetes: error building connection between pod to pod when `hostNetwork=true` is enabled
- How to configure the primary_slave in a bond interface created by bond-cni plugin in kubernetes
- Location CNI plugin configuration(s) of the Docker Desktop with WSL2 network infrastructure?
Trending Questions
- UIImageView Frame Doesn't Reflect Constraints
- Is it possible to use adb commands to click on a view by finding its ID?
- How to create a new web character symbol recognizable by html/javascript?
- Why isn't my CSS3 animation smooth in Google Chrome (but very smooth on other browsers)?
- Heap Gives Page Fault
- Connect ffmpeg to Visual Studio 2008
- Both Object- and ValueAnimator jumps when Duration is set above API LvL 24
- How to avoid default initialization of objects in std::vector?
- second argument of the command line arguments in a format other than char** argv or char* argv[]
- How to improve efficiency of algorithm which generates next lexicographic permutation?
- Navigating to the another actvity app getting crash in android
- How to read the particular message format in android and store in sqlite database?
- Resetting inventory status after order is cancelled
- Efficiently compute powers of X in SSE/AVX
- Insert into an external database using ajax and php : POST 500 (Internal Server Error)
Popular Questions
- How do I undo the most recent local commits in Git?
- How can I remove a specific item from an array in JavaScript?
- How do I delete a Git branch locally and remotely?
- Find all files containing a specific text (string) on Linux?
- How do I revert a Git repository to a previous commit?
- How do I create an HTML button that acts like a link?
- How do I check out a remote Git branch?
- How do I force "git pull" to overwrite local files?
- How do I list all files of a directory?
- How to check whether a string contains a substring in JavaScript?
- How do I redirect to another webpage?
- How can I iterate over rows in a Pandas DataFrame?
- How do I convert a String to an int in Java?
- Does Python have a string 'contains' substring method?
- How do I check if a string contains a specific word?
Calico network policy is suitable for production workloads on AKS. Calico provides a richer feature set, including support for Windows nodes and supports Azure CNI as well as Kubenet.
Calico is widely used in production environments. The note in the Azure interface suggesting that Calico is recommended for dev/test configurations could be based on its ease of setup and management.
If you are planning to go ahead with Calico for your production setup, you can go ahead without any hesitation.
Azure suggests Azure CNI as a default option for production Kubernetes clusters due to its seamless integration with Azure's native virtual networking environment. Obviously because it's from azure. It's just that if you use Azure Container Networking Interface (CNI), with Azure option, every pod gets an IP address from the subnet and can be accessed directly.
Check out these documents for better clarity on Calico and Azure CNI and decide which suits your need based on your current environment.
References: