---
title: "Welcoming Istio to the Kubernetes networking community"
source: "https://wordpress-1075849-4005834.cloudwaysapps.com/blog/welcoming-istio-to-the-kubernetes-networking-community/"
---

[Technical Blog](https://wordpress-1075849-4005834.cloudwaysapps.com/category/technical-blog/)

# Welcoming Istio to the Kubernetes networking community

By [Andrew Randall](https://wordpress-1075849-4005834.cloudwaysapps.com/blog/author/andrewrandall/) on May 24, 2017 • 3 min read

[![Istio mascot sailing into Kubernetes networking, supported by Google, IBM, Lyft, and Tigera](https://wordpress-1075849-4005834.cloudwaysapps.com/app/uploads/2017/05/calico-istio-logos.png)](https://wordpress-1075849-4005834.cloudwaysapps.com/app/uploads/2017/05/calico-istio-logos.png)

Today, we were excited to be part of the [launch of a new Kubernetes networking project](http://istio.io/blog/istio-service-mesh-for-microservices.html), [Istio](http://istio.io).  Together with Google, IBM and Lyft, we on the Project Calico team at Tigera are contributing to the development of an emerging layer in the cloud-native networking stack: the *service mesh*.

Built using the battle-tested Envoy proxy from Lyft, Istio is an open source project that provides a uniform way to connect, secure, manage and monitor microservices. Think of it as a layer of infrastructure *between* the application and the network (such as that provided by Calico) – a load-balancing proxy that is also capable of advanced, policy-driven traffic management for A/B testing, canary deployments, and more. Istio also enforces end-to-end service authentication and encryption via mutual TLS, and mitigates network reliability issues with automatic handling of connection retries, load balancing and circuit breakers. Further, the fact that Istio/Envoy sit in the path of the API traffic between microservices means that it can provide exceptional visibility into application performance.

If it isn’t obvious by now, we at Tigera / Project Calico think Istio (and Envoy, which it is built on) are set to be a Big Deal in Kubernetes networking. Which is why we are excited to be collaborating with the cloud-native networking community on these projects. For example, we are collaborating to define how Istio’s application layer policies interact with the network-layer policies as used by Project Calico and Kubernetes Network Policy API.

## What our friends at Google and IBM are saying:

“Google is thrilled to see Tigera bring their expertise in cloud native networking to the Istio project. We look forward to evolving networking policy work with them,” said Mark Carter, group product manager, Google Cloud.

“Our collaboration with the cloud native networking experts at Tigera is key to our strategy of building an open container environment around Kubernetes with Calico, Istio and Envoy as the network building blocks,” said Jason McGee, IBM Fellow, VP & CTO, IBM Cloud Platform. “Today, the IBM Bluemix Container Service’s policy-driven Layer 3 network is powered by Calico and we look forward to working with Tigera to extend those policy controls to include Istio’s flexible application layer capabilities.”

## A Glimpse into the Future: Integrating Istio and Kubernetes Network Policy using Project Calico

For a glimpse into what the interoperability between Calico and Istio/Envoy might look like when fully completed, check out this video. In this demo, Tigera engineer Saurabh Mohan demonstrates how microservices connected via Istio in a Kubernetes cluster with Calico for networking can be secured to ensure that the right set of microservices can communicate at Layer 3/4 but, more importantly, ensure that no illegitimate access to the microservices is permitted.

Check out [Saurabh’s blog post](http://dev-project-calico.pantheonsite.io/network-policy-and-istio-deep-dive) for more details on how this works, steps to manually configure complementary Calico and Istio policies, and pointers to areas of future technical work.

If you’re interested in collaborating and contributing to this work, we encourage you to check out the Istio project at [istio.io](http://istio.io), and join the online Calico community at [slack.projectcalico.org](http://slack.projectcalico.org/)!

 

[Open Source](https://wordpress-1075849-4005834.cloudwaysapps.com/tags/open-source/)[Service Mesh](https://wordpress-1075849-4005834.cloudwaysapps.com/tags/service-mesh/)[Project Calico](https://wordpress-1075849-4005834.cloudwaysapps.com/tags/project-calico/)

Add Tigera as a preferred source on Google to see more of our content in your search results.

[![Add as a preferred source on Google](https://wordpress-1075849-4005834.cloudwaysapps.com/app/themes/tigera2021/dist/img/google-preferred-source-light.png)](https://www.google.com/preferences/source?q=tigera.io)

## Related posts

[![What’s New in Calico: Winter 2026 Release](https://wordpress-1075849-4005834.cloudwaysapps.com/app/uploads/2026/03/What-is-new-in-Calico-winter-2026.png)](https://wordpress-1075849-4005834.cloudwaysapps.com/blog/whats-new-in-calico-winter-2026-release/)

[Company Blog](https://wordpress-1075849-4005834.cloudwaysapps.com/category/company-blog/)

#### [What’s New in Calico: Winter 2026 Release](https://wordpress-1075849-4005834.cloudwaysapps.com/blog/whats-new-in-calico-winter-2026-release/)

By [Veronika Smolik](https://wordpress-1075849-4005834.cloudwaysapps.com/blog/author/veronika-smolik/)
on Mar 4, 2026

AI Powered Intelligence, Unified Traffic Observability and Scalable Infrastructure Management As anyone managing one or more Kubernetes clusters knows by now, scaling can introduce an exponentially growing number of problems. The sheer volume of metrics,...

[Read more](https://wordpress-1075849-4005834.cloudwaysapps.com/blog/whats-new-in-calico-winter-2026-release/)

[![Join Calico at KubeCon Europe 2026: AI Agents, Silent Discos, and Dutch Delights!](https://wordpress-1075849-4005834.cloudwaysapps.com/app/uploads/2026/02/Blog-Kubecon-Euro-2026-.png)](https://wordpress-1075849-4005834.cloudwaysapps.com/blog/calico-at-kubecon-cloudnativecon-europe2026/)

#### [Join Calico at KubeCon Europe 2026: AI Agents, Silent Discos, and Dutch Delights!](https://wordpress-1075849-4005834.cloudwaysapps.com/blog/calico-at-kubecon-cloudnativecon-europe2026/)

By [Tigera Team](https://wordpress-1075849-4005834.cloudwaysapps.com/blog/author/marketingtigera-io/)
on Feb 25, 2026

The cloud-native community is heading to the historic canals and vibrant tech scene of Amsterdam for KubeCon + CloudNativeCon Europe 2026! From March 23–26, Amsterdam will be buzzing with the latest in Kubernetes, platform engineering,...

[Read more](https://wordpress-1075849-4005834.cloudwaysapps.com/blog/calico-at-kubecon-cloudnativecon-europe2026/)

[![Project Calico 3.30+ Hackathon: Show Us What You Can Build!](https://wordpress-1075849-4005834.cloudwaysapps.com/app/uploads/2026/02/Blog-Hackathon-.png)](https://wordpress-1075849-4005834.cloudwaysapps.com/blog/project-calico-3-30-hackathon-show-us-what-you-can-build/)

#### [Project Calico 3.30+ Hackathon: Show Us What You Can Build!](https://wordpress-1075849-4005834.cloudwaysapps.com/blog/project-calico-3-30-hackathon-show-us-what-you-can-build/)

By [Tigera Team](https://wordpress-1075849-4005834.cloudwaysapps.com/blog/author/marketingtigera-io/)
on Feb 17, 2026

Build the Future of Cloud-Native Networking! 🚀 The Calico community moves fast. With the releases of Calico 3.30 and 3.31, brings improvements in scalability, network security, and visibility. Now, we want to see what YOU...

[Read more](https://wordpress-1075849-4005834.cloudwaysapps.com/blog/project-calico-3-30-hackathon-show-us-what-you-can-build/)

<!-- plugin=object-cache-pro client=phpredis metric#hits=6262 metric#misses=18 metric#hit-ratio=99.7 metric#bytes=2209343 metric#prefetches=0 metric#store-reads=421 metric#store-writes=16 metric#store-hits=432 metric#store-misses=7 metric#sql-queries=32 metric#ms-total=2776.94 metric#ms-cache=374.11 metric#ms-cache-avg=0.8581 metric#ms-cache-ratio=13.5 sample#redis-hits=75112625 sample#redis-misses=9066467 sample#redis-hit-ratio=89.2 sample#redis-ops-per-sec=180 sample#redis-evicted-keys=0 sample#redis-used-memory=120234728 sample#redis-used-memory-rss=110043136 sample#redis-memory-fragmentation-ratio=0.9 sample#redis-connected-clients=3 sample#redis-tracking-clients=0 sample#redis-rejected-connections=0 sample#redis-keys=33405 -->
