--- title: "What’s new in Calico Enterprise 3.9: Live troubleshooting and resource-efficient application-level observability" source: "https://wordpress-1075849-4005834.cloudwaysapps.com/blog/whats-new-in-calico-enterprise-3-9-live-troubleshooting-and-resource-efficient-application-level-observability/" --- [Company Blog](https://wordpress-1075849-4005834.cloudwaysapps.com/category/company-blog/) # What’s new in Calico Enterprise 3.9: Live troubleshooting and resource-efficient application-level observability By [Dhiraj Sehgal](https://wordpress-1075849-4005834.cloudwaysapps.com/blog/author/dhiraj-sehgal/) on Sep 07, 2021 • 4 min read We are excited to announce Calico Enterprise 3.9, which provides faster and simpler live troubleshooting using Dynamic Packet Capture for organizations while meeting regulatory and compliance requirements to access the underlying data. The release makes application-level observability resource-efficient, less security intrusive, and easier to manage. It also includes pod-to-pod encryption with Microsoft AKS and AWS EKS with AWS CNI. ## Live troubleshooting Enterprises that want to carry out live troubleshooting in their production environments face the following challenges when doing packet capture at an organizational scale: - Difficult to limit access to packet capture by organizational roles - Takes hours to days to setting up packet capture instead of making part of the code - Extremely difficult to capture the right amount of data to lessen storage and compute cost - Spend days and weeks to correlate the data collected from different Kubernetes components such as namespaces, workloads, pods, microservices ### Dynamic Packet Capture With Dynamic Packet Capture, organizations can enable DevOps, SREs, service owners to collect the data that they need when they need it. They can filter the data based on protocol and port to fine-tune their capture for faster debugging and subsequent analysis for shorter time-to-resolution. With just-in-time data collection and built-in smart correlation, they get workload and Kubernetes context during data aggregation. DevOps, SREs, and service owners don’t need to spend time collecting massive data and building correlations across different services, namespaces, workloads, and pods. All the information, accompanied by workload and Kubernetes context, is available. This means they can pinpoint the problem and resolve it in minutes. Dynamic Packet Capture also integrates with Kubernetes role-based access control (RBAC). Teams get live, self-service, on-demand troubleshooting capabilities, according to their roles, that provide visibility into their specific application’s behavior, services, service dependencies, external APIs, and service interactions. Assigning access by role reduces security and compliance risk since teams don’t have unrestricted access to all namespaces within a cluster to initiate packet capture. This eliminates the unintentional HIPAA, PCI, SOC2 compliance violations that may occur on Kubernetes workloads due to incorrect initiation of packet capture. To summarize, the Dynamic Packet Capture available in 3.9 offers the following observability and troubleshooting benefits: - Standardize packet capture for troubleshooting Kubernetes environments - Leverage built-in Kubernetes context for workload, microservices, namespaces, and pods for faster analysis - Enable self-service, on-demand packet capture for troubleshooting based on role permissions defined with Kubernetes RBAC - Troubleshoot your Kubernetes environment faster with less operational overhead - Prevent unauthorized access by not circumventing role permissions defined with Kubernetes RBAC - Ensure regulatory compliance (e.g. PCI, SOC 2) for troubleshooting when doing packet capture and analysis ## Application-level observability DevOps, SREs, service owners, and platform engineers now have an operationally simpler alternative to service mesh for application-level observability and control. Calico Enterprise 3.9 provides Envoy integration with the data plane as a DaemonSet, making it less invasive to the pods that make up microservices. ![Application-level observability diagram](https://wordpress-1075849-4005834.cloudwaysapps.com/app/uploads/2021/09/Sidecar-vs-DaemonSet-approach-to-application-level-observability-.png)Sidecar vs DaemonSet approach to application-level observability With Calico Enterprise 3.9, operational complexity and performance overhead for application-level observability is reduced due to the following reasons: - Users only need to manage and operate one Envoy proxy per node, instead of multiple sidecars for each pod, leading to reduced security risk footprint - Application-level information that includes Kubernetes-related context and correlation with other components allows for easier troubleshooting - The use of DaemonSet instead of multiple sidecars on a per-node basis leads to less CPU and memory consumption With 3.9, users also get data-in-transit encryption for node-to-node communication within Microsoft AKS and AWS EKS.   ***To try these Calico Enterprise features, sign up for a [free trial](https://www.calicocloud.io/) of Calico Cloud.***   ### Next steps: - [Talk to an expert](https://wordpress-1075849-4005834.cloudwaysapps.com/contact/) to have your questions answered - [Request a demo](https://wordpress-1075849-4005834.cloudwaysapps.com/demo/) to see Calico Enterprise in action [Products](https://wordpress-1075849-4005834.cloudwaysapps.com/tags/products/)[Release](https://wordpress-1075849-4005834.cloudwaysapps.com/tags/release/) Add Tigera as a preferred source on Google to see more of our content in your search results. [![Add as a preferred source on Google](https://wordpress-1075849-4005834.cloudwaysapps.com/app/themes/tigera2021/dist/img/google-preferred-source-light.png)](https://www.google.com/preferences/source?q=tigera.io) ## Related posts [![What’s New in Calico: Winter 2026 Release](https://wordpress-1075849-4005834.cloudwaysapps.com/app/uploads/2026/03/What-is-new-in-Calico-winter-2026.png)](https://wordpress-1075849-4005834.cloudwaysapps.com/blog/whats-new-in-calico-winter-2026-release/) #### [What’s New in Calico: Winter 2026 Release](https://wordpress-1075849-4005834.cloudwaysapps.com/blog/whats-new-in-calico-winter-2026-release/) By [Veronika Smolik](https://wordpress-1075849-4005834.cloudwaysapps.com/blog/author/veronika-smolik/) on Mar 4, 2026 AI Powered Intelligence, Unified Traffic Observability and Scalable Infrastructure Management As anyone managing one or more Kubernetes clusters knows by now, scaling can introduce an exponentially growing number of problems. The sheer volume of metrics,... [Read more](https://wordpress-1075849-4005834.cloudwaysapps.com/blog/whats-new-in-calico-winter-2026-release/) [![The Rise of AI Agents and the Reinvention of Kubernetes: Ratan Tipirneni’s 2026 Outlook](https://wordpress-1075849-4005834.cloudwaysapps.com/app/uploads/2025/12/The-Rise-of-AI-Agents-and-the-Reinvention-of-Kubernetes.png)](https://wordpress-1075849-4005834.cloudwaysapps.com/blog/2026-the-rise-of-ai-agents/) #### [The Rise of AI Agents and the Reinvention of Kubernetes: Ratan Tipirneni’s 2026 Outlook](https://wordpress-1075849-4005834.cloudwaysapps.com/blog/2026-the-rise-of-ai-agents/) By [Tigera Team](https://wordpress-1075849-4005834.cloudwaysapps.com/blog/author/marketingtigera-io/) on Dec 30, 2025 Prediction: The next evolution of Kubernetes is not about scale alone, but about intelligence, autonomy, and governance. As part of the article ‘AI and Enterprise Technology Predictions from Industry Experts for 2026′, published by Solutions... [Read more](https://wordpress-1075849-4005834.cloudwaysapps.com/blog/2026-the-rise-of-ai-agents/) [![How Istio Ambient Mode Delivers Real World Solutions](https://wordpress-1075849-4005834.cloudwaysapps.com/app/uploads/2025/12/How-Istio-Ambient-Mode-Delivers-Real-World-Solutions.png)](https://wordpress-1075849-4005834.cloudwaysapps.com/blog/how-istio-ambient-mode-delivers-real-world-solutions/) [Technical Blog](https://wordpress-1075849-4005834.cloudwaysapps.com/category/technical-blog/) #### [How Istio Ambient Mode Delivers Real World Solutions](https://wordpress-1075849-4005834.cloudwaysapps.com/blog/how-istio-ambient-mode-delivers-real-world-solutions/) By [John Alexander](https://wordpress-1075849-4005834.cloudwaysapps.com/blog/author/john-alexander/) on Dec 18, 2025 For years, platform teams have known what a service mesh can provide: strong workload identity, authorization, mutual TLS authentication and encryption, fine-grained traffic control, and deep observability across distributed systems. In theory, Istio checked all... [Read more](https://wordpress-1075849-4005834.cloudwaysapps.com/blog/how-istio-ambient-mode-delivers-real-world-solutions/)