---
title: "What’s new in Calico v3.14"
source: "https://wordpress-1075849-4005834.cloudwaysapps.com/blog/whats-new-in-calico-v3-14/"
---

[Technical Blog](https://wordpress-1075849-4005834.cloudwaysapps.com/category/technical-blog/)

# What’s new in Calico v3.14

By [Casey Davenport](https://wordpress-1075849-4005834.cloudwaysapps.com/blog/author/caseydavenport/) on May 14, 2020 • 3 min read



We’re very excited to announce Calico v3.14.0, which includes a bunch of great features including automatic host endpoint management and a tech preview of Wireguard encryption. Thank you to all of the contributors to this release! For detailed release notes please go [here](http://docs.projectcalico.org/v3.14/release-notes). Below are some highlights from the release.






## Automatic host endpoint management






Calico v3.14 provides a new controller for automatically managing HostEndpoints for your Kubernetes nodes. This makes it easy to use Calico’s host policy enforcement features in dynamic environments where cluster nodes may come and go – for example, AWS instance auto scaling groups.
To try it out, take a look at the new [how-to guide.](http://docs.projectcalico.org/security/kubernetes-nodes)






## Even more host endpoint policy






In addition to the automatic provisioning of host endpoints discussed above, we’ve enhanced support for protecting both Kubernetes pods and hosts using Calico’s unified policy model. Calico host endpoints come in two flavors – interface-specific host endpoints which represent a single interface on a node, or wildcard host endpoints which represent all interfaces on the node. To-date, wildcard host endpoints have supported only pre-DNAT global network policies. In Calico v3.14, we’ve extended support to include other policy types as well, enabling you to more easily apply network policy to your hosts.






Note that this feature includes a change to the default behavior for wildcard host endpoints – make sure to read the [upgrade documentation](http://docs.projectcalico.org/maintenance/upgrading) if you are currently using wildcard host endpoints in your cluster.






## Encryption using Wireguard technology preview






In a zero-trust network, encrypting data on the wire provides a fundamental layer of security to your cluster. However, the difficulties presented in managing and configuring encryption for containers at-scale means it is often out of reach for Kubernetes users. We’re really excited to share that Calico v3.14 includes the ability to enable host-to-host encryption for pod traffic using Wireguard. While it’s not yet ready for production due to a few gaps and limited testing, it’s a great preview of what’s to come and we’ll be working hard to promote this feature to GA in future releases.






To give it a spin, head on over to the [encryption how-to guide](http://docs.projectcalico.org/security/try-node-to-node-encryption).






## Configure and monitor IP borrowing






Calico will handle dynamically borrowing addresses from other nodes in order to maximize usage of the IP address space. However, there are times when this behavior is not desirable. For example, if your network infrastructure does not allow advertisement of the resulting /32 routes.






In Calico v3.14, you can now disable IP borrowing by enabling strict IP affinity using calicoctl. You can also use calicoctl to see what, if any, addresses have been borrowed from other nodes.






## Calico Enterprise






If you like Calico, you’ll love Calico Enterprise. Calico v3.14 will be available in the next release of Calico Enterprise. Read more about Calico Enterprise and sign up for a trial on Tigera’s website: [https://wordpress-1075849-4005834.cloudwaysapps.com/tigera-products/calico-enterprise/](https://wordpress-1075849-4005834.cloudwaysapps.com/tigera-products/calico-commercial-editions/)



[Open Source](https://wordpress-1075849-4005834.cloudwaysapps.com/tags/open-source/)[Release](https://wordpress-1075849-4005834.cloudwaysapps.com/tags/release/)[Project Calico](https://wordpress-1075849-4005834.cloudwaysapps.com/tags/project-calico/)

Add Tigera as a preferred source on Google to see more of our content in your search results.

[![Add as a preferred source on Google](https://wordpress-1075849-4005834.cloudwaysapps.com/app/themes/tigera2021/dist/img/google-preferred-source-light.png)](https://www.google.com/preferences/source?q=tigera.io)

## Related posts

[![What’s New in Calico: Winter 2026 Release](https://wordpress-1075849-4005834.cloudwaysapps.com/app/uploads/2026/03/What-is-new-in-Calico-winter-2026.png)](https://wordpress-1075849-4005834.cloudwaysapps.com/blog/whats-new-in-calico-winter-2026-release/)

[Company Blog](https://wordpress-1075849-4005834.cloudwaysapps.com/category/company-blog/)

#### [What’s New in Calico: Winter 2026 Release](https://wordpress-1075849-4005834.cloudwaysapps.com/blog/whats-new-in-calico-winter-2026-release/)

By [Veronika Smolik](https://wordpress-1075849-4005834.cloudwaysapps.com/blog/author/veronika-smolik/)
on Mar 4, 2026

AI Powered Intelligence, Unified Traffic Observability and Scalable Infrastructure Management As anyone managing one or more Kubernetes clusters knows by now, scaling can introduce an exponentially growing number of problems. The sheer volume of metrics,...

[Read more](https://wordpress-1075849-4005834.cloudwaysapps.com/blog/whats-new-in-calico-winter-2026-release/)

[![Join Calico at KubeCon Europe 2026: AI Agents, Silent Discos, and Dutch Delights!](https://wordpress-1075849-4005834.cloudwaysapps.com/app/uploads/2026/02/Blog-Kubecon-Euro-2026-.png)](https://wordpress-1075849-4005834.cloudwaysapps.com/blog/calico-at-kubecon-cloudnativecon-europe2026/)

#### [Join Calico at KubeCon Europe 2026: AI Agents, Silent Discos, and Dutch Delights!](https://wordpress-1075849-4005834.cloudwaysapps.com/blog/calico-at-kubecon-cloudnativecon-europe2026/)

By [Tigera Team](https://wordpress-1075849-4005834.cloudwaysapps.com/blog/author/marketingtigera-io/)
on Feb 25, 2026

The cloud-native community is heading to the historic canals and vibrant tech scene of Amsterdam for KubeCon + CloudNativeCon Europe 2026! From March 23–26, Amsterdam will be buzzing with the latest in Kubernetes, platform engineering,...

[Read more](https://wordpress-1075849-4005834.cloudwaysapps.com/blog/calico-at-kubecon-cloudnativecon-europe2026/)

[![Project Calico 3.30+ Hackathon: Show Us What You Can Build!](https://wordpress-1075849-4005834.cloudwaysapps.com/app/uploads/2026/02/Blog-Hackathon-.png)](https://wordpress-1075849-4005834.cloudwaysapps.com/blog/project-calico-3-30-hackathon-show-us-what-you-can-build/)

#### [Project Calico 3.30+ Hackathon: Show Us What You Can Build!](https://wordpress-1075849-4005834.cloudwaysapps.com/blog/project-calico-3-30-hackathon-show-us-what-you-can-build/)

By [Tigera Team](https://wordpress-1075849-4005834.cloudwaysapps.com/blog/author/marketingtigera-io/)
on Feb 17, 2026

Build the Future of Cloud-Native Networking! 🚀 The Calico community moves fast. With the releases of Calico 3.30 and 3.31, brings improvements in scalability, network security, and visibility. Now, we want to see what YOU...

[Read more](https://wordpress-1075849-4005834.cloudwaysapps.com/blog/project-calico-3-30-hackathon-show-us-what-you-can-build/)

<!-- plugin=object-cache-pro client=phpredis metric#hits=6170 metric#misses=17 metric#hit-ratio=99.7 metric#bytes=2174668 metric#prefetches=0 metric#store-reads=418 metric#store-writes=13 metric#store-hits=430 metric#store-misses=6 metric#sql-queries=31 metric#ms-total=1508.34 metric#ms-cache=104.41 metric#ms-cache-avg=0.2428 metric#ms-cache-ratio=6.9 -->
