- Calico uses WireGuard to implement data-in-transit encryption. WireGuard runs as a module inside the Linux kernel and provides better performance and lower CPU utilization than IPsec and OpenVPN tunneling protocols.
- Calico encryption eliminates operational complexity for DevSecOps teams vs. standard approaches. TLS, for example, requires SSL certificates and results in more complexity and operational overhead for IT organizations that are already overburdened.
- Calico encryption can be used to address regulatory mandates that specify the use of encryption, including SOX, HIPAA, GDPR, and PCI.
Encryption
Protect sensitive data and meet compliance requirements with Calico’s high-performance encryption for data in transit
Benefits
Enables Compliance
Leading Performance
Data Protection
Capabilities
- Independent benchmark tests of Kubernetes CNI’s show that Calico with encryption enabled is 6x faster than any other solution in the market.
How It Works
Encryption is a foundational element for environments that must meet regulatory compliance requirements for data privacy and protection. Calico encryption combines superior performance and reduced CPU utilization with operational simplicity.
Available on Microsoft Azure, AWS, and Google Marketplace
Get started right away on Azure, AWS, or Google Cloud—every Calico component you need to get up and running is ready to go.
Resources

O’Reilly eBook: Kubernetes Security and Observability
Ready to Get Started?
Get started for free or request a demo to see Calico in action


