Assign a fixed, routable IP address to traffic from a Kubernetes pod or namespace. Consistently identify the source traffic in a dynamic network environment.
Solution
Calico Egress Gateway
Assign fixed IP addresses to identify and manage egress traffic from Kubernetes workloads to external destinations.
Benefits
Seamlessly integrate Kubernetes workloads with security tools, firewalls and legacy applications
Assign fixed egress IP
Establish egress points with fixed IP address for traffic leaving a pod to prevent exposing entire IP CIDRs of nodes
Integrate with security tools
Leverage traditional security tools such as firewalls that require static IPs. Eliminate the need to continually update IP addresses
Improve security posture
Apply defense-in-depth principles for traffic leaving the cluster with accurate network identity
Trusted by Customers Worldwide
Integrate with Security Tools
Extend and enforce IP address based security controls to Kubernetes workloads. Enables traditional network security tools to control egress traffic, eliminating the need for a service mesh.
Destination-Based Routing for Egress Traffic
Use Calico policies to specify which egress gateways to use for specific destinations, instead of relying on the source of the traffic. This allows you to have more flexibility and control when deploying egress gateways.
High-Availability(HA) and Load-Balancing
Use redundant egress gateways to ensure high availability and enable load balancing to distribute traffic evenly across egress gateway deployments.
Maintain Critical Workload Uptime
Minimize risk of outages by continuously monitoring the health of egress gateways with health check probes. Reduce downtime during upgrades with operator-based deployment for egress gateway.
Support Multiple External Networks
Simplify network operations when you have multiple external networks by enabling workloads from different namespaces in a Kubernetes cluster to egress to different external networks, even if the networks have overlapping IP addresses.
NAT Gateway for Cost Savings
Calico’s Egress Gateway also functions as a NAT gateway, enabling you to avoid expensive cloud provider fees and per-gigabyte data charges.
Available on Microsoft Azure, AWS, and Google Marketplace
Get started right away on Azure, AWS, or Google Cloud—every Calico component you need to get up and running is ready to go.
Customer Testimonial
Here’s what our customers are saying about us
Rafay recommends Calico as the default networking and security solution for customers using the Rafay Kubernetes Operations Platform. No one should run Kubernetes without Calico networking and security.
Ready to Get Started?
Get started for free or request a demo to see Calico in action
