Project Calico offers secure networking solutions for cloud-native applications using software-defined networking (SDN) principles. It creates a flat Layer 3 network allowing workloads to communicate efficiently while providing dynamic enforcement of network security policies. Calico’s scalable and distributed architecture enables performance from individual developers to enterprise environments without the complexity of traditional SDNs.

1. Project Calico
SECURE NETWORKING FOR THE CLOUD NATIVE ERA

2. What is SDN?
 Software-Defined Networking (SDN)
 Software-defined networking (SDN) is an architecture purporting to be
dynamic, manageable, cost-effective, and adaptable, seeking to be
suitable for the high-bandwidth, dynamic nature of today's applications.
SDN architectures decouple network control and forwarding functions,
enabling network control to become directly programmable and the
underlying infrastructure to be abstracted from applications and
network services.
 Wikipedia

3. Why Calico?
 Calico provides secure network connectivity for containers and
virtual machine workloads.
 Calico creates and manages a flat layer 3 network, assigning each
workload a fully routable IP address. Workloads can communicate
without IP encapsulation or network address translation for bare
metal performance, easier troubleshooting, and better
interoperability. In environments that require an overlay, Calico uses
IP-in-IP tunneling or can work with other overlay networking such as
flannel.

4. Why Calico?
 Simple, remove the complexity, traditional SDNs are complex,
making them hard to deploy and troubleshoot. Calico removes that
complexity, with a simplified networking model designed for the
demands of today's cloud-native applications.
 Calico also provides dynamic enforcement of network security rules.
Using Calico’s simple policy language, you can achieve fine-
grained control over communications between containers, virtual
machine workloads, and bare metal host endpoints.

5. Why Calico?
 Scalable
 From dev/test to enterprise deployment
 Unlike SDNs that require a central controller, limiting scalability, Calico is
built on a fully distributed, scale-out architecture. So it scales smoothly
from a single developer laptop to large enterprise deployments.

6. Why Calico?
 Secure
 Policy-based micro-segmentation
 Defining secure network policy used to be reserved for skilled network
engineers. Calico's powerful micro-segmentation capabilities build on a
simple policy language that naturally expresses the developer's intent.

7. Features
 Scalable, distributed control plane
 We turned to the latest cloud techniques pioneered by web-scale
operators such as Google. Making use of the same raft consensus
algorithm found in systems like Kubernetes, we achieved consistent, fast
convergence times (typically a few milliseconds, even at scale) with
high levels of fault tolerance.

8. Features
 Policy-driven network security
 Perimeter security (edge firewalls) has been demonstrated time and
again to be insufficient. That's why we built a security layer into Calico
that enables developers and operations staff to easily define with fine
granularity which connections are allowed, and which are not. These
rules implement and extend the Kubernetes Network Policy API – but
also work on all other platforms supported by Calico.

9. Features
 No overlay required
 Wouldn't it be nice if your virtual networking solution adapted to the
underlying infrastructure, using an overlay only when required? That's
what Calico does. In most environments, Calico simply routes packets
from the workload onto the underlying IP network without any extra
headers. Where an overlay is needed – for example when crossing
availability zone boundaries in public cloud –

10. Features
 Integrated with all major cloud platforms
 Support for industry standard APIs such as Container Network Interface
(CNI), Neutron, and libnetwork, enables Calico to plug into a wide
variety of cloud orchestrators including:
 Kubernetes
 Mesos
 Docker
 OpenStack
 and various vendor derivatives and distributions

11. Features
 Widely deployed, and proven at scale
 From a multi-exabyte public storage cloud delivering 99.99999999999%
(that's 13 9's!) durability, to multi-tenant public cloud services powered
by Calico+OpenStack, to the Kubernetes platform that delivers Yahoo!
services to Japan, Calico has established a reputation for enterprise-
grade performance and reliability.
 http://www.virtustream.com/cloud/virtustream-storage-cloud
 http://blog.kubernetes.io/2016/10/kubernetes-and-openstack-at-yahoo-japan.html

12. Getting Started with Calico?
 Calico with Kubernetes
 Calico with Mesos
 Calico with DC/OS
 Calico with Docker
 Calico with OpenStack
 Calico with rkt
 Host protection
 Proposal date for workshop and which one?

13. Questions & Contact?
 https://hazzim.io
 Hazzim@Hazzim.io
 Hazzim.Anaya@Gmail.com
 @HazzimAnaya