Calico Cloud Reviews & Product Details

Calico Cloud is a great CNI solution, versatile regarding the supported protocols it will easily scale in most cloud, hybrid, and on-prem deployments. The BGP backend makes it easier to manage routes at scale, and it can integrate with BGP-only layer 3 datacenter fabrics as well.

Installation is quick, and thanks to a well-documented set of CRD resources, configuration is also pretty straightforward.

Calico also bundles the whole Tigera security/observability suite, which comes in handy to write more complex network policies which extend to hosts. The built-in manager web UI is also useful to quickly visualise what policies are deployed in any environment. Review collected by and hosted on G2.com.

There are some shortcomings with some of the enterprise features, some of them suffer from small bugs which still have not been solved. Although support is quick to react, it can take a long time to obtain a proper bug fix in a next release.

The current network policy implementation, although solid, also suffers from limitations in terms of the selectors, which can lead to some rather complex workarounds. Also, the manager web UI is very limited and will not help a lot when troubleshooting denied flows. Most of the time, learning to use Kibana which is part of the installation and writing KQL queries will be more useful.

Although installation is easy, uninstalling Calico can be a bit difficult as the Tigera operator does not clean the installed resources. You will have to locate the remnants yourself, and delete them. Review collected by and hosted on G2.com.

Calico Cloud addressed various security challenges for container platform, it extended l7 network policy capabilities with powerful & fleaxible configuration options and by default support zero trust security model. This helps us to be able to manage calico configurations via both gitops platform & application ci/cd processes in a secure way to meet requirements from vairous teams without many operation overheads. This helps boost the team efficiency.

It's a painless implementation process and easy quick to setup. Calico Cloud offers full package of container security features, e.g. runtime security, intrution detections, in-cluseter waf, observability, etc. more than just advanced network policy.

Tigera support is knowledgable and the provided training videos help quickly get familiar with its observability tooling and troubleshooting processes. Review collected by and hosted on G2.com.

alerting & 3-rd party integrations hopefully can be improved.

network policy constructions user experience requires lots of domain knowledge, this might be difficult for beginners.

wireguard & l7 logging configs conflicts happened before, hopefully it will be resolved in the near future.

the dashboard has lots of information and might be confusing when you use it at the begining, it's a bit complex to use it and understand the end to end troubleshooting process Review collected by and hosted on G2.com.

Run bare-metal, self-hosted Kubernetes: Calico Cloud provides first-class support for these setups.

Supports advanced networking features: It offers IPv6 and WireGuard support for versatile network configurations.

Enables granular control: Egress gateways and eBPF support enable you to precisely manage traffic flow.

Value clear guidance: The documentation is of excellent quality.

A user-friendly interface: The web-based UI is both intuitive and comprehensive.

Prioritize ongoing support: Calico provides professional support, including a dedicated Customer Success Engineer (CSEs) for weekly consultations. Review collected by and hosted on G2.com.

Pricing Model: Calico Cloud charges per vCPU, which can be expensive for high-core machines. For example, a single 32-core machine might be billed as 16 nodes, leading to high monthly costs.

Deployment Complexity: The product requires managing resources across 18 Kubernetes namespaces, increasing deployment complexity.

Limited Functionality: Currently, Calico Cloud doesn't support VRF (Virtual Routing and Forwarding), which restricts routing table configuration options. Review collected by and hosted on G2.com.

Network policy generation ardous task done manually. The network policy recommendations are great and make this a breeze. The network observabilty tool is wonderful to observe questionable traffic and possible network policy problems. Everything you need to easily work with network policy is right there. DNS rules are a major plus. The setup is really easy. Support is great. Review collected by and hosted on G2.com.

The recommended network policies sometimes generate overlappying/duplicate rules. I'd like to see better integration with Azure DevOps for container scanning. If no endpoints exist the monitor shows that their were denied flows (this happens in Allow Tigera tier). Review collected by and hosted on G2.com.

It is providing all insights in one place, you can visualize your data flowing and troubleshoot your network policy easily. Easy of implementation, customer support is very reliable, Review collected by and hosted on G2.com.

I can see other CNI vendors are using latest technologies but calico still using iptables. which makes your network slow in comparison to eBPF. Review collected by and hosted on G2.com.

The network policy recommendations are a great feature and provide an excellent starting point for policy generation. The network observability tool combined with the Kibana logs provides full visibility into what is happening with respect to allowed and denied traffic throughout the cluster. Calico Cloud makes managing network policy vastly easier. Tigera support is great; they have been very responsive. Review collected by and hosted on G2.com.

The pricing model is based on core counts, making it rather expensive both for compute-heavy clusters and for clusters that have a large number of smaller nodes. Registry scanning could be better integrated into the product. Review collected by and hosted on G2.com.

Very easy to integrate into kubernetes, deployment is quick and painless.

Tigera support is knowledgeable and helpful.

The network security policy recommendations are excellent.

Great visibility of traffic within the cluster. Review collected by and hosted on G2.com.

The pricing model may not be that friendly for compute-intensive environments, but offers much more value than traditional network security appliances.

Configuration can be a little tricky to dial-in, but once setup properly it's basically "hands-free".

Many namespaces and pods are deployed as part of the installation, which comes with more overhead albeit minimal. Review collected by and hosted on G2.com.

It is an easy and customizable way to use cloud based orchestration Kubernetes and to hae workflow editors to scale up, scale out, and focus on devsecops, Ioc's and malicious threat actors. This is thought of and done in the perspective of devsecops and cloud practitioners. Review collected by and hosted on G2.com.

Nothing - it is easy to use and not very hard to get value in time. Review collected by and hosted on G2.com.

As a relatively new kubernetes user, Calico's policy, image scanning and networking dashboards provided useful insights to our cluster Review collected by and hosted on G2.com.

I really wish parts of the toolset were open source so it would be easier to show the tools to others and/or make them more available for longer testing periods. Review collected by and hosted on G2.com.

Granular control for admins, while giving app teams workload observability. Review collected by and hosted on G2.com.

Being a SaaS, Calico Cloud lacks some of the configration options found in the Enterprise offering. Review collected by and hosted on G2.com.