Calico Cloud is a great CNI solution, versatile regarding the supported protocols it will easily scale in most cloud, hybrid, and on-prem deployments. The BGP backend makes it easier to manage routes at scale, and it can integrate with BGP-only layer 3 datacenter fabrics as well. Installation is quick, and thanks to a well-documented set of CRD resources, configuration is also pretty straightforward. Calico also bundles the whole Tigera security/observability suite, which comes in handy to write more complex network policies which extend to hosts. The built-in manager web UI is also useful to quickly visualise what policies are deployed in any environment.

It is an easy and customizable way to use cloud based orchestration Kubernetes and to hae workflow editors to scale up, scale out, and focus on devsecops, Ioc's and malicious threat actors. This is thought of and done in the perspective of devsecops and cloud practitioners.

The network policy recommendations are a great feature and provide an excellent starting point for policy generation. The network observability tool combined with the Kibana logs provides full visibility into what is happening with respect to allowed and denied traffic throughout the cluster. Calico Cloud makes managing network policy vastly easier. Tigera support is great; they have been very responsive.