3 ms·
You could certainly use Flannel in production (Canal = Flannel + Calico) but I like the features that Calico provides, in particular: - network policy enforcem
by hardwaresofton 5y ago
You could certainly use Flannel in production (Canal = Flannel + Calico) but I like the features that Calico provides, in particular:
- network policy enforcement
- intra-node traffic encryption with wireguard
- calico does not use VXLAN (sends routes via BGP and does some gateway trickery[0]), so it has slightly less overhead
[0]: https://stardomsolutions.blogspot.com/2019/06/flannel-vs-calico-battle-of-l2-vs-l3.html https://stardomsolutions.blogspot.com/2019/06/flannel-vs-cal...