Skip to main content
Calico Enterprise 3.19 (latest) documentation

Azure

About Calico Enterprise on Azure​

You can use Calico Enterprise policy with one of the following networking options.

  • Azure user-defined routes: This option provides networking without overlays. Disable Calico Enterprise networking by setting CALICO_NETWORKING_BACKEND to none in cnx-node. (Also called "policy-only mode".) Refer to Configuring cnx-node and Azure user-defined routes for more information.

  • Calico VXLAN: Install Calico Enterprise using VXLAN encapsulation for pod traffic.

  • Azure CNI IPAM plug-in: Configure Calico Enterprise to use the Azure CNI plug-in instead of the Calico Enterprise CNI plug-in.

Azure user-defined routes​

To configure Azure user-defined routes (UDR):

On Kubernetes, also complete the following.

  • Ensure that the selected pod's subnet is a part of your Azure virtual network IP range.

  • Include the name of your routing table in the configuration file of your Kubernetes Azure cloud provider.

Does Azure support Calico Enterprise networking?​

Calico in VXLAN mode is supported on Azure. However, IPIP packets are blocked by the Azure network fabric.