1"use strict";(self.webpackChunktigera_docs=self.webpackChunktigera_docs||[]).push([["4844"],{89911:function(e,n,r){r.r(n),r.d(n,{frontMatter:()=>s,toc:()=>u,default:()=>d,metadata:()=>o,assets:()=>l,contentTitle:()=>c});var o=JSON.parse('{"id":"reference/public-cloud/azure","title":"Azure","description":"Support for Calico in Azure.","source":"@site/calico_versioned_docs/version-3.28/reference/public-cloud/azure.mdx","sourceDirName":"reference/public-cloud","slug":"/reference/public-cloud/azure","permalink":"/calico/3.28/reference/public-cloud/azure","draft":false,"unlisted":false,"editUrl":"https://github.com/tigera/docs/edit/main/calico_versioned_docs/version-3.28/reference/public-cloud/azure.mdx","tags":[],"version":"3.28","frontMatter":{"description":"Support for Calico in Azure."},"sidebar":"calicoSidebar","previous":{"title":"Amazon Web Services","permalink":"/calico/3.28/reference/public-cloud/aws"},"next":{"title":"Google Compute Engine","permalink":"/calico/3.28/reference/public-cloud/gce"}}'),i=r(37937),t=r(17869);let s={description:"Support for Calico in Azure."},c="Azure",l={},u=[{value:"About Calico on Azure",id:"about-calico-on-azure",level:2},{value:"Azure user-defined routes",id:"azure-user-defined-routes",level:2},{value:"Does Azure support Calico networking?",id:"does-azure-support-calico-networking",level:2}];function a(e){let n={a:"a",code:"code",h1:"h1",h2:"h2",header:"header",li:"li",p:"p",strong:"strong",ul:"ul",...(0,t.R)(),...e.components};return(0,i.jsxs)(i.Fragment,{children:[(0,i.jsx)(n.header,{children:(0,i.jsx)(n.h1,{id:"azure",children:"Azure"})}),"\n",(0,i.jsx)(n.h2,{id:"about-calico-on-azure",children:"About Calico on Azure"}),"\n",(0,i.jsx)(n.p,{children:"You can use Calico policy with one of the following networking options."}),"\n",(0,i.jsxs)(n.ul,{children:["\n",(0,i.jsxs)(n.li,{children:["\n",(0,i.jsxs)(n.p,{children:[(0,i.jsx)(n.strong,{children:"Azure user-defined routes"}),": This option provides networking without overlays.\nDisable Calico networking by setting ",(0,i.jsx)(n.code,{children:"CALICO_NETWORKING_BACKEND"})," to ",(0,i.jsx)(n.code,{children:"none"}),"\nin ",(0,i.jsx)(n.code,{children:"calico/node"}),'. (Also called "policy-only mode".) Refer to\n',(0,i.jsx)(n.a,{href:"/calico/3.28/reference/configure-calico-node",children:"Configuring calico/node"})," and ",(0,i.jsx)(n.a,{href:"#azure-user-defined-routes",children:"Azure user-defined routes"})," for more information. If you're on Kubernetes, see ",(0,i.jsx)(n.a,{href:"/calico/3.28/getting-started/kubernetes/self-managed-public-cloud/",children:"Self-managed-public-cloud)"}),"."]}),"\n"]}),"\n",(0,i.jsxs)(n.li,{children:["\n",(0,i.jsxs)(n.p,{children:[(0,i.jsx)(n.strong,{children:"Calico VXLAN"}),": Install Calico using VXLAN encapsulation for pod traffic."]}),"\n"]}),"\n",(0,i.jsxs)(n.li,{children:["\n",(0,i.jsxs)(n.p,{children:[(0,i.jsx)(n.strong,{children:"flannel"})," (Kubernetes only): Refer to ",(0,i.jsx)(n.a,{href:"/calico/3.28/getting-started/kubernetes/flannel/",children:"Installing Calico for policy and flannel for networking"}),"\nfor specific instructions and a manifest. This option does use overlays."]}),"\n"]}),"\n",(0,i.jsxs)(n.li,{children:["\n",(0,i.jsxs)(n.p,{children:[(0,i.jsx)(n.strong,{children:"Azure CNI IPAM plug-in"}),": Configure Calico to use the\n",(0,i.jsx)(n.a,{href:"https://github.com/Azure/azure-container-networking/blob/master/docs/cni.md",children:"Azure CNI plug-in"}),"\ninstead of the Calico CNI plug-in."]}),"\n"]}),"\n"]}),"\n",(0,i.jsx)(n.h2,{id:"azure-user-defined-routes",children:"Azure user-defined routes"}),"\n",(0,i.jsx)(n.p,{children:"To configure Azure user-defined routes (UDR):"}),"\n",(0,i.jsxs)(n.ul,{children:["\n",(0,i.jsxs)(n.li,{children:["\n",(0,i.jsxs)(n.p,{children:["Create an ",(0,i.jsx)(n.a,{href:"https://docs.microsoft.com/en-us/azure/virtual-network/create-user-defined-route-portal",children:"Azure route table"})," and\nassociate it with the VMs subnet."]}),"\n"]}),"\n",(0,i.jsxs)(n.li,{children:["\n",(0,i.jsxs)(n.p,{children:["Enable ",(0,i.jsx)(n.a,{href:"https://docs.microsoft.com/en-us
1/azure/virtual-network/virtual-network-network-interface#enable-or-disable-ip-forwarding",children:"IP forwarding enabled"})," in your\nVM network interfaces."]}),"\n"]}),"\n"]}),"\n",(0,i.jsx)(n.p,{children:"On Kubernetes, also complete the following."}),"\n",(0,i.jsxs)(n.ul,{children:["\n",(0,i.jsxs)(n.li,{children:["\n",(0,i.jsx)(n.p,{children:"Ensure that the selected pod's subnet is a part of your Azure virtual\nnetwork IP range."}),"\n"]}),"\n",(0,i.jsxs)(n.li,{children:["\n",(0,i.jsx)(n.p,{children:"Include the name of your routing table in the configuration file of your\nKubernetes Azure cloud provider."}),"\n"]}),"\n"]}),"\n",(0,i.jsx)(n.h2,{id:"does-azure-support-calico-networking",children:"Does Azure support Calico networking?"}),"\n",(0,i.jsx)(n.p,{children:"Calico in VXLAN mode is supported on Azure. However, IPIP packets are blocked by the Azure network fabric."})]})}function d(e={}){let{wrapper:n}={...(0,t.R)(),...e.components};return n?(0,i.jsx)(n,{...e,children:(0,i.jsx)(a,{...e})}):a(e)}},17869:function(e,n,r){r.d(n,{R:()=>s,x:()=>c});var o=r(82645);let i={},t=o.createContext(i);function s(e){let n=o.useContext(t);return o.useMemo(function(){return"function"==typeof e?e(n):{...n,...e}},[n,e])}function c(e){let n;return n=e.disableParentContext?"function"==typeof e.components?e.components(i):e.components||i:s(e.components),o.createElement(t.Provider,{value:n},e.children)}}}]);
Line numbers count LF bytes from the start of the resource, as the search results do. Vendor segments are library code the classifier recognised; they are stored but not indexed. Bytes are shown as Latin1 characters, one per byte.