Tigera's Calico Unifies VM and Container Networking on Kubernetes with eBPF

Tigera, the company behind Calico Open Source, has announced the general availability of Calico for Kubernetes Virtual Machines. This new offering introduces an eBPF-based platform designed to provide unified network connectivity and security for both virtual machines (VMs) and containers, all managed through a single, native Kubernetes control plane. The core innovation lies in its ability to enable organizations to migrate existing VM environments to Kubernetes while preserving their network configurations and security policies, akin to what was previously achieved with solutions like NSX, but now natively within Kubernetes. This development is crucial for practitioners facing the challenge of managing increasingly complex hybrid and multi-cloud environments. Historically, VMs and containers have existed in separate operational silos, each with its own networking and security paradigms. This often leads to fragmented policies, increased operational overhead, and a steeper learning curve for teams. By extending Calico's capabilities to VMs within Kubernetes, engineers can now apply consistent network and security policies across all their workloads, regardless of whether they are containerized or running in virtual machines. This consistency simplifies compliance, enhances security posture, and significantly reduces the cognitive load on operations teams. The launch fits into a broader, well-established trend within the cloud-native ecosystem: the convergence of traditional infrastructure with modern container orchestration. Kubernetes is increasingly becoming the de facto control plane for managing diverse workloads, pushing beyond just containers to encompass serverless functions, edge devices, and now, more deeply, virtual machines. The adoption of eBPF (extended Berkeley Packet Filter) is also a key enabler here. eBPF provides a highly performant and programmable kernel-level mechanism for networking, security, and observability, allowing for advanced traffic management and policy enforcement without the overhead of traditional proxies or sidecars. This move by Tigera leverages these trends, offering a pathway for enterprises to modernize their VM-based applications by bringing them under the cloud-native umbrella without a complete re-architecture. In practice, this means that DevOps and cloud engineers can now approach VM migrations to Kubernetes with greater confidence and less disruption. A virtual machine migrated using Calico can retain its IP address, reside on the same network as adjacent containers, and inherit the same microsegmentation, routing, load balancing, and flow visibility. This eliminates the need to redesign network architectures or reconfigure firewall rules during migration. Practitioners should consider evaluating Calico for Kubernetes Virtual Machines if they are undertaking significant VM migrations to Kubernetes or are struggling with inconsistent network and security policies across their mixed VM and container environments. It represents a tangible step towards a truly unified operational model, reducing tool sprawl and streamlining security enforcement.