Policy for extreme traffic
Use Calico network policy early in the Linux packet processing pipeline to handle extreme traffic scenarios.
Create a Calico network policy rule to bypass Linux conntrack for traffic to workloads that experience extremely large number of connections.
Define DoS mitigation rules in Calico policy to quickly drop connections when under attack. Learn how rules will use eBPF and XDP, including hardware offload when available.