The following table shows component versioning for Calico v3.3.

Use the version selector at the top-right of this page to view a different release.


Release archive with Kubernetes manifests, Docker images and binaries.

19 Feb 2019

Bug fixes

  • Fix inconsistent calculation of peer AS number when using non-default AS. confd #203 (@caseydavenport)
Component Version
calico/node v3.3.3
calicoctl v3.3.3
calico/cni v3.3.3
calico/kube-controllers v3.3.3
networking-calico v3.3.0
typha v3.3.3
flannel v0.9.1
calico/dikastes v3.3.3
flexvol v3.3.3


Release archive with Kubernetes manifests, Docker images and binaries.

04 December 2018

Bug fixes

  • Fix peering from a calico/node route reflector to a BGP peer in a different autonomous system. node #105 (@neiljerram)
  • Reduce log spam in calico/node confd #191 (@caseydavenport)
Component Version
calico/node v3.3.2
calicoctl v3.3.2
calico/cni v3.3.2
calico/kube-controllers v3.3.2
networking-calico v3.3.0
typha v3.3.2
flannel v0.9.1
calico/dikastes v3.3.2
flexvol v3.3.2


Release archive with Kubernetes manifests, Docker images and binaries.

09 November 2018

Bug fixes

  • Fix an issue where Typha sometimes does not handle apiserver restart gracefully. typha #214 (@briansan)
Component Version
calico/node v3.3.1
calicoctl v3.3.1
calico/cni v3.3.1
calico/kube-controllers v3.3.1
networking-calico v3.3.0
typha v3.3.1
flannel v0.9.1
calico/dikastes v3.3.1
flexvol v3.3.1


Release archive with Kubernetes manifests, Docker images and binaries.

22 October 2018

In-cluster route reflector

With Calico v3.3, you can enable the calico/node container to behave as a route reflector on particular nodes in the cluster. calico/node in route reflector mode now fully supports route reflector clustering, route reflector peering with external routers, and the full set of BGP configuration options supported by Calico. This functionality replaces the calico/routereflector container, which is now deprecated.

BGP peer configuration using labels

In Calico v3.3, you can now use node labels and selectors to define BGP peering relationships between calico/node instances. This allows for easier management of BGP peer configuration in a way that scales automatically with your cluster. Combined with the in-cluster route reflector feature, this provides a powerful model for defining how routes are distributed within the cluster.

IPAM enhancements

When using Calico IPAM, you can now configure the block size allocated to each host for each IP Pool. The default block size of /26 for IPv4 provides blocks of 64 addresses. For details refer to the Project Calico IP Pool documentation. Additionally, cluster administrators can now define specific IP pools to be used for particular Kubernetes namespaces using namespace annotations.

Support SCTP in Network Policy

Kubernetes 1.12 includes alpha Stream Control Transmission Protocol (SCTP) support. Calico v3.3 supports SCTP in Kubernetes network policies.

Other changes

  • All iptables write operations are now protected by the xtables global lock. Previously, the lock was disabled by default. Requires iptables v1.6.2. felix #1903 (@fasaxc)
  • Where supported, Calico now uses the iptables –random-fully option when programming SNAT and MASQUERADE rules. felix #1901 (@fasaxc)
  • Support CNI plugin chaining with the CNI bandwidth plugin. cni-plugin #607 (@420691301)
  • Support specifying IP Pool by name in CNI config and Kubernetes annotations. cni-plugin #604 (@caseydavenport)
  • Shut down CNI plugin if execution takes over 30 seconds. cni-plugin #581 (@tomdee)
  • Ability to configure per-host block size in Calico IPAM. libcalico-go #931 (@tomdee)
  • Ability to select IP Pools based on Kubernetes namespace. cni-plugin #457 (@rikatz)
  • Ability to configure a floating IP via pod annotations (etcd). cni-plugin #419 (@bradbeam)
  • Ability to configure a floating IP via pod annotations (k8s api datastore). libcalico-go #781 (@bradbeam)
  • Enable node controller by default kube-controllers #220 (@nwt)
  • Enable the serviceaccount controller by default in Kubernetes manifests. calico #2247 (@robbrockbank)
  • calico/node no longer configures next hop self on all BGP peer configurations. node #55 (@neiljerram)
  • Bump CNI version of included plugins to v0.7.1. cni-plugin #586 (@gyliu513)


  • Calico now requires read access to Kubernetes namespaces in order to view namespace annotations. The provided Kubernetes manifests include updated cluster roles to provide this access.
Component Version
calico/node v3.3.0
calicoctl v3.3.0
calico/cni v3.3.0
calico/kube-controllers v3.3.0
networking-calico v3.3.0
typha v3.3.0
flannel v0.9.1
calico/dikastes v3.3.0
flexvol v3.3.0