Release notes

The following table shows component versioning for Calico v3.7.

Use the version selector at the top-right of this page to view a different release.

v3.7.2

Release archive with Kubernetes manifests, Docker images and binaries.

08 May 2019

Other changes

  • Install backported iproute2, needed for BPF. node #233 (@fasaxc)
Component Version
typha v3.7.2
calicoctl v3.7.2
calico/node v3.7.2
calico/cni v3.7.2
calico/kube-controllers v3.7.2
networking-calico 3.6.0
flannel v0.11.0
calico/dikastes v3.7.2
flexvol v3.7.2

v3.7.0

Release archive with Kubernetes manifests, Docker images and binaries.

30 Apr 2019

Native support for VXLAN encapsulation

Calico now includes native support for encapsulating traffic between workloads using VXLAN, in addition to existing support for IP in IP encapsulation.

While IP in IP is slightly more efficient in terms of encapsulation overhead, there are some networks that do not allow IP in IP traffic, for example Azure and DigitalOcean. VXLAN support in Calico means you can now use Calico to network workloads in these environments.

  • Felix programs VXLAN routes felix #1989 (@caseydavenport)
  • VXLAN encapsulation can now be configured per IP pool libcalico-go #1065 (@caseydavenport)

For more information, see the Calico documentation.

Optimized denial-of-service protection for host endpoints using XDP

Calico now automatically enforces specific types of blacklist policies at the earliest possible point in the packet processing pipeline, including offloading to NIC hardware whenever possible.

For more information, see the HOWTO guide and our upcoming blog post.

Namespaced NetworkSets

Global network sets have existed in Calico since v3.1.0. They provide a way to group IP addresses and apply labels to the group to be used in a global network policy.

Calico v3.7.0 introduces support for the NetworkSet resource, which allows for the same functionality but within the scope of a particular Namespace. This is useful if you want to be able to reference a set of IP addresses using a selector from a namespaced network policy resource.

  • Add NetworkSet resource. NetworkSets are the namespaced-equivalent of GlobalNetworkSet. libcalico-go #1055 (@lmm)

For more information, see the Calico documentation.

Bug fixes

  • Reinstate BGP route aggregation when using host-local IPAM via config option USE_POD_CIDR libcalico-go #1077 (@caseydavenport)
  • Fix issues related to apiserver disconnection libcalico-go #1057 (@caseydavenport)
  • Fix hash-based router ID calculation for IPv4 confd #231 (@roshanirathi)

Other changes

  • amd64 images now use debian instead of alpine as base node #202 (@stevegaossou)
  • Allow the entries for the exclude interface parameter to be regular expression patterns felix #1980 (@stevegaossou)
  • Health aggregator now only logs if overall health status has changed. Details of unhealthy reporters are now logged. libcalico-go #1064 (@lmm)
  • Improve calico/node readiness probe reporting when watches on the datastore error out. libcalico-go #1063 (@lmm)
  • Validate that protocol is set correctly if an HTTPMatch is specified in a NetworkPolicy libcalico-go #1048 (@jpalardy)
  • Auto update ipv6 router id based on nodename confd #215 (@roshanirathi)
  • Retry on error when configuring IPv6 interfaces (@CallMeFoxie) cni-plugin #731 (@caseydavenport)
  • Update to CNI plugins v0.7.5 cni-plugin #713 (@lwr20)
  • Enhance canal manifest with etcd datastore to include read access to namespaces for canal cluster role. calico #2566 (@asincu)
  • Update Typha’s Kubernetes readiness check to call Typha directly calico #2482 (@roshanirathi)
  • Simplify Kubernetes manifest URL locations. Existing URLs have been left intact, but will be removed in a future release. Please update any tooling to use the new manifest URLs. calico #2437 (@caseydavenport)
Component Version
typha v3.7.0
calicoctl v3.7.0
calico/node v3.7.0
calico/cni v3.7.0
calico/kube-controllers v3.7.0
networking-calico 3.6.0
flannel v0.11.0
calico/dikastes v3.7.0
flexvol v3.7.0

v3.7.1

Release archive with Kubernetes manifests, Docker images and binaries.

06 May 2019

NOTE: v3.7.1 is deprecated due to this issue that will be addressed in v3.7.2. Until the release of v3.7.2, please continue to use v3.7.0.

Bug fixes

  • calico/node base image switched to Debian stretch node #224 (@stevegaossou)
  • calico/cni base image switched to Debian stretch cni-plugin #740 (@stevegaossou)
  • Fix panic in CNI plugin migration script cni-plugin #741 (@caseydavenport)
Component Version
typha v3.7.1
calicoctl v3.7.1
calico/node v3.7.1
calico/cni v3.7.1
calico/kube-controllers v3.7.1
networking-calico 3.6.0
flannel v0.11.0
calico/dikastes v3.7.1
flexvol v3.7.1