Skip to content

Add note on supported data planes for non-cluster hosts#2790

Open
alexh-tigera wants to merge 1 commit into
tigera:mainfrom
alexh-tigera:update-nch-platforms
Open

Add note on supported data planes for non-cluster hosts#2790
alexh-tigera wants to merge 1 commit into
tigera:mainfrom
alexh-tigera:update-nch-platforms

Conversation

@alexh-tigera

Copy link
Copy Markdown
Member

Product Version(s):
Calico Enterprise v3.24+

Link to docs preview:

SME review:

  • An SME has approved this change.

DOCS review:

  • A member of the docs team has approved this change.

Additional information:

Adds a note on the supported data planes for non-cluster hosts.

We never explicitly called out the data plane supported by non cluster hosts, and https://github.com/tigera/calico-private/pull/12294 now sets up the packages to handle it properly.

Merge checklist:

  • Deploy preview inspected wherever changes were made
  • Build completed successfully
  • Test have passed

Copilot AI review requested due to automatic review settings June 16, 2026 20:38
@alexh-tigera alexh-tigera requested a review from a team as a code owner June 16, 2026 20:38
@netlify

netlify Bot commented Jun 16, 2026

Copy link
Copy Markdown

Deploy Preview for calico-docs-preview-next ready!

Name Link
🔨 Latest commit fef3851
🔍 Latest deploy log https://app.netlify.com/projects/calico-docs-preview-next/deploys/6a31b6909f88b10008c2de45
😎 Deploy Preview https://deploy-preview-2790--calico-docs-preview-next.netlify.app
📱 Preview on mobile
Toggle QR Code...

QR Code

Use your smartphone camera to open QR code link.

To edit notification comments on pull requests, go to your Netlify project configuration.

@netlify

netlify Bot commented Jun 16, 2026

Copy link
Copy Markdown

Deploy Preview for tigera failed. Why did it fail? →

Built without sensitive environment variables

Name Link
🔨 Latest commit fef3851
🔍 Latest deploy log https://app.netlify.com/projects/tigera/deploys/6a31b690cf1f1b000887b063

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Note

Copilot was unable to run its full agentic suite in this review.

Adds documentation clarifying which Calico data planes are supported for non-cluster hosts/VMs in bare-metal getting-started docs.

Changes:

  • Introduces a new “Supported Data Planes” section for non-cluster hosts.
  • Adds a compatibility table mapping OS versions to cluster vs non-cluster host data planes.

Comment on lines +63 to +65
BPF is not supported on a non-cluster host, but they are able to connect to a
BPF cluster. By default they will use nftables, but can be configured to use
iptables.
BPF cluster. By default they will use nftables, but can be configured to use
iptables.

| OS | Cluster Data Plane | Non Cluster Host Data Plane |
Comment on lines +69 to +72
| RHEL 8 | \* | iptables |
| RHEL 9+ | \* | nftables (default) / iptables |
| Ubuntu | \* | nftables (default) / iptables |
| Debian | \* | nftables (default) / iptables |
@alexh-tigera alexh-tigera force-pushed the update-nch-platforms branch from b6f7f61 to fef3851 Compare June 16, 2026 20:48
@alexh-tigera alexh-tigera requested a review from Copilot June 16, 2026 21:18

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Copilot reviewed 1 out of 1 changed files in this pull request and generated 4 comments.

Comment on lines +67 to +72
| OS | Cluster Data Plane | Non-Cluster Host Data Plane |
| :-----: | :----------------: | :---------------------------: |
| RHEL 8 | Any | iptables |
| RHEL 9+ | Any | nftables (default) / iptables |
| Ubuntu | Any | nftables (default) / iptables |
| Debian | Any | nftables (default) / iptables |
Comment on lines +63 to +65
BPF is not supported on a non-cluster host, but non-cluster hosts are able to
connect to a BPF cluster. By default a non-cluster host connecting to a BPF
cluster will use nftables, but can be configured to use iptables.
Comment on lines +69 to +72
| RHEL 8 | Any | iptables |
| RHEL 9+ | Any | nftables (default) / iptables |
| Ubuntu | Any | nftables (default) / iptables |
| Debian | Any | nftables (default) / iptables |
@@ -58,6 +58,19 @@ To learn how to restrict traffic to/from hosts and VMs using Calico network poli
- Your operating system includes the `ipset` and `conntrack` kernel dependencies.
- For everything else, your non-cluster host or VM meets $[prodname] [system requirements](../install-on-clusters/requirements.mdx)
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants