Secure Calico component communications
Configure encryption and authentication to secure Calico components
Enable TLS authentication and encryption for various Calico components.
Schedule Typha for scaling to well-known nodes
Configure the Calico Typha TCP port.
Secure Calico Prometheus endpoints
Limit access to Calico metric endpoints using network policy.
Secure BGP sessions
Configure BGP passwords to prevent attackers from injecting false routing information.