Calico VM migration (KubeVirt live migration with IP persistence)

Watch a KubeVirt VM live-migrate across nodes while its IP and TCP connections survive, driven by Calico's kubeVirtVMAddressPersistence IPAM feature.

Start workshop
Insecure by Default — Egress Security

Take Kubernetes egress from unrestricted to least-privilege with Calico Enterprise — map the before state, add policy tiers and guardrails, default-deny and microsegment, allowlist external destinations by domain, route egress through a gateway, and turn denials into alerts.

Start workshop
NSX DFW to Calico — Migrating Security Policy Without Starting Over

Reproduce a VMware NSX distributed-firewall ruleset as Calico policy, without a big-bang cutover. Map the real east-west traffic with flow logs, translate NSX security groups to label selectors and IP rules to NetworkSets, stand up RBAC-locked policy tiers, roll rules out staged-then-enforced across a mixed KubeVirt VM + container app, and prove policy follows a VM through live migration.

Start workshop