Policy for extreme traffic
Enable extreme high-connection workloads
Bypass Linux conntrack with a Calico Open Source policy rule for workloads that handle an extreme number of concurrent connections.
Defend against DoS attacks
Define DoS mitigation rules in Calico Open Source policy that drop connections at the eBPF or XDP layer, with hardware offload when available.