Tigera Calico Commercial Editions provides network security and observability capabilities for Kubernetes environments across cloud, on-premises, and edge deployments. The platform is available as self-managed Calico Enterprise or fully-managed Calico Cloud SaaS. The solution offers container networking with multiple data plane options including eBPF, nftables, iptables, Windows, and VPP. It supports pod-to-pod connectivity across single and multi-cluster environments with data-in-transit encryption using WireGuard. Network security features include DNS policies, Layer 7 network security policies, namespace isolation, and microsegmentation capabilities. The platform provides egress gateway functionality with stable IP addresses for workload traffic and integration with external firewalls. An ingress gateway manages Kubernetes ingress traffic using the Gateway API with integrated Envoy Gateway. The cluster mesh capability enables pod-to-pod connectivity and service discovery across multiple clusters with unified policy enforcement and visibility. The platform includes Istio Ambient Mode for sidecarless service mesh security with automatic mTLS authentication and encryption. Observability features include network traffic visualization, flow logs, DNS analytics, and compliance reporting. The platform offers policy lifecycle management with policy tiers, staging, preview, and troubleshooting capabilities across multi-cluster environments. The solution extends network security controls to virtual machines and bare metal infrastructure alongside containerized workloads.