---
title: "Configure Calico Cloud networking"
description: "Networking configuration tasks for Calico Cloud connected clusters — BGP, overlay encapsulation, MTU, multiple pod networks, dual ToR, IPVS, NAT, and QoS controls."
product: "Calico Cloud"
version: "v23.0.1"
section: "Networking"
canonical_url: "https://docs.tigera.io/calico-cloud/networking/configuring/"
---

# Configure Calico Cloud networking

## [📄️Configure BGP peering](https://docs.tigera.io/calico-cloud/networking/configuring/bgp.md)

[Set up BGP peering for Calico Cloud connected clusters — full mesh, per-node peers, top-of-rack switches, and route reflectors — with BGPPeer and BGPConfiguration resources.](https://docs.tigera.io/calico-cloud/networking/configuring/bgp.md)

## [📄️Configure BGP peering with nested clusters running on KubeVirt VMs](https://docs.tigera.io/calico-cloud/networking/configuring/bgp-to-workload.md)

[Peer Calico Cloud nodes with BGP speakers inside KubeVirt VMs so nested clusters connected to Calico Cloud can announce routes from their workloads.](https://docs.tigera.io/calico-cloud/networking/configuring/bgp-to-workload.md)

## [📄️Deploy a dual ToR cluster](https://docs.tigera.io/calico-cloud/networking/configuring/dual-tor.md)

[Deploy a dual ToR cluster connected to Calico Cloud so two independent connectivity planes provide redundancy between racks for on-premises clusters.](https://docs.tigera.io/calico-cloud/networking/configuring/dual-tor.md)

## [📄️Configure multiple Calico Cloud networks on a pod](https://docs.tigera.io/calico-cloud/networking/configuring/multiple-networks.md)

[Add extra Calico Cloud networks to each pod in a connected cluster with the Multus-CNI plugin, then control access with tiered network policy on every interface.](https://docs.tigera.io/calico-cloud/networking/configuring/multiple-networks.md)

## [📄️Overlay networking](https://docs.tigera.io/calico-cloud/networking/configuring/vxlan-ipip.md)

[Choose VXLAN or IP-in-IP overlay encapsulation in a Calico Cloud connected cluster so pod traffic crosses underlay networks that don't route pod CIDRs natively.](https://docs.tigera.io/calico-cloud/networking/configuring/vxlan-ipip.md)

## [📄️Advertise Kubernetes service IP addresses](https://docs.tigera.io/calico-cloud/networking/configuring/advertise-service-ips.md)

[Advertise Kubernetes service cluster IPs and external IPs out of a Calico Cloud connected cluster over BGP so upstream routers can reach them directly.](https://docs.tigera.io/calico-cloud/networking/configuring/advertise-service-ips.md)

## [📄️L2 reachability for pods and services without BGP](https://docs.tigera.io/calico-cloud/networking/configuring/local-subnet-l2-reachability.md)

[Make pods and LoadBalancer service VIPs that share the host subnet reachable from the local L2 network without BGP, using Calico Cloud's userspace ARP/NDP responder.](https://docs.tigera.io/calico-cloud/networking/configuring/local-subnet-l2-reachability.md)

## [📄️Configure MTU to maximize network performance](https://docs.tigera.io/calico-cloud/networking/configuring/mtu.md)

[Tune the Calico Cloud MTU on the Installation resource so pod traffic matches the underlay, accounting for VXLAN, IP-in-IP, and WireGuard overhead.](https://docs.tigera.io/calico-cloud/networking/configuring/mtu.md)

## [📄️Custom BGP Configuration](https://docs.tigera.io/calico-cloud/networking/configuring/custom-bgp-config.md)

[Override the default BIRD BGP templates in a Calico Cloud connected cluster to access advanced BIRD features for proof-of-concept and special-case routing.](https://docs.tigera.io/calico-cloud/networking/configuring/custom-bgp-config.md)

## [📄️Secure BGP sessions](https://docs.tigera.io/calico-cloud/networking/configuring/secure-bgp.md)

[Configure BGP session passwords on Calico Cloud BGP peers on a connected cluster to block attackers from injecting false routing information.](https://docs.tigera.io/calico-cloud/networking/configuring/secure-bgp.md)

## [📄️Configure outgoing NAT](https://docs.tigera.io/calico-cloud/networking/configuring/workloads-outside-cluster.md)

[Configure NAT outgoing on Calico Cloud IP pools in a connected cluster so pod traffic destined outside the cluster is source-NATed to the node IP.](https://docs.tigera.io/calico-cloud/networking/configuring/workloads-outside-cluster.md)

## [📄️Use a specific MAC address for a pod](https://docs.tigera.io/calico-cloud/networking/configuring/pod-mac-address.md)

[Pin a chosen MAC address on a Kubernetes pod interface in a Calico Cloud connected cluster with the CNI plugin, for cases such as MAC-bound software licenses.](https://docs.tigera.io/calico-cloud/networking/configuring/pod-mac-address.md)

## [📄️Use NodeLocal DNSCache in your cluster](https://docs.tigera.io/calico-cloud/networking/configuring/node-local-dns-cache.md)

[Run NodeLocal DNSCache alongside Calico Cloud in a connected cluster and write the network policy that lets pod DNS traffic reach the per-node cache.](https://docs.tigera.io/calico-cloud/networking/configuring/node-local-dns-cache.md)

## [📄️Configure QoS Controls](https://docs.tigera.io/calico-cloud/networking/configuring/qos-controls.md)

[Apply Calico Cloud QoS controls to cap pod ingress and egress bandwidth, packet rate, and connection counts in a connected cluster, plus DiffServ marking on egress.](https://docs.tigera.io/calico-cloud/networking/configuring/qos-controls.md)

## [📄️Add Maglev load balancing to a service](https://docs.tigera.io/calico-cloud/networking/configuring/add-maglev-load-balancing.md)

[Switch a Kubernetes service to Maglev consistent-hash load balancing on the Calico Cloud eBPF data plane for stable backend selection in connected clusters.](https://docs.tigera.io/calico-cloud/networking/configuring/add-maglev-load-balancing.md)

## [📄️Mark a load balancer node for maintenance](https://docs.tigera.io/calico-cloud/networking/configuring/mark-lb-node-for-maintenance.md)

[Mark a node in a Calico Cloud connected cluster for load balancer maintenance with an annotation so the eBPF data plane stops sending new service traffic to its pods.](https://docs.tigera.io/calico-cloud/networking/configuring/mark-lb-node-for-maintenance.md)