---
title: "Reference"
description: "Reference content for Calico Enterprise including APIs, CLIs, architecture, host endpoints, component resources, and the platform support policy."
product: "Calico Enterprise"
version: "3.23 (latest)"
section: "Reference"
canonical_url: "https://docs.tigera.io/calico-enterprise/latest/reference/"
---

# Reference

APIs, CLI, architecture and design, and FAQ.

## API and installation references

##### [Tigera Client library](https://docs.tigera.io/calico-enterprise/latest/reference/api.md)

[Calico Enterprise Go client library reference for working with enterprise resources such as tiers, global alerts, and managed clusters programmatically.](https://docs.tigera.io/calico-enterprise/latest/reference/api.md)

##### [Installation reference](https://docs.tigera.io/calico-enterprise/latest/reference/installation/api.md)

[Installation API reference for Calico Enterprise listing the operator-managed custom resources used to configure cluster installation.](https://docs.tigera.io/calico-enterprise/latest/reference/installation/api.md)

##### [Helm installation reference](https://docs.tigera.io/calico-enterprise/latest/reference/installation/helm_customization.md)

[Helm chart values reference for installing Calico Enterprise covering supported overrides and operator configuration knobs.](https://docs.tigera.io/calico-enterprise/latest/reference/installation/helm_customization.md)

##### [REST API Reference](https://docs.tigera.io/calico-enterprise/latest/reference/rest-api-reference)

[REST API reference index for Calico Enterprise covering the management plane APIs used by the Calico Enterprise UI.](https://docs.tigera.io/calico-enterprise/latest/reference/rest-api-reference)

##### [TigeraStatus](https://docs.tigera.io/calico-enterprise/latest/reference/installation/tigerastatus.md)

[Reference for the tigerastatus resource in Calico Enterprise that reports per-component installation and reconciliation health.](https://docs.tigera.io/calico-enterprise/latest/reference/installation/tigerastatus.md)

## calicoctl reference

##### [calicoctl user reference](https://docs.tigera.io/calico-enterprise/latest/reference/clis/calicoctl/overview.md)

[Reference overview of the calicoctl command-line tool for managing Calico Enterprise tiered policy, BGP, IP address management, and node operations.](https://docs.tigera.io/calico-enterprise/latest/reference/clis/calicoctl/overview.md)

##### [calicoctl apply](https://docs.tigera.io/calico-enterprise/latest/reference/clis/calicoctl/apply.md)

[Reference for the calicoctl apply command in Calico Enterprise, used to create or update resources from a manifest file.](https://docs.tigera.io/calico-enterprise/latest/reference/clis/calicoctl/apply.md)

##### [calicoctl captured-packets](https://docs.tigera.io/calico-enterprise/latest/reference/clis/calicoctl/captured-packets.md)

[Reference for the calicoctl captured-packets command in Calico Enterprise, used to copy or clean pcap files produced by a PacketCapture.](https://docs.tigera.io/calico-enterprise/latest/reference/clis/calicoctl/captured-packets.md)

##### [calicoctl cluster](https://docs.tigera.io/calico-enterprise/latest/reference/clis/calicoctl/cluster/overview.md)

[Reference overview of the calicoctl cluster subcommands in Calico Enterprise for cluster-wide diagnostics.](https://docs.tigera.io/calico-enterprise/latest/reference/clis/calicoctl/cluster/overview.md)

##### [calicoctl cluster diags](https://docs.tigera.io/calico-enterprise/latest/reference/clis/calicoctl/cluster/diags.md)

[Reference for the calicoctl cluster diags command in Calico Enterprise, used to collect diagnostics from all nodes in a cluster.](https://docs.tigera.io/calico-enterprise/latest/reference/clis/calicoctl/cluster/diags.md)

##### [calicoctl convert](https://docs.tigera.io/calico-enterprise/latest/reference/clis/calicoctl/convert.md)

[Reference for the calicoctl convert command in Calico Enterprise, used to convert v1 resource manifests into v3 format.](https://docs.tigera.io/calico-enterprise/latest/reference/clis/calicoctl/convert.md)

##### [calicoctl create](https://docs.tigera.io/calico-enterprise/latest/reference/clis/calicoctl/create.md)

[Reference for the calicoctl create command in Calico Enterprise, used to create resources from a manifest file.](https://docs.tigera.io/calico-enterprise/latest/reference/clis/calicoctl/create.md)

##### [calicoctl delete](https://docs.tigera.io/calico-enterprise/latest/reference/clis/calicoctl/delete.md)

[Reference for the calicoctl delete command in Calico Enterprise, used to remove resources by name or from a manifest file.](https://docs.tigera.io/calico-enterprise/latest/reference/clis/calicoctl/delete.md)

##### [calicoctl get](https://docs.tigera.io/calico-enterprise/latest/reference/clis/calicoctl/get.md)

[Reference for the calicoctl get command in Calico Enterprise, used to list resources in plain, YAML, JSON, or wide output formats.](https://docs.tigera.io/calico-enterprise/latest/reference/clis/calicoctl/get.md)

##### [calicoctl ipam](https://docs.tigera.io/calico-enterprise/latest/reference/clis/calicoctl/ipam/overview.md)

[Reference overview of the calicoctl IPAM subcommands in Calico Enterprise for IP address management operations.](https://docs.tigera.io/calico-enterprise/latest/reference/clis/calicoctl/ipam/overview.md)

##### [calicoctl ipam check](https://docs.tigera.io/calico-enterprise/latest/reference/clis/calicoctl/ipam/check.md)

[Reference for the calicoctl IPAM check command in Calico Enterprise, used to audit IP address allocation consistency across the cluster.](https://docs.tigera.io/calico-enterprise/latest/reference/clis/calicoctl/ipam/check.md)

##### [calicoctl ipam release](https://docs.tigera.io/calico-enterprise/latest/reference/clis/calicoctl/ipam/release.md)

[Reference for the calicoctl IPAM release command in Calico Enterprise, used to release a leaked or stale IP address back to the pool.](https://docs.tigera.io/calico-enterprise/latest/reference/clis/calicoctl/ipam/release.md)

##### [calicoctl ipam show](https://docs.tigera.io/calico-enterprise/latest/reference/clis/calicoctl/ipam/show.md)

[Reference for the calicoctl IPAM show command in Calico Enterprise, used to display the owner and details of an allocated IP address.](https://docs.tigera.io/calico-enterprise/latest/reference/clis/calicoctl/ipam/show.md)

##### [calicoctl ipam configure](https://docs.tigera.io/calico-enterprise/latest/reference/clis/calicoctl/ipam/configure.md)

[Reference for the calicoctl IPAM configure command in Calico Enterprise, used to set IP address management options such as strict affinity.](https://docs.tigera.io/calico-enterprise/latest/reference/clis/calicoctl/ipam/configure.md)

##### [calicoctl ipam split](https://docs.tigera.io/calico-enterprise/latest/reference/clis/calicoctl/ipam/split.md)

[Reference for the calicoctl IPAM split command in Calico Enterprise, used to split an existing IP pool into smaller pools.](https://docs.tigera.io/calico-enterprise/latest/reference/clis/calicoctl/ipam/split.md)

##### [calicoctl datastore](https://docs.tigera.io/calico-enterprise/latest/reference/clis/calicoctl/datastore/overview.md)

[Reference overview of the calicoctl datastore subcommands in Calico Enterprise for migrating between etcdv3 and Kubernetes datastores.](https://docs.tigera.io/calico-enterprise/latest/reference/clis/calicoctl/datastore/overview.md)

##### [calicoctl datastore migrate](https://docs.tigera.io/calico-enterprise/latest/reference/clis/calicoctl/datastore/migrate/overview.md)

[Reference overview of the calicoctl datastore migrate subcommands in Calico Enterprise for performing safe datastore migrations.](https://docs.tigera.io/calico-enterprise/latest/reference/clis/calicoctl/datastore/migrate/overview.md)

##### [calicoctl datastore migrate lock](https://docs.tigera.io/calico-enterprise/latest/reference/clis/calicoctl/datastore/migrate/lock.md)

[Reference for the calicoctl datastore migrate lock command in Calico Enterprise, used to lock a datastore during migration.](https://docs.tigera.io/calico-enterprise/latest/reference/clis/calicoctl/datastore/migrate/lock.md)

##### [calicoctl datastore migrate unlock](https://docs.tigera.io/calico-enterprise/latest/reference/clis/calicoctl/datastore/migrate/unlock.md)

[Reference for the calicoctl datastore migrate unlock command in Calico Enterprise, used to unlock a datastore after migration completes.](https://docs.tigera.io/calico-enterprise/latest/reference/clis/calicoctl/datastore/migrate/unlock.md)

##### [calicoctl label](https://docs.tigera.io/calico-enterprise/latest/reference/clis/calicoctl/label.md)

[Reference for the calicoctl label command in Calico Enterprise, used to add, change, or remove labels on workload endpoints and nodes.](https://docs.tigera.io/calico-enterprise/latest/reference/clis/calicoctl/label.md)

##### [calicoctl node](https://docs.tigera.io/calico-enterprise/latest/reference/clis/calicoctl/node/overview.md)

[Reference overview of the calicoctl node subcommands in Calico Enterprise for managing the cnx-node container.](https://docs.tigera.io/calico-enterprise/latest/reference/clis/calicoctl/node/overview.md)

##### [calicoctl node run](https://docs.tigera.io/calico-enterprise/latest/reference/clis/calicoctl/node/run.md)

[Reference for the calicoctl node run command in Calico Enterprise, used to start a cnx-node instance with the supplied options.](https://docs.tigera.io/calico-enterprise/latest/reference/clis/calicoctl/node/run.md)

##### [calicoctl node status](https://docs.tigera.io/calico-enterprise/latest/reference/clis/calicoctl/node/status.md)

[Reference for the calicoctl node status command in Calico Enterprise, used to display BGP peer state and node liveness.](https://docs.tigera.io/calico-enterprise/latest/reference/clis/calicoctl/node/status.md)

##### [calicoctl node diags](https://docs.tigera.io/calico-enterprise/latest/reference/clis/calicoctl/node/diags.md)

[Reference for the calicoctl node diags command in Calico Enterprise, used to collect diagnostics from a single Calico node.](https://docs.tigera.io/calico-enterprise/latest/reference/clis/calicoctl/node/diags.md)

##### [calicoctl node checksystem](https://docs.tigera.io/calico-enterprise/latest/reference/clis/calicoctl/node/checksystem.md)

[Reference for the calicoctl node check-system command in Calico Enterprise, used to verify host kernel support for required features.](https://docs.tigera.io/calico-enterprise/latest/reference/clis/calicoctl/node/checksystem.md)

##### [calicoctl patch](https://docs.tigera.io/calico-enterprise/latest/reference/clis/calicoctl/patch.md)

[Reference for the calicoctl patch command in Calico Enterprise, used to apply a partial update to a resource.](https://docs.tigera.io/calico-enterprise/latest/reference/clis/calicoctl/patch.md)

##### [calicoctl replace](https://docs.tigera.io/calico-enterprise/latest/reference/clis/calicoctl/replace.md)

[Reference for the calicoctl replace command in Calico Enterprise, used to replace an existing resource with one defined in a manifest.](https://docs.tigera.io/calico-enterprise/latest/reference/clis/calicoctl/replace.md)

##### [calicoctl version](https://docs.tigera.io/calico-enterprise/latest/reference/clis/calicoctl/version.md)

[Reference for the calicoctl version command in Calico Enterprise, used to display client and cluster version information.](https://docs.tigera.io/calico-enterprise/latest/reference/clis/calicoctl/version.md)

## calicoq reference

##### [calicoq](https://docs.tigera.io/calico-enterprise/latest/reference/clis/calicoq/overview.md)

[Reference overview of the calicoq command-line tool in Calico Enterprise for verifying that security policies are configured as intended.](https://docs.tigera.io/calico-enterprise/latest/reference/clis/calicoq/overview.md)

##### [calicoq and selectors](https://docs.tigera.io/calico-enterprise/latest/reference/clis/calicoq/selectors.md)

[Reference for selector syntax accepted by calicoq in Calico Enterprise when matching endpoints, policies, or profiles.](https://docs.tigera.io/calico-enterprise/latest/reference/clis/calicoq/selectors.md)

##### [calicoq endpoint](https://docs.tigera.io/calico-enterprise/latest/reference/clis/calicoq/endpoint.md)

[Reference for the calicoq endpoint command in Calico Enterprise, used to list policies and profiles applied to selected endpoints.](https://docs.tigera.io/calico-enterprise/latest/reference/clis/calicoq/endpoint.md)

##### [calicoq eval](https://docs.tigera.io/calico-enterprise/latest/reference/clis/calicoq/eval.md)

[Reference for the calicoq evaluate command in Calico Enterprise, used to list endpoints matched by a policy selector expression.](https://docs.tigera.io/calico-enterprise/latest/reference/clis/calicoq/eval.md)

##### [calicoq host](https://docs.tigera.io/calico-enterprise/latest/reference/clis/calicoq/host.md)

[Reference for the calicoq host command in Calico Enterprise, used to list endpoints, policies, and profiles on a selected host.](https://docs.tigera.io/calico-enterprise/latest/reference/clis/calicoq/host.md)

##### [calicoq policy](https://docs.tigera.io/calico-enterprise/latest/reference/clis/calicoq/policy.md)

[Reference for the calicoq policy command in Calico Enterprise, used to list endpoints selected by a given policy.](https://docs.tigera.io/calico-enterprise/latest/reference/clis/calicoq/policy.md)

##### [calicoq version](https://docs.tigera.io/calico-enterprise/latest/reference/clis/calicoq/version.md)

[Reference for the calicoq version command in Calico Enterprise, used to display the calicoq client version.](https://docs.tigera.io/calico-enterprise/latest/reference/clis/calicoq/version.md)

## Resource definitions

##### [Resource definitions](https://docs.tigera.io/calico-enterprise/latest/reference/resources/overview.md)

[Reference overview of the Calico Enterprise API resources, including the manifest format and how calicoctl and kubectl manage them.](https://docs.tigera.io/calico-enterprise/latest/reference/resources/overview.md)

##### [BFD configuration](https://docs.tigera.io/calico-enterprise/latest/reference/resources/bfdconfig.md)

[Reference for the BFD configuration resource in Calico Enterprise that tunes Bidirectional Forwarding Detection on BGP-peered nodes.](https://docs.tigera.io/calico-enterprise/latest/reference/resources/bfdconfig.md)

##### [BGP configuration](https://docs.tigera.io/calico-enterprise/latest/reference/resources/bgpconfig.md)

[Reference for the BGPConfiguration resource in Calico Enterprise that sets cluster-wide BGP options including route reflectors and AS number.](https://docs.tigera.io/calico-enterprise/latest/reference/resources/bgpconfig.md)

##### [BGP peer](https://docs.tigera.io/calico-enterprise/latest/reference/resources/bgppeer.md)

[Reference for the BGPPeer resource in Calico Enterprise that defines a BGP neighbor relationship with external routers or other Calico nodes.](https://docs.tigera.io/calico-enterprise/latest/reference/resources/bgppeer.md)

##### [BGP Filter](https://docs.tigera.io/calico-enterprise/latest/reference/resources/bgpfilter.md)

[Reference for the BGPFilter resource in Calico Enterprise that filters routes imported from or exported to BGP peers.](https://docs.tigera.io/calico-enterprise/latest/reference/resources/bgpfilter.md)

##### [Block affinity](https://docs.tigera.io/calico-enterprise/latest/reference/resources/blockaffinity.md)

[Reference for the BlockAffinity resource in Calico Enterprise that records which node owns each IP address management block.](https://docs.tigera.io/calico-enterprise/latest/reference/resources/blockaffinity.md)

##### [Calico node status](https://docs.tigera.io/calico-enterprise/latest/reference/resources/caliconodestatus.md)

[Reference for the CalicoNodeStatus resource in Calico Enterprise that exposes per-node agent, BGP, and routing state.](https://docs.tigera.io/calico-enterprise/latest/reference/resources/caliconodestatus.md)

##### [Compliance reports (deprecated)](https://docs.tigera.io/calico-enterprise/latest/reference/resources/compliance-reports/overview.md)

[Reference overview of compliance reporting in Calico Enterprise covering schedules, report scope, and the GlobalReport resource.](https://docs.tigera.io/calico-enterprise/latest/reference/resources/compliance-reports/overview.md)

##### [Inventory report](https://docs.tigera.io/calico-enterprise/latest/reference/resources/compliance-reports/inventory.md)

[Reference for the inventory compliance report in Calico Enterprise that catalogs endpoints, namespaces, and policies in scope at report time.](https://docs.tigera.io/calico-enterprise/latest/reference/resources/compliance-reports/inventory.md)

##### [Network Access report](https://docs.tigera.io/calico-enterprise/latest/reference/resources/compliance-reports/network-access.md)

[Reference for the network access compliance report in Calico Enterprise that summarizes which endpoints could communicate based on policy.](https://docs.tigera.io/calico-enterprise/latest/reference/resources/compliance-reports/network-access.md)

##### [Policy audit report](https://docs.tigera.io/calico-enterprise/latest/reference/resources/compliance-reports/policy-audit.md)

[Reference for the policy audit compliance report in Calico Enterprise that records changes to network policies during the report period.](https://docs.tigera.io/calico-enterprise/latest/reference/resources/compliance-reports/policy-audit.md)

##### [CIS benchmark report](https://docs.tigera.io/calico-enterprise/latest/reference/resources/compliance-reports/cis-benchmark.md)

[Reference for the CIS benchmark compliance report in Calico Enterprise that audits Kubernetes nodes against CIS recommendations.](https://docs.tigera.io/calico-enterprise/latest/reference/resources/compliance-reports/cis-benchmark.md)

##### [Deep packet inspection](https://docs.tigera.io/calico-enterprise/latest/reference/resources/deeppacketinspection.md)

[Reference for the DeepPacketInspection resource in Calico Enterprise that defines workloads to scan with the Snort-based IDS engine.](https://docs.tigera.io/calico-enterprise/latest/reference/resources/deeppacketinspection.md)

##### [Early Network Configuration](https://docs.tigera.io/calico-enterprise/latest/reference/resources/earlynetworkconfiguration.md)

[Reference for the EarlyNetworkConfiguration resource in Calico Enterprise that brings up BGP networking before the kubelet starts.](https://docs.tigera.io/calico-enterprise/latest/reference/resources/earlynetworkconfiguration.md)

##### [Egress gateway policy](https://docs.tigera.io/calico-enterprise/latest/reference/resources/egressgatewaypolicy.md)

[Reference for the EgressGatewayPolicy resource in Calico Enterprise that selects which pods route through which egress gateways for outbound traffic.](https://docs.tigera.io/calico-enterprise/latest/reference/resources/egressgatewaypolicy.md)

##### [External network](https://docs.tigera.io/calico-enterprise/latest/reference/resources/externalnetwork.md)

[Reference for the ExternalNetwork resource in Calico Enterprise that models networks outside the cluster for use with egress gateways.](https://docs.tigera.io/calico-enterprise/latest/reference/resources/externalnetwork.md)

##### [Felix configuration](https://docs.tigera.io/calico-enterprise/latest/reference/resources/felixconfig.md)

[Reference for the FelixConfiguration resource in Calico Enterprise that controls Felix data plane behavior cluster-wide.](https://docs.tigera.io/calico-enterprise/latest/reference/resources/felixconfig.md)

##### [Global Alert](https://docs.tigera.io/calico-enterprise/latest/reference/resources/globalalert.md)

[Reference for the GlobalAlert resource in Calico Enterprise that defines an alerting query against flow, audit, or DNS logs.](https://docs.tigera.io/calico-enterprise/latest/reference/resources/globalalert.md)

##### [Global network policy](https://docs.tigera.io/calico-enterprise/latest/reference/resources/globalnetworkpolicy.md)

[Reference for the GlobalNetworkPolicy resource in Calico Enterprise, a cluster-scoped tiered policy that selects endpoints across all namespaces.](https://docs.tigera.io/calico-enterprise/latest/reference/resources/globalnetworkpolicy.md)

##### [Global network set](https://docs.tigera.io/calico-enterprise/latest/reference/resources/globalnetworkset.md)

[Reference for the GlobalNetworkSet resource in Calico Enterprise that defines a cluster-scoped set of CIDRs referenced by tiered network policy.](https://docs.tigera.io/calico-enterprise/latest/reference/resources/globalnetworkset.md)

##### [Global report](https://docs.tigera.io/calico-enterprise/latest/reference/resources/globalreport.md)

[Reference for the GlobalReport resource in Calico Enterprise that schedules compliance reports against cluster network and policy state.](https://docs.tigera.io/calico-enterprise/latest/reference/resources/globalreport.md)

##### [Global threat feed](https://docs.tigera.io/calico-enterprise/latest/reference/resources/globalthreatfeed.md)

[Reference for the GlobalThreatFeed resource in Calico Enterprise that pulls IP and domain indicators of compromise into Calico-managed network sets.](https://docs.tigera.io/calico-enterprise/latest/reference/resources/globalthreatfeed.md)

##### [Host endpoint](https://docs.tigera.io/calico-enterprise/latest/reference/resources/hostendpoint.md)

[Reference for the HostEndpoint resource in Calico Enterprise that represents a host network interface for tiered policy enforcement.](https://docs.tigera.io/calico-enterprise/latest/reference/resources/hostendpoint.md)

##### [IP pool](https://docs.tigera.io/calico-enterprise/latest/reference/resources/ippool.md)

[Reference for the IPPool resource in Calico Enterprise that defines CIDRs available for pod IP address allocation.](https://docs.tigera.io/calico-enterprise/latest/reference/resources/ippool.md)

##### [IP reservation](https://docs.tigera.io/calico-enterprise/latest/reference/resources/ipreservation.md)

[Reference for the IPReservation resource in Calico Enterprise that excludes specific addresses or ranges from automatic allocation.](https://docs.tigera.io/calico-enterprise/latest/reference/resources/ipreservation.md)

##### [IPAM configuration](https://docs.tigera.io/calico-enterprise/latest/reference/resources/ipamconfig.md)

[Reference for the IP address management configuration resource in Calico Enterprise that sets cluster-wide options such as strict affinity.](https://docs.tigera.io/calico-enterprise/latest/reference/resources/ipamconfig.md)

##### [License key](https://docs.tigera.io/calico-enterprise/latest/reference/resources/licensekey.md)

[Reference for the LicenseKey resource in Calico Enterprise that activates entitled enterprise features in the cluster.](https://docs.tigera.io/calico-enterprise/latest/reference/resources/licensekey.md)

##### [Kubernetes controllers configuration](https://docs.tigera.io/calico-enterprise/latest/reference/resources/kubecontrollersconfig.md)

[Reference for the KubeControllersConfiguration resource in Calico Enterprise that controls behavior of the kube-controllers component.](https://docs.tigera.io/calico-enterprise/latest/reference/resources/kubecontrollersconfig.md)

##### [Managed Cluster](https://docs.tigera.io/calico-enterprise/latest/reference/resources/managedcluster.md)

[Reference for the ManagedCluster resource in Calico Enterprise that registers a workload cluster with a management cluster for centralized observability.](https://docs.tigera.io/calico-enterprise/latest/reference/resources/managedcluster.md)

##### [Network policy](https://docs.tigera.io/calico-enterprise/latest/reference/resources/networkpolicy.md)

[Reference for the NetworkPolicy resource in Calico Enterprise, a namespaced tiered policy that selects pods within a single namespace.](https://docs.tigera.io/calico-enterprise/latest/reference/resources/networkpolicy.md)

##### [Network set](https://docs.tigera.io/calico-enterprise/latest/reference/resources/networkset.md)

[Reference for the NetworkSet resource in Calico Enterprise that defines a namespaced set of CIDRs referenced by tiered network policy.](https://docs.tigera.io/calico-enterprise/latest/reference/resources/networkset.md)

##### [Node](https://docs.tigera.io/calico-enterprise/latest/reference/resources/node.md)

[Reference for the Node resource in Calico Enterprise that represents a host running the cnx-node agent.](https://docs.tigera.io/calico-enterprise/latest/reference/resources/node.md)

##### [Packet capture](https://docs.tigera.io/calico-enterprise/latest/reference/resources/packetcapture.md)

[Reference for the PacketCapture resource in Calico Enterprise that captures pcap files from selected workloads for offline analysis.](https://docs.tigera.io/calico-enterprise/latest/reference/resources/packetcapture.md)

##### [Policy recommendation scope](https://docs.tigera.io/calico-enterprise/latest/reference/resources/policyrecommendations.md)

[Reference for the PolicyRecommendation resource in Calico Enterprise that drives policy recommendations generated from observed namespace flows.](https://docs.tigera.io/calico-enterprise/latest/reference/resources/policyrecommendations.md)

##### [Profile](https://docs.tigera.io/calico-enterprise/latest/reference/resources/profile.md)

[Reference for the Profile resource in Calico Enterprise that groups labels and rules applied to endpoints.](https://docs.tigera.io/calico-enterprise/latest/reference/resources/profile.md)

##### [Remote cluster configuration](https://docs.tigera.io/calico-enterprise/latest/reference/resources/remoteclusterconfiguration.md)

[Reference for the RemoteClusterConfiguration resource in Calico Enterprise that federates resources between clusters for shared identity.](https://docs.tigera.io/calico-enterprise/latest/reference/resources/remoteclusterconfiguration.md)

##### [Security event webhook](https://docs.tigera.io/calico-enterprise/latest/reference/resources/securityeventwebhook.md)

[Reference for the SecurityEventWebhook resource in Calico Enterprise that forwards security events to external systems such as Slack or Jira.](https://docs.tigera.io/calico-enterprise/latest/reference/resources/securityeventwebhook.md)

##### [Staged global network policy](https://docs.tigera.io/calico-enterprise/latest/reference/resources/stagedglobalnetworkpolicy.md)

[Reference for the StagedGlobalNetworkPolicy resource in Calico Enterprise that previews cluster-scoped tiered policy without enforcing it.](https://docs.tigera.io/calico-enterprise/latest/reference/resources/stagedglobalnetworkpolicy.md)

##### [Staged Kubernetes network policy](https://docs.tigera.io/calico-enterprise/latest/reference/resources/stagedkubernetesnetworkpolicy.md)

[Reference for the StagedKubernetesNetworkPolicy resource in Calico Enterprise that previews Kubernetes network policy without enforcing it.](https://docs.tigera.io/calico-enterprise/latest/reference/resources/stagedkubernetesnetworkpolicy.md)

##### [Staged network policy](https://docs.tigera.io/calico-enterprise/latest/reference/resources/stagednetworkpolicy.md)

[Reference for the StagedNetworkPolicy resource in Calico Enterprise that previews namespaced tiered policy without enforcing it.](https://docs.tigera.io/calico-enterprise/latest/reference/resources/stagednetworkpolicy.md)

##### [Tier](https://docs.tigera.io/calico-enterprise/latest/reference/resources/tier.md)

[Reference for the Tier resource in Calico Enterprise that groups tiered policies into ordered evaluation buckets.](https://docs.tigera.io/calico-enterprise/latest/reference/resources/tier.md)

##### [Workload endpoint](https://docs.tigera.io/calico-enterprise/latest/reference/resources/workloadendpoint.md)

[Reference for the WorkloadEndpoint resource in Calico Enterprise that represents a pod or VM interface for policy and IPAM.](https://docs.tigera.io/calico-enterprise/latest/reference/resources/workloadendpoint.md)

## Host endpoints

##### [Host endpoints](https://docs.tigera.io/calico-enterprise/latest/reference/host-endpoints/overview.md)

[Reference overview of host endpoint protection in Calico Enterprise covering the model for securing host network interfaces with policy.](https://docs.tigera.io/calico-enterprise/latest/reference/host-endpoints/overview.md)

##### [Creating policy for basic connectivity](https://docs.tigera.io/calico-enterprise/latest/reference/host-endpoints/connectivity.md)

[Reference for the Calico Enterprise failsafe policy that protects host endpoints from being cut off when host network policy is misconfigured.](https://docs.tigera.io/calico-enterprise/latest/reference/host-endpoints/connectivity.md)

##### [Creating host endpoint objects](https://docs.tigera.io/calico-enterprise/latest/reference/host-endpoints/objects.md)

[Reference for the HostEndpoint object in Calico Enterprise describing how to model a host network interface so policy can select it.](https://docs.tigera.io/calico-enterprise/latest/reference/host-endpoints/objects.md)

##### [Selector-based policies](https://docs.tigera.io/calico-enterprise/latest/reference/host-endpoints/selector.md)

[Reference for ordered host endpoint policies in Calico Enterprise that match interfaces using label selectors.](https://docs.tigera.io/calico-enterprise/latest/reference/host-endpoints/selector.md)

##### [Failsafe rules](https://docs.tigera.io/calico-enterprise/latest/reference/host-endpoints/failsafe.md)

[Reference for the Calico Enterprise failsafe inbound and outbound port lists that prevent host network policy from cutting off control-plane connectivity.](https://docs.tigera.io/calico-enterprise/latest/reference/host-endpoints/failsafe.md)

##### [Pre-DNAT policy](https://docs.tigera.io/calico-enterprise/latest/reference/host-endpoints/pre-dnat.md)

[Reference for pre-DNAT host endpoint policy in Calico Enterprise that applies rules to ingress traffic before destination NAT rewrites the address.](https://docs.tigera.io/calico-enterprise/latest/reference/host-endpoints/pre-dnat.md)

##### [Apply on forwarded traffic](https://docs.tigera.io/calico-enterprise/latest/reference/host-endpoints/forwarded.md)

[Reference for the applyOnForward field on Calico Enterprise host endpoint policy that controls how rules apply to forwarded traffic.](https://docs.tigera.io/calico-enterprise/latest/reference/host-endpoints/forwarded.md)

##### [Summary of host endpoint policies](https://docs.tigera.io/calico-enterprise/latest/reference/host-endpoints/summary.md)

[Reference summary describing how the different Calico Enterprise host endpoint policy types interact and affect packet flows.](https://docs.tigera.io/calico-enterprise/latest/reference/host-endpoints/summary.md)

##### [Connection tracking](https://docs.tigera.io/calico-enterprise/latest/reference/host-endpoints/conntrack.md)

[Reference covering Linux conntrack workarounds for Calico Enterprise host endpoint policy when stateful tracking interferes with packet flow.](https://docs.tigera.io/calico-enterprise/latest/reference/host-endpoints/conntrack.md)

## Architecture

##### [Component architecture](https://docs.tigera.io/calico-enterprise/latest/reference/architecture/overview.md)

[Architectural overview reference of Calico Enterprise components covering the management plane, observability stack, and BGP networking foundations.](https://docs.tigera.io/calico-enterprise/latest/reference/architecture/overview.md)

##### ['The Calico Enterprise data path: IP routing and iptables'](https://docs.tigera.io/calico-enterprise/latest/reference/architecture/data-path.md)

[Reference covering the Calico Enterprise data path explaining how packets flow between workloads and to external destinations across networking modes.](https://docs.tigera.io/calico-enterprise/latest/reference/architecture/data-path.md)

## Other reference topics

##### [Attribution](https://docs.tigera.io/calico-enterprise/latest/reference/attribution.md)

[Third-party license attribution report listing open-source components shipped with Calico Enterprise.](https://docs.tigera.io/calico-enterprise/latest/reference/attribution.md)

##### [Component versions](https://docs.tigera.io/calico-enterprise/latest/reference/component-versions.md)

[Component version reference listing the container images and binaries shipped with each Calico Enterprise release.](https://docs.tigera.io/calico-enterprise/latest/reference/component-versions.md)

##### [Frequently asked questions](https://docs.tigera.io/calico-enterprise/latest/reference/faq.md)

[Frequently asked questions about Calico Enterprise covering the management UI, tiers, observability, multi-cluster management, and platform support.](https://docs.tigera.io/calico-enterprise/latest/reference/faq.md)

##### [Platform support policy](https://docs.tigera.io/calico-enterprise/latest/reference/support-policy.md)

[Calico Enterprise platform support policy reference covering supported Kubernetes versions, operating systems, and lifecycle commitments.](https://docs.tigera.io/calico-enterprise/latest/reference/support-policy.md)