OVN-Kubernetes

Input—per 1M tokens

Output—per 1M tokens

Context—tokens

WeightsClosed

About

OVN-Kubernetes is ranked #1 of 27 in microsegmentation software on Inferse. It runs on API, Linux, Self-hosted, Windows.

Compared on microsegmentation software

Free plan: Yesovn-kubernetes.io
CNI plugin: Yesovn-kubernetes.io
Network policies: Yesovn-kubernetes.io
Egress control: Yesovn-kubernetes.io
Encryption in transit: Yesovn-kubernetes.io
Supported platforms: Kubernetes, Linux, Windows, bare metal, VMware vSphere, IBM Power, IBM Z, and Red Hat OpenStack Platformovn-kubernetes.io

Facts

Purpose: OVN-Kubernetes is an open-source Kubernetes networking solution and CNI-conformant plugin built on OVN and Open vSwitch.ovn-kubernetes.io · 30 Sept 2026
Core networking: It provides pod IPAM and veth interfaces, GENEVE overlay networking, Kubernetes Services and EndpointSlices, NetworkPolicies, AdminNetworkPolicies, and IPv4/IPv6 dual-stack support.ovn-kubernetes.io · 30 Sept 2026
Network security: NetworkPolicy, AdminNetworkPolicy, and EgressFirewall are enforced through OVN ACLs.ovn-kubernetes.io · 30 Sept 2026
Egress controls: EgressIP, EgressService, and EgressQoS control how traffic leaves the cluster.ovn-kubernetes.io · 30 Sept 2026
Multi-networking: Pods can attach to multiple networks using multi-homing and multi-network policies.ovn-kubernetes.io · 30 Sept 2026
Multicast: OVN-Kubernetes supports IGMP snooping and multicast relay through OVN.ovn-kubernetes.io · 30 Sept 2026
Quality of service: NetworkQoS provides DSCP marking and traffic shaping for pod network traffic.ovn-kubernetes.io · 30 Sept 2026
Virtual machine migration: It supports persistent IPs and seamless networking for KubeVirt VM live migrations.ovn-kubernetes.io · 30 Sept 2026
Windows support: Hybrid Overlay provides mixed Windows/Linux cluster networking using VXLAN tunnels.ovn-kubernetes.io · 30 Sept 2026
Hardware acceleration: OVN-Kubernetes can offload OVS datapath processing to SmartNICs and DPUs.ovn-kubernetes.io · 30 Sept 2026
BGP integration: BGP Integration supports route advertisements, no-overlay routing, and EVPN.ovn-kubernetes.io · 30 Sept 2026
Deployment: The project documents deployment with Kind, Helm, DPU acceleration, and kubeadm, and provides source-build instructions.ovn-kubernetes.io · 30 Sept 2026
Dependencies: The requirements matrix lists OVN, nft, Multus, CNI, and Kubernetes versions; the master branch lists Kubernetes 1.33 or newer.ovn-kubernetes.io · 30 Sept 2026
Security response: Dependabot scans the repository for security updates, and vulnerability reports use GitHub Private Vulnerability Reporting with an intended response within 48 hours.ovn-kubernetes.io · 30 Sept 2026
Support: Supported major releases receive backported fixes and support, with minor patch releases planned every four weeks.ovn-kubernetes.io · 30 Sept 2026
Secondary-network limit: Secondary User Defined Networks currently lack north-south traffic and core Kubernetes Services support.ovn-kubernetes.io · 30 Sept 2026
Target users: The project focuses on Kubernetes networking capabilities important to enterprise and telco users.ovn-kubernetes.io · 30 Sept 2026
What it does: OVN-Kubernetes is an open-source Kubernetes networking solution and CNI-conformant plugin built on OVN and Open vSwitch.ovn-kubernetes.io · 1 Oct 2026
Kubernetes networking: It provides pod networking, IPAM, veth interfaces, GENEVE overlays, Kubernetes Services, EndpointSlices, NetworkPolicies, AdminNetworkPolicies, and IPv4/IPv6 dual-stack support.ovn-kubernetes.io · 1 Oct 2026
Egress controls: It supports Multiple External Gateways, DSCP QoS, EgressIP, EgressService, and Egress Firewall controls.ovn-kubernetes.io · 1 Oct 2026
Advanced networking: It supports hybrid Windows/Linux networking, IP multicast, OVS hardware offload, and secondary or local networks.ovn-kubernetes.io · 1 Oct 2026
Network segmentation: Its feature set includes user-defined networks, network segmentation, and cross-network connectivity.ovn-kubernetes.io · 1 Oct 2026
Multinetworking: Pods can attach to multiple networks using multi-homing and multi-network policies.ovn-kubernetes.io · 1 Oct 2026
KubeVirt integration: It provides persistent IPs and seamless networking for KubeVirt virtual-machine live migrations.ovn-kubernetes.io · 1 Oct 2026
BGP integration: Route Advertisements integrates BGP to import provider-network routes into OVN pod networks and export pod and egress-IP routes to BGP peers.ovn-kubernetes.io · 1 Oct 2026
BGP dependency: The Route Advertisements feature requires FRR-k8s.ovn-kubernetes.io · 1 Oct 2026
Node security: Node Identity uses per-node client certificates and a validating admission webhook to enforce granular ovnkube-node permissions.ovn-kubernetes.io · 1 Oct 2026
API surface: OVN-Kubernetes documents Custom Resource Definitions for EgressIP, EgressService, EgressQoS, EgressFirewall, UserDefinedNetwork, RouteAdvertisements, ClusterNetworkConnect, and VTEP.ovn-kubernetes.io · 1 Oct 2026
Deployment: It can be deployed on Kubernetes with Helm or kubeadm, run in Kind for development and testing, and installed with DPU acceleration.ovn-kubernetes.io · 1 Oct 2026
Container platforms: Ubuntu- and Fedora-based container images are available in GitHub's Registry.ovn-kubernetes.io · 1 Oct 2026
Support: The project holds open community meetings on alternate Mondays at 5:00 PM CET/CEST using CNCF Zoom.ovn-kubernetes.io · 1 Oct 2026
Audience: The project says its features are critical to enterprise and telco users and aims to provide a scalable, performant Kubernetes networking platform.ovn-kubernetes.io · 1 Oct 2026
Policy maturity: AdminNetworkPolicy and BaselineAdminNetworkPolicy are v1alpha1 APIs subject to change before stable v1.ovn-kubernetes.io · 1 Oct 2026