Kube-OVN v1.16.0 introduces major enhancements such as BGP/EVPN‑enabled VPC egress, a tiered SecurityGroup with expanded priority range, per‑NIC DHCP control, multi‑network NetworkPolicy annotations, full‑NIC hot migration for KubeVirt, static IP/MAC per interface, and numerous reliability, performance, and Helm chart upgrades.
This article explains the challenges of live‑migrating KubeVirt virtual machines, how Kube‑OVN addresses network‑bridge limitations and IP changes, provides the required VM annotation, step‑by‑step migration commands, and details the multi‑stage migration process that keeps network interruption under 0.5 seconds with no TCP break.
This article explains how Kube-OVN leverages OVN configuration parameters to enable non‑intrusive live migration for KubeVirt virtual machines, describes the underlying principle, provides usage instructions, and presents test results showing a drastic reduction in packet loss and migration downtime.
This guide explains how to use KubeVirt 1.4's managedTap feature to configure IPv4/IPv6 dual‑stack networking in bridge mode without modifying source code, covering subnet preparation, plugin registration, and virtual‑machine definition with example YAML and kubectl commands.
This article reviews a technical sharing session that explains the characteristics, advantages and drawbacks of Overlay and Underlay networking, discusses hybrid network challenges and Multus modes, and presents Kube‑OVN’s solution for seamless integration of both network types in Kubernetes environments.
This guide walks through deploying a lightweight K3s cluster unified with virtual machines using Kube‑OVN for multi‑tenant VPC isolation, configuring shared internet via VPN, installing cloud‑hypervisor, setting up Multus for multi‑NIC containers, and provisioning a management web‑app with Tomcat and OpenVPN, providing a complete cloud‑native lab environment.
This article explains how the integration of sriov-network-operator and Kube-OVN automates the complex configuration and persistence of RDMA and SR‑IOV in Kubernetes, enabling high‑availability, multi‑tenant networking for AI distributed training workloads.
This guide explains how to enable cross‑cluster pod communication in Kubernetes using Kube‑OVN's OVN‑IC feature, covering prerequisites, single‑node and high‑availability database deployment, automatic and manual route configuration, and cleanup procedures with concrete Docker/Containerd commands and ConfigMap examples.
This guide explains how to install the kube-ovn-speaker component, configure BGP parameters, modify subnet settings, add or remove annotations, and use advanced BGP options to publish Pod and Subnet routes externally in a Kubernetes cluster using Kube‑OVN.
This guide explains how to enable Kube-OVN's routed subnet mode, detailing prerequisites, disabling NAT, adding return routes, and adjusting gateway settings so that pod IPs can communicate directly with external networks without underlay support.
This guide explains how to route outbound container traffic through a centralized external gateway using Kube-OVN by defining a Subnet resource with specific routing and policy settings, and clarifies each required field for proper configuration.
This guide explains how to configure VPC peering in Kube-OVN, covering prerequisites, YAML manifests for VPCs, subnets, peerings and static routes, pod deployment on each subnet, and verification of cross‑VPC connectivity using ping commands.
This guide explains how to combine Kube-OVN with OVS‑DPDK to provide DPDK‑type network interfaces for KubeVirt virtual machines, covering prerequisites, NIC driver configuration, node labeling, OVS‑DPDK configuration, Kube‑OVN installation with DPDK support, and VM deployment steps.
This guide explains how to use Kube-OVN to connect OpenStack virtual machines and Kubernetes containers by configuring cluster interconnect or shared OVN modes, covering prerequisites, OVN‑IC database deployment, Kubernetes and OpenStack side settings, and example manifests for creating Pods in OpenStack subnets.
The article introduces the F5 Cloud Egress Services (CES) solution, detailing its architecture, component composition, policy scopes, tenant isolation, and the extensive capabilities it provides for dynamic egress traffic control, security, and observability within Kubernetes clusters using Kube‑OVN.
This guide explains how to enhance Kube‑OVN with Cilium’s eBPF‑based networking and security features by using CNI chaining, covering prerequisites, configuration changes, Helm deployment steps, verification commands, and useful reference links for a complete cloud‑native networking solution.
This article explains how the Intel istio‑tcpip‑bypass plugin leverages eBPF to bypass the host TCP/IP stack for intra‑node pod communication, provides environment setup, step‑by‑step deployment commands, and shows benchmark results that demonstrate 40‑80% latency reduction and throughput improvement.
This guide explains how to download, compile, and install the Kube-OVN FastPath kernel module on CentOS, showing steps for both 3.x and 4.x kernels, how to verify the installation with dmesg, and notes on module loading and removal.
In this technical session, experts from Lingque Cloud and Yunshan Network discuss emerging cloud‑native networking trends through Kube‑OVN, demonstrate DeepFlow's full‑stack observability in Kube‑OVN environments, and answer a wide range of practical Q&A covering IP stability, underlay challenges, CNI support, and performance tuning.
This guide presents Kube-OVN performance benchmarks, explains the testing environment and qperf commands, and provides step‑by‑step data‑plane optimization techniques—including CPU mode, NIC queue tuning, tuned profiles, interrupt binding, OVN LB disabling, FastPath module, OVS kernel compilation, and STT tunnel activation—to help administrators achieve lower latency and higher throughput in Kubernetes clusters.
This article explains how Kube-OVN extends its IP address management to other CNI plugins, supports multi‑NIC scenarios, and provides step‑by‑step instructions with YAML examples for installing Kube-OVN, configuring NetworkAttachmentDefinitions, creating Subnets, and deploying Pods with static or dynamic IPs.
This article analyses the rapid evolution of cloud‑native networking, identifies key challenges across traditional, data‑center, edge, multi‑cluster, financial, and telecom scenarios, and presents open‑source and commercial solutions such as Kube‑OVN, Underlay networks, flexible IPAM, and hardware‑software acceleration.
This article provides a detailed walkthrough of Kube-OVN's controller architecture, covering its deployment as a Kubernetes deployment, the main initialization flow, worker mechanisms for handling VPC, subnet, and pod resources, and the creation of the default VPC with associated OVN logical router.
This article explains how the kube-ovn-cni component functions as a CNI plugin in Kubernetes, detailing its cmdAdd interface, interaction with the kube-ovn daemon, creation of veth pairs, OVS bridge integration, and network namespace configuration to manage pod network interfaces securely and efficiently.
This article explains how to use Vagrant and VirtualBox to create a reproducible development and testing environment for the Kube-OVN Kubernetes CNI project, including Vagrantfile configuration, provisioning scripts for Docker, Kubernetes tools, Go, and steps to compile, test, and run Kube-OVN with Kind clusters.
This article explains how the Kube-OVN controller watches pod events, queues them, and uses functions like handleAddPod, getPodKubeovnNets, and getPodAttachmentNet to allocate and release pod IP/MAC addresses while creating OVN ports and routes, enhancing Kubernetes networking security and operability.
This article explains how Kube-OVN implements security groups and port security for Kubernetes pods by leveraging OVN port groups, address sets, and ACLs, detailing the CRD design, annotation usage, and the workflow that synchronizes pod network interfaces with security policies.
This article explains how Kube-OVN leverages OVN/OVS to provide pod port security and OpenStack‑style security groups through custom CRDs, annotations, address sets, and ACL rules, detailing the underlying mechanisms and workflow for managing network security in Kubernetes.
This article explains the challenges of container networking in banks, especially under a two‑site‑three‑center architecture, and provides practical guidance on using underlay and overlay approaches, Kube‑OVN solutions, and best‑practice recommendations to achieve high‑availability, high‑concurrency, and high‑performance cloud‑native networks.
This article explains the kube-ovn-cni component of the Kube-OVN project, detailing the CNI workflow, the cmdAdd interface, daemon handling, and the configureNic function that together create and configure pod network interfaces within a Kubernetes cluster.
The Kube-OVN v1.10.0 release introduces Windows node support, user‑defined subnet ACLs, enhanced Kubevirt networking, Submariner multi‑cluster integration, and a series of control‑plane performance optimizations that together improve scalability, flexibility, and stability for cloud‑native Kubernetes deployments.
This article reviews the evolution of cloud‑native networking in China, analyzes platformization and underlay trends, explains the technical challenges of traditional CNI solutions, and details Kube‑OVN's architecture, features, and roadmap as a comprehensive enterprise‑grade Kubernetes networking platform.
This article explains how the Kube-OVN controller manages pod IP and MAC allocation, processes pod add and delete events through a list‑watch mechanism, and details the worker workflow and key functions involved in networking for Kubernetes clusters.
This article provides an in‑depth technical overview of the Kube‑OVN controller, covering its deployment as a Kubernetes deployment, main initialization flow, worker processes for VPC handling, default VPC creation, and related code snippets, illustrating how OpenStack‑style networking is integrated into Kubernetes.
This article presents a detailed technical overview of how ByteDance selected Kube-OVN for a mixed virtual‑machine and container networking scenario, describes the initial network design, identifies performance issues, and outlines three improvement plans including OVS‑DPDK, source‑route optimization, and a switch from Geneve to VXLAN.
This article outlines a dual‑stack overlay/underlay cloud‑native network design using Kube‑OVN, addressing banks' high‑availability, security, and performance challenges while providing a practical migration path from traditional IaaS to container‑based infrastructure.
This article explains how Kube-OVN extends KubeVirt networking by providing fixed and stable VM IP addresses, multi‑tenant VPC/Subnet isolation, live‑migration IP preservation, and high‑performance SR‑IOV/OVS‑DPDK acceleration, along with practical configuration examples and reference links.
This article presents a detailed, bank‑focused cloud‑native networking solution that leverages Kube-OVN's overlay/underlay dual‑stack architecture, OVS‑based performance, and security features to meet the high‑availability, high‑throughput, and regulatory demands of large financial institutions.
This article details how the Kube-OVN community extended the CNI for edge cloud scenarios by adding security‑group based access control, high‑availability virtual IP support, live‑migration‑friendly networking, and smart‑NIC hardware offload, including implementation steps, CRD designs, and relevant pull‑request references.
This article details ByteDance's technical evaluation and implementation of Kube-OVN as a CNI solution for hybrid virtual‑machine and container workloads, covering selection criteria, the initial network design, identified issues, subsequent optimizations, and future roadmap considerations within a cloud‑native Kubernetes environment.
The article explains how Kube‑OVN can create a flexible, efficient, and secure cross‑Kubernetes‑cluster network plane to meet user demands such as high availability, multi‑cloud separation, disaster‑recovery, and hybrid‑cloud compliance, and demonstrates its use with TiDB, MySQL, and WordPress workloads.
This article examines the challenges and solutions for building high‑availability, high‑concurrency, and high‑performance cloud‑native container networks in banks, covering two‑site three‑center architectures, underlay/overlay strategies, Kube‑OVN implementation, and practical recommendations for secure, scalable networking.
This article reviews Du Dongming’s presentation on Kube‑OVN, tracing the evolution of cloud‑native networking from early container experiments to modern multi‑tenant VPC, subnet management, overlay/underlay modes, and the roadmap that positions Kube‑OVN as a comprehensive SDN solution for enterprise Kubernetes environments.
The article provides a comprehensive overview of Kube-OVN, a powerful Kubernetes CNI plugin that leverages OVS to deliver enterprise‑grade overlay and underlay networking, multi‑NIC management, security policies, performance tuning, and monitoring, while also outlining its architecture, usage steps, and community resources.
The second‑edition Kube‑OVN survey collected 267 valid responses from diverse industries, revealing increased container deployment on virtual machines, a rise in public‑cloud usage, a jump in Kube‑OVN adoption to 40%, growing demand for IPv6/dual‑stack and multi‑tenant networking, and user expectations centered on KubeVirt, VPC enhancements, and eBPF integration.
Kube-OVN 1.8 introduces a re‑engineered Underlay with a new ProviderNetwork CRD supporting flexible NIC and VLAN mappings, achieves roughly 45% latency reduction through flow‑table and kernel optimizations, adds VPC security groups and service support, and bundles several other networking enhancements.
This article explains how to integrate OpenStack and Kubernetes by using Kube‑OVN to provide routing and network isolation between OpenStack VMs and Kubernetes Pods, comparing two implementation approaches and outlining their requirements, benefits, and drawbacks.
The article outlines Kube‑OVN’s evolution from its 2019 debut to becoming the CNCF‑hosted open‑source CNI with extensive enterprise adoption, details recent feature releases such as multi‑VLAN, BGP, Smart‑NIC, DPDK, dual‑stack and multi‑cluster support, and presents a 2021‑2022 roadmap focusing on performance, security, monitoring and broader cloud‑native use cases.
The 2021 Container Network Technology Conference celebrated Kube-OVN’s anniversary, showcasing its mature multi‑tenant, cross‑cluster, and hardware‑accelerated networking features, outlining a roadmap focused on performance, eBPF‑based security and monitoring, and highlighting real‑world deployments with partners such as Intel, F5, banks and telecom operators.
Kube‑OVN, the enterprise‑grade Kubernetes container networking solution developed by Lingque Cloud, has been accepted into the CNCF Sandbox, marking the first CNCF‑hosted open‑source CNI project and highlighting its SDN‑based features, security enhancements, and growing adoption by major enterprises.
The article summarizes the technical innovations of the open‑source Kube‑OVN project—including a namespace‑based subnet model, comprehensive fixed‑IP support, flexible gateway options, performance optimizations for control and data planes, extensive monitoring tools, and real‑world user cases—highlighting its relevance for modern cloud‑native networking.
The article summarizes Liu Mengxin’s June 11 talk on cloud‑native networking, covering its definition, basic requirements, open‑source CNI implementations, control‑ and data‑plane designs, and the functional, operational, security, and performance challenges faced when deploying container networks at scale.
Rakuten Mobile leveraged Kubernetes, OpenNESS, and the open‑source Kube‑OVN data‑plane to replace virtual machines with containers in its NFV and RAN infrastructure, creating the first cloud‑native 5G network and outlining future enhancements for telecom‑grade performance and scalability.
The article presents the launch of Kube-OVN 1.0 GA, shares findings from a 158‑respondent survey on container network usage, outlines current network solutions and future feature demands, and provides a detailed Q&A from the online webinar for practitioners interested in Kubernetes cloud‑native networking.
Kube-OVN 0.9.0 introduces enhanced monitoring, a five‑fold controller throughput boost, numerous stability fixes, reduced privileged container usage, and additional networking capabilities, while providing detailed update information and contact resources for the open‑source Kubernetes network project.
The presentation at the 2019 Shanghai Open Source Infrastructure Summit introduced Kube-OVN, an open‑source CNI that ports mature OpenStack networking concepts to Kubernetes, outlining its design principles, architecture, current release status, and future roadmap.
Kube-OVN v0.8.0 adds a high‑availability active‑passive gateway, enhanced monitoring via a kubectl plugin and Prometheus‑exposed pinger, automatic port‑security, hostport support, and upgrades to OVN, OVS, and Go, while continuing to bring OpenStack‑grade networking features to Kubernetes.
Kube‑OVN 0.7.0 introduces IPAM optimizations for StatefulSet, new Subnet CRD status fields, default traffic mirroring, IPv6 control‑plane support, updated documentation, and a detailed TCP performance test showing only a 4% throughput loss for packets larger than 2 KB compared to host networking.
The latest Kube-OVN release introduces traffic mirroring, IPv6 beta support, an IP‑conflict‑checking webhook, CRD‑based subnet management, and Go module dependency handling, while also summarizing the project’s core networking capabilities and its role in extending Kubernetes with OVN features.
The talk from KubeCon 2019 details how a major commercial bank adopted a container‑based PaaS platform, covering digital transformation drivers, agile and DevOps practices, a multi‑cluster Kubernetes architecture, the custom Kube‑OVN networking solution, and the resulting operational and business benefits.
This article explains the practical motivations behind creating Kube-OVN, outlines its design principles, describes its overall architecture and network model, and details key features such as subnet management, IP allocation, QoS, gateway handling, traffic mirroring, and future development plans.
Kube-OVN 0.5 introduces full Kubernetes NetworkPolicy support via Openflow, customizable container interfaces and MTU, automatic system parameter tuning, auto‑computed default gateways, and additional CLI options, while its open‑source design brings comprehensive OVN‑based networking features to Kubernetes across diverse platforms.
The Beijing cloud‑native technology salon on April 20 showcased expert talks on Kube‑OVN networking, Oracle Linux Ksplice hot‑patching, 360’s Wayne multi‑cluster platform, YRCloudFile container storage, and CI/CD strategies, highlighting practical advances and open‑source projects for modern cloud environments.
