0 views collected around this technical thread.
This article explains how to design, configure, and verify a VM traffic mirroring solution in a cloud VPC, covering capture sources, filtering methods, receiver setup, and practical OVS commands for security auditing, intrusion detection, and business analysis.
This article explains virtual network security mechanisms, including security groups, network ACLs, QoS policies, and quality‑assurance techniques, detailing implementations with Linux Bridge, iptables, OVS, conntrack, and DPDK, and discusses active probing and passive observation for network reliability.
This article explains how virtual networks operate in cloud computing by covering virtual NIC implementation, Virtio frontend/backend mechanisms, KVM signal interaction, and both layer‑2 and layer‑3 forwarding within a node using OVS and related technologies.
China Unicom’s cloud‑native platform underwent a five‑month, multi‑data‑center upgrade that replaced its legacy virtual network with an OVN‑OVS‑smart‑NIC SDN control plane, delivering advanced scalability, high performance, and zero‑fault online migration for over 1,300 business applications.
This article explains how the kube-ovn-cni component functions as a CNI plugin in Kubernetes, detailing its cmdAdd interface, interaction with the kube-ovn daemon, creation of veth pairs, OVS bridge integration, and network namespace configuration to manage pod network interfaces securely and efficiently.
This article presents a detailed technical overview of how ByteDance selected Kube-OVN for a mixed virtual‑machine and container networking scenario, describes the initial network design, identifies performance issues, and outlines three improvement plans including OVS‑DPDK, source‑route optimization, and a switch from Geneve to VXLAN.
This article details ByteDance's technical evaluation and implementation of Kube-OVN as a CNI solution for hybrid virtual‑machine and container workloads, covering selection criteria, the initial network design, identified issues, subsequent optimizations, and future roadmap considerations within a cloud‑native Kubernetes environment.
This article walks through building a Go exporter that collects OVS bond status via shell commands, formats the data as Prometheus metrics, and deploys the service in a Kubernetes DaemonSet, providing step‑by‑step code, Dockerfile, and testing instructions.
This guide details the investigation of Mellanox CX‑5 NIC support for OVS flow‑table acceleration, outlines required software versions, explains VT‑d and SR‑IOV technologies, provides step‑by‑step host configuration, OVS setup, test procedures, performance results in VXLAN and VLAN environments, and explores the feasibility and scripts for VF hot‑migration.
This article explains the principles and performance characteristics of virtio networking, OVS virtual switching, and the related vhost‑net, vhost‑user, and vdpa mechanisms, comparing their architectures, data‑plane offloads, and suitability for cloud‑native environments.
After a Fusion Computer CNA node crashed and the VRM platform became unavailable, the author recovered lost virtual machines by locating disk images, fixing OVS flow tables, using an scp command with strict host‑key checking disabled, and recreating VMs, sharing key lessons for reliable operations.
DiDi Cloud’s network team replaced CPU‑bound OVS‑DPDK processing with programmable NICs, achieving sub‑150 µs VM‑to‑VM latency and up to 9.5 Mpps on 64‑byte packets, while overcoming offload, driver, and flow‑table challenges through extensive patches and open‑source contributions.
This article reviews the shortcomings of Kubernetes networking, explains the capabilities of OVS and OVN as unified solutions, maps OVN abstractions to Kubernetes concepts, and outlines future directions for enhancing cloud‑native network functionality, followed by an extensive Q&A session.