Uploaded image for project: 'OpenShift SDN'
  1. OpenShift SDN
  2. SDN-5270

[ovn-kubernetes, IPAM] advertise LSP addresses via DHCP[v6] and prefix via RAs (for IPv6)

XMLWordPrintable

    • Strategic Product Work
    • False
    • None
    • False
    • Hide
      - the pod interface is configured with a set of IP addresses, according to the network configuration
      - the guest running in the pod is configured with those IP addresses over DHCP (IPv4); DHCPv6 and RA (IPv6)
      Show
      - the pod interface is configured with a set of IP addresses, according to the network configuration - the guest running in the pod is configured with those IP addresses over DHCP (IPv4); DHCPv6 and RA (IPv6)
    • OCPSTRAT-1613 - Enhance User Defined Networks: Add support for Services(Full), EIP(Full), NetPol: GA
    • ---
    • 0
    • 0

      Having OVN-Kubernetes configure DHCP[v6] and RA flows on OVN to advertise the LSP addresses to virt-workloads would simplify quite a lot our binding (i.e. how we extend networking from the pod interface to the VM) requirements: 

      • currently, we run a custom DHCP server in the pod to advertise the IP on the pod interface
      • this is not supported in OpenShift (only is upstream)

      Offloading this functionality to OVN would reduce a lot the amount of code we would need to develop for the binding.

      Additional information

      We are already doing this for HyperShift VMs on the default network: we check for a KubeVirt annotation on the pod, and if found, we provision DHCP flows, and do not configure the IP address in the pod interface.

      We are requesting something similar (for UDN), but we would prefer if OVN-Kubernetes both:

      • configured the pod interface
      • configured the DHCP[v6] and RA flows

      Note: We should try to come up with a better criteria for identifying when to provision these flows: this might be useful for more thank KubeVirt VMs.

       

      Limitations:

      port security is blocking non mac derived ipv6 LLAs, one possible solution is to retrieve the generated LLAs at VMs with guest agent and include them at port security from ovn-k

            ellorent Felix Enrique Llorente Pastora
            mduarted@redhat.com Miguel Duarte de Mora Barroso
            Votes:
            0 Vote for this issue
            Watchers:
            3 Start watching this issue

              Created:
              Updated:
              Resolved: