-
Story
-
Resolution: Unresolved
-
Undefined
-
None
-
None
Allow users to connect to connect to the secondary OVN Kubernetes network from an arbitrary MAC.
We would need to introduce 3 different knobs (try to make them fit in the API ...):
- opt-out of port security for their networks
- allow traffic to unknown addresses
- force_fdb_lookup which disables ARPs from being always sent to all LSPs connected to the OVS bridge
The first two knobs are required for L2 switched nested virtualization.
Opting out of port security achieves routed nested virtualization.
The last knob is a performance improvement, which will ensure the data-plane is less congested.