-
Feature
-
Resolution: Duplicate
-
Critical
-
None
-
None
The goal of this effort is to leverage OVN Kubernetes SDN to satisfy networking requirements of both traditional and modern virtualization. This Feature describes the envisioned outcome and tracks its implementation.
Current state
In its current state, OpenShift Virtualization provides a flexible toolset allowing customers to connect VMs to the physical network. It also has limited secondary overlay network capabilities and Pod network support.
It suffers from several gaps: Topology of the default pod network is not suitable for typical VM workload - due to that we are missing out on many of the advanced capabilities of OpenShift networking, and we also don't have a good solution for public cloud. Another problem is that while we provide plenty of tools to build a network solution, we are not very good in guiding cluster administrators configuring their network, making them rely on their account team.
Desired outcome
Provide:
- Networking solution for public cloud
- Advanced SDN networking functionality such as IPAM, routed ingress, DNS and cloud-native integration
- Ability to host traditional VM workload imported from other virtualization platforms
... while maintaining networking expectations of a typical VM workload:
- Sticky IPs allowing seamless live migration
- External IP reflected inside the guest, i.e. no NAT for east-west traffic
Additionally, make our networking configuration more accessible to newcomers by providing a finite list of user stories mapped to recommended solutions.
User stories
You can find more info about this effort in https://docs.google.com/document/d/1jNr0E0YMIHsHu-aJ4uB2YjNY00L9TpzZJNWf3LxRsKY/edit
- is blocked by
-
CNV-29254 UI for OVN Secondary Network
-
- Closed
-
- is depended on by
-
CNV-23415 expose an API for secondary OVN network interface assignment to HS/KV vms
-
- Closed
-
- relates to
-
CNV-29958 Release note: NEW - UI OVN secondary network
-
- Closed
-
- split to
-
VIRTSTRAT-234 Secondary user-defined networks with localnet topology
-
- New
-
-
VIRTSTRAT-384 Secondary user-defined networks with L2 overlay topology
-
- New
-
-
VIRTSTRAT-299 Support label selectors in MultiNetworkPolicies
-
- New
-
-
VIRTSTRAT-427 Seamless live migration
-
- New
-
-
VIRTSTRAT-444 MAC spoof filtering control with the localnet topology
-
- New
-
-
VIRTSTRAT-127 Specific IP can be requested for VM connected to a user-defined network
-
- New
-
-
VIRTSTRAT-196 QinQ support with localnet topology
-
- New
-
-
VIRTSTRAT-210 Port mirroring
-
- New
-
-
VIRTSTRAT-288 Promiscuous mode control with the localnet topology
-
- New
-
-
VIRTSTRAT-343 Port security with the localnet topology
-
- New
-
-
VIRTSTRAT-376 Network QoS configuration
-
- New
-
-
VIRTSTRAT-76 Integration between VMs and primary user-defined networks
-
- Closed
-