proposal

1. Kube-OVN - CNCF Sandbox Proposal

2. Why Another Network
• More complicate container network requirement
• VPC network, Multi-Cluster Network, VNF
• Static IP, Multiple IP, Connectivity with legacy infra
• Hard to diagnose and monitoring
• Blackbox for tradition network monitoring system
• Dynamic network make diagnose harder
• Performance is a issue
• Teleco and edge environment need high performance network
• Large scale cluster need more robost network management

3. Kube-OVN Backgrououd
• OVS/OVN as the battery included network dataptah
• Combined with cloudnative architecture design
• Years of practice and scenario from hundreds enterprises
+ + =

4. Features and Advantages
• Subnet Per Namespace Desgin
• Fine-grained network managment (VPC later)
• IP can floating across entire cluster
• Advance Network Fabric
• Geneve/Vlan/Routing network for different requirement
• Tunnel based multi-cluster network
• Multi nic address managment
• Observability
• Traffic mirroring for elaborated analysis
• Network quality probe in real time
• Handy tools to debug and diagnose network issues

5. Features and Advantages
• Easy to use
• One script installation
• Most features expose through one CRD and pod annotations
• Performance
• Embeded flows to implement kube-proxy
• OVS-DPDK for high performance application
• SmartNic offload to free cpu cycles

6. Architecture
• Based on standard K8s
API and framework
• Run on every K8s
distribution

7. Network Topology
• Subnet per node design
• Each NS can have
independent network
configuration
• CIDR
• ACL
• Gateway
• ...

8. Comparison
Kube-OVN ovn-kubernetes Calico Flannel
Datapath Geneve/Vlan/Routing Geneve Routing/Vxlan Vxlan/Routing
Topology Per Namespace Per Node Per Node Per Node
Static IP Yes No No No
Multi-Cluster Yes No Need
configuration
No
Observability Rich Metrics and
tools
Limited Comercial support Limited
Extension Cost Low (flow based
rule)
High (due to
topology)
High High

9. Future Work
• VPC with overlap network
• Windows support
• Introduce eBPF/VPP to improve performance

10. Community and Eco-system
• Apache 2.0
• 700 starts on Github
• 24 Contributors
• Alauda
• China Telecom
• Intel
• Huawei
• Release
• 25 release since May 2019
• Minor release every 3 month, Patch release every month

11. Adoptions

12. Why CNCF
• Kube-OVN can accelerate tradition indrustry transition
to Cloud Native (Telocom, Finance)
• Inspire more network innovation from other community(OVS，
OpenStack)
• Neutral place for adoption and collaboration
+