VPCs for Everyone: Multi-Tenancy and Advanced Networking with kube-OVN
summary
kube-OVN brings Open vSwitch + OVN into Kubernetes to provide VPC-like segmentation, subnet CRDs, and QoS for multi-tenant clusters, trading simplicity for advanced control. It supports elastic IPs bind external IPs to pods for stable source addresses, offers centralized gateways fix source IPs for egress (and ECMP across gateways), and exposes security groups like cloud SGs plus subnet ACLs for microsegmentation. Harvester integrates kube-OVN successfully to migrate VMs, but custom VPC gateways and elastic IPs require manual gateway pod and underlay setup and add operational complexity.
AI-written summary · about
chapters (19)
- 0:00Introduction and speaker background
- 1:14Kubernetes networking philosophy
- 5:52Challenges with legacy SDN in Kubernetes
- 6:59What is kube-OVN and its components
- 9:07Default and join subnets in kube-OVN
- 10:54Creating custom subnets in kube-OVN
- 13:24Distributed vs centralized gateways
- 15:55Network access control in kube-OVN
- 18:23Security groups for traffic management
- 20:30Elastic IP for external IP control
- 22:35Default VPC and its limitations
- 23:19Custom VPCs for multi-tenancy
- 25:04Configuring custom VPCs
- 26:31VPC NAT gateways and their setup
- 28:19SNAT vs Elastic IP for egress
- 29:05Micro-segmentation with security groups
- 31:34Recap and use cases for kube-OVN
- 32:16Harvester integration example
- 34:24Q&A on Windows and VPC peering
related talks
36mOVN-Kubernetes The new default CNI of OpenShift
49mVM-Friendly Networking on Kubernetes: Customizable Networks, Live Migration, and Best Practices
32mUser Defined Networks: Gateway to Secure Multi-Tenancy
38mVPCs in Kubernetes
31mCreating a Unified Network Plane across Kubernetes with Kube-OVN
26mRun your Kubernetes cluster on OpenStack in Production
19mThe Easy Button to Kubernetes Networking with Open vSwitch
01h 21mTutorial: Mind Your Pod's Business: Netwo...