The Easy Button to Kubernetes Networking with Open vSwitch
summary
Open vSwitch provides a programmable OpenFlow dataplane that Antrea uses as a mostly decentralized CNI to implement Pod connectivity, NetworkPolicy enforcement and (eventually) ClusterIP load balancing without relying on iptables. It supports up to 255 tables for match‑action pipelines, tunneling (VXLAN/Geneve/ GRE), conntrack matches and offload via DPDK/NICs for high throughput. Tooling includes ovs‑ofctl flow dumps, local packet tracing, IPFIX export and a Prometheus metrics PR to show accept/deny/drop counts. Antrea runs OVS per node and tunnels L3 between nodes.
AI-written summary · about
chapters (10)
- 0:00Intro
- 2:05What is Open vSwitch (OVS)? A high-performance programmable virtual swich Connects to VMs (tap) and containers (veth) Linux Foundation project, very active Kemel module bult into Linux Kemal 3.3
- 5:00The OpenFlow packet processing pipeline
- 6:54OVS Hello World
- 8:41Why build a K8s Network Plugin with OVS? Portable: one datapath for Linux & Windows! Networking first high feature velocity
- 11:02Project Antrea
- 12:42Components
- 13:36Building troubleshooting tools with OVS Which policies are being implemented locally at each Node?
- 15:22Improving K8s upstream NetworkPolicy testing Several issues with upstream tosts: inconsistency, incompleteness, performance (30 minutes to run them), not run as part of KBCI
- 15:58Conclusion
related talks
45mHow to Build a Kubernetes Networking Solution from Scratch
36mOVN-Kubernetes The new default CNI of OpenShift
26mRun your Kubernetes cluster on OpenStack in Production
33mMulti-tenant K8s Networking with Kube-OVN
36mVPCs for Everyone: Multi-Tenancy and Advanced Networking with kube-OVN
01h 12mOpenStack brings Kubernetes to the Edge
40mKubernetes Networking Panel: Collaborate on the Spec, Compete on Execution
38mKubernetes Networking Infrastructure Offload