Kube-OVN OVN is an open source web-based system of Kubernetes.
This update mainly consist of a few elements:
1. Support Kubernetes NetworkPolicy:
Firewall support subnets from Kube-OVN 0.3.0 version of the 0.5.0 version began to support the full Kubernetes NetworkPolicy, users can achieve a more fine-grained policy control network, better network access at the application level be safely control.
Kube-OVN Iptables not used in the implementation but the use of NetworkPolicy Openflow flow table rules for each port individually access rule set. PortGroup and using data structures such as flow table AddressSet OVN in simplified, greatly reducing the number of rules to reduce the impact on performance due to network policy.
2. The communication card and custom containers MTU
For host with multiple network interfaces, the previous version of Kube-OVN using the default route corresponding to the card as the card host communication across the vessel. 0.5.0 From the beginning, the user may select the card --iface container used for communication between the command line parameters, user-friendly system to build a more complex network according to their network environment.
Before the container version MTU default NIC 1400, in the new version will automatically calculate the appropriate container MTU card, the user can command line parameters according to their own situation --mtu container specified NIC card MTU MTU according to user selection, to achieve better performance and throughput control.
3. The default system parameter settings
Starting with this release, Kube-OVN will automatically check the environment and set the system parameters, such as: ip_forward, bridge-nf-call-iptables, rp_filter, to reduce network problems due to differences in parameters of the system brings, avoid some of the known problems appear.
4. The default gateway automatically calculated
For default_logical_switch and node_switch automatically calculates the default gateway, reducing the burden on the user to manually configure.
The exposing more command line parameters
The option parameters are exposed in the open, user-defined settings, please refer https://github.com/alauda/kube-ovn/blob/master/docs/install.md#more-configuration