OVN-Kubernetes

Visit site Alternatives

Score6.4

Rank#10 of 27

Free planNo

Runs onAPI, Linux, Self-hosted, Windows

Summary

OVN-Kubernetes is a free, open-source Kubernetes networking solution and CNI-conformant plugin built on OVN and Open vSwitch. It provides pod IP address management, interfaces, GENEVE overlays, Kubernetes Services, EndpointSlices, network policies, and IPv4/IPv6 dual-stack networking. OVN ACLs enforce NetworkPolicy, AdminNetworkPolicy, and EgressFirewall rules; EgressIP, EgressService, and EgressQoS control outbound traffic. Pods can join multiple networks through multi-homing and multi-network policies. Additional capabilities include multicast, traffic shaping, BGP route advertisements, SmartNIC and DPU offload, and persistent IPs for KubeVirt live migrations. Hybrid Overlay supports mixed Windows and Linux clusters. The project documents deployment with Kind, Helm, DPU acceleration, and kubeadm, plus source builds. Requirements depend on OVN, nft, Multus, CNI, and Kubernetes versions; the master branch lists Kubernetes 1.33 or newer. Secondary User Defined Networks currently lack north-south traffic and core Kubernetes Services support. The project focuses on networking needs relevant to enterprise and telco users.

Who it is for

OVN-Kubernetes suits teams building Kubernetes clusters that need configurable pod networking, policies, or egress controls. Its capabilities also address enterprise and telco networking needs, including mixed Windows and Linux clusters.

What is good

Provides Kubernetes Services, EndpointSlices, and network policies.
Supports IPv4/IPv6 dual-stack networking.
Controls outbound traffic with EgressIP, EgressService, and EgressQoS.
Supports multiple networks and KubeVirt live migration.
Free and open source.

What to know first

Secondary User Defined Networks lack north-south traffic.
Secondary User Defined Networks lack core Kubernetes Services support.
Route Advertisements requires FRR-k8s.
AdminNetworkPolicy APIs are v1alpha1 and subject to change.

Verdict

OVN-Kubernetes covers core cluster networking as well as multi-networking, egress controls, and specialized capabilities such as BGP and hardware offload. Check its version requirements and the current limitations of secondary User Defined Networks when assessing fit.

Compared on microsegmentation software

Free plan: Yesovn-kubernetes.io
CNI plugin: Yesovn-kubernetes.io
Network policies: Yesovn-kubernetes.io
Egress control: Yesovn-kubernetes.io
Encryption in transit: Yesovn-kubernetes.io
Supported platforms: Kubernetes, Linux, Windows, bare metal, VMware vSphere, IBM Power, IBM Z, and Red Hat OpenStack Platformovn-kubernetes.io

Facts

Purpose: OVN-Kubernetes is an open-source Kubernetes networking solution and CNI-conformant plugin built on OVN and Open vSwitch.ovn-kubernetes.io · 30 Sept 2026
Core networking: It provides pod IPAM and veth interfaces, GENEVE overlay networking, Kubernetes Services and EndpointSlices, NetworkPolicies, AdminNetworkPolicies, and IPv4/IPv6 dual-stack support.ovn-kubernetes.io · 30 Sept 2026
Network security: NetworkPolicy, AdminNetworkPolicy, and EgressFirewall are enforced through OVN ACLs.ovn-kubernetes.io · 30 Sept 2026
Egress controls: EgressIP, EgressService, and EgressQoS control how traffic leaves the cluster.ovn-kubernetes.io · 30 Sept 2026
Multi-networking: Pods can attach to multiple networks using multi-homing and multi-network policies.ovn-kubernetes.io · 30 Sept 2026
Multicast: OVN-Kubernetes supports IGMP snooping and multicast relay through OVN.ovn-kubernetes.io · 30 Sept 2026
Quality of service: NetworkQoS provides DSCP marking and traffic shaping for pod network traffic.ovn-kubernetes.io · 30 Sept 2026
Virtual machine migration: It supports persistent IPs and seamless networking for KubeVirt VM live migrations.ovn-kubernetes.io · 30 Sept 2026
Windows support: Hybrid Overlay provides mixed Windows/Linux cluster networking using VXLAN tunnels.ovn-kubernetes.io · 30 Sept 2026
Hardware acceleration: OVN-Kubernetes can offload OVS datapath processing to SmartNICs and DPUs.ovn-kubernetes.io · 30 Sept 2026
BGP integration: BGP Integration supports route advertisements, no-overlay routing, and EVPN.ovn-kubernetes.io · 30 Sept 2026
Deployment: The project documents deployment with Kind, Helm, DPU acceleration, and kubeadm, and provides source-build instructions.ovn-kubernetes.io · 30 Sept 2026
Dependencies: The requirements matrix lists OVN, nft, Multus, CNI, and Kubernetes versions; the master branch lists Kubernetes 1.33 or newer.ovn-kubernetes.io · 30 Sept 2026
Security response: Dependabot scans the repository for security updates, and vulnerability reports use GitHub Private Vulnerability Reporting with an intended response within 48 hours.ovn-kubernetes.io · 30 Sept 2026
Support: Supported major releases receive backported fixes and support, with minor patch releases planned every four weeks.ovn-kubernetes.io · 30 Sept 2026
Secondary-network limit: Secondary User Defined Networks currently lack north-south traffic and core Kubernetes Services support.ovn-kubernetes.io · 30 Sept 2026
Target users: The project focuses on Kubernetes networking capabilities important to enterprise and telco users.ovn-kubernetes.io · 30 Sept 2026
What it does: OVN-Kubernetes is an open-source Kubernetes networking solution and CNI-conformant plugin built on OVN and Open vSwitch.ovn-kubernetes.io · 1 Oct 2026
Kubernetes networking: It provides pod networking, IPAM, veth interfaces, GENEVE overlays, Kubernetes Services, EndpointSlices, NetworkPolicies, AdminNetworkPolicies, and IPv4/IPv6 dual-stack support.ovn-kubernetes.io · 1 Oct 2026
Advanced networking: It supports hybrid Windows/Linux networking, IP multicast, OVS hardware offload, and secondary or local networks.ovn-kubernetes.io · 1 Oct 2026
Network segmentation: Its feature set includes user-defined networks, network segmentation, and cross-network connectivity.ovn-kubernetes.io · 1 Oct 2026
Multinetworking: Pods can attach to multiple networks using multi-homing and multi-network policies.ovn-kubernetes.io · 1 Oct 2026
KubeVirt integration: It provides persistent IPs and seamless networking for KubeVirt virtual-machine live migrations.ovn-kubernetes.io · 1 Oct 2026
BGP dependency: The Route Advertisements feature requires FRR-k8s.ovn-kubernetes.io · 1 Oct 2026
Node security: Node Identity uses per-node client certificates and a validating admission webhook to enforce granular ovnkube-node permissions.ovn-kubernetes.io · 1 Oct 2026
API surface: OVN-Kubernetes documents Custom Resource Definitions for EgressIP, EgressService, EgressQoS, EgressFirewall, UserDefinedNetwork, RouteAdvertisements, ClusterNetworkConnect, and VTEP.ovn-kubernetes.io · 1 Oct 2026
Container platforms: Ubuntu- and Fedora-based container images are available in GitHub's Registry.ovn-kubernetes.io · 1 Oct 2026
Audience: The project says its features are critical to enterprise and telco users and aims to provide a scalable, performant Kubernetes networking platform.ovn-kubernetes.io · 1 Oct 2026
Policy maturity: AdminNetworkPolicy and BaselineAdminNetworkPolicy are v1alpha1 APIs subject to change before stable v1.ovn-kubernetes.io · 1 Oct 2026