Kube-OVN
kubeovn.github.io
What it is
Kube-OVN combines OVN and Open vSwitch with Kubernetes for cloud-native network orchestration. Its documented features include subnet management, static IP allocation, gateways, hybrid underlay and overlay networks, VPC features, QoS, ACLs, and traffic mirroring. VPC networks provide tenants with separate address spaces and networking resources. The project recommends it for Kubernetes environments needing KubeVirt support or multi-tenant networking; KubeVirt virtual machines can live-migrate without network interruption. Documented integrations include Cilium, MetalLB, OpenStack, Submariner, and OVN interconnect. With Cilium chaining, Kube-OVN network abstractions can be used with Cilium eBPF monitoring and security capabilities. The project runs on x86_64 and arm64, and its documentation provides one-click installation scripts. It is free under Apache-2.0, deployed on-premises, and uses a centralized control plane. The project advises against it for OpenShift, public-cloud managed Kubernetes, and cases requiring an all-in-one CNI, ingress, service mesh, and observability stack.
Spec sheet
- Purpose
- Kube-OVN combines OVN and Open vSwitch with Kubernetes to provide cloud-native network orchestration.Read 4 Oct 2026 · kubeovn.github.io
- Deployment
- The documentation provides one-click installation scripts for building production-ready container networks.Read 4 Oct 2026 · kubeovn.github.io
- Integrations
- Documented integrations include Cilium, MetalLB, OpenStack, Submariner, and OVN interconnect.Read 4 Oct 2026 · kubeovn.github.io
- Security
- The project accepts vulnerability reports by email and says a maintainer will acknowledge receipt within three days.Read 4 Oct 2026 · github.com
- Support
- The project links to Slack for community discussion and Alauda for support.Read 4 Oct 2026 · kubeovn.github.io
- License
- The repository identifies Apache-2.0 as the project license.Read 4 Oct 2026 · github.com
- Architecture support
- The project states that it runs on x86_64 and arm64 platforms.Read 4 Oct 2026 · github.com
- Best fit
- The project recommends Kube-OVN for Kubernetes environments that need KubeVirt support or multi-tenant networking.Read 4 Oct 2026 · kubeovn.github.io
- Cilium integration
- CNI chaining with Cilium combines Kube-OVN network abstractions with Cilium eBPF monitoring and security capabilities.Read 4 Oct 2026 · kubeovn.github.io
- KubeVirt
- Kube-OVN supports KubeVirt virtual machine live migration without network interruption.Read 4 Oct 2026 · github.com
- Limitations
- The project advises against Kube-OVN for OpenShift, public-cloud managed Kubernetes, and cases requiring an all-in-one CNI, ingress, service mesh, and observability stack.Read 4 Oct 2026 · kubeovn.github.io
- Multi-tenancy
- Kube-OVN supports VPC networks with separate address spaces and tenant networking resources.Read 4 Oct 2026 · github.com
- Network features
- Its documented capabilities include subnet management, static IP allocation, gateways, hybrid underlay and overlay networks, VPC features, QoS, ACLs, and traffic mirroring.Read 4 Oct 2026 · kubeovn.github.io
- Scale
- The project says it has been validated in production with clusters of thousands of nodes and hundreds of thousands of pods.Read 4 Oct 2026 · kubeovn.github.io
Plans and prices
Strong points and limits
Strong points
- Supports separate tenant address spaces through VPC networks.
- KubeVirt live migration can avoid network interruption.
- Runs on x86_64 and arm64.
- Free under the Apache-2.0 license.
Limits
- Project advises against use with OpenShift.
- Not recommended for public-cloud managed Kubernetes.
- Not intended as an all-in-one networking and observability stack.
Who it suits
Kube-OVN is aimed at Kubernetes environments that need KubeVirt support or multi-tenant networking. It may suit teams seeking on-premises networking with VPC features and policy segmentation.
Verdict
Kube-OVN offers a broad set of Kubernetes networking capabilities, including multi-tenancy and KubeVirt support. Its stated exclusions are important when the environment is a managed public-cloud cluster or needs an all-in-one stack.
Where Specifiction places it
- Software-Defined Networking Software#5 of 267.7
- Container Networking Software#11 of 287.7