Tech riderRev. 20 Sept 2026

OVN-Kubernetes

Ch 086.7of 28 Microsegmentation Software

1Runs onAPI, Linux, self-hosted, Windows
2CostsNot stated by the maker
3CNI pluginYes
4Network policiesYes
5Egress controlYes
6Encryption in transitYes
7Supported platformsKubernetes, Linux, Windows, bare metal, VMware vSphere, IBM Power, IBM Z, and Red Hat OpenStack Platform

6 lines stated Written from the maker's own pages: ovn-kubernetes.io

Visit site Alternatives

Overview

OVN-Kubernetes is ranked #8 of 28 in microsegmentation software on Specifiction. It runs on API, Linux, Self-hosted, Windows.

Compared on microsegmentation software

Free plan: Yesovn-kubernetes.io
CNI plugin: Yesovn-kubernetes.io
Network policies: Yesovn-kubernetes.io
Egress control: Yesovn-kubernetes.io
Encryption in transit: Yesovn-kubernetes.io
Supported platforms: Kubernetes, Linux, Windows, bare metal, VMware vSphere, IBM Power, IBM Z, and Red Hat OpenStack Platformovn-kubernetes.io

Facts

Purpose: OVN-Kubernetes is an open-source Kubernetes networking solution and CNI-conformant plugin built on OVN and Open vSwitch.ovn-kubernetes.io · 30 Sept 2026
Core networking: It provides pod IPAM and veth interfaces, GENEVE overlay networking, Kubernetes Services and EndpointSlices, NetworkPolicies, AdminNetworkPolicies, and IPv4/IPv6 dual-stack support.ovn-kubernetes.io · 30 Sept 2026
Network security: NetworkPolicy, AdminNetworkPolicy, and EgressFirewall are enforced through OVN ACLs.ovn-kubernetes.io · 30 Sept 2026
Egress controls: EgressIP, EgressService, and EgressQoS control how traffic leaves the cluster.ovn-kubernetes.io · 30 Sept 2026
Multi-networking: Pods can attach to multiple networks using multi-homing and multi-network policies.ovn-kubernetes.io · 30 Sept 2026
Multicast: OVN-Kubernetes supports IGMP snooping and multicast relay through OVN.ovn-kubernetes.io · 30 Sept 2026
Quality of service: NetworkQoS provides DSCP marking and traffic shaping for pod network traffic.ovn-kubernetes.io · 30 Sept 2026
Virtual machine migration: It supports persistent IPs and seamless networking for KubeVirt VM live migrations.ovn-kubernetes.io · 30 Sept 2026
Windows support: Hybrid Overlay provides mixed Windows/Linux cluster networking using VXLAN tunnels.ovn-kubernetes.io · 30 Sept 2026
Hardware acceleration: OVN-Kubernetes can offload OVS datapath processing to SmartNICs and DPUs.ovn-kubernetes.io · 30 Sept 2026
BGP integration: BGP Integration supports route advertisements, no-overlay routing, and EVPN.ovn-kubernetes.io · 30 Sept 2026
Deployment: The project documents deployment with Kind, Helm, DPU acceleration, and kubeadm, and provides source-build instructions.ovn-kubernetes.io · 30 Sept 2026
Dependencies: The requirements matrix lists OVN, nft, Multus, CNI, and Kubernetes versions; the master branch lists Kubernetes 1.33 or newer.ovn-kubernetes.io · 30 Sept 2026
Security response: Dependabot scans the repository for security updates, and vulnerability reports use GitHub Private Vulnerability Reporting with an intended response within 48 hours.ovn-kubernetes.io · 30 Sept 2026
Support: Supported major releases receive backported fixes and support, with minor patch releases planned every four weeks.ovn-kubernetes.io · 30 Sept 2026
Secondary-network limit: Secondary User Defined Networks currently lack north-south traffic and core Kubernetes Services support.ovn-kubernetes.io · 30 Sept 2026
Target users: The project focuses on Kubernetes networking capabilities important to enterprise and telco users.ovn-kubernetes.io · 30 Sept 2026
What it does: OVN-Kubernetes is an open-source Kubernetes networking solution and CNI-conformant plugin built on OVN and Open vSwitch.ovn-kubernetes.io · 1 Oct 2026
Kubernetes networking: It provides pod networking, IPAM, veth interfaces, GENEVE overlays, Kubernetes Services, EndpointSlices, NetworkPolicies, AdminNetworkPolicies, and IPv4/IPv6 dual-stack support.ovn-kubernetes.io · 1 Oct 2026
Advanced networking: It supports hybrid Windows/Linux networking, IP multicast, OVS hardware offload, and secondary or local networks.ovn-kubernetes.io · 1 Oct 2026
Network segmentation: Its feature set includes user-defined networks, network segmentation, and cross-network connectivity.ovn-kubernetes.io · 1 Oct 2026
Multinetworking: Pods can attach to multiple networks using multi-homing and multi-network policies.ovn-kubernetes.io · 1 Oct 2026
KubeVirt integration: It provides persistent IPs and seamless networking for KubeVirt virtual-machine live migrations.ovn-kubernetes.io · 1 Oct 2026
BGP dependency: The Route Advertisements feature requires FRR-k8s.ovn-kubernetes.io · 1 Oct 2026
Node security: Node Identity uses per-node client certificates and a validating admission webhook to enforce granular ovnkube-node permissions.ovn-kubernetes.io · 1 Oct 2026
API surface: OVN-Kubernetes documents Custom Resource Definitions for EgressIP, EgressService, EgressQoS, EgressFirewall, UserDefinedNetwork, RouteAdvertisements, ClusterNetworkConnect, and VTEP.ovn-kubernetes.io · 1 Oct 2026
Container platforms: Ubuntu- and Fedora-based container images are available in GitHub's Registry.ovn-kubernetes.io · 1 Oct 2026
Audience: The project says its features are critical to enterprise and telco users and aims to provide a scalable, performant Kubernetes networking platform.ovn-kubernetes.io · 1 Oct 2026
Policy maturity: AdminNetworkPolicy and BaselineAdminNetworkPolicy are v1alpha1 APIs subject to change before stable v1.ovn-kubernetes.io · 1 Oct 2026