Elisity Microsegmentation vs OVN-Kubernetes
Elisity Microsegmentation
elisity.comOVN-Kubernetes
ovn-kubernetes.ioSide by side
| Figure | Elisity Microsegmentation | OVN-Kubernetes |
|---|---|---|
| Price from | — | — |
| Free plan | — | — |
| Free trial | — | — |
| Open source | — | — |
| Web | Yes | — |
| Windows | — | Yes |
| Linux | — | Yes |
| API | Yes | Yes |
| Self-hosted | Yes | Yes |
| Plans published | 1 | 0 |
| Spec score · Microsegmentation Software | 7.8 (#8) | 7.4 (#13) |
| Deployment | Elisity says its Virtual Edge software runs at the access layer or in virtual environments and synchronizes policies to existing infrastructure without additional hardware. | It can be deployed on Kubernetes with Helm or kubeadm, run in Kind for development and testing, and installed with DPU acceleration. |
| Founded | 2018 | 2014 |
| Purpose | Elisity describes its product as identity-based microsegmentation that limits lateral movement across users, workloads, and devices. | OVN-Kubernetes is an open-source Kubernetes networking solution and CNI-conformant plugin built on OVN and Open vSwitch. |
| Support | The customer terms include software support and maintenance during the subscription term at no additional fees, as part of a Software Order. | The project holds open community meetings on alternate Mondays at 5:00 PM CET/CEST using CNCF Zoom. |
Plans
Elisity Microsegmentation
- Elisity MicrosegmentationPriced on request
In their own words
Elisity Microsegmentation
Elisity Microsegmentation applies identity-based least-privilege policies to users, workloads, and devices across IT, IoT, OT, and IoMT networks. Passive telemetry and integrations discover devices and correlate identity, behavior, traffic, and risk in IdentityGraph. Teams can simulate policies against real traffic before activation, while Elisity Intelligence recommends actions for customer approval. A cloud-hosted Cloud Control Center manages Virtual Edge deployments, and Virtual Edge Nodes enforce policies through existing network infrastructure. Elisity describes Virtual Edge as lightweight container software for access-layer switches or virtual environments, without additional hardware. The platform is agentless, supports mixed workloads and hybrid cloud environments, and is available through API, self-hosted, and web platforms. Integrations include Armis, Claroty, CrowdStrike, Microsoft Defender, ServiceNow, Active Directory, Splunk, Cisco, Juniper, Aruba, and Arista. It targets healthcare, manufacturing and industrial organizations, and commercial enterprises. Pricing and subscription terms are set in a Software Order.
OVN-Kubernetes
OVN-Kubernetes is a free, open-source networking solution and CNI-conformant plugin for Kubernetes, built on OVN and Open vSwitch. It handles pod IP allocation and interfaces, GENEVE overlays, Kubernetes Services, EndpointSlices, network policies, and IPv4/IPv6 dual-stack clusters. OVN ACLs enforce NetworkPolicy, AdminNetworkPolicy, and EgressFirewall rules; EgressIP, EgressService, and EgressQoS govern outbound traffic. Pods can join multiple networks, and the project also supports multicast, traffic shaping, BGP route advertisements, and SmartNIC or DPU offload. For KubeVirt, it provides persistent IPs during live migration; Hybrid Overlay enables mixed Windows and Linux networking. Deployment documentation covers Kind, Helm, DPU acceleration, kubeadm, and source builds. Requirements depend on OVN, nft, Multus, CNI, and Kubernetes versions; the master branch lists Kubernetes 1.33 or newer. Secondary User Defined Networks currently lack north-south traffic and core Kubernetes Services support. AdminNetworkPolicy APIs remain alpha and may change before stable v1.