Multi-tenant K8s Networking with Kube-OVN
summary
Kube-OVN plus Kubermatic Virtualization implements VLAN- and overlay-based VPCs on a layer‑2 ISIS fabric across three AZs, wiring provider bridges to bond interfaces, creating logical routers and subnets, and exposing cluster egress via a VPC egress gateway with BFD and dual‑homed public/private IPs. The build uses Multus for dual‑NIC Pods/VMs, per‑VPC DNS, IP pools (workaround for deterministic IP allocation), and optional underlay-to-overlay interconnection; it runs reliably after initial debugging and is replicated ~100×.
AI-written summary · about
chapters (12)
- 0:00Introduction and agenda
- 1:53Kubernetes CNI landscape overview
- 6:54Why Kube-OVN for multi-tenancy
- 9:50Setting up provider networks
- 13:03Using Multus for network attachment
- 14:11Creating VPCs and logical routers
- 16:45Defining subnets and IP pools
- 19:14Configuring VPC egress gateways
- 22:47VPC DNS and internal load balancing
- 24:17Deploying jump hosts for access
- 26:03Design rationale and firewall integration
- 26:46Q&A and closing remarks
related talks
38mVPCs in Kubernetes
49mVM-Friendly Networking on Kubernetes: Customizable Networks, Live Migration, and Best Practices
37mHigh Performance Networking with Kubevirt
31mCreating a Unified Network Plane across Kubernetes with Kube-OVN
26mRun your Kubernetes cluster on OpenStack in Production
32mUser Defined Networks: Gateway to Secure Multi-Tenancy
33mPlug & Play: Modular Networking for Kubernetes Virtualization
27mHigh Performance KubeVirt in Action