OVN-Kubernetes

6.4easy start · #10 of 28
in Microsegmentation Software

Free to practise onnot on record
Free trialnot on record
Well documentedyes
Runs where you worknot on record

Runs on api, Linux, self-hosted, Windows.

OVN-Kubernetes is ranked #10 of 28 in microsegmentation software on The Geeks Club. It runs on API, Linux, Self-hosted, Windows.

Compared on microsegmentation software

Free plan: Yes
CNI plugin: Yes
Network policies: Yes
Egress control: Yes
Encryption in transit: Yes
Supported platforms: Kubernetes, Linux, Windows, bare metal, VMware vSphere, IBM Power, IBM Z, and Red Hat OpenStack Platform

Best OVN-Kubernetes alternatives

See all 12

ColorTokens Xshield 0 of 4 in the starter kit Lesson 17.2 Calico Open Source 0 of 4 in the starter kit Lesson 26.8 Istio 0 of 4 in the starter kit Lesson 36.8 VMware Workstation Pro 0 of 4 in the starter kit Lesson 46.8 Cilium 0 of 4 in the starter kit Lesson 56.7 Trellix Data Loss Prevention 0 of 4 in the starter kit Lesson 66.7

The record

Purpose: OVN-Kubernetes is an open-source Kubernetes networking solution and CNI-conformant plugin built on OVN and Open vSwitch.
Core networking: It provides pod IPAM and veth interfaces, GENEVE overlay networking, Kubernetes Services and EndpointSlices, NetworkPolicies, AdminNetworkPolicies, and IPv4/IPv6 dual-stack support.
Network security: NetworkPolicy, AdminNetworkPolicy, and EgressFirewall are enforced through OVN ACLs.
Egress controls: EgressIP, EgressService, and EgressQoS control how traffic leaves the cluster.
Multi-networking: Pods can attach to multiple networks using multi-homing and multi-network policies.
Multicast: OVN-Kubernetes supports IGMP snooping and multicast relay through OVN.
Quality of service: NetworkQoS provides DSCP marking and traffic shaping for pod network traffic.
Virtual machine migration: It supports persistent IPs and seamless networking for KubeVirt VM live migrations.
Windows support: Hybrid Overlay provides mixed Windows/Linux cluster networking using VXLAN tunnels.
Hardware acceleration: OVN-Kubernetes can offload OVS datapath processing to SmartNICs and DPUs.
BGP integration: BGP Integration supports route advertisements, no-overlay routing, and EVPN.
Deployment: The project documents deployment with Kind, Helm, DPU acceleration, and kubeadm, and provides source-build instructions.
Dependencies: The requirements matrix lists OVN, nft, Multus, CNI, and Kubernetes versions; the master branch lists Kubernetes 1.33 or newer.
Security response: Dependabot scans the repository for security updates, and vulnerability reports use GitHub Private Vulnerability Reporting with an intended response within 48 hours.

Where it ranks on The Geeks Club

Best Microsegmentation Software in 2026#10 of 28
Best Container Networking Software in 2026#11 of 26

Is OVN-Kubernetes yours?

Claim it for free: prove the domain, then correct facts, plans and screenshots. An editor reviews every change.

Claim it free Promote OVN-Kubernetes

Sources

ovn-kubernetes.io· checked 30 Sept 2026
ovn-kubernetes.io/master/features/· checked 30 Sept 2026
ovn-kubernetes.io/master/getting-started/· checked 30 Sept 2026
ovn-kubernetes.io/1.4/features/requirements/· checked 30 Sept 2026
ovn-kubernetes.io/master/governance/SECURITY/· checked 30 Sept 2026
ovn-kubernetes.io/master/developer-guide/release/· checked 30 Sept 2026
ovn-kubernetes.io/master/features/user-defined-networks/u· checked 30 Sept 2026
ovn-kubernetes.io/master/governance/GOVERNANCE/· checked 30 Sept 2026
ovn-kubernetes.io/master/· checked 1 Oct 2026
ovn-kubernetes.io/master/features/bgp-integration/route-a· checked 1 Oct 2026
ovn-kubernetes.io/master/features/infrastructure-security· checked 1 Oct 2026
ovn-kubernetes.io/master/api-reference/· checked 1 Oct 2026