Skip to content

OVS/OVN Customization

Upstream OVN/OVS was originally designed with the goal of a general purpose SDN controller and data plane. Due to some specific usage of the Kubernetes network, Kube-OVN only focused on part of the features. In order to achieve better performance, stability and specific features, Kube-OVN has made some modifications to the upstream OVN/OVS. Users using their own OVN/OVS with Kube-OVN controllers need to be aware of the possible impact of the following changes:

Modification not merged into upstream:

  • 4228eab1d7 Fix memory leak by ofport_usage and trim memory periodically.
  • 54056ea65d Adjust the election timer to avoid large-scale cluster election jitter.
  • 6b4dcb311f Add fdb update logging.
  • f627b7721e fdb: fix mac learning in environments with hairpin enabled.
  • 3f3e3a436f ovsdb-tool: add optional server id parameter for "join-cluster" command.
  • a6cb8215a8 Fix QoS memory leak issue.
  • d4d76ddb2e ovsdb-tool: add fix-cluster command.
  • ffd2328d4a netdev: reduce cpu utilization for getting device addresses.
  • d088c5d8c2 ovs-router: skip getting source address for kube-ipvs0.
  • 1b31f07dc6 Increase the default probe interval for large cluster.
  • 54b7678229 Update ovs-sandbox for docker run.
  • 9ee66bd91b Modify source route priority.
  • e889d46924 Fix reaching resubmit limit in underlay.
  • f9e97031b5 ovn-controller: do not send GARP on localnet for Kube-OVN ports.
  • 78cade0187 Add support for conditionally skipping conntrack.
  • 85aa6263ad northd: skip conntrack when accessing node local dns ip.
  • 34dc3e3fcf lflow: do not send direct traffic between lports to conntrack.
  • a297b840c2 Direct output to lsp for dnat packets in logical switch ingress pipelines.
  • 03e35ed9c5 ovn-controller: make activation strategy work for single chassis.
  • e7d3ba53cd Skip node local dns ip conntrack when setting acls.
  • 9286e1fd57 Select local backend first.
  • e5916eb53a Fix lr-lb dnat with multiple distributed gateway ports.
  • e4e6ea9c5f Support dedicated BFD LRP.
  • e76880e792 northd: add nb option version_compatibility.
  • 477695a010 northd: skip arp/nd request for lrp addresses from localnet ports.

Merged into upstream modification:

  • 20626ea909 Multicast traffic bypasses LB and ACL processing stages to improve specific data path performance.
  • a2d9ff3ccd Deb build adds compile optimization options.

PDF Slack Support

Comments