Red Hat OpenShift Networking offers two options for the network plugin, OpenShift SDN and OVN-Kubernetes, for the network plugin. The following table summarizes the current feature support for both network plugins:
Table 1. Default CNI network plugin feature comparison
Feature |
OpenShift SDN |
OVN-Kubernetes |
Egress IPs |
Supported |
Supported |
Egress firewall [1] |
Supported |
Supported |
Egress router |
Supported |
Supported [2] |
Hybrid networking |
Not supported |
Supported |
IPsec encryption |
Not supported |
Supported |
IPv6 |
Not supported |
Supported [3] [4] |
Kubernetes network policy |
Supported |
Supported |
Kubernetes network policy logs |
Not supported |
Supported |
Multicast |
Supported |
Supported |
Hardware offloading |
Not supported |
Supported |
-
Egress firewall is also known as egress network policy in OpenShift SDN. This is not the same as network policy egress.
-
Egress router for OVN-Kubernetes supports only redirect mode.
-
IPv6 is supported only on bare metal, vSphere, IBM Power®, IBM Z®, and Red Hat OpenStack clusters.
-
IPv6 single stack is not supported on IBM Power®, IBM Z®, and Red Hat OpenStack clusters.