Software Defined Network

Description

The sdn module is designed to consolidate network features within DKP. It currently supports the following features:

• Node network interfaces configuration
• Additional networks

Node network interfaces configuration

The module provides a network interface configuration through a declarative API, allowing users to:

• Aggregate ports.
• Combine network interfaces into a bridge.
• Configure VLAN interfaces.

Additional networks

This feature enables declarative management of additional networks for application workloads (Pods, Virtual Machines). This involves the following:

• Each additional network implies a single L2 data exchange domain.
• Within the Pod’s network namespace, an additional network is represented as a tap interface.
• The following modes are currently available for L2 network implementation:
  • Tagged VLAN — communication between Pods on different Nodes uses VLAN-tagged packets and the infrastructure’s network equipment for switching. This method allows to create up to 4096 additional networks within a single cluster.
  • Direct access to a Node’s network interface — communication between Pods on different Nodes uses the local network interfaces of the Nodes.
• From a network management perspective, there are two types of networks:
  • Cluster network — a network available in all projects, under administrator management. Example: a public WAN network or a shared network for cross-project traffic.
  • Project network — a network available within a Namespace, under user management.