开启访问控制的子网示例 默认情况下 Kube-OVN 创建的子网之间可以相互通信，Pod 也可以通过网关访问外部网络。 如需对子网间的访问进行控制，可以在子网 CRD 中将 private 设置为 true，则该子网将和其他子网以及外部网络隔离，只能进行子网内部的通信。如需开白名单，可以通过 allSubnets 进行设置。 更细粒度的访问控制可以使...

Deployment 固定 IP 示例 Kube-OVN 支持通过 annotation ovn.kubernetes.io/ip_pool 给 Workload（Deployment/StatefulSet/DaemonSet/Job/CronJob）设置固定 IP。Workload 下的 Pod 会自动选择 ovn.kubernetes.io/ip...

Installing Addons Networking and Network Policy Service Discovery Visualization & Control Infrastructure Legacy Add-ons Installing Addons Note: This section links to third...

About the OpenShift SDN network plugin OpenShift SDN network isolation modes Supported network plugin feature matrix About the OpenShift SDN network plugin Part of Red Hat Ope...

CIDR range definitions Machine CIDR Service CIDR Pod CIDR Host Prefix CIDR range definitions You must specify non-overlapping ranges for the following CIDR ranges. Machin...

Assigning an egress IP address Assigning an egress IP address to a namespace Additional resources Assigning an egress IP address As a cluster administrator, you can assign an ...

Assigning an egress IP address Assigning an egress IP address to a namespace Additional resources Assigning an egress IP address As a cluster administrator, you can assign an ...

Changing the MTU for the cluster network About the cluster MTU Service interruption considerations MTU value selection How the migration process works Changing the cluster MTU ...

Configuring an egress IP address Egress IP address architectural design and implementation Platform support Public cloud platform considerations Amazon Web Services (AWS) IP addre...

Configuring an egress firewall for a project How an egress firewall works in a project Limitations of an egress firewall Matching order for egress firewall policy rules How Domai...