One more thing, that isn't mentionned in the above article: the recent versions of ovn-kubernetes have a new feature called UDN for User Defined Network, which is basically segmentation. More about that here: developers.redhat.com/articles/202...
#redhat #openshift #kubevirt #ovn #kubernetes

- OVN is improving its observability, for instance it can emit events such as when a network policy blocks/accept traffic. NetObserv can leverage and display that.

It's only Tech Preview at the moment, so you'll need to wait a bit before having it on a prod cluster.

There are also cool new features related to ovn-kubernetes (you won't get them if you use a different CNI) :

- As #OpenShift introduces new User Defined Networks (docs.openshift.com/container-pl...), which offers a much better isolation, NetObserv can visualize them as topologies and more...

... and more filtering options in the #eBPF agent. For example, you can now decide to sample ALL external traffic while maintaining a 1:50 ratio on internal traffic, to save resources without compromising what matters most.
More on that here: netobserv.io/posts/enhanc...

There is also a good bunch of improvements on the CLI side, such as generating Prometheus metrics on the fly: netobserv.io/posts/networ...

One of the cool things that you can immediately notice if you upgrade from 1.7, is the performance improvement, especially on the eBPF Agent CPU. More on this here: netobserv.io/posts/perfor...

Oui pour les slides :-)
docs.google.com/presentation...

On continue avec Joël qui nous parle eBPF et présente son projet @netobserv.bsky.social

Btw we're also on Mastodon : hachyderm.io/@netobserv