[Feature Request] multiple VPCs can access a centralized management/operations VPC

[unlimitedheaven]

Description

First of all, thank you for open-sourcing Kube-OVN and introducing SDN to Kubernetes.

I've been reading the Kube-OVN documentation recently, and it is very easy to get started. However, I have a few questions I'd like to ask:

1. How does ovnEIP in Kube-OVN advertise routes externally via BGP, and how can we implement rate limiting (bandwidth throttling) on ovnEIP?
2. Does it support a scenario where multiple VPCs can access a centralized management/operations VPC?

Thank you again for taking the time to answer my questions.

Who will benefit from this feature?

No response

Anything else?

No response

[dosubot]

Hi @unlimitedheaven! I'm Dosu and I’m helping the kube-ovn team.

Kube-OVN supports BGP route advertisement for EIPs by integrating with NAT gateways. To announce EIPs externally via BGP, you deploy the kube-ovn-speaker (which uses GoBGP), label nodes for BGP, and annotate relevant Pods/Subnets. The NAT gateway then advertises EIPs to external routers using BGP; OVN itself does not natively support BGP for EIP, FIP, or SNAT—this is handled by the NAT gateway layer. You can find more details and configuration steps in the BGP integration guide.

For bandwidth throttling on ovnEIP, Kube-OVN provides a QoSPolicy CRD. You create a QoSPolicy with bindingType: EIP and specify rateMax and burstMax for ingress and egress directions. Reference this policy in your EIP's spec to enforce rate limits. Example YAML and usage details are in the QoS documentation.

Kube-OVN supports multiple VPCs accessing a centralized management/operations VPC using VPC peering. You configure multiple peering objects in the vpcPeerings array of the VPC spec, each connecting to a specific VPC. Static routes must be set up to ensure correct traffic flow between VPCs. This design maintains isolation but allows selective inter-VPC connectivity, which fits your centralized management scenario. See VPC peering configuration for details and best practices.

Let me know if you need example manifests or have questions about specific deployment scenarios!

To reply, just mention @dosu.

---

^{How did I do? Good | Irrelevant | Incorrect | Verbose | Hallucination | Report 🐛 | Other}