Nodus has been developed as one of Akraino projects to provide Network Controller functionality and support wide range of Kubernetes networking use cases.
It consists of four major components:
OVN control plane
Network Function Network(NFN) operator that runs in K8s control plane
Network Function Network (NFN) agent for K8s nodes
Nodus also provides a CNI plugin based on OVN and OpenVSwitch (OVS). It works with Multus CNI to provide pods with multiple interfaces.
One of the important features of Nodus is the ability to create virtual LAN networks on pod’s interfaces at runtime. The CNI plugin also utilises physical interfaces to connect a pod to an external network (WAN) called a “provider network”. This functionality is particularly important for SD-WAN CNFs used in the Intel® Smart Edge Open Secure Access Service Edge (SASE) experience kit. The CNF pods act as a proxy between the virtual LANs in the SASE Edge cluster and the WAN. Nodus is enabled by default in the SASE experience kit.
To read about Nodus components and features go to icn-nodus.
How It Works
Typically, in Kubernetes, each pod has only one network interface (apart from a loopback). With Multus, users can create a multi-homed pod that has multiple interfaces. To accomplish this, Multus acts as a “meta-plugin”, a CNI plugin that can call multiple other CNI plugins to add multiple interfaces to a pod. In the Intel® Smart Edge Open SASE experience kit, Nodus CNI is enabled by default as the secondary CNI whereas Calico act as the primary CNI. In such scenarios where Multus is used, net1 interface is by convention the OVN default interface that connects to Multus. The other interfaces (net2, net3, …) are added by Nodus according to the pod annotation.
In a scenario where a CNF pod becomes a proxy between a virtual LAN in the Edge cluster and the WAN, it needs to have two types of interfaces configured:
A virtual LAN network is configured and attached to one of the pod’s virtual interfaces. This network connects application pods belonging to the same OVN network in the cluster. Nodus plugin allows for simplified creation of a virtual OVN network based on the provided configuration.
A provider network is configured to connect the pod to an external network (WAN). The provider network must be attached to the physical network infrastructure via layer-2 (i.e., via bridging/switching).
To learn about other supported scenarios and see examples of usage, go to Nodus Usage Guide.
Create a virtual LAN network and a provider network
The following examples show sample definitions of a virtual LAN network and provider networks.