This is a cache of https://docs.okd.io/4.12/networking/networking-operators-overview.html. It is a snapshot of the page at 2024-11-21T18:26:20.999+0000.
Networking Operators overview | Networking | OKD 4.12
  1. Documentation
×

Networking Operators overview

OKD supports multiple types of networking Operators. You can manage the cluster networking using these networking Operators.

Cluster Network Operator

The Cluster Network Operator (CNO) deploys and manages the cluster network components in an OKD cluster. This includes deployment of the Container Network Interface (CNI) network plugin selected for the cluster during installation. For more information, see Cluster Network Operator in OKD.

DNS Operator

The DNS Operator deploys and manages CoreDNS to provide a name resolution service to pods. This enables DNS-based Kubernetes Service discovery in OKD. For more information, see DNS Operator in OKD.

ingress Operator

When you create your OKD cluster, pods and services running on the cluster are each allocated IP addresses. The IP addresses are accessible to other pods and services running nearby but are not accessible to external clients. The ingress Operator implements the ingress Controller API and is responsible for enabling external access to OKD cluster services. For more information, see ingress Operator in OKD.

External DNS Operator

The External DNS Operator deploys and manages ExternalDNS to provide the name resolution for services and routes from the external DNS provider to OKD. For more information, see Understanding the External DNS Operator.

ingress Node Firewall Operator

The ingress Node Firewall Operator uses an extended Berkley Packet Filter (eBPF) and eXpress Data Path (XDP) plugin to process node firewall rules, update statistics and generate events for dropped traffic. The operator manages ingress node firewall resources, verifies firewall configuration, does not allow incorrectly configured rules that can prevent cluster access, and loads ingress node firewall XDP programs to the selected interfaces in the rule’s object(s). For more information, see Understanding the ingress Node Firewall Operator

Network Observability Operator

The Network Observability Operator is an optional Operator that allows cluster administrators to observe the network traffic for OKD clusters. The Network Observability Operator uses the eBPF technology to create network flows. The network flows are then enriched with OKD information and stored in Loki. You can view and analyze the stored network flows information in the OKD console for further insight and troubleshooting. For more information, see About Network Observability Operator.