2 Licensed under the Apache License, Version 2.0 (the "License"); you may
3 not use this file except in compliance with the License. You may obtain
4 a copy of the License at
6 http://www.apache.org/licenses/LICENSE-2.0
8 Unless required by applicable law or agreed to in writing, software
9 distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
10 WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
11 License for the specific language governing permissions and limitations
14 Convention for heading levels in Open vSwitch documentation:
16 ======= Heading 0 (reserved for the title in a document)
22 Avoid deeper levels because they do not render well.
28 Q: What does it mean for an Open vSwitch release to be LTS (long-term support)?
30 A: All official releases have been through a comprehensive testing process
31 and are suitable for production use. Planned releases occur twice a year.
32 If a significant bug is identified in an LTS release, we will provide an
33 updated release that includes the fix. Releases that are not LTS may not
34 be fixed and may just be supplanted by the next major release. The current
37 For more information on the Open vSwitch release process, refer to
38 :doc:`/internals/release-process`.
40 Q: What Linux kernel versions does each Open vSwitch release work with?
42 A: The following table lists the Linux kernel versions against which the
43 given versions of the Open vSwitch kernel module will successfully build.
44 The Linux kernel versions are upstream kernel versions, so Linux kernels
45 modified from the upstream sources may not build in some cases even if they
46 are based on a supported version. This is most notably true of Red Hat
47 Enterprise Linux (RHEL) kernels, which are extensively modified from
50 ============ ==============
51 Open vSwitch Linux kernel
52 ============ ==============
74 ============ ==============
76 Open vSwitch userspace should also work with the Linux kernel module built
77 into Linux 3.3 and later.
79 Open vSwitch userspace is not sensitive to the Linux kernel version. It
80 should build against almost any kernel, certainly against 2.6.32 and later.
82 Open vSwitch branches 2.10 through 2.14 will still compile against the
83 RHEL and CentOS 7 3.10 based kernels since they have diverged from the
84 Linux kernel.org 3.10 kernels.
86 Q: Are all features available with all datapaths?
88 A: Open vSwitch supports different datapaths on different platforms. Each
89 datapath has a different feature set: the following tables try to summarize
95 The datapath implemented by the kernel module shipped with Linux
96 upstream. Since features have been gradually introduced into the kernel,
97 the table mentions the first Linux release whose OVS module supports the
101 The datapath implemented by the Linux kernel module distributed with the
105 This datapath supports conventional system devices as well as
106 DPDK and AF_XDP devices when support for those is built. This
107 is the only datapath that works on NetBSD, FreeBSD and Mac OSX.
110 Also known as the Windows datapath.
112 The following table lists the datapath supported features from an
113 Open vSwitch user's perspective. The "Linux upstream" column
114 lists the Linux kernel version that introduced a given feature
115 into its kernel module. The "Linux OVS tree" and "Userspace"
116 columns list the Open vSwitch release versions that introduced a
117 given feature into the included kernel module or the userspace
118 datapath, respectively.
120 ========================== ============== ============== ========= =======
121 Feature Linux upstream Linux OVS tree Userspace Hyper-V
122 ========================== ============== ============== ========= =======
123 Connection tracking 4.3 2.5 2.6 YES
124 Conntrack Fragment Reass. 4.3 2.6 2.12 YES
125 Conntrack Timeout Policies 5.2 2.12 2.14 NO
126 Conntrack Zone Limit 4.18 2.10 2.13 YES
127 Conntrack NAT 4.6 2.6 2.8 YES
128 Tunnel - LISP NO 2.11 NO NO
129 Tunnel - STT NO 2.4 NO YES
130 Tunnel - GRE 3.11 1.0 2.4 YES
131 Tunnel - VXLAN 3.12 1.10 2.4 YES
132 Tunnel - Geneve 3.18 2.4 2.4 YES
133 Tunnel - GRE-IPv6 4.18 2.6 2.6 NO
134 Tunnel - VXLAN-IPv6 4.3 2.6 2.6 NO
135 Tunnel - Geneve-IPv6 4.4 2.6 2.6 NO
136 Tunnel - ERSPAN 4.18 2.10 2.10 NO
137 Tunnel - ERSPAN-IPv6 4.18 2.10 2.10 NO
138 Tunnel - GTP-U NO NO 2.14 NO
139 QoS - Policing YES 1.1 2.6 NO
140 QoS - Shaping YES 1.1 NO NO
142 IPFIX 3.10 1.11 1.11 YES
143 Set action YES 1.0 1.0 PARTIAL
144 NIC Bonding YES 1.0 1.0 YES
145 Multiple VTEPs YES 1.10 1.10 YES
146 Meter action 4.15 2.10 2.7 NO
147 check_pkt_len action 5.2 2.12 2.12 NO
148 ========================== ============== ============== ========= =======
152 * Only a limited set of flow fields is modifiable via the set action by the
155 * Userspace datapath support, in some cases, is dependent on the associated
156 interface types. For example, DPDK interfaces support ingress and egress
157 policing, but not shaping.
159 The following table lists features that do not *directly* impact an Open
160 vSwitch user, e.g. because their absence can be hidden by the ofproto layer
161 (usually this comes with a performance penalty).
163 ===================== ============== ============== ========= =======
164 Feature Linux upstream Linux OVS tree Userspace Hyper-V
165 ===================== ============== ============== ========= =======
166 SCTP flows 3.12 YES YES YES
167 MPLS 3.19 YES YES YES
169 Megaflows 3.12 YES YES NO
170 Masked set action 4.0 YES YES NO
171 Recirculation 3.19 YES YES YES
172 TCP flags matching 3.13 YES YES NO
173 Validate flow actions YES YES N/A NO
174 Multiple datapaths YES YES YES NO
175 Tunnel TSO - STT N/A YES NO YES
176 ===================== ============== ============== ========= =======
178 Q: What DPDK version does each Open vSwitch release work with?
180 A: The following table lists the DPDK version against which the given
181 versions of Open vSwitch will successfully build.
200 Q: Are all the DPDK releases that OVS versions work with maintained?
202 No. DPDK follows YY.MM.n (Year.Month.Number) versioning.
204 Typically, all DPDK releases get a stable YY.MM.1 update with bugfixes 3
205 months after the YY.MM.0 release. In some cases there may also be a
208 DPDK LTS releases start once a year at YY.11.0 and are maintained for
209 two years, with YY.MM.n+1 releases around every 3 months.
211 The latest information about DPDK stable and LTS releases can be found
214 .. _DPDK stable: http://dpdk.org/doc/guides/contributing/stable.html
216 Q: I get an error like this when I configure Open vSwitch:
218 configure: error: Linux kernel in <dir> is version <x>, but
219 version newer than <y> is not supported (please refer to the
224 A: You have the following options:
226 - Use the Linux kernel module supplied with the kernel that you are using.
227 (See also the following FAQ.)
229 - If there is a newer released version of Open vSwitch, consider building
230 that one, because it may support the kernel that you are building
231 against. (To find out, consult the table in the previous FAQ.)
233 - The Open vSwitch "master" branch may support the kernel that you are
234 using, so consider building the kernel module from "master".
236 All versions of Open vSwitch userspace are compatible with all versions of
237 the Open vSwitch kernel module, so you do not have to use the kernel module
238 from one source along with the userspace programs from the same source.
240 Q: What features are not available in the Open vSwitch kernel datapath that
241 ships as part of the upstream Linux kernel?
243 A: The kernel module in upstream Linux does not include support for LISP.
244 Work is in progress to add support for LISP to the upstream Linux version
245 of the Open vSwitch kernel module. For now, if you need this feature, use
246 the kernel module from the Open vSwitch distribution instead of the
247 upstream Linux kernel module.
249 Certain features require kernel support to function or to have reasonable
250 performance. If the ovs-vswitchd log file indicates that a feature is not
251 supported, consider upgrading to a newer upstream Linux release or using
252 the kernel module paired with the userspace distribution.
254 Q: Why do tunnels not work when using a kernel module other than the one
255 packaged with Open vSwitch?
257 A: Support for tunnels was added to the upstream Linux kernel module after
258 the rest of Open vSwitch. As a result, some kernels may contain support for
259 Open vSwitch but not tunnels. The minimum kernel version that supports each
262 ======== ============
263 Protocol Linux Kernel
264 ======== ============
271 ======== ============
273 If you are using a version of the kernel that is older than the one listed
274 above, it is still possible to use that tunnel protocol. However, you must
275 compile and install the kernel module included with the Open vSwitch
276 distribution rather than the one on your machine. If problems persist after
277 doing this, check to make sure that the module that is loaded is the one
280 Q: Why are UDP tunnel checksums not computed for VXLAN or Geneve?
282 A: Generating outer UDP checksums requires kernel support that was not part
283 of the initial implementation of these protocols. If using the upstream
284 Linux Open vSwitch module, you must use kernel 4.0 or newer. The
285 out-of-tree modules from Open vSwitch release 2.4 and later support UDP
288 Q: What features are not available when using the userspace datapath?
290 A: Tunnel virtual ports are not supported, as described in the previous
291 answer. It is also not possible to use queue-related actions. On Linux
292 kernels before 2.6.39, maximum-sized VLAN packets may not be transmitted.
294 Q: Should userspace or kernel be upgraded first to minimize downtime?
296 A. In general, the Open vSwitch userspace should be used with the kernel
297 version included in the same release or with the version from upstream
298 Linux. However, when upgrading between two releases of Open vSwitch it is
299 best to migrate userspace first to reduce the possibility of
302 Q: What happened to the bridge compatibility feature?
304 A: Bridge compatibility was a feature of Open vSwitch 1.9 and earlier.
305 When it was enabled, Open vSwitch imitated the interface of the Linux
306 kernel "bridge" module. This allowed users to drop Open vSwitch into
307 environments designed to use the Linux kernel bridge module without
308 adapting the environment to use Open vSwitch.
310 Open vSwitch 1.10 and later do not support bridge compatibility. The
311 feature was dropped because version 1.10 adopted a new internal
312 architecture that made bridge compatibility difficult to maintain. Now
313 that many environments use OVS directly, it would be rarely useful in any
316 To use bridge compatibility, install OVS 1.9 or earlier, including the
317 accompanying kernel modules (both the main and bridge compatibility
318 modules), following the instructions that come with the release. Be sure
319 to start the ovs-brcompatd daemon.