Introducing Kuryr
Kuryr is named after the Czech word which means a courier. It is a Docker network plugin that uses OpenStack Neutron to provide networking services to Docker containers. It maps container network abstractions to OpenStack neutron APIs. This provides the ability to connect VMs, containers, and bare metal servers to the same virtual network in a seamless management experience, and provides consistent networking for all three. Kuryr can be deployed using a Python package or a container using Kolla. It provides the following features to containers using a neutron as a provider:
- Security groups
- Subnet pools
- NAT (SNAT/DNAT, Floating IP)
- Port security (ARP spoofing)
- Quality of Service (QoS)
- Quota management
- Neutron pluggable IPAM
- Well-integrated COE load balancing via a neutron
- FWaaS for containers
