Is it mandatory to have OVN based network setup as a pre-requisite to isolate networks among multiple Projects ?
What I am trying to accomplish is to have 3 projects, each Project having one isolated network each BUT with the same address space. Ie, every project will have its own 172.16.10.X/24 isolated network.
For the exact same subnet to be used multiple times, you need OVN.
OVN doesn’t use a regular central router, instead each network effectively have their own isolated router. This is what allows multiple networks to use the exact same subnet without the central router being confused due to multiple routes existing for the same subnet.
Just to give a backdrop, I was trying to understand how to build a minimal multi-tenant system with 2 tenants (01-tenant and 02-tenant shown below are nothing but 2 different projects). If I go this way then I need to keep track of the subnets assigned to each tenant. It was not only getting complicated when I grow tenants but what I noticed is that even if I run a container in one. tenent, it can actually ping the network which I was hoping to keep it exclusive for the second tenant. Since all the networks are exposed to all the tenants, there is no true isolation from the networking aspect. I then realized I was on the wrong path.
Thanks again for the clarification. I think I am starting to understand ovn is new to me but I guess it time.