On the first test server, only one physical NIC (eno2) is available and is fully attached to the OVS bridge br-ex by OVN-Kubernetes. All current tests therefore use variant A (software bridges). Variant C (Hetzner vSwitch) and variant B (on-premises trunk) are documented for future expansion.
1✅ Current decision: variant A — software bridges (
br-net1, br-net2, br-net3)2Reason: Hetzner SNO node has only one NIC (
eno2), fully controlled by OVN-K / br-ex3Reason: Hetzner vSwitch (VLAN 4000) tested — works technically, but requires a second server in the vSwitch
4Reason: on-premise trunk port (variant B) not possible — no switch access at Hetzner
5Variant A provides full VM network isolation on the node internally — sufficient for all planned tests