feat: Support OVN dynamic routing

[ibot3]

Add two new config options to networks that can be uplink network for OVN networks: ovn.dynamic_routing and ovn.dynamic_routing.vrf.id

When configured, dynamic-routing [0] will be enabled on OVN networks using this uplink network. With that, prefixes of ovn networks and load-balancers are added to the configured host routing table (vrf.id) of the active OVN chassis.

[0] https://docs.ovn.org/en/latest/topics/dynamic-routing/architecture.html

Why?

We have a setup where our incus nodes do not have a shared L2 connection, but all run a local routing daemon.
Currently, incus requires a shared L2 uplink network for OVN networks.
My plan was to configure an uplink bridge on each node, which is not directly connected to the fabric nor other nodes.
Instead, the local routing daemon distributes the routes coming directly from the OVN active gateway.

Using the bgp integration is no good option, as this would create a hard dependency on the incus daemon running.
(Only one host (=the active gateway) can announce the prefix)

[ibot3]

I also took a look on how to test this in lxc-ci, but it seems that ovn comes from https://ppa.launchpadcontent.net/stgraber/ovn-stable/ubuntu/ which does not have a recent enough ovn version.
I don't know why you chose not to use the ubuntu-shipped version, but even with that, we would need to switch to Ubuntu 26.04

[ibot3]

Just discovered a bad caveat:
When there are multiple OVN gateways on the same chassis with the same vrf id, only one prefix makes it into the routing table.
That limits the number of ovn networks per vrf to 1, which is quite frustrating.
I have to think about that.

[stgraber]

We should move the daily tests to Debian 13 and using https://github.com/zabbly/ovn for the packages. That PPA is effectively dead at this point, we just haven't spent the time to update the tests yet.

[stgraber]

@ibot3 any update on this one?

[ibot3]

I am currently in the process of getting the change into OVN.

But I also wanted to check if OVN has some option to allow multiple active gateway chassis for the same network, as this would give a better redundancy.