openstack in action 4! mark mcclain - from segments to services a dive into openstack networking
DESCRIPTION
Paris, 5th December 2013 : OpenStack in Action 4! organized by eNovance, brings together members of the OpenStack community.TRANSCRIPT
Challenges in the Cloud
• High-density multi-tenancy – But VLANs have trouble scaling
• On-demand provisioning – But traditional network solutions have
interfaces designed for manual configuration.
• Need to place / move workloads were capacity exists
– But network state (e.g., IP address) is tied to a particular location
© Malcolm Leman | Dreamstime.com
Tackling these challenges
– Network virtualization – Overlay tunneling:
VXLAN, GRE, STT – Software-defined
Networking (SDN) / OpenFlow
– L2 Fabric solutions – ???
What is OpenStack Networking?���
Basic Abstractions
Net1 10.0.0.0/24
Nova
Neutron L2 virtual network virtual port
virtual server virtual interface (VIF)
virtual subnet
VM1 10.0.0.2
VM2 10.0.0.2
Using the API... VM1
10.0.0.2 VM2 10.0.0.2/172.16.77.2
VM3 172.16.77.1
Tenant Net1 192.168.0.0/24 Tenant Net2
172.16.77.0/24
Public Net 10.0.0.0/8
Router
Multi-Project VM1
10.0.0.2 VM2
10.0.0.2/172.16.77.2
VM3
172.16.77.1
Tenant A Net1 192.168.0.0/24 Tenant A Net2
172.16.77.0/24
Public Net 10.0.0.0/8
Router
VM1 10.0.0.2
VM2 10.0.0.2/172.16.
77.2 VM3
172.16.77.1
Tenant B Net1 192.168.0.0/24 Tenant B Net2
172.16.77.0/24
Router
Architecture
Tenant Tools (GUI, CLI, API code)
Compute API
Network API
Storage API
Generic OpenStack APIs Operator Selected Backends
KVM
ML2 Plugin
Ceph
Authentication & Authorization via OpenStack keystone Core Neutron API API Extensions
Horizon Web UI Neutron CLI Heat - Orchestration Other tools API Tools
Open vSwitch Nova Compute
Open vSwitch Nova Compute
Open vSwitch Nova Compute
Neutron Pluggable Backend layer Modular Layer 2 Plugin
Neutron Plugins
Open vSwitch / Linux Bridge Ryu OpenFlow Controller
Common Features
Support for overlapping IPs
DHCP
Includes custom port options
Floating IPs
Security Groups
Supports Overlapping IPs
Handles VMs with multiple
NICs
Ingress / Egress rules
IPv6 matching
Plugins can offload
http://www.flickr.com/photos/mikebaird/2354116406/
Metadata
Simplified Configuration
Supports Overlapping IPs
Non-routed networks
Modular Layer 2
Driver Based
Combines OVS and Linuxbridge Plugins
Other Mechanism Drivers Available
Arista, Cisco, Hyper-V, Tail-F NCS
Advanced Services
Load Balancing
VPN
Firewall
Load Balancing as Service
Multiple Implementations
Open Source - HAProxy
Proprietary Drivers Available
VPN as a Service
Site-to-Site
IPSec
OpenSwan Reference Implementation
Firewall as a Service
Stateless filtering at the edge
Vendor drivers available
Preview available in Havana
Horizon
Manage Resources
Networks
Subnets
Routers
VPN
Horizon
Select NICs when booting
Horizon
How to Contribute
Code:
https://github.com/openstack/neutron
Blueprints and Bugs
http://launchpad.net/neutron
More Information
Installation and Admin Manual
http://docs.openstack.org/trunk/openstack-network/admin/content/
