Introduction to CloudStack Networking
- 1. Introduction to CloudStack Networking Geoff Higginbottom CTO ShapeBlue geoff.higginbottom@shapeblue.com Twitter: @ShapeBlue
- 2. About ShapeBlue “ShapeBlue are expert builders of public & private clouds. They are the leading global CloudStack / CloudPlatform integrator & consultancy” www.shapeblue.com CloudStack Collaboration Conference 2012
- 3. www.shapeblue.com CloudStack Collaboration Conference 2012
- 4. Why NaaS – The Use Cases VPS Cloud www.shapeblue.com CloudStack Collaboration Conference 2012
- 5. Why NaaS – The Use Cases VPS Cloud www.shapeblue.com CloudStack Collaboration Conference 2012
- 6. CloudStack Networking Models Basic Networking AWS Style L3 isolation – Massive Scale Simple Flat Network Only 1 Physical NIC per Host Guest Instances and Hosts Share IP Schema* Each POD has a unique CIDR Guest Isolation via Security Groups NetScaler Integration - Elastic IPs and Elastic Load Balancing www.shapeblue.com CloudStack Collaboration Conference 2012
- 7. CloudStack Networking Models Basic Networking www.shapeblue.com CloudStack Collaboration Conference 2012
- 8. CloudStack Networking Models Advanced Networking Guest Networks isolated by VLANs Private and Shared Guest Networks Traffic spread across multiple Physical NICs which can also be Bonded Virtual Router for each Account / Network providing: DNS & DHCP Firewall Client VPN Load Balancing Source / Static NAT Port Forwarding www.shapeblue.com CloudStack Collaboration Conference 2012
- 9. CloudStack Networking Models Advanced Networking www.shapeblue.com CloudStack Collaboration Conference 2012
- 10. CloudStack Networking Models Advanced Networking - VPC Virtual Private Clouds (VPC) Private multi-tiered Virtual Network Inter VLAN Routing Site-2-Site VPN www.shapeblue.com CloudStack Collaboration Conference 2012
- 11. CloudStack Networking Models Advanced Networking - VPC www.shapeblue.com CloudStack Collaboration Conference 2012
- 12. System VMs & Their Networks Virtual Router www.shapeblue.com CloudStack Collaboration Conference 2012
- 13. System VMs & Their Networks Virtual Router (Adv Zone) www.shapeblue.com CloudStack Collaboration Conference 2012
- 14. System VMs & Their Networks Secondary Storage VM www.shapeblue.com CloudStack Collaboration Conference 2012
- 15. System VMs & Their Networks SSVM – VM Image / ISO Upload Workflow www.shapeblue.com CloudStack Collaboration Conference 2012
- 16. System VMs & Their Networks Console Proxy VM www.shapeblue.com CloudStack Collaboration Conference 2012
- 17. System VMs & Their Networks CPVM – Remote Connection www.shapeblue.com CloudStack Collaboration Conference 2012
- 18. Communication Ports www.shapeblue.com CloudStack Collaboration Conference 2012
- 19. Real World Problems / Requirements Management VLANs – Up to 7 Layers Strict control of traffic flow between Management Layers Bypassing Virtual Router Hosts and Guests VMs on Different VLANs (Basic Networking) Isolated Networks for Guest Management by Service Provider Shared Networks for Guest Backups Connecting VMs to Physical Servers via Assigned VLAN IDs VLAN Limitations www.shapeblue.com CloudStack Collaboration Conference 2012
- 20. The Future Software Defined Networking Remove VLAN Limitations Bring full control of Network into CloudStack GUI Massive Scalability Reduce Costs www.shapeblue.com CloudStack Collaboration Conference 2012
- 21. Introduction to CloudStack Networking Geoff Higginbottom CTO ShapeBlue geoff.higginbottom@shapeblue.com Twitter: @ShapeBlue
Editor's Notes
- #2: eSkyCityBroker BinSunGardCiscoOrangeT-Mobile
- #5: VPS – Single VM, or multiples but with no control over connectivityCloud – NaaS giving end user control of the network layer, and provides virtual networks which can then be used by multiple VMs, these could be isolated networks, accessible to only VMs within a particular account, or Shared Networks, which are available to multiple Accounts5 min
- #6: New features in CloudStack 4 allow the end user to configure vastly more complicated networks with multiple tiers, inter-VLAN routing, and full control over what traffic passes between Tiers and the public internet.7 min
- #7: There are two networking models, Basic and Advanced and a Zone can only one typeBasic – AWS style L3 isolation – Massive ScaleReal-World Tip - Guest VMs and Hosts can be on different VLANs even though Admin Guide states they cannotSegmentation achieved via Security GroupsIngress and Egress rules control the flow of traffic into and out of Security Groups. 10 min
- #8: Lets take a look at the typical configuration of a Basic ZoneStart with an IP Allocation for the Zone big enough to cover all Guest VMs in the ZoneIn Basic Networking each POD will be assigned a Unique IP Range for Guest VMs, which is a subnet of the Zones IP SchemaWe typically see in the region of 24-36 Hosts within a POD due limits of mx Hosts in a Cluster, and the size of Physical RacksReserved IP Range is allocated for the System VMsVirtual Router – Handles DHCP, DNS, UserData and Security Groups for the PODGuest VMs – IP Schema – each VM allocated an IP from the PODConcept is repeated over each PODGuest VMs can reside in different PODs so with Basic Networking VMs within a particular account do not have contiguous IP addresses15 min
- #9: 17 min
- #10: 22 min
- #11: 23 min
- #12: 25 min
- #13: 27 min
- #14: 29 min
- #15: 31 min
- #16: 33 min
- #17: 35 min
- #18: 37 min
- #19: 40 min
- #20: 45 min