Hands-on Lab: Test Drive Your OpenStack Network
- 1. OpenStack Summit | Austin, TX OpenStack Networking: Hands-on Lab
- 2. Copyright © PLUMgrid, Inc. 2011-2016 Introduction Speaker(s) 2 Sr Director Product & Solution Marketing, PLUMgrid Valentina Alaria Part of the OpenStack community for 6+ years and has worked with 100s of users throughout their journey of learning, designing and deploying OpenStack-based cloud solutions. A product innovation strategist and technology evangelist, Valentina has 10+ years experience with Cloud and Datacenter Infrastructure and has been involved with SDN since the early days throughout her endeavors at PLUMgrid, Nicira and Cisco. System Engineer, PLUMgrid Jamal Arif Jamal Arif is a self-motivated and passionate professional having 5+ years of experience in Cloud & Data Center technologies, Telecommunications, Virtualization and Software Defined Networking. He has been a part of the OpenStack Community for last couple of years with more focus in building SDN based OpenStack Private/Public Cloud infrastructures for enterprises, telcos, & service providers etc.
- 3. Copyright © PLUMgrid, Inc. 2011-2016 • OpenStack Networking Refresher • PLUMgrid Plugin • Hands-on Lab • Next Steps Agenda
- 5. Copyright © PLUMgrid, Inc. 2011-2016 • Provide Network as a Service • Provide Operator & Tenants ability to create and offer rich network topologies and configure advanced policies • Offer a technology agnostic layer while enabling vendor extensions • Support for advanced services Why Neutron? Compute Storage Network
- 6. Copyright © PLUMgrid, Inc. 2011-2016 OpenStack Neutron Architecture Components Neutron Server Core APIs API Extensions Plugins
- 7. Copyright © PLUMgrid, Inc. 2011-2016 Neutron API Flow Neutron Server Plugin Backend Implementation (controllers, agents, appliances) Neutron API Request
- 8. Copyright © PLUMgrid, Inc. 2011-2016 What can users do with Neutron? Provide external connectivity (e.g. Internet) to workloads Interconnect networks with routers Create multi-tenant networks with private IP space Connect workloads to each network
- 9. Copyright © PLUMgrid, Inc. 2011-2016 • Created by end-users • Details of how they are “implemented” are hidden from the users • VMs can connect to tenant networks • Supported types: flat, local, VLAN, Overlay based Tenant Network
- 10. Copyright © PLUMgrid, Inc. 2011-2016 • Created with admin credentials • Specify they physical implementation and usually map to existing data center constructs • VMs can connect directly to provider networks (burning IPs of physical infra) or via an external network and floating IP/NAT • Provide connectivity with legacy network Provider Network
- 11. Mapping OpenStack to PLUMgrid
- 12. Copyright © PLUMgrid, Inc. 2011-2016 You always need to select a plugin
- 13. Copyright © PLUMgrid, Inc. 2011-2016 “Overlay-based” Networking Model • Multi-tenancy achieved by “overlaying” MAC-in-IP ‘Tunnels’ onto the physical switch fabric (underlay, transport network) • Encapsulation header (VXLAN, NVGRE, STT) convey tenant network ID to enable full isolation and overlapping IP Address spaces support • Software layers to implement routing / switching operations within and across tenant networks
- 14. Copyright © PLUMgrid, Inc. 2011-2016 PLUMgrid Open Networking Suite Internet IO Visor Gateway IO Visor Edges (Compute Nodes) PLUMgrid Directors VXLAN-based Overlay 14 PLUMgrid CloudApex & OpsVM
- 15. Copyright © PLUMgrid, Inc. 2011-2016 From OpenStack Networks to Virtual Domains OpenStack Networks Virtual Domains
- 16. Copyright © PLUMgrid, Inc. 2011-2016 PLUMgrid Virtual Network Functions 16 Distributed Virtual Network Functions Description Connector • Connectivity: External, Port Bundle (“Multi-gateway LAG”), Appliance and Inter Virtual Domain Bridge • Distributed Layer 2 network function • Connects VMs on same IP subnet inside Virtual Domain • Include Private VLAN functionality Router • Distributed Layer 3 network function • Connects VMs from different subnets inside a Virtual Domain • Includes Dynamic Routing Protocols (RIP, OSPF, BGP) DHCP • Distributed DHCP function for dynamic IP Address allocation • Associated on per Bridge basis NAT • Distributed Network Address Translation function • Supports Inbound / Outbound, Many to One, One to One NAT Security Policies • Distributed Layer 4 Security network function • Substitute for Layer 4 ACLs / Firewalls DNS • Distributed Domain Name Service
- 17. Hands-on Lab
- 18. Copyright © PLUMgrid, Inc. 2011-2016 • Check you have following: • IP Address • Password • Hands-on Lab Guide Login Information • If you have VNC client – Good • If you don't have VNC Client • Download Real VNC Viewer • If Macbook • Open Safari Browser • vnc://xxx.xxx.xxx.xxx • Put username and password
- 19. Copyright © PLUMgrid, Inc. 2011-2016 Hands-on Lab Step by Step Set up a network topology for 3 tier app cloud with web, app, db Create multiple projects in OpenStack
- 20. Copyright © PLUMgrid, Inc. 2011-2016 Hands-on Lab Step by Step Monitor and troubleshoot Modify security group and ingress/egress forwarding policies Enable external connectivity
- 21. Next Steps
- 22. PLUMgrid Certified OpenStack Networking Associate Design Center Transformation OpenStack Overiew OpenStack Networking Introduction Hands-on Lab Training Register Today! www.plumgrid.com/plumgrid-university
- 23. HANDS-ON 23
- 24. Copyright © PLUMgrid, Inc. 2011-2016 Hands-on Lab Overview Environment Use Case What to Expect Multi-tenant Virtual Network Infrastructure for Private Clouds Strict isolation & micro-segmentation Rich portfolio of networking functions On-demand creation of networks via CMS In-depth control over network functions
- 25. Visit Us @ Booth C21 THANK YOU! www.plumgrid.com
Editor's Notes
- #6: Openstack networking started with nova-network: a very basic way of using VLANs to interconnect VMs. Very limited.
- #17: At it’s most basic, it’s easiest to think of virtual network infrastructure as the network equivalent of what a virtual machine is for compute….that is, a decoupling of software form hardware that results in a software container that is a logical representation of the physical. In the VNI context that means a software representation of a complete network (router, firewall, switch, load balancer and more) that is grouped into a topology or virtual domain, that can be created, copied and migrated on –demand just like a virtual machine. VNI represented as Virtual Domains