vBrownBag OpenStack Networking Talk
- 1. Kyle Mestery Technical Leader, Office of the Cloud CTO, Cisco Mark Voelker Technical Leader, SDU, Cisco © 2010 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 1
- 2. © 2010 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 2
- 3. © 2010 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 3
- 4. © 2010 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 4
- 5. • Advantages of cloud computing On-demand virtualized resources, self-service, lower cost Resources managed by others • Ability to create your own isolated private networks • Extensible • Challenge!! Easy-to-use Minus the complexity of the traditional data center OpenStack Should work with different networking infrastructure Networking © 2010 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 5
- 6. • Compute service (EC2): virtual machines App Svr • Specify vCPU, Memory, Disk OS • Launch instance (image, mem_size, disk) VM • Suspend, clone, migrate • Storage service (S3, EBS): virtual disks • Specify storage amount, access rights • Store object • Create/attach block • What to do about networks? Simplistic implementation Embedded in the compute component © 2010 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 6
- 7. 2011 Design Summit - community-driven merger of proposals … more NetworkService NaaS Core Design NetworkServicePOC NetworkContainers Citrix/Rackspace/Nicira Intel NTT/Midokura Cisco OpenStack Networking © 2010 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 7
- 8. • Compute service (EC2): virtual machines App Svr • Launch instance (image, mem_size, disk) OS • Suspend, clone, migrate VM • Storage service (S3, EBS): virtual disks • Store object • Create/attach block • Network service (OpenStack Networking): virtual networks App Svr OS App Svr OS • Create/delete private network VM VM • Attach VM to network resource • Create subnets and routers • Work with different networking environments © 2010 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 8
- 9. OpenStack Networking: A first class citizen in cloud computing Portal (Horizon) Applications Other Services Cloud Platform - Developer API Compute Storage Network Identity (Keystone) (Nova) (Swift) (Quantum) Servers Disks Networks Images (Glance) Folsom Release © 2010 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 9
- 10. OpenStack Networking Abstractions Virtual Networks: A basic dedicated L2 network segment Common realization is a VLAN Virtual Ports: Attachment point for devices connecting to virtual networks. Ports expose configuration and monitoring state via extensions (e.g., ACLs, QoS policies, Packet Statistics) Subnets: An IPAM construct to store CIDR Also allows to set the Gateway IP and host routes Virtual Routers Per tenant routers © 2010 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 10
- 11. OpenStack Networking Plugins & Extensions Plugin: Realization of the OpenStack Networking abstractions Supports different back-end technologies and vendors One plugin per OpenStack Networking deployment (there could be sub-plugins managed by the main plugin) Examples: Linux Bridge Plugin, OVS Plugin, Cisco (Nexus) Extensions: API Extensibility for new or back-end specific features Example: Port-profiles, quality-of-service, etc. © 2010 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 11
- 12. Extending OpenStack Networking to support L3 Constructs Routing within the Further evolve OpenStack Networking to be a multi-tenant network service for creating virtual data centers (application specific tenant (support multi- topologies + network services) tier topologies) Overlapping IP addresses Support gateways – Internet, VPN Support other L3 services – LB, Firewall, Caching, etc. Hybrid Cloud (Public + Private) © 2010 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 12
- 13. • BigSwitch • Midokura Midonet • Brocade • NEC OpenFlow • Cisco Nexus • Nicira NVP • Hyper-V • Open vSwitch • Linux Bridge • PLUMgrid • Meta Plugin • Ryu OpenFlow © 2010 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 13
- 14. • Large increase in the number of plugins upstream • LBaaS Framework Drivers More to come • Multiple agent support Simple scheduler Ability to balance tenants across multiple network nodes Cannot balance a tenant across multiple nodes (planned for Havana) © 2010 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 14
- 15. © 2010 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 15
- 16. Quantum Server Quantum L2 and Plugin Agent Quantum L2 Agent Quantum L2 Nova Nova Compute Agent Nova Compute … Nova Compute ethX Control Node Compute Node Control Node Quantum L2 ethX Quantum L2 Control Node Agent Quantum L2 Agent AgentQuantum L3 Quantum L3 Agent ethX Quantum L3 Agent Quantum DHCP Agent br-ex QuantumAgent DHCP External Network Quantum Agent DHCP Agent Management Network Network Node Network Node Data Network Network Node © 2010 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 16
- 17. © 2010 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 17
- 18. VM1 VM1 VM1 Linux Bridge Linux Bridge Linux Bridge Security Groups rules applied here VLANs used for isolation amongst br-int tenants here GRE Keys used to isolate tenant traffic br-tun in the tunnel Tenant A Network bond0 Tenant B Network eth0 eth1 eth2 Management Network Data Network © 2010 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 18
- 19. © 2010 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 19
- 20. Controller Node Quantum Cisco Nexus Plugin Nexus Quantum Interface OVS Driver Plugin Communication with Nexus switches using Netconf Nexus 3K Nexus 3K VLAN 100 VLAN 200 VLAN 100 VLAN 200 Communication with plugin agents eth0 on hosts eth0 eth0 eth0 eth0 eth0 eth0 eth0 br-eth0 br-eth0 br-eth0 br-eth0 br-int br-int br-int br-int Tenant A – VLAN 100 Tenant B – VLAN 200 Tenant A – VLAN 100 Tenant B – VLAN 200 VM 1 10.0.0.3 VM 1 10.0.1.3 … VM 2 10.0.0.4 VM 2 10.0.1.4 Host 1 Host 2 Host N-1 Host N © 2010 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 20