Enhancing Apache CloudStack Networking With Nuage ?? Next steps • Nuage VSP ... Cloud Service ManagementPlane Virtualized Services ... ACS provisioning 1. 1Provision SDN template

  • View
    213

  • Download
    0

Embed Size (px)

Text of Enhancing Apache CloudStack Networking With Nuage ?? Next steps • Nuage VSP ......

  • Enhancing Apache CloudStack Networking With

    Copyright 2015 Alcatel-Lucent. All rights reserved.

    Enhancing Apache CloudStack Networking With Nuage Networks SDN Solution

    Kris SterckxCloudStack Development Lead at Nuage Networkskris.sterckx@nuagenetworks.net

    Dublin, Oct. 9 2015

  • Nuage VSP Architecture Policy Driven SDN

    CloudStack NuageVsp Network Plugin

    Apache CloudStack with Nuage Networks

    Copyright 2015 Alcatel-Lucent. All rights reserved. 10/11/2015

    2

    CloudStack Vpc Inline Load Balancer Plugin

    Next steps

  • Nuage VSP Architecture Policy Driven SDN

    CloudStack NuageVsp Network Plugin

    Apache CloudStack with Nuage Networks

    Copyright 2015 Alcatel-Lucent. All rights reserved. 10/11/2015

    3

    CloudStack Vpc Inline Load Balancer Plugin

    Next steps

  • Nuage Networks VSP brings Policy-driven SDN to the Cloud

    Multi-Hypervisor support ESXi, KVM, XenServer Containers support

    Bare-metal support

    Nuage Networks Virtualized Services Platform

    Copyright 2015 Alcatel-Lucent. All rights reserved. 10/11/2015

    4

    Bare-metal support Multi-CMS support OpenStack Icehouse/Juno/Kilo/Liberty/Mitaka support CloudStack 4.3, 4.5 and 4.6* support

  • Cloud Service Management Plane

    VirtualizedServicesDirectory

    VirtualizedServicesController

    Virtualized Services Directory (VSD)Network Policy Engine abstracts complexityService templates and analytics

    Nuage NetworksVirtualized Services Platform (VSP)

    MP-BGP

    Nuage Networks Virtualized Services Platform

    Copyright 2015 Alcatel-Lucent. All rights reserved. 10/11/2015

    5

    Datacenter Control Plane

    ServicesController Service templates and analytics

    Virtual Routing & Switching (VRS)Distributed switch / router L2-4 rulesIntegration of bare metal assets

    Virtualized Services Controller (VSC) SDN Controller, programs the network Rich routing feature set

    DatacenterData Plane

    VirtualRouting & Switching

    HYPERVISORHYPERVISOR

    HYPERVISORHYPERVISOR

    HYPERVISORHYPERVISOR

    HYPERVISORHYPERVISOR

    HYPERVISORHYPERVISOR

    HYPERVISORHYPERVISOR

    Brooklyn Datacenter - Zone 1

    IP Fabric

    Hardware GW for

    Bare Metal

    VXLAN tunneled

    OpenFlow

  • dVRSdVRS dVRSdVRS

    VSC VSCVMVM

    VMVM

    VMVM

    VMVM

    VMVM

    VMVM

    ACS HostACS Host ACS HostACS Host

    Nuage Networks Virtualized Services Platform

    Distributed switching/routing

    Direct VM to VM communicationeverywhere on same hypervisor VXLAN tunneled across hypervisors VR VM is not involved

    Copyright 2015 Alcatel-Lucent. All rights reserved. 10/11/2015

    6

    DatacenterIP Underlay Network

    Logical Network Drawing

    RouterFW/NAT

    VMVM

    VMVM

    VMVM

    VLAN 1 VLAN 2 VLAN 3VMVM

    VMVM

    VMVM

    Internet WAN

    VR VM is not involved

    Direct VXLAN(/MPLSoGRE) communicationto the PE/GW router (in the overlay)

    Or directly dropped to underlay

  • We want to expose as much as possible the goodies of SDNto CloudStack

    CloudStack engineering team staffing featureswithin cross-functional teams

    Nuage Networks CloudStack

    Copyright 2015 Alcatel-Lucent. All rights reserved. 10/11/2015

    7

    within cross-functional teams

    Extensive test automation Functional test (incl. Marvin) Concurrency tests Scale, Performance, Longevity tests

  • Nuage VSP Architecture Policy Driven SDN

    CloudStack NuageVsp Network Plugin

    Apache CloudStack with Nuage Networks

    Copyright 2015 Alcatel-Lucent. All rights reserved. 10/11/2015

    8

    CloudStack Vpc Inline Load Balancer Plugin

    Next steps

  • Cloud Service Management Plane

    VirtualizedServicesDirectory

    Virtualized MP-BGP

    Nu

    ageVsp

    Clien

    tN

    uageV

    sp C

    lient

    CloudStack user Nuage VSP user (optional)

    REST

    Virtu

    aliz

    ed S

    erv

    ices P

    latfo

    rm

    VSD

    UI, API, cloudmonkey UI, API, vspk

    Copyright 2015 Alcatel-Lucent. All rights reserved. 10/11/2015

    9

    NuageVspPlugin

    NuageVspPlugin

    Datacenter Control Plane

    VirtualizedServicesController

    DatacenterData Plane

    VirtualRouting & Switching

    HYPERVISORHYPERVISOR

    HYPERVISORHYPERVISOR

    HYPERVISORHYPERVISOR

    HYPERVISORHYPERVISOR

    HYPERVISORHYPERVISOR

    HYPERVISORHYPERVISOR

    Brooklyn Datacenter - Zone 1

    Hardware GW for

    Bare Metal

    Nu

    ageVsp

    Clien

    tN

    uageV

    sp C

    lient

    java

    (Vpc)VRPlugin

    (Vpc)VRPlugin

    Virtu

    aliz

    ed S

    erv

    ices P

    latfo

    rm

    VSC

    VRS

    OpenFlow

  • Advanced Networking Isolated Networks Virtual Private Clouds

    Shared Networks

    CloudStack NuageVsp Network Plugin

    Supported Services Virtual Networking DHCP Source NAT Static NAT Firewall Network ACL

    Copyright 2015 Alcatel-Lucent. All rights reserved. 10/11/2015

    10

    (Vpc)VRPlugin

    (Vpc)VRPlugin

    Network ACL Extensions to support enhanced networking capabilities

    User Data DNS

    Public Load balancing

    NuageVspPlugin

    NuageVspPlugin

    VpcInlineLb PluginVpcInlineLb Plugin

  • CloudStack NuageVsp Network Plugin

    Supported Services Virtual Networking DHCP Source NAT Static NAT Firewall Network ACL

    VSP providing virtualnetworking w/ distributed routing

    Copyright 2015 Alcatel-Lucent. All rights reserved. 10/11/2015

    11

    Network ACL Extensions to support enhanced networking capabilities

    User Data DNS

    Public Load balancing

  • CloudStack NuageVsp Network Plugin

    Supported Services Virtual Networking DHCP Source NAT Static NAT Firewall Network ACL

    CS does the IP allocation;Plugin provisions VSP;The hypervisor VRS is the DHCP provider to the VM

    Copyright 2015 Alcatel-Lucent. All rights reserved. 10/11/2015

    12

    Network ACL Extensions to support enhanced networking capabilities

    User Data DNS

    Public Load balancing

  • CloudStack NuageVsp Network Plugin

    Supported Services Virtual Networking DHCP Source NAT Static NAT Firewall Network ACL

    Source NAT provisioningin VSP

    Copyright 2015 Alcatel-Lucent. All rights reserved. 10/11/2015

    13

    Network ACL Extensions to support enhanced networking capabilities

    User Data DNS

    Public Load balancing

  • CloudStack NuageVsp Network Plugin

    Supported Services Virtual Networking DHCP Source NAT Static NAT Firewall Network ACL

    Static NAT rulesprovisioning in VSP

    Copyright 2015 Alcatel-Lucent. All rights reserved. 10/11/2015

    14

    Network ACL Extensions to support enhanced networking capabilities

    User Data DNS

    Public Load balancing

    Both NATing features are flexibleto be applied in the overlay orin the underlay (~ deployment use case)

  • CloudStack NuageVsp Network Plugin

    Supported Services Virtual Networking DHCP Source NAT Static NAT Firewall Network ACL ACL Provisioning in VSP

    Copyright 2015 Alcatel-Lucent. All rights reserved. 10/11/2015

    15

    Network ACL Extensions to support enhanced networking capabilities

    User Data DNS

    Public Load balancing

    ACL Provisioning in VSP

  • CloudStack NuageVsp Network Plugin

    Supported Services Virtual Networking DHCP Source NAT Static NAT Firewall Network ACL

    Copyright 2015 Alcatel-Lucent. All rights reserved. 10/11/2015

    16

    Network ACL Extensions to support enhanced networking capabilities

    User Data DNS

    Public Load balancing

    VRS forwards request to VR(based on metadata we inject)

  • CloudStack NuageVsp Network Plugin

    Supported Services Virtual Networking DHCP Source NAT Static NAT Firewall Network ACL

    Copyright 2015 Alcatel-Lucent. All rights reserved. 10/11/2015

    17

    Network ACL Extensions to support enhanced networking capabilities

    User Data DNS

    Public Load balancing

    VR is set as name server,programmed by DHCP options

  • CloudStack NuageVsp Network Plugin

    Supported Services Virtual Networking DHCP Source NAT Static NAT Firewall Network ACL

    Copyright 2015 Alcatel-Lucent. All rights reserved. 10/11/2015

    18

    Network ACL Extensions to support enhanced networking capabilities

    User Data DNS

    Public Load balancing Realized through new plugin (see LB section)

  • Cloud Service Management Plane

    VirtualizedServicesDirectory

    Virtualized MP-BGP

    Nu

    ageVsp

    Clien

    tN

    uageV

    sp C

    lient

    Virtu

    aliz

    ed S

    erv

    ices P

    latfo

    rm

    1. Launch instance

    VSD

    UI, API, cloudmonkey UI, API, vspk

    Internal (Guest VM) DNS

    Copyright 2015 Alcatel-Lucent. All rights reserved. 10/11/2015

    19

    NuageVspPlugin

    NuageVspPlugin

    Datacenter Control Plane

    VirtualizedServicesController

    DatacenterData Plane

    VirtualRouting & Switching

    HYPERVISORHYPERVISOR

    HYPERVISORHYPERVISOR

    HYPERVISORHYPERVISOR

    HYPERVISORHYPERVISOR

    HYPERVISORHYPERVISOR

    HYPERVISORHYPERVISOR

    Brooklyn Datacenter - Zone 1

    Hardware GW for

    Bare Metal

    Nu

    ageVsp

    Clien

    tN

    uageV

    sp C

    lient

    (Vpc)VRPlugin

    (Vpc)VRPlugin

    Virtu

    aliz

    ed S

    erv