Enhancing Apache CloudStack Networking With Nuage … · • Next steps • Nuage VSP ... Cloud...

Enhancing Apache CloudStack Networking With

Enhancing Apache CloudStack Networking With Nuage Networks SDN Solution

Kris SterckxCloudStack Development Lead at Nuage Networkskris.sterckx@nuagenetworks.net

Dublin, Oct. 9 2015

• Nuage VSP Architecture – Policy Driven SDN

• CloudStack NuageVsp Network Plugin

Apache CloudStack with Nuage Networks

• CloudStack Vpc Inline Load Balancer Plugin

• Next steps

• Nuage Networks VSP brings Policy-driven SDN to the Cloud

• Multi-Hypervisor support – ESXi, KVM, XenServer• Containers support

Bare-metal support

Nuage Networks Virtualized Services Platform

• Bare-metal support• Multi-CMS support• OpenStack Icehouse/Juno/Kilo/Liberty/Mitaka support• CloudStack 4.3, 4.5 and 4.6* support

Cloud Service Management Plane

VirtualizedServicesDirectory

VirtualizedServicesController

Virtualized Services Directory (VSD)•Network Policy Engine – abstracts complexity•Service templates and analytics

Nuage NetworksVirtualized Services Platform (VSP)

MP-BGP

Datacenter Control Plane

ServicesController •Service templates and analytics

Virtual Routing & Switching (VRS)•Distributed switch / router – L2-4 rules•Integration of bare metal assets

Virtualized Services Controller (VSC)• SDN Controller, programs the network• Rich routing feature set

DatacenterData Plane

VirtualRouting & Switching

HYPERVISORHYPERVISOR

Brooklyn Datacenter - Zone 1

IP Fabric

Hardware GW for

Bare Metal

VXLAN tunneled

OpenFlow

dVRSdVRS dVRSdVRS

VSC VSCVMVM

ACS HostACS Host ACS HostACS Host

• Distributed switching/routing

• Direct VM to VM communicationeverywhere • on same hypervisor• VXLAN tunneled across hypervisors• VR VM is not involved

DatacenterIP Underlay Network

Logical Network Drawing

RouterFW/NAT

VLAN 1 VLAN 2 VLAN 3VMVM

Internet WAN

• VR VM is not involved

• Direct VXLAN(/MPLSoGRE) communicationto the PE/GW router (in the overlay)

• Or directly dropped to underlay

• We want to expose as much as possible the goodies of SDNto CloudStack

• CloudStack engineering team staffing featureswithin cross-functional teams

Nuage Networks CloudStack

within cross-functional teams

• Extensive test automation• Functional test (incl. Marvin)• Concurrency tests• Scale, Performance, Longevity tests

• Next steps

Virtualized MP-BGP

ageVsp

CloudStack user Nuage VSP user (optional)

ices P

UI, API, cloudmonkey UI, API, vspk

NuageVspPlugin

Hardware GW for

Bare Metal

ageVsp

(Vpc)VRPlugin

ices P

OpenFlow

• Advanced Networking • Isolated Networks• Virtual Private Clouds

• Shared Networks

CloudStack NuageVsp Network Plugin

• Supported Services• Virtual Networking• DHCP • Source NAT• Static NAT • Firewall • Network ACL

(Vpc)VRPlugin

• Network ACL• Extensions to support enhanced networking capabilities

• User Data• DNS

• Public Load balancing

NuageVspPlugin

VpcInlineLb PluginVpcInlineLb Plugin

• VSP providing virtualnetworking w/ distributed routing

• CS does the IP allocation;Plugin provisions VSP;The hypervisor VRS is the DHCP provider to the VM

• Source NAT provisioningin VSP

• Static NAT rulesprovisioning in VSP

Both NAT’ing features are flexibleto be applied in the overlay orin the underlay (~ deployment use case)

• Supported Services• Virtual Networking• DHCP • Source NAT• Static NAT • Firewall • Network ACL• ACL Provisioning in VSP

• ACL Provisioning in VSP

• VRS forwards request to VR(based on metadata we inject)

• VR is set as name server,programmed by DHCP options

• Public Load balancing• Realized through new plugin (see LB section)

Virtualized MP-BGP

ageVsp

ices P

1. Launch instance

Internal (Guest VM) DNS

NuageVspPlugin

Hardware GW for

Bare Metal

ageVsp

(Vpc)VRPlugin

ices P

1.2 Plugin provisionsVM interface in VSPw/ DHCP options forhost/domain name & name server = VR IP 1.3 Instance boots & obtains DHCP options

VRS1.1 VR provisionedw/ DNS entry

Virtualized MP-BGP

ageVsp

NuageVsp Plugin – VSP Audit-Sync

ices P

@NuageVsp device : Audit/Sync

NuageVspPlugin

Hardware GW for

Bare Metal

ageVsp

(Vpc)VRPlugin

AUDIT :File inconsistencies

SYNC :Resolve inconsistencies

ices P

VRSyaml

• Provide capabilities to the user which are present in VSP butnot yet in CloudStack

• Provides ability to customer to ‘customize’ their SDN experience

• VSP template used to instantiate L3 domain from CloudStack

Consuming advanced SDN

• Cloud Service Provider has the ability to turn on/off capabilities at the template level

• This behavior is pushed down to the network level

Virtualized MP-BGP

ageVsp

ices P

1.2 Define SDN customization2. ACS provisioning

1. 1 Provision SDN template

CloudStack user Nuage VSP user

NuageVspPlugin

Hardware GW for

Bare Metal

ageVsp

(Vpc)VRPlugin

ices P

2.1 VSPprovisioning*by plugin

2.2 Advanced functionality @control/data path

• Next steps

Web tier

App tier

Public

InternetInternet

WS1WS1 WS2WS2

Public Load Balancing – VR based

Public IPPublic IP

10/11/2015

App tier

DB tier1. Allocate public IP2. Assign LB rules & VM’s

Public LB by HAproxy,

Web tier

App tier

Public

InternetInternet

WS1WS1 WS2WS2

HAproxybut customizable

Public Load Balancing – VpcInlineLb based

Public IPPublic IP

vipvip

10/11/2015

App tier

>Orchestration of - Public IP to secondary IP static NAT- LB rule provisioning (vip = secondary IP)

Web tier

App tier

Public

InternetInternet

WS1WS1 WS2WS2HAproxybut customizable

Public Load Balancing – SDN + VpcInlineLb based

vipvip

NuageNuagePublic IPPublic IP

10/11/2015

App tier

DB tier1. Allocate public IP2. Assign LB rules & VM’s>Orchestration of

- Public IP to secondary IP static NAT- LB rule provisioning (vip = secondary IP)

NuageVRS

Web tier

App tier

Public

InternetInternet

WS1WS1 WS2WS2

NuageNuage

Public Load Balancing – SDN + VpcInlineLb based

Public IPPublic IP

10/11/2015

App tier

NuageVRS

extra-VPC LB system tier

Allocating vip’sout of VPC CIDR LBLB

vipvip

• Next steps

Next steps

• CS 4.6 support• CLOUDSTACK-8832 / PR #801 updates the NuageVsp plugin for the

latest Nuage VSP 3.2 release - pls review !

• Features on the Roadmap include :

10/11/2015

• Features on the Roadmap include :• (Internal Load Balancer)• Port Forwarding• Remote Access VPN• Site-to-Site VPN• … and happy to hear your input!

Q&AApache CloudStack with Nuage Networks

THANK YOU

Enhancing Apache CloudStack Networking With Nuage … · • Next steps • Nuage VSP ... Cloud...

Documents

Transcript of Enhancing Apache CloudStack Networking With Nuage … · • Next steps • Nuage VSP ... Cloud...

Fortinet Fabric Connectors for SDN and Cloud Data Sheet · Nuage VSP), deploy a dedicated ... (VMware ESXi or KVM) to install Fortinet Fabric Connector for Cisco ACI and Nuage Networks

Knife CloudStack

CloudStack EU User Group - Making stuff better through CloudStack

Nuage Design

Dell Keeps up the Open Networking Momentumi.dell.com/sites/doccontent/shared-content/data-sheets/... · 2017-10-31 · Nuage Networks VSP automates virtual network provisioning Network

CloudStack Collab Conference 2015 Run CloudStack in Docker

Accelerate Service Delivery with Network Service Orchestration · 2020-04-04 · Nuage VSP as well as northbound portals such as OpenStack, VMware vRealize, Science Logic and OSS/BSS

The evolving IT environment: Maximizing ... - Nuage Networks · Nuage Networks VSP, as depicted in Figure 1, is a comprehensive networking solution built for open hybrid clouds. It

CloudStack DC Meetup - Apache CloudStack Overview and 4.1/4.2 Preview

Nuage Project at UW

CloudStack Meetup at Nuage Networks - September 2015

Nuage business plan

CloudStack Developer's Guide Apache CloudStack 4.1 fileApache CloudStack 4.1.1 CloudStack Developer's Guide Edition open source cloud computing ™ Apache CloudStack Legal Notice Licensed

CloudStack Architecture

Nuage Networks DemoFriday: Container Networking in Kubernetes with Nuage Networks

CloudStack EU user group - CloudStack news

Case Studies: Private Cloud using SDN with Nuage Networks VSP and Avi Networks CADP

Nuage Networks

Nuage Networks VSP - Delivering SDN in a Big Way - Packet Pushers Whitepaper

Cloudstack Japan - cloudstack, the best kept secret in the cloud