Interop2018 contrail ContrailEnterpriseMulticloud
4 likes•957 views
The document discusses Juniper Networks' Contrail Enterprise Multicloud, which facilitates the management of workloads across multiple cloud environments, ensuring hybrid connectivity and policy enforcement. It outlines the architecture, including elements like Kubernetes, OpenShift, and various network configurations, while emphasizing automation and integration with tools like Ansible. Additionally, it highlights the importance of minimizing human error and complexity in cloud management through efficient orchestration and security measures.
Interop2018 contrail ContrailEnterpriseMulticloud
- 1. © 2018 Juniper Networks CONTRAIL ENTERPRISE MULTI CLOUD
- 2. © 2018 Juniper Networks AGENDA 2 • • • Contrail Enterprise Multicloud
- 3. © 2018 Juniper Networks 3
- 4. © 2018 Juniper Networks % 5 - IT
- 5. © 2018 Juniper Networks
- 6. © 2018 Juniper Networks K8S/OpenShift LB Web API DB node node node nodeService: Web:replicas:2 label:apache API:replicas:3 label:nginx DB :replicas:2 label:sql
- 7. © 2018 Juniper Networks K8S/OpenShift node node node node
- 8. © 2018 Juniper Networks
- 9. © 2018 Juniper Networks • • • Infrastructure As A Code
- 10. © 2018 Juniper Networks 10
- 11. © 2018 Juniper Networks • o o • o L2 o L3 o o VM/ •
- 12. © 2018 Juniper Networks A A A A A A A
- 13. © 2018 Juniper Networks Kubernetes / Openshift IP LB Web API DB pod network 10.0.64.0/14 Service network 203.0.113.0/16 .1 .2 .3 .4 .5 .6 .7 .8 IP .1
- 14. © 2018 Juniper Networks LB Web API DB pod network 10.0.64.0/14 Service network 203.0.113.0/14 .1 .2 .3 .4 .5 .6 .7 .8 .1 A B
- 15. © 2018 Juniper Networks VLAN VXLAN • o VLAN § o VXLAN § VNI o L2 Fabric § • o o • o
- 16. © 2018 Juniper Networks Private cloud DC WAN/ Interconnect HUMAN ERRORS = • • • OS • • COMPLEXITY • • • INCONSISTENCY “ Web ” “ ” “Web Web 2 ” REVENUE-LOSS LONG LEAD TIME Private cloud DC
- 17. © 2018 Juniper Networks CONTRAIL ENTERPRISE MULTICLOUD 17
- 18. © 2018 Juniper Networks CONTRAIL ENTERPRISE MULTICLOUD Operator Username Password Contrail Command Contrail Command Contrail Command Multicloud Architecture Build Fabric Provide Hybrid Connectivity Build PODs Apply Netw / Sec. Policies User Conn. & Policies Monitor / Troubleshoot Contrail Command… vRouter (+security) OpenShift Kubernetes VMware OpenStack AWS VPC - 1 GCP VPC - 2
- 19. © 2018 Juniper Networks One Platform for All Clouds • • L2 • LABEL FW • • AWS VPC - 1 GCP VPC - 2 Manage workloads in multiple clouds as though they were in one Contrail Enterprise Multicloud Multivendor Orchestration & Management vRouter (+security) OpenShift Kubernetes USE CASE: PRIVATE TO PUBLIC CLOUD
- 20. © 2018 Juniper Networks CONTRAIL ENTERPRISE MULTICLOUD 20 AWS VPC - 1 vRouter (+security) OpenShift Kubernetes • TLS/Ipsec o o • • L2 TLS/IPsec MAC:A MAC:B DMACSMACPAYLOAD DMACSMACPAYLOAD TLS SIP DIP DMACSMACPAYLOAD MPLS GRE SIP DIP DMACSMACPAYLOAD MPLS GRE SIP DIP DMACSMACPAYLOAD MPLS GRE SIP DIP
- 21. © 2018 Juniper Networks CONTRAIL ENTERPRISE MULTICLOUD FW Label:Web Label:API Label:DB Web App DB Policy = P1 Label:Web Label:API Label:DB App:Service1 Dep:Production App:Service1 Dep:Develop • o IP o FW • FW o Node Contrail FW • FW o FW o
- 22. © 2018 Juniper Networks CONTRAIL ENTERPRISE MULTICLOUD apiVersion: v1 kind: Pod metadata: name: cirros-vn1-1 annotations: { "opencontrail.org/network" : '{"domain":"default-domain", "project": "juniper-test", "name":"pod-service-1"}' } labels: application: service-app1 label: web spec: replicas: 2 containers: - name: cirros-vn1-1 image: docker.io/cirros imagePullPolicy: IfNotPresent
- 23. © 2018 Juniper Networks CONTRAIL ENTERPRISE MULTICLOUD apiVersion: v1 kind: Pod metadata: name: cirros-vn1-1 annotations: { "opencontrail.org/network" : '{"domain":"default-domain", "project": ”new-service", "name":”web-network"}' } labels: application: service-app1 label: web
- 24. © 2018 Juniper Networks CONTRAIL ENTERPRISE MULTICLOUD Service:1 Namespace : A Service : A Service : B Service:2 Service : B Namespace : B Service : A Service : B Service:3 VRF VRF VRF C A B
- 25. © 2018 Juniper Networks CONTRAIL ENTERPRISE MULTICLOUD Discovery / Onboarding of devices • UI DC • ZTP/ZTR • • Juniper MX, QFX • Third party devices and PNF/VNF* • • • Ethernet, IP overlays • Playbook • • LLDP • EVPN/VXLAN ( • interfaces, igp, analytics, protocols, policies, loopbacks, overlay protocol (EVPN BGP) netconf netconf
- 26. © 2018 Juniper Networks CONTRAIL ENTERPRISE MULTICLOUD Ansible integration • Contrail Ansible • • Ansible
- 27. © 2018 Juniper Networks CONTRAIL ENTERPRISE MULTICLOUD Demo AWS VPC - 1 192.168.10.0/24
- 28. © 2018 Juniper Networks CONTRAIL ENTERPRISE MULTICLOUD IP FW Any Cloud Any Workload Any Deployment Contrail Enterprise Multicloud
- 29. © 2018 Juniper Networks TungstenFabric https://tungstenfabric.io/ Linux Foundation https://www.linuxfoundation.org/projects/networking/ TungstanFabric + Openshift Origin http://komadori-blog.blogspot.com/2018/06/openshift-enterprise.html TungstenFabric https://connpass.com/event/90787/
- 30. © 2018 Juniper Networks THANK YOU!