VMworld 2015: The Future of Network Virtualization with VMware NSX
1 like852 views
Since launch, VMware has seen a steady expansion in the use cases that are addressed by network virtualization. So what is next for NSX and network virtualization? This session answers this question, taking a look at how NSX is expanding beyond a single data center. It also reviews the technical state of NSX and looks forward to where network virtualization will head in the coming years.
Ad
More Related Content
What's hot (20)
Similar to VMworld 2015: The Future of Network Virtualization with VMware NSX (20)
Ad
More from VMworld (20)
Ad
Recently uploaded (20)
VMworld 2015: The Future of Network Virtualization with VMware NSX
- 2. • This presentation may contain product features that are currently under development. • This overview of new technology represents no commitment from VMware to deliver these features in any generally available product. • Features are subject to change, and must not be included in contracts, purchase orders, or sales agreements of any kind. • Technical feasibility and market demand will affect final delivery. • Pricing and packaging for any new technologies or features discussed or presented have not been determined. Disclaimer CONFIDENTIAL 2
- 3. What You’ve Done with NSX CONFIDENTIAL 3 NSX Customers 700+ Production Deployments (adding 25-50 per quarter) 100+ Organizations invested US$1M+ in NSX 65+ What You’re Doing Next EXPANDED SECURITY New security partners, integrations, and projects and applications of NSX. DEEPER INTEGRATION New infrastructure and operations partners, integrations, and frameworks for IT organizations √ APPLICATION CONTINUITY New functionality to scale deployments across vCenter instances, with the ability to: • Pool resources from multiple data centers • Recover from disasters faster • Deploy a hybrid cloud architecture • NSX 6.2 contains over 20 new features • Tested against over 1000 new scenarios
- 4. Objectives Provide the future direction of NSX and Network Virtualization Deepen your understanding of the NSX architecture Address some misconceptions about capabilities of NSX
- 5. Agenda 1 Network Virtualization: The Story So Far 2 Physical Networks & Bare-metal Workloads 3 Distributed Services 4 Beyond the Data Center – WAN and Multi-DC 5 Summary and Q&A 5CONFIDENTIAL
- 6. Major NSX Use-cases 6 Intra-Datacenter Micro-Segmentation DMZ Anywhere Secure User Environments Security IT Automating IT Developer Clouds Multi-tenant Infrastructure Automation Disaster Recovery Metro Pooling Hybrid Cloud Networking Application Continuity CONFIDENTIAL
- 7. VMware NSX™ Network Virtualization Components Cloud Consumption NSX Manager NSX Controller Data Plane • Self Service Portal • vRealize Automation, vCloud Director, OpenStack, Custom CMS • High–Performance Data Plane • Scale-out Distributed Forwarding Model • Single configuration portal • REST API entry-point • Manages Logical networks • Run-time state • Scale out, HA • Separation of Control and Data Plane ESXi, KVM, Xen Distributed Services • Logical Switch • Distributed Logical Router • Firewall • Load Balancer HW VTEPNSX Edge 7CONFIDENTIAL
- 8. Agenda 8 1 Network Virtualization: The Story So Far 2 Physical Networks & Bare-metal Workloads 3 Distributed Services 4 Beyond the Data Center – WAN and Multi-DC 5 Summary and Q&A CONFIDENTIAL
- 9. NSX with Physical Workloads VXLAN VLAN x86-based forwarding Physical Workloads VXLAN VLAN Physical Workloads Leverages x86 Highest density and throughput with partner HW HW VTEP 9CONFIDENTIAL
- 10. VXLAN Distributed Logical Routing with VTEPs VXLAN VLAN Physical View Logical View HW VTEP 10 NSX Controller CONFIDENTIAL
- 11. Distributed Logical Routing with VTEPs Logical Routing VXLAN VLAN Physical View VXLAN HW VTEP ARP REPLYARPDATA 11CONFIDENTIAL
- 12. Logical Segmentation around Application Boundaries 12 App DB DMZ CONFIDENTIAL
- 13. Logical Segmentation around Application Boundaries 13 App DB DMZ CONFIDENTIAL
- 14. Consistent Policy for Physical and Virtual VXLAN VLAN HW VTEP Physical View VXLAN Logical View Policy Enforcement Points Firewall Rules ACLs 14CONFIDENTIAL
- 15. Adding ACL Configuration to VTEP Schema % git log commit 770c7df89c2771ba90d3aaa06a9a433a230472c9 Author: Bruce Davie [email protected] Date: Fri Aug 14 14:14:26 2015 -0700 vtep: add ACLs to VTEP schema Two new tables are added to the VTEP schema, for ACL entries and ACLs (which are groups of entries). The physical port table is modified to allow ACLs to be associated with ports, and the logical router table is modified to allow ACLs to be attached to logical router ports. Signed-off-by: Bruce Davie <[email protected]> 15
- 16. Tunnels Are like Cables Third party hardware Controller (Copper Cable) Virtual STT “Cable” VXLAN “Cable” VXLAN “Cable” World World 16CONFIDENTIAL
- 17. Tunnels Are like Cables Third party hardware Controller Geneve GeneveGeneve (Copper Cable) Virtual World World 17CONFIDENTIAL
- 18. Geneve Update MAC IP UDP Geneve Options Inner Eth Inner IP Inner L4 Payload +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ |Ver| Opt Len |O|C| Rsvd. | Protocol Type | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | Virtual Network Identifier (VNI) | Reserved | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | Variable Length Options | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ Geneve is now supported in the following categories Software Linux, OVS, OVN NICs Intel, Broadcom, Mellanox, Netronome Switch ASICS Broadcom, Mellanox, Cavium, Centec Monitoring Tools wireshark, tcpdump, libcap 18CONFIDENTIAL
- 19. Is It True that You Don’t Get Real Visibility with Network Virtualization?
- 20. NSX Provides Highest Level of Visibility 20 vRealize Ops NSX Management Pack Log Insight NSX Content Pack SDDC Event Correlation Alerting Centralized Logging Per Service Dashboards Native Capabilities Integration with VMware Tools Integration with Partner Ecosystem NSX API Syslog IPFIX Port Mirroring SNMP Traceflow, Port Connections, and more… Central CLI CONFIDENTIAL
- 21. Demo CONFIDENTIAL 21 Tech Preview How do you troubleshoot / diagnose a connectivity issue between two virtual machines? vRealize Operations NSX Manager NSX Controller
- 23. Agenda 23 1 Network Virtualization: The Story So Far 2 Physical Networks & Bare-metal Workloads 3 Distributed Services 4 Beyond the Data Center – WAN and Multi-DC 5 Summary and Q&A CONFIDENTIAL
- 24. Why Distributed Services? 24 Scale out of Network Services Apply Services at the vNIC Unprecedented Visibility CONFIDENTIAL
- 25. Distributed Services – Efficient, Scale-out vswitch Hairpin Traditional Appliance Direct VM-VM Path Distributed Virtual Firewall NSX vswitch With NSX Third Party Services NSX vswitch Shortest Network Path 25 About Citrix Citrix (NASDAQ:CTXS) is the cloud company th accessing apps and data on any of the latest d build clouds, leveraging virtualization and netwo market-leading cloud solutions for mobility, des organizations of all sizes achieve the speed and than 260,000 organizations and by over 100 m citrix.com0813/PDF CONFIDENTIAL
- 26. NSX vswitch Distributed Load Balancing 26 Web Tier App Servers Database Load Balancer Load Balancer Physical ViewLogical View NSX vswitch CONFIDENTIAL
- 27. 27 Distributed Services Performance (FW + Routing) 10 11 12 13 14 15 16 17 18 19 64 512 1500 32k 64k SendthroughputinGbps TCP Message Size 100 Rules 500 Rules 1000 Rules 5000 Rules Line rate for message size > 512 Intel Xeon CPU E5-2680 v2 @ 2.80GHz 2 socket, 10 cores per socket (Ivy Bridge) Logical Switch Logical Switch CONFIDENTIAL
- 28. What Is the Role of DPDK in High-performance x86 Forwarding?
- 29. Agenda 29 1 Network Virtualization: The Story So Far 2 Physical Networks & Bare-metal Workloads 3 Distributed Services 4 Beyond the Data Center – WAN and Multi-DC 5 Summary and Q&A CONFIDENTIAL
- 30. Beyond the DC 30 Today Tomorrow Future Multi data center deployment Disaster Recovery Federation and MPLS SD-WAN CONFIDENTIAL
- 31. Multi-DC Options Stretched Cluster Separate Clusters or Multi-VC L2VPN MPLS Scope Metro Geo Global Global Latency (max) 10ms 150ms Any Any Features Seamless Pooling Across DCs Logical networks span DCs NSX at one or both ends Independent administration/Federation Metro Storage required Independent storage L2 extension L3 (L2 possible) Full NSX semantics across DCs Full NSX semantics across DCs Multi-tenant WAN 31CONFIDENTIAL
- 32. Site A Tenant A Tenant B Tenant C NSX API MP-BGP & MPLS for Multi-site Deployments NSX API MP-BGP Site B eBGP Peering MP-BGP Control Plane IP/MPLS MPLSoGRE NSX Edge (ASBR) NSX Edge (ASBR) Tenant A Tenant B Tenant C 32CONFIDENTIAL
- 33. Summary 33 Differentiation NSX is mainstream Innovation and growth CONFIDENTIAL
- 34. Go learn more! Wednesday Keynote • Hands on Labs! • Spotlight Sessions: NET6639-S The Next Horizon for Cloud Networking and Security • SEC6640-S SDDC: Security for the new battlefield • NET4941 VMware NSX - Deep Dive • NET5212 NSX Performance • NET5213 Operational Best Practices for VMware NSX • NET5252 NSX Management Pack for vRealize Operations Manager • NET4995 Integrating Physical Workloads and Infrastructure with a NSX Virtual Network • NET5560 Bridging Virtual and Physical in NSX with OVSDB Standard-Based Hardware VTEP Integration • NET5989 - Multi-vCenter Solutions with VMware NSX • NET4855 - Want Your Apps to Roam Freely? - NSX Solutions for Multi-Site Data Centers 34CONFIDENTIAL
- 35. NSX Ecosystem CONFIDENTIAL 35 Service Insertion “Leverage full automation and service insertion for NSX” NSX aware “Leverage NSX API and metadata to bring a solution” Co-existence “Let’s meet in the network” Works with any switching fabric Works with routing ecosystem using traditional protocols Existing Physical firewall provide security sitting in front of NSX Edge at layer 3 Existing Physical/virtual ADC services can connect to NSX at layer 2 or layer 3
- 36. Network Virtualization Next Steps with VMware NSX CONFIDENTIAL 36 virtualizeyournetwork.com The online resource for the people, teams and organizations that are adopting network virtualization communities.vmware.com Connect and engage with network virtualization experts and fellow VMware NSX users vmware.com/go/NVtraining Build knowledge and expertise for the next step in your career labs.hol.vmware.com Test drive the capabilities of VMware NSX