SlideShare a Scribd company logo
OpenStack Networking Introduction
Yves Fauser, System Engineer VMware NSBU
10/10/2013

© 2011 VMware Inc. All rights reserved
Agenda
§  Traditional Networking - refresher
§  OpenStack integrated projects big picture
§  Why OpenStack Networking is called Neutron now
§  Networking before Neutron
§  Nova-Networking
§  Drawbacks of Nova-Networking that led to Neutron
§  OpenStack Networking with Neutron
§  Neutron Overview
§  Available Plugins
§  Neutron Demo
§  Neutron – State of the Nation

2
Traditional Networking Refresher
Traditional Networking Refresher

© 2011 VMware Inc. All rights reserved
Traditional Networking - Refresher
§  Layer 2 Network Connection à
Direct Ethernet connection with no Routing hops (e.g. 192.168.1.10 to 192.168.1.11)
§  Layer 3 Network Connection à
Endpoint can reach each other only through multiple routing hops
§  VLAN – A way to carve up a physical switch into multiple L2 Networks (segments)

VLAN 10

VLAN 20
Access Port
“untagged”

VLAN “Trunk” Port / “tagged”
VM VM VM VM

Hypervisor
Switch

§  Access Port – An Ethernet Port that can only access one VLAN that is statically
configured on the physical switch (no VLAN tag/id – ‘untagged’)
§  Trunk Port – An Ethernet Port that carries multiple VLANs (with VLAN tag/id –
‘untagged’) and connects to other Switches and possibly Hypervisors

4
OpenStack Projects & Networking

© 2011 VMware Inc. All rights reserved
Integrated (aka ‘Core’) projects (Grizzly release)
Dashboard
(horizon)

Network
(Neutron)

Provides UI
for other projects

Provides
network
connectivity

Block
Storage
(cinder)

Provides
volumes

Compute
(nova)

Provides
Images

Provides Authentication and
Service Catalog for other
Projects

Identity
(keystone)
6

Image
repo
(glance)

Stores
Images
as
Objects

Object
Storage
(Swift)
Why is OpenStack Networking called Neutron?
§  Before June 19th 2013, OpenStack Networking was named “Quantum”,
hence all the services, APIs, CLI commands hold the name “Quantum”
§  Unfortunately there were trademark issues with the name “Quantum” (see
“Quantum corporation”), therefore all references to “Quantum” need to be
changed in all the Docs, Services Names, APIs, CLI Commands, etc.
§  The new name for OpenStack Networking is now Neutron!

7
Networking before Neutron
Nova-Networking
Drawbacks of Nova-Networking that led to Neutron

© 2011 VMware Inc. All rights reserved
OpenStack Networking before Neutron
§  Nova has its own networking service –
nova-network. It was used before Neutron
§  Nova-network is still present today,
and can be used instead of Neutron
§  Nova-network does §  base L2 network provisioning
through Linux Bridge (brctl)
§  IP Address management for
Tenants (in SQL DB)

nova-console
(vnc/vmrc)

nova-api
(OS,EC2,Admin)

nova-compute

nova-cert

Libvirt, XenAPI, etc.

Nova
DB

Hypervisor
(KVM, Xen,
etc.)

Queue

nova-metadata

nova-scheduler

§  configure DHCP and DNS
entries in dnsmasq
§  configure fw-policies and NAT
in IPTables (nova-compute)
§  Nova-network only knows 3 basic Network-Models;

nova-volume

novanetwork

§  VLAN based – Every tenant gets a VLAN, DHCP enabled

Volume-Provider
(iSCSI, LVM, etc.)

Network-Providers
(Linux-Bridge or OVS with
brcompat, dnsmasq, IPTables)

§  Flat & Flat DHCP – direct bridging of Instance to external eth. Interface
with and w/o DHCP

9

novaconsoleauth

Inspired by
Nova-Networking – Drawbacks that lead to develop Neutron
§  Nova-Networking is missing an well defined API for consuming networking
services (tenant API for defined topologies and addresses)
§  Nova-Networking only allows for the 3 simple models;
Flat, Flat/DHCP and VLAN/DHCP, all of those are limited in scale and
flexibility – e.g. max. 4094 VLAN ID limit
§  Closed solution; No ability to use network services from 3rd parties and/or
to integrate with Network vendors or overcome the limitations of NovaNetwork
§  No support for:
§  Advanced OpenVSwitch features like Network Virtualization
(IP-Tunnels instead of VLANs)
§  Multiple user configurable networks per project
§  User configurable routers (L3 Devices)

10
Network Virtualization Overview
Network/Server Virtualization Analogy
Network Virtualization – a technical definition
Network Virtualization – Key components

© 2011 VMware Inc. All rights reserved
Key Concepts – Decouple, Reproduce, Automate

Application

Application

Workload

Application

Workload

Workload

L2, L3, L4-7 Network Services

x86 Environment
Software
Virtual
Machine

Virtual
Machine

Virtual
Machine

Server Hypervisor

Virtual
Network

Decoupled

Requirement: x86

Virtual
Network

Virtual
Network

Network Hypervisor
Requirement: IP Transport

Hardware

General Purpose Server Hardware

12

General Purpose IP Hardware
Network Virtualization – A technical definition
Network virtualization is:
§  A reproduction of physical networks:
§ 

Q: Do you have L2 broadcast / multicast, so apps do not need to be modified?

§ 

Q: Do you have the same visibility and control over network behavior?

§  A fully isolated environment:
§ 

Q: Could two tenants decide to use the same RFC 1918 private IP space?

§ 

Q: Could you clone a network (IPs, MACs, and all) and deploy a second copy?

§  Physical network location independent:
§ 

Q: Can two VMs be on the same L2 logical network, while in different physical L2 networks?

§ 

Q: Can a VM migrate without disrupting its security policies, packet counters, or flow state?

§  Physical network state independent:
§ 

Q: Do physical devices need to be updated when a new network/workloads is provisioned?

§ 

Q: Does the application depend on a feature in the physical switch specific to a vendor?

§ 

Q: If a physical device died and was replaced, would application details need to be known?

§  Network virtualization is NOT:
§ 
13

Running network functionality in a VM (e.g., Router or Load-balancer VM)
What are the key components of network virtualization?!

14
OpenStack Networking with Neutron
Neutron Overview
Available Plugins

© 2011 VMware Inc. All rights reserved
OpenStack Neutron – Plugin Concept
Neutron

API Extention"

Neutron 

Core API"

Neutron Service"
"
•  L2 network abstraction definition and management,
IP address management
•  Device and service attachment framework
•  Does NOT do any actual implementation of
abstraction

Extension API
implementation is
optional

"

Plugin API"
"
Vendor/User Plugin"
• 
• 
• 
• 

Maps abstraction to implementation on the Network (Overlay e.g. NSX or physical Network)
Makes all decisions about *how* a network is to be implemented
Can provide additional features through API extensions.
Extensions can either be generic (e.g. L3 Router / NAT), or Vendor Specific

"
16
Plugins available in the market (incomplete list)
§  OVS Plugin
§  Supports GRE based Overlays, NAT/Security groups, etc.
§  Linux Bridge Plugin
§  Limited to L2 functionality, L3, floating IPs and provider networks.
No support for Overlays
§  VMware NSX (aka Nicira NVP) Plugin
§  Network Virtualization solution with centralized controller + OpenVSwitch (Details
follow in the next few slides)
§  Cisco UCS / Nexus 5000 Plugin
§  Provisions VLANs on Nexus 5000 switches and on UCS Fabric-Interconnect as
well as UCS B-Series Servers network card (palo adapter)
§  Can use GRE and only configure OVS, but then there’s no VLAN provisioning
§ 

NEC and Ryu Plugin
§  Openflow Hop-by-Hop implementations with NEC or Ryu controller

§  Other Plugins from Midokura, Juniper (Contrail), Big Switch, Brocade, etc. are in
various stages of development (see links below for details)

17
Neutron Demo
It’s Demo time! … (Sorry, no Connection L)

© 2011 VMware Inc. All rights reserved
Neutron – State of the Nation – What came with Grizzly
§  Multiple new Plugins: Big Switch, Brocade VCS, Midokura, Hyper-V,
Plumgrid, ML2
§  Great Horizon integration
(topology map, NIC selection, router mgmt.)
§  LBaaS reference Implementation using HAProxy
§  New Metadata implementation that allows for
overlapping IP space

19
Neutron – State of the Nation – What will be in Havana
§  More services integration;
§  Integrating external Firewalls
§  More Load-Balancing with external Load-Balancers instead of
HAProxy reference implementation
§  VPN reference implementation
§  Improved support for
§  IPv6 (feature parity with IPv4), bare metal PXE boot
§  More and new vendor plugins
§  Nova-Networking migration options
https://blueprints.launchpad.net/neutron/havana

20
You can find a recording of this session, as well as the
second part (technical Deep Dive) on the OpenStack
Foundation Youtube Channel:
http://www.youtube.com/watch?
v=ascEICz_WUY&list=PLKqaoAnDyfgrHcZI2nOlD022p2TG8F2_b
http://www.youtube.com/watch?
v=CRx43Iou1V8&list=PLKqaoAnDyfgrHcZI2nOlD022p2TG8F2_b

More Related Content

What's hot (20)

PPTX
Quantum (OpenStack Meetup Feb 9th, 2012)
Dan Wendlandt
 
PPTX
OpenStack Networking and Automation
Adam Johnson
 
PDF
Nova net-or-neutron-atlanta2014.pptx
Somik Behera
 
PPTX
Neutron behind the scenes
inbroker
 
PPTX
Training open stack networking -neutron
Haifeng Yan (颜海峰)
 
PPTX
Openstack Basic with Neutron
KwonSun Bae
 
ODP
Networking in OpenStack for non-networking people: Neutron, Open vSwitch and ...
Dave Neary
 
PPTX
Overview of Distributed Virtual Router (DVR) in Openstack/Neutron
vivekkonnect
 
PDF
Open Source Backends for OpenStack Neutron
mestery
 
PPTX
2014 OpenStack Summit - Neutron OVS to LinuxBridge Migration
James Denton
 
PPTX
Troubleshooting Tracebacks
James Denton
 
PDF
An Introduction to OpenStack Networking
Scott Lowe
 
PPTX
DevOops - Lessons Learned from an OpenStack Network Architect
James Denton
 
PDF
neutron_icehouse_update
Akihiro Motoki
 
PDF
Open stack advanced_part
lilliput12
 
PDF
ONUG Tutorial: Bridges and Tunnels Drive Through OpenStack Networking
markmcclain
 
PPTX
Juniper Network Automation for KrDAG
KwonSun Bae
 
PPTX
OVN - Basics and deep dive
Trinath Somanchi
 
PDF
Open stack networking vlan, gre
Sim Janghoon
 
PPTX
OpenStack Neutron behind the Scenes
Anil Bidari ( CEO , Cloud Enabled)
 
Quantum (OpenStack Meetup Feb 9th, 2012)
Dan Wendlandt
 
OpenStack Networking and Automation
Adam Johnson
 
Nova net-or-neutron-atlanta2014.pptx
Somik Behera
 
Neutron behind the scenes
inbroker
 
Training open stack networking -neutron
Haifeng Yan (颜海峰)
 
Openstack Basic with Neutron
KwonSun Bae
 
Networking in OpenStack for non-networking people: Neutron, Open vSwitch and ...
Dave Neary
 
Overview of Distributed Virtual Router (DVR) in Openstack/Neutron
vivekkonnect
 
Open Source Backends for OpenStack Neutron
mestery
 
2014 OpenStack Summit - Neutron OVS to LinuxBridge Migration
James Denton
 
Troubleshooting Tracebacks
James Denton
 
An Introduction to OpenStack Networking
Scott Lowe
 
DevOops - Lessons Learned from an OpenStack Network Architect
James Denton
 
neutron_icehouse_update
Akihiro Motoki
 
Open stack advanced_part
lilliput12
 
ONUG Tutorial: Bridges and Tunnels Drive Through OpenStack Networking
markmcclain
 
Juniper Network Automation for KrDAG
KwonSun Bae
 
OVN - Basics and deep dive
Trinath Somanchi
 
Open stack networking vlan, gre
Sim Janghoon
 
OpenStack Neutron behind the Scenes
Anil Bidari ( CEO , Cloud Enabled)
 

Viewers also liked (14)

PDF
OpenStack Architecture
Mirantis
 
PDF
XebiCon'16 : WeScale - DNS as a Service, the OpenStack way. Par Pascal Edoua...
Publicis Sapient Engineering
 
PPTX
Addressing DHCP and DNS scalability issues in OpenStack Neutron
Vikram G Hosakote
 
PDF
Postgres on OpenStack
EDB
 
PDF
Making Glance tasks work for you - OpenStack Summit May 2015 Vancouver
Brian Rosmaita
 
PPTX
Couch to open_stack_keystone
ProfessionalVMware
 
PDF
8 Key Facts about the Keystone Pipeline
U.S. Chamber of Commerce
 
PPTX
OpenStack Storage Overview
Bharat Kumar Kobagana
 
PDF
OpenStack keystone identity service
openstackindia
 
PPTX
Deep Dive into Keystone Tokens and Lessons Learned
Priti Desai
 
PPTX
Introduction to OpenStack Architecture
OpenStack Foundation
 
PDF
OpenStack Tutorial
Bret Piatt
 
PDF
Openstack 101
Kamesh Pemmaraju
 
PPTX
OpenStack Framework Introduction
Jason TC HOU (侯宗成)
 
OpenStack Architecture
Mirantis
 
XebiCon'16 : WeScale - DNS as a Service, the OpenStack way. Par Pascal Edoua...
Publicis Sapient Engineering
 
Addressing DHCP and DNS scalability issues in OpenStack Neutron
Vikram G Hosakote
 
Postgres on OpenStack
EDB
 
Making Glance tasks work for you - OpenStack Summit May 2015 Vancouver
Brian Rosmaita
 
Couch to open_stack_keystone
ProfessionalVMware
 
8 Key Facts about the Keystone Pipeline
U.S. Chamber of Commerce
 
OpenStack Storage Overview
Bharat Kumar Kobagana
 
OpenStack keystone identity service
openstackindia
 
Deep Dive into Keystone Tokens and Lessons Learned
Priti Desai
 
Introduction to OpenStack Architecture
OpenStack Foundation
 
OpenStack Tutorial
Bret Piatt
 
Openstack 101
Kamesh Pemmaraju
 
OpenStack Framework Introduction
Jason TC HOU (侯宗成)
 
Ad

Similar to Open stack networking_101_part-1 (20)

PPTX
Networking in Openstack - Neutron 101
Mochamad Taufik Romdony
 
PPTX
Midokura OpenStack Meetup Taipei
Dan Mihai Dumitriu
 
PDF
[OpenStack Day in Korea 2015] Track 3-6 - Archiectural Overview of the Open S...
OpenStack Korea Community
 
PDF
Agile OpenStack Networking with Cisco Solutions
Cisco DevNet
 
PDF
CloudKC: Evolution of Network Virtualization
Cynthia Thomas
 
PDF
OpenStack Neutron: What's New In Kilo and a Look Toward Liberty
mestery
 
PDF
Midokura @ OpenStack Seattle
Cynthia Thomas
 
PPTX
Navigating OpenStack Networking
PLUMgrid
 
PDF
Introduction to Software Defined Networking and OpenStack Neutron
Sana Khan
 
PDF
What's the deal with Neutron?
Cynthia Thomas
 
PDF
OpenStack networking (Neutron)
CREATE-NET
 
PPTX
VMWare: Nova and NVP Support - Gary Kotton and Dimitri Desmidt
Cloud Native Day Tel Aviv
 
PPTX
Openstack Overview
rajdeep
 
PPTX
BRKDCT-2445 Agile OpenStack Networking with Cisco Solutions - Cisco Live! US ...
Rohit Agarwalla
 
PDF
Openstack Networking and ML2
Szlovencsak Attila
 
PDF
Openstack Networking Internals - first part
lilliput12
 
PDF
OpenStack: Networking Roadmap, Collaboration and Contribution
Open Networking Summit
 
PDF
OpenStack and OpenContrail for FreeBSD platform by Michał Dubiel
eurobsdcon
 
PDF
Bridges and Tunnels: A Drive Through OpenStack Networking
markmcclain
 
PDF
Inside Architecture of Neutron
markmcclain
 
Networking in Openstack - Neutron 101
Mochamad Taufik Romdony
 
Midokura OpenStack Meetup Taipei
Dan Mihai Dumitriu
 
[OpenStack Day in Korea 2015] Track 3-6 - Archiectural Overview of the Open S...
OpenStack Korea Community
 
Agile OpenStack Networking with Cisco Solutions
Cisco DevNet
 
CloudKC: Evolution of Network Virtualization
Cynthia Thomas
 
OpenStack Neutron: What's New In Kilo and a Look Toward Liberty
mestery
 
Midokura @ OpenStack Seattle
Cynthia Thomas
 
Navigating OpenStack Networking
PLUMgrid
 
Introduction to Software Defined Networking and OpenStack Neutron
Sana Khan
 
What's the deal with Neutron?
Cynthia Thomas
 
OpenStack networking (Neutron)
CREATE-NET
 
VMWare: Nova and NVP Support - Gary Kotton and Dimitri Desmidt
Cloud Native Day Tel Aviv
 
Openstack Overview
rajdeep
 
BRKDCT-2445 Agile OpenStack Networking with Cisco Solutions - Cisco Live! US ...
Rohit Agarwalla
 
Openstack Networking and ML2
Szlovencsak Attila
 
Openstack Networking Internals - first part
lilliput12
 
OpenStack: Networking Roadmap, Collaboration and Contribution
Open Networking Summit
 
OpenStack and OpenContrail for FreeBSD platform by Michał Dubiel
eurobsdcon
 
Bridges and Tunnels: A Drive Through OpenStack Networking
markmcclain
 
Inside Architecture of Neutron
markmcclain
 
Ad

Recently uploaded (9)

PPTX
LESSON 1 IN PHILOSOPHY- INTRODUCTION TO PHILOSOPHY
MaimaiAlleraAcpal
 
PDF
UCSP-Quarter1_M5.pdf POLITICS AND POLITICL
jaredcagampan86
 
PPTX
Remote_Work_Productivity_Strategies.pptx
MuhammadUzair504018
 
PPTX
AAM - NQAS Orientation CHALLANGES & SOLUTION 24 & 25 FEB24.pptx
minikashyap9528
 
PPTX
Understanding Emotional Intelligence: A Comprehensive Overview
siddharthjaan
 
PDF
The Story of Al-Fitra by Mr. Saidi Adam Younes
ademyounessaidi
 
PDF
ExpoGestão 2025 - Networking – O Poder das Conexões Humanas
ExpoGestão
 
PPTX
Free Preparation and Survival Apps that can save your life
Bob Mayer
 
PPTX
Impact_of_Power_Outages_Presentation.pptx
mansisingh27077
 
LESSON 1 IN PHILOSOPHY- INTRODUCTION TO PHILOSOPHY
MaimaiAlleraAcpal
 
UCSP-Quarter1_M5.pdf POLITICS AND POLITICL
jaredcagampan86
 
Remote_Work_Productivity_Strategies.pptx
MuhammadUzair504018
 
AAM - NQAS Orientation CHALLANGES & SOLUTION 24 & 25 FEB24.pptx
minikashyap9528
 
Understanding Emotional Intelligence: A Comprehensive Overview
siddharthjaan
 
The Story of Al-Fitra by Mr. Saidi Adam Younes
ademyounessaidi
 
ExpoGestão 2025 - Networking – O Poder das Conexões Humanas
ExpoGestão
 
Free Preparation and Survival Apps that can save your life
Bob Mayer
 
Impact_of_Power_Outages_Presentation.pptx
mansisingh27077
 

Open stack networking_101_part-1

  • 1. OpenStack Networking Introduction Yves Fauser, System Engineer VMware NSBU 10/10/2013 © 2011 VMware Inc. All rights reserved
  • 2. Agenda §  Traditional Networking - refresher §  OpenStack integrated projects big picture §  Why OpenStack Networking is called Neutron now §  Networking before Neutron §  Nova-Networking §  Drawbacks of Nova-Networking that led to Neutron §  OpenStack Networking with Neutron §  Neutron Overview §  Available Plugins §  Neutron Demo §  Neutron – State of the Nation 2
  • 3. Traditional Networking Refresher Traditional Networking Refresher © 2011 VMware Inc. All rights reserved
  • 4. Traditional Networking - Refresher §  Layer 2 Network Connection à Direct Ethernet connection with no Routing hops (e.g. 192.168.1.10 to 192.168.1.11) §  Layer 3 Network Connection à Endpoint can reach each other only through multiple routing hops §  VLAN – A way to carve up a physical switch into multiple L2 Networks (segments) VLAN 10 VLAN 20 Access Port “untagged” VLAN “Trunk” Port / “tagged” VM VM VM VM Hypervisor Switch §  Access Port – An Ethernet Port that can only access one VLAN that is statically configured on the physical switch (no VLAN tag/id – ‘untagged’) §  Trunk Port – An Ethernet Port that carries multiple VLANs (with VLAN tag/id – ‘untagged’) and connects to other Switches and possibly Hypervisors 4
  • 5. OpenStack Projects & Networking © 2011 VMware Inc. All rights reserved
  • 6. Integrated (aka ‘Core’) projects (Grizzly release) Dashboard (horizon) Network (Neutron) Provides UI for other projects Provides network connectivity Block Storage (cinder) Provides volumes Compute (nova) Provides Images Provides Authentication and Service Catalog for other Projects Identity (keystone) 6 Image repo (glance) Stores Images as Objects Object Storage (Swift)
  • 7. Why is OpenStack Networking called Neutron? §  Before June 19th 2013, OpenStack Networking was named “Quantum”, hence all the services, APIs, CLI commands hold the name “Quantum” §  Unfortunately there were trademark issues with the name “Quantum” (see “Quantum corporation”), therefore all references to “Quantum” need to be changed in all the Docs, Services Names, APIs, CLI Commands, etc. §  The new name for OpenStack Networking is now Neutron! 7
  • 8. Networking before Neutron Nova-Networking Drawbacks of Nova-Networking that led to Neutron © 2011 VMware Inc. All rights reserved
  • 9. OpenStack Networking before Neutron §  Nova has its own networking service – nova-network. It was used before Neutron §  Nova-network is still present today, and can be used instead of Neutron §  Nova-network does §  base L2 network provisioning through Linux Bridge (brctl) §  IP Address management for Tenants (in SQL DB) nova-console (vnc/vmrc) nova-api (OS,EC2,Admin) nova-compute nova-cert Libvirt, XenAPI, etc. Nova DB Hypervisor (KVM, Xen, etc.) Queue nova-metadata nova-scheduler §  configure DHCP and DNS entries in dnsmasq §  configure fw-policies and NAT in IPTables (nova-compute) §  Nova-network only knows 3 basic Network-Models; nova-volume novanetwork §  VLAN based – Every tenant gets a VLAN, DHCP enabled Volume-Provider (iSCSI, LVM, etc.) Network-Providers (Linux-Bridge or OVS with brcompat, dnsmasq, IPTables) §  Flat & Flat DHCP – direct bridging of Instance to external eth. Interface with and w/o DHCP 9 novaconsoleauth Inspired by
  • 10. Nova-Networking – Drawbacks that lead to develop Neutron §  Nova-Networking is missing an well defined API for consuming networking services (tenant API for defined topologies and addresses) §  Nova-Networking only allows for the 3 simple models; Flat, Flat/DHCP and VLAN/DHCP, all of those are limited in scale and flexibility – e.g. max. 4094 VLAN ID limit §  Closed solution; No ability to use network services from 3rd parties and/or to integrate with Network vendors or overcome the limitations of NovaNetwork §  No support for: §  Advanced OpenVSwitch features like Network Virtualization (IP-Tunnels instead of VLANs) §  Multiple user configurable networks per project §  User configurable routers (L3 Devices) 10
  • 11. Network Virtualization Overview Network/Server Virtualization Analogy Network Virtualization – a technical definition Network Virtualization – Key components © 2011 VMware Inc. All rights reserved
  • 12. Key Concepts – Decouple, Reproduce, Automate Application Application Workload Application Workload Workload L2, L3, L4-7 Network Services x86 Environment Software Virtual Machine Virtual Machine Virtual Machine Server Hypervisor Virtual Network Decoupled Requirement: x86 Virtual Network Virtual Network Network Hypervisor Requirement: IP Transport Hardware General Purpose Server Hardware 12 General Purpose IP Hardware
  • 13. Network Virtualization – A technical definition Network virtualization is: §  A reproduction of physical networks: §  Q: Do you have L2 broadcast / multicast, so apps do not need to be modified? §  Q: Do you have the same visibility and control over network behavior? §  A fully isolated environment: §  Q: Could two tenants decide to use the same RFC 1918 private IP space? §  Q: Could you clone a network (IPs, MACs, and all) and deploy a second copy? §  Physical network location independent: §  Q: Can two VMs be on the same L2 logical network, while in different physical L2 networks? §  Q: Can a VM migrate without disrupting its security policies, packet counters, or flow state? §  Physical network state independent: §  Q: Do physical devices need to be updated when a new network/workloads is provisioned? §  Q: Does the application depend on a feature in the physical switch specific to a vendor? §  Q: If a physical device died and was replaced, would application details need to be known? §  Network virtualization is NOT: §  13 Running network functionality in a VM (e.g., Router or Load-balancer VM)
  • 14. What are the key components of network virtualization?! 14
  • 15. OpenStack Networking with Neutron Neutron Overview Available Plugins © 2011 VMware Inc. All rights reserved
  • 16. OpenStack Neutron – Plugin Concept Neutron
 API Extention" Neutron 
 Core API" Neutron Service" " •  L2 network abstraction definition and management, IP address management •  Device and service attachment framework •  Does NOT do any actual implementation of abstraction Extension API implementation is optional " Plugin API" " Vendor/User Plugin" •  •  •  •  Maps abstraction to implementation on the Network (Overlay e.g. NSX or physical Network) Makes all decisions about *how* a network is to be implemented Can provide additional features through API extensions. Extensions can either be generic (e.g. L3 Router / NAT), or Vendor Specific " 16
  • 17. Plugins available in the market (incomplete list) §  OVS Plugin §  Supports GRE based Overlays, NAT/Security groups, etc. §  Linux Bridge Plugin §  Limited to L2 functionality, L3, floating IPs and provider networks. No support for Overlays §  VMware NSX (aka Nicira NVP) Plugin §  Network Virtualization solution with centralized controller + OpenVSwitch (Details follow in the next few slides) §  Cisco UCS / Nexus 5000 Plugin §  Provisions VLANs on Nexus 5000 switches and on UCS Fabric-Interconnect as well as UCS B-Series Servers network card (palo adapter) §  Can use GRE and only configure OVS, but then there’s no VLAN provisioning §  NEC and Ryu Plugin §  Openflow Hop-by-Hop implementations with NEC or Ryu controller §  Other Plugins from Midokura, Juniper (Contrail), Big Switch, Brocade, etc. are in various stages of development (see links below for details) 17
  • 18. Neutron Demo It’s Demo time! … (Sorry, no Connection L) © 2011 VMware Inc. All rights reserved
  • 19. Neutron – State of the Nation – What came with Grizzly §  Multiple new Plugins: Big Switch, Brocade VCS, Midokura, Hyper-V, Plumgrid, ML2 §  Great Horizon integration (topology map, NIC selection, router mgmt.) §  LBaaS reference Implementation using HAProxy §  New Metadata implementation that allows for overlapping IP space 19
  • 20. Neutron – State of the Nation – What will be in Havana §  More services integration; §  Integrating external Firewalls §  More Load-Balancing with external Load-Balancers instead of HAProxy reference implementation §  VPN reference implementation §  Improved support for §  IPv6 (feature parity with IPv4), bare metal PXE boot §  More and new vendor plugins §  Nova-Networking migration options https://blueprints.launchpad.net/neutron/havana 20
  • 21. You can find a recording of this session, as well as the second part (technical Deep Dive) on the OpenStack Foundation Youtube Channel: http://www.youtube.com/watch? v=ascEICz_WUY&list=PLKqaoAnDyfgrHcZI2nOlD022p2TG8F2_b http://www.youtube.com/watch? v=CRx43Iou1V8&list=PLKqaoAnDyfgrHcZI2nOlD022p2TG8F2_b