Managing Demand Spikes in a highly flexible and agile deployment

Transcription

1 Managing Demand Spikes in a highly flexible and agile deployment Yuki Sato S2 (Akita, Japan) Jan Hilberath Midokura (Tokyo, Japan)

2 Agenda Company Introduction Why SUSE OpenStack with MidoNet? MidoNet Introduction S2 Use Cases Further Resources Q and A

3 Company Introduction

4 Company Introduction: S2 Hosting Provider Data Centers Cloud Services Full Managed Services

5 Company Introduction: Midokura Software Engineering and Services Software Defined Networking (SDN) OpenStack Integration Support & Training

6 Why SUSE OpenStack with MidoNet

7 Why SUSE OpenStack Cloud with MidoNet? Ease of Use Reduced complexity Scalability Fault tolerance Open-source Technology 24/7 Commercial Support

8 MidoNet Introduction

9 MidoNet: Basic Feature Overview Virtual L2 Distributed Switching Virtual L2 Isolation Virtual L3 Distributed Routing Virtual L3 Isolation L4 Services (Load Balancing, Firewall, VPN,...) RESTful API OpenStack Integration

10 MidoNet vs. Midokura Enterprise MidoNet (MEM) 24/7 Commercial Support Manager (Browser-based GUI) Insights (Visualization, Troubleshooting, Reporting) Fabric (Integration between virtual and physical layers) VMware vsphere Integration

11 S2 Use Cases

12 S2 Use Cases Avoid Single Point of Failure Linear scale North/South traffic Dedicate separate uplinks per Tenant Multi-site connection Dynamic Routing via Internal BGP (ibgp) Secure access via VPNaaS (IPSec) L2 VTEP Fabric troubleshooting

13 Use Case: Avoid Single Point of Failure No bottleneck Network Node Distributed Architecture Not using router and DHCP namespaces Intelligence at the Edge Metadata, DHCP Security Groups FWaaS LBaaS

14 Physical NW vs OVS vs MidoNet Physical NW Gears Router Neutron OVS plugin DHCP agent L3 agent OVS agent Network Node MidoNet Switch Switch Switch Server Server Server Server Server Server OVS agent OVS agent MN agent MN agent VM01 VM03 VM02 VM01 VM03 VM02 VM01 VM03 VM02

15 Handling packets in virtual network No extra hop required in MidoNet Physical NW Gears Router Neutron OVS plugin DHCP agent L3 agent OVS agent Network Node MidoNet Switch Switch Switch Server Server Server Server Server Server OVS agent OVS agent MN agent MN agent VM01 VM03 VM02 VM01 VM03 VM02 VM01 VM03 VM02

16 Handling packets in virtual network There is no Single Point of Failure (SPoF) in MidoNet Physical NW Gears Router Neutron OVS plugin DHCP agent L3 agent OVS agent Network Node MidoNet Switch Switch Switch Server Server Server Server Server Server OVS agent OVS agent MN agent MN agent VM01 VM03 VM02 VM01 VM03 VM02 VM01 VM03 VM02

17 Use Case: Intelligence at the Edge Decisions made at the edge Not transferring packets to the target if not necessary Hardware failure has only partial impact

18 Comparing MidoNet and OVS OVS OVS agent OVS agent OVS agent OVS agent Internet DHCP agent L3/L2 OVS L3 L2 L3 agent OVS agent Network Node Neutron Server Controller node MN Agent MN Agent MN Agent MN Agent Internet L3 L3 Gateway MN Agent Gateway MN Agent L3/L2 NSDB NSDB NSDB MidoNet Neutron Server Controller node

19 Comparing MidoNet and OVS OVS OVS agent OVS agent OVS agent OVS agent Internet L3/L2/DHCP/LB/Firewall DHCP agent L2 L3/L2 OVS L3 L2 L3 agent OVS agent Network Node Neutron Server Controller node MN Agent MN Agent MN Agent MN Agent Internet L3 L3 Gateway MN Agent Gateway MN Agent L3/L2 NSDB NSDB NSDB MidoNet Neutron Server Controller node

20 Comparing MidoNet and OVS OVS OVS agent OVS agent OVS agent OVS agent Internet L3/L2/DHCP/LB/Firewall DHCP agent L2 L3/L2 OVS L3 L2 L3 agent OVS agent Network Node Neutron Server Controller node MN Agent MN Agent MN Agent MN Agent Internet L3 L3 Gateway MN Agent Gateway MN Agent L3/L2 MidoNet L3/L2/DHCP/LB/Firewall NSDB NSDB NSDB Controller node Neutron Server

21 Use Case: Linear scale North/South traffic Easily increase uplink capacity No downtime, dynamic switch-over via BGP

22 MidoNet GW with BGP (Private AS) Physical Virtual default route Ext Router 1 Ext Router 2 default route Ext Router 1 AS65535 Ext Router /27 AS / /30 AS64512 MN agent MN agent Server01 Server / /30 Uplink Network AS64512 Edge Router /30 Uplink Network L3/L2SW External Network MN agent MN agent MN agent Tenant Router Tenant Network

23 Use Case: Dedicated Uplinks per Tenant some customers require their dedicated uplinks security reasons billing reasons non-internet connectivity

24 Use Case: Multi-site Connectivity Connect multiple sites Separate OpenStack / MidoNet deployments Spanning multiple locations (data centers) Proven Technology VXLAN tunneling Virtual routers act as VTEP

25 Site A Internet Site B Private WAN Public Network Public Network Peering links carry private address traffic / / / /24 VM VM VM VM VM VM VM VM

26 Site A Inter-site connectivity not explained here. Site B SiteAVtepRouter registered as SiteAGatewayDevice SiteBVtepRouter registered as SiteBGatewayDevice SiteAL2Gateway SiteBL2Gateway L2GatewayConnection segmentation_id=100 MAC-VTEP table: 6F:E4:5A:FA:8E:09 => L2GatewayConnection segmentation_id=100 MAC-VTEP table: 16:B7:B5:A4:57:75 => / /24 SiteAMultiSiteNetwork SiteBMultiSiteNetwork SiteATenantRouter MAC: 16:B7:B5:A4:57:75 SiteBTenantRouter MAC: 6F:E4:5A:FA:8E: /24 Extra Routes: /24 via /24 Extra Routes: /24 via SiteATenantNetwork SiteBTenantNetwork

27 Use Case: Internal BGP (ibgp) virtual routers exchange their routes dynamically no manual route management necessary easy to auto-connect virtual networks

28

29

30

31 Use Case: IPSec VPN-as-a-Service (VPNaaS) IPSec secured overlay connectivity between multiple private networks between different sites (data centers) between the cloud and the outside world

32

33

34 Use Case: Hardware L2 VTEP not every host in the data center is virtualized connect virtual and physical networks map physical ports to logical networks enable physical switches to communicate with virtual machines seamlessly integrate with hardware gateways (e.g. Dell, HP, Lenovo, Penguin, QCT / running Cumulus Linux)

35 MidoNet VTEP Gateway Physical Devices

36 MidoNet VTEP Gateway Physical Devices OVSDB Server VTEPd VXLAN config Switch Driver Switchd Bridge Table swp1 br-vxln /24

37 MidoNet VTEP Gateway MidoNet OVSDB Client Physical Devices OVSDB Server VTEPd VXLAN config VXLAN L2 tunnel port Switch Driver Switchd Bridge Table swp1 br-vxln /24 VM VM VM VM /24

38 MidoNet VTEP Gateway MidoNet OVSDB Client Physical Devices OVSDB Server VTEPd VXLAN config VXLAN L2 tunnel port Switch Driver Switchd Bridge Table swp1 br-vxln /24 VM VM VM VM /24 Virtual Network

39 Use Case: Fabric Troubleshooting Integration between virtual and physical layers Visualization of physical topology in real-time Neighboring information about physical hosts and switches Ability of cross-referencing virtual networks and the physical hosts and switches it runs on top of

40 Further Information

41 Developer Community GitHub: Wiki: Slack: Mailing Lists: IRC: #midonet on freenode

42 End-User Resources MidoNet Homepage: MidoNet Documentation: Midokura Homepage:

43 Questions?

44 Thank You