Rajeev Grover. Maruti Kamat. Vivek Narasimhan

Transcription

1 Distributed Routing in Ironic Integrated OpenStack Cloud Rajeev Grover Maruti Kamat Vivek Narasimhan

2 Jonathan Bryce Executive Director Openstack Foundation Embracing Datacenter Diversity Austin Summit 2016 Keynote Address

3 DVR in Ironic-integrated Clouds Distributed Routing in Neutron Improves performance Scales with size of compute farm Limited failure domain (per compute node) Bare Metal Continues to be relevant Prominent use cases Three tier applications with Database servers Compliance & Licensing Specialized hardware functions Application architectures VM1 VM2 RtrA Default RtrA RtrA SNAT Compute node Compute node Network node Challenge Distributed Routing along with BMs

4 Terms and Notations Compute node 1 Compute node 2 Network Service Node vm3 vm5 vm6 vm2 vm4 vm7 br-int-cn2 vm8 br-int-nn SNAT br- br- br-tun-cn2 br-tun-nn br- Data Network External Network East-West - Traffic across VMs in compute nodes North-South Traffic from VMs on compute nodes to/from ternal network Namespaces

5 DVR overview East West vm3 vm5 vm6 vm2 vm4 vm7 br-int-cn2 vm8 Network Service Node br-int-nn SNAT br- br- br-tun-cn2 br-tun-nn br- Data Network External Network

6 DVR overview North South Traffic vm3 vm5 vm6 vm2 vm4 vm7 br-int-cn2 vm8 Network Service Node br-int-nn SNAT br- br- br-tun-cn2 br-tun-nn br- Data Network External Network

7 DVR overview North South SNAT dvr- dvr- dvr- IR IR IR F F F br- br- br- br- vm3 vm5 vm6 vm3 vm5 vm6 vm3 vm5 vm6 vm3 vm5 vm6 Data Network br-int-nn br-tun-nn SNAT br- External Network

8 Overview Openstack Ironic Ability to provision baremetal servers as opposed to virtual machines. Provides lifecycle in Openstack for baremetal provisioning (Makes baremetal bring-up as easy as bringing-up virtual machines in cloud) Integrated into Openstack as official project from Kilo Release. Provides tenant network isolation with VLAN-based networks (from Mitaka Release)

9 on VLAN segment in Network N Switching - VLAN-network isolation (Ironic with Neutron) vm3 vm5 vm6 VLAN frames BM1 BM1 on VLAN segment in same Network N br- Data Network External Network BM2

10 Overview Openstack Neutron L2 Gateway Bridges two segments (can be different underlays), providing semantics of a single L2 broadcast domain Segments that are bridged, can be Neutron orchestrated (or) they can be segments outside the cloud Multi-segment network in Neutron one way to compose bridged segments both being Neutron orchestrated Typical deployments use Neutron L2 Gateway to bridge Neutron orchestrated VXLAN (or GRE) segments, with isting VLAN segments in an enterprise L2Gateway as a service, is available from Kilo Release of Openstack

11 Switching - VXLAN-network isolation (Neutron with Ironic) Uses a single Multi-Segment network of Neutron that comprises - one VLAN Segment (used by Ironic for network pinning baremetals) - one VXLAN segment (used for Virtual Machine spin-offs) Virtual Instances transmits/receives packets on VXLAN-Segment Baremetal Instances transmits/receives packets on VLAN-Segment L2 Gateway provides bridging between the VXLAN and VLAN-segments on a Multi-Segment network transparently - i.e., L2Gateway retains Neutron Network data path semantics.

12 on VXLAN segment in Multi- Segment Network N Switching - VXLAN-network isolation (Ironic with Neutron) vm3 vm5 vm6 VXLAN packets VLAN frames BM1 BM1 on VLAN segment in same Multi- Segment Network N L2 Gateway br- BM2 Data Network External Network

13 Distributed Routing East West

14 Distributed Virtual Routing (DVR) on Ironic-integrated clouds ( Initial Goals ) Extend DVR concept to Ironic-managed baremetal servers Enable DVR on VLAN-based tenant networks for Ironic-managed baremetal servers Enable DVR on VXLAN-based tenant networks for Ironic-managed baremetal servers (with L2Gateway ) Provide a highly-available Distributed Virtual Routing solution for ironicintegrated cloud deployments

15 vm3 on VXLAN Network N1 Distributed Routing East-West VM3 initiating traffic to BM1 BM1 on VLAN Network N2 vm3 vm5 vm6 Network Service Node br-int-nn BM1 DVR-L L2 Gateway br- br- br-tun-nn BM2 Data Network External Network VXLAN packets VLAN frames

16 on VXLAN segment in Network N1 Distributed Routing East-West BM2 initiating traffic to VM1 vm3 vm5 vm6 Network Service Node br-int-nn BM1 DVR-L L2 Gateway br- br- br-tun-nn BM2 VXLAN packets Data Network External Network VLAN frames BM2 on VLAN segment in Network N2

17 Distributed Routing North South

18 Distributed Routing North South (SNAT) vm3 vm5 vm6 Network Service Node br-int-nn BM1 DVR-L SNAT L2 Gateway br- br-tun-nn br- BM2 External Network Data Network

19 Distributed Routing North South ( ) vm3 vm5 vm6 Network Service Node br-int-nn BM1 DVR-L L2 Gateway br- br- br-tun-nn BM2 Data Network External Network

20 Present same Use model as VMs Fs, SNAT Services Design Considerations No Touch Model No s, modules or helpers required in the BM Architectural compatibility Work within the current framework of OpenStack High availability Leverage SNAT HA for DVR-L HA Scalability Intelligent scheduling of DVR-L routers on different nodes Optimize use of tenant available Address and MAC Address scopes Alternate Explorations.. DVR done in hardware with L2Gateway Device that is OpenFLOW Capable. (Avoids need for service entity in virtual cloud) Networking in BMs

21 Thank you 21