How Open NX-OS enables more Open, Extensible, Modular and Flexible Datacenters Shane Corban Product Manager PSODCT-2030

Transcription

1

2 How Open NX-OS enables more Open, Extensible, Modular and Flexible Datacenters Shane Corban Product Manager PSODCT-2030

3 Agenda Data Center Trends Customer Requirements Driving Change Open NX-OS Introduction Open Bootloaders Open Automation Tool Integration Open Interfaces Open Programmability Tool Choice Conclusion

4 Session Objectives At the end of the session, the participants should be able to: Articulate Cisco s Open-NXOS feature set and capabilities Dispel the perception in the SDN space that Cisco and NX-OS is not extensible, modular and programmable Understand how this Open Framework provides both the feature richness of traditional NX-OS along with the extensibility/modularity and an extensive programmatic toolset

5 Next-Generation Data Center Trends Deliver Services At Speed, At Scale, At Lowest Cost Web2.0 Cloud Service Providers Enterprise/Financial Public Sector Open Innovations Scale Agility Security Workload Mobility Compliance Fast Services Scalable Architecture Capex & Opex Optimization

6 Driving Infrastructure Transformation Enabling Business Innovation Velocity Automation Innovation Consistency Simplify Infrastructure Management Modular, Multivendor Interoperability Adaptable Operating System

7 OPEN NXOS Enhancements across all NX-OS OPEN Infrastructure NX-OS -Layers Extensible, Open, Programmable POAP NXAPI PXE Yocto SDK Data Models BootStrap/ and Provisioning Native Package and Application Integration Management Standard Open Open Interfaces Adaptable NXOS SDK Programmable Automation and Visibility Server Management Tools Auto Deployment Options Extensibility Open Application Integration Open NX-OS consistent across Programmability DevOps both ToR and Modular Tool Choice Enabling

8 Open NX-OS: Infrastructure Layer Enhancements OPEN BOOTLOADERS & PROVISIONING OPEN PACKAGE/APPLICATION INTEGRATION Open NXOS OPEN INTERFACES OPEN OBJECT BASED API s (NX-API, Model Driven) Open NX-OS consistent across both ToR and Modular

9 Open NX-OS Bootloaders & Provisioning ipxe Leverage existing compute deployment infrastructure (PXE/iPXE) for operationalizing NX-OS Deploy NX-OS from a web server via HTTPS or TFTP server with support for both IPv4 and IPv6 NX-OS CLI option added to select boot option either <bootflash(default) > or <pxe> TFTP GET FILE/HTTP URL DHCP DISCOVER(v4/v6) Validate Image Checksum & Boot Boot Server(DHCP & HTTP/TFTP) NX-OS Image Repository IP Address & File/Image URL VTEP VTEP VTEP VTEP

10 Open NX-OS: Infrastructure Layer Enhancements OPEN BOOTLOADERS & PROVISIONING OPEN PACKAGE/APPLICATION INTEGRATION Open NXOS OPEN INTERFACES OPEN OBJECT BASED API s (NX-API, Model Driven) Open NX-OS consistent across both ToR and Modular

11 Open NX-OS Package Management via YUM/RPM LXC and Native Daemons Ability to third party packages in Secure Guestshell or natively in NX- OS kernel Install all third party applications (Puppet/Chef, etc) as RPMs Daemon managed via standard Linux interfaces Built-in support for YUM package manager Patching and upgrade using standard rpm/yum workflows NX-OS processes(bgp) can be upgraded/patched via yum update Package as RPM C app with standard Linux constructs Open Embedded 64 bit Build Environment RPM upload Cisco/Local Repository RPM local repository Linux Daemon Linux Kernel YUM Install init.d Raw Socket Netdevs Libpcap ASIC Monitoring server Build Server Target Switch

12 Open NX-OS Custom Application Integration Third party or custom developed applications deployed: Natively in NX-OS Linux In isolated Secure CentOS7 Guestshell Environment Custom Application Building/Integration: Download Yocto 1.2 SDK toolchain, available openly from Cisco CCO or Install SDK on any Linux distribution server in your datacenter - Fedora/Ubuntu/CentOS Build/Make application source/scripts, and package and deploy using yum install on infrastructure Deploy Application using Standard Linux Methods: YUM install custom agent RPM start script in /etc/init.d/app start or service app start Local Repository Server(YUM) Yum install app.rpm Respository

13 Open NX-OS Third Party Application Integration Software Architecture OpenLLDP tcollector Third Party Protocol Apps Routing/Switching Packages Devops Orchestration Base NX-OS Automation Monitoring/ Analytics Third Party/Custom Applications 64 Bit Yocto Based Linux Kernel Kernel Route Kernel ARP Kstack/Netdevs Kernel Switch Hardware User Space Space

14 Open NX-OS Puppet/Chef Puppet/Chef Agent: Architecture Cisco Puppet Agent RPM/software package posted to Puppetforge and Open Sourced to Github Install Cisco Puppet Module on Puppet Master Yum install Puppet Agent rpm on switches Switch Agent periodically will poll Puppet/Chef Master for updated catalog/cookbooks and attempt to converge switch to desired state Cisco Puppet/Chef Module(Incl Utility GEMs) Linux Software Repository Server Yum/RPM install puppet/chef.rpm NX-OS NX-API Cisco Puppet/Chef Agent Native Linux Service /etc/init.d/puppet.d & chef.d Puppet/Chef Master Server

15 Open NX-OS Puppet/Chef Cisco Chef & Puppet Agent Types/Provider Support Agents RPM installed natively on switch, using agent RPM or within isolated guestshell environment Supported Agent Types/Providers for Camden Cisco Network Element Chef/Puppet module code will be published on github, CCO, and Chef Supermarket, Puppetforge websites Resource & Provider Code Provider Utility (Device Objects, Node Object, Object->CLI mapping etc) Transport Mgr Utility (aka NXAPI Utility) Agent is extensible beyond what we support by default by using the utility classes. Agent is also extensible by passing CLI using cisco_command_config resource: cisco_command_config { " feature-portchannel1": command => " interface port channel1\n description nwk ic4-gw1 Po2407\n no switchport\n ip address /31\n } Camden Chef/Puppet Agent Types/Providers cisco_vtp cisco_tacacs_server cisco_tacacs_server_host cisco_snmp_server cisco_snmp_community cisco_snmp_group cisco_ospf cisco_ospf_vrf cisco_vlan cisco_bgp* cisco_bgp_vrf* cisco_interface cisco_interface_ospf cisco_interface_vlan

16 Open NX-OS: Third Party Application Integration Secure Guest Shell Native Shell, RPM + Containers Bash Ns=global Native Linux Processes Native Linux Processes Ns=global Bash Native Linux Processes Native Linux Processes Native Linux Processes Ns=global Ns=guestshell Ns=guestshell Ns=guestshell Ns=guestshell Pkg-1.rpm Pkg-2.rpm Pkg-4.rpm Guest root file system NX-OS root file system Kernel (cgroup, LSM) Pkg-2.rpm Pkg-3.rpm Secure common distribution CentOS7 environment in which customer may install their own custom applications Use guestshell resize command to restrict CPU/memory/rootfs resources available to Guest Shell

17 Open NX-OS: Infrastructure Layer Enhancements OPEN BOOTLOADERS & PROVISIONING OPEN PACKAGE/APPLICATION INTEGRATION Open NXOS OPEN INTERFACES OPEN OBJECT BASED API s (NX-API, Model Driven) Open NX-OS consistent across both ToR and Modular

18 Open NX-OS Linux Interfaces Bash Access Leverage Linux command toolkit for monitoring configuration and troubleshooting # tcpdump -w file.pcap -i eth1-1 Use ethtool to display detailed interface statistics: #ethtool S eth2-1 Use ifconfig to change mtu for an interface to jumbo MTU: #ifconfig eth2-1 mtu 9000 Use ip route to add a static route for a given interface: #ip route add /24 via dev eth2-1 Leverage bash for NX-OS scripting automation vsh c show interface brief grep up awk/sed

19 Hardware Linux Kernel User Space Apps Open Interfaces: NX-OS Kernel Stack Interfaces Representing VRF context via Linux Name Space Linux Networking Apps Monitoring/Visibility Automation/Provisioning Default VRF VRF Red VRF Orange VRF Purple Forwarding information within the VRF context can be accessed via a corresponding Linux Name Space Default Name Space Name Space Red Name Space Orange Linux Networking Stack Name Space Purple NetDevices Portchannel1 Eth1/1 Eth1/2 SubIntf Eth M/N setns, ip-netns to change VRFs and add routes within a given namespace. ASIC-1 ASIC-2 ASIC-3... ASIC-M Switch Ports

20 Open NX-OS: Infrastructure Layer Enhancements OPEN BOOTLOADERS & PROVISIONING OPEN PACKAGE/APPLICATION INTEGRATION Open NXOS OPEN INTERFACES OPEN OBJECT BASED API s (NX-API, Model Driven) Open NX-OS consistent across both ToR and Modular

21 Open NX-OS Programmability NX-API Developer Sandbox Tool provides a convenient way for network engineers to get up to speed with scripting and automation via web browser interface Available on all Nexus platforms. CLI commands embedded in structured input and output (JSON/XML) via HTTP/HTTPS Use feature nxapi to enable access on the platform

22 Open NX-OS Programmability Model Driven Automation CLI REST JSON RPC Object Store REST API(HTTP/HTTPS) Config Faults & Events Data Models (Logical / Concrete) BGP Dom-x Sys Dom-y ACL MIT Data Management Engine Operational Data Stats SNMP DME Processes BGP VLAN LACP ACL QoS Automate at scale using REST API access to Nexus object store Automate operations leveraging object create/update/delete operations Benefits of Model Based automation Software productivity Software maintainability Software quality and code reuse Asynchronous model driven programmability: BGP, VLAN, LACP, ACL, QoS, UDLD, CDP, MAC, DHCP, DNS, RBAC, AAA,SVI, Logging, NTP, VRRP Object Model Specification available at Push based model for event reporting, leveraging websockets interface.

23 Object Based Programmability BGP Configuration CLI POST Request (Pre Camden) POST Request BGP Object (Camden) router bgp 11 router-id POST {'content-type':'application/jsonrpc'}.json() { "jsonrpc": "2.0", "method": "cli", "params": { "cmd": "config t", "version": 1 }, "id": 1}, { "jsonrpc": "2.0", "method": "cli", "params": { "cmd": "router bgp 11", "version": 1 },"id": 1}, { "jsonrpc": "2.0", "method": "cli", "params": { "cmd": "router-id ", "version": 1}, "id": 2}] POST IP/api/mo/sys/bgp/inst.json { "bgpinst" : { "children" : [{ "bgpdom" : { 11 "attributes" : { "name":"default", "rtrid" : " " } } } ] } }

24 Open-NXOS Reference Links Software Chef Agent(Supermarket) Puppet Agent(Puppetforge) Third Party Agents Repository(Cisco Repo) Nexus 3/9K GiT Repository (Scripting Examples, etc) SDK for developing custom application RPMs Link thirdparty-yum/

25 Complete Your Online Session Evaluation Give us your feedback to be entered into a Daily Survey Drawing. A daily winner will receive a $750 Amazon gift card. Complete your session surveys though the Cisco Live mobile app or your computer on Cisco Live Connect. Don t forget: Cisco Live sessions will be available for viewing on-demand after the event at CiscoLive.com/Online

26 Continue Your Education Demos in the Cisco campus Walk-in Self-Paced Labs Table Topics Meet the Engineer 1:1 meetings Related sessions

27 Thank you

28