Ryu: Network Operating System

Transcription

1 Ryu: Network Operating System Kazutaka Morita NTT Software Innovation Center Isaku Yamahata VA Linux June 6, 2012

2 Agenda ² Overview ² How it works ² Demo ² Summary 2

3 Overview

4 What is Ryu? ² Open-sourced network operating system Network operating system Programmatic network control interface Logically centralized controller for thousands of switches (OVS, openflow switch) Open source software (Apache v2) Fully written in Python Project site: ² Ryu stands for 流 - Means flow in Japanese 龍 - Means Japanese dragon, one of water gods 4

5 Overview Programmatic network control interface We can implement network management applications on top of the Ryu Ryu network controllers app app app RESTful management API Administrator Logically centralized controller Decouples virtual networks from the physical network Supports OpenFlow 1.0 (including Nicira Extension) ovs Openflow switch ovs Openflow switch 5

6 Goals ² De facto OSS network operating system ² High quality enough for use in large production environment Code quality Functionality Usability ² Become the standard network controller of cloud software (e.g. OpenStack) Ryu plugin is merged into OpenStack Essex ² Default Controller for fedora/debian/ ubuntu 6

7 What does Ryu provide? ² Ryu applications GRE tunneling VLAN support Topology discovery MAC based segregation ² We can use these features with only commodity hardware 7

8 How it works

9 Integrate with OpenStack ² OpenStack Open source software for building private and public clouds ² What does Ryu bring to OpenStack? Flat L2 networks regardless of the underlying physical network Scalable multi-tenant isolations Ryu provides tunneling based isolations VLAN doesn t scale larger than 4096 We don t need high-end switches 9

10 OpenStack ² ² Nova: cloud management system Nova compute node Physical machine that runs guest VM instances Nova network node Physical machine that runs networks gateway to the outside network Quantum: network management system Quantum server Manages network configuration Nova requests quantum-server for network configuration Quantum agent It runs on nova compute/network node Quantum plugin Plugin for each network technology Ryu plugin 10

11 How Ryu works with OpenStack Quantum- node: somewhere where compute/network can communicate. Typically on network- node Ryu- node: somewhere where compute/network/quantum can communicate Typically on network- node Quantum db: (datapath id, Tunnel ip) (network uuid, tunnel key) Quantum server REST API Ryu db (in memory) (Tenant id, tunnel id) (dpid, port, tenant id, mac addr) (dpid, port, remote_dpid) Ryu Quantum API DB access OpenFlow Vif driver Create Tap port Ryu agent Create Tunnel port OVS linux_net driver Ryu agent OVS compute- node Network- node

12 Demo

13 Ryu demo (GRE tunneling) ping ping ping ping ping ping Linux Linux Linux Linux Linux Linux Qemu/KVM Qemu/KVM Qemu/KVM Qemu/KVM Qemu/KVM Qemu/KVM ryu Quantum server Nova network Linux OVS Nova compute Quantum agent Openstack servers Linux OVS Nova compute Quantum agent Linux OVS Nova compute Quantum agent KVM KVM KVM GRE tunnel GRE tunnel GRE tunnel bridge Linux (phyisical machine) 13

14 Ryu demo (GRE tunneling) Host 1 Tenant A VM 1 Tenant A VM 2 Tenant B VM 1 Tenant A ID -> 3 Tenant B ID -> 4 OVS 1 GRE tunnel 1-3 Host 3 Tenant A VM 4 Tenant B VM 4 Tenant B VM 5 GRE tunnel 1-2 Host 2 OVS 3 Tenant A VM 3 Tenant B VM 2 Tenant B VM 3 GRE tunnel 2-3 OVS 2 14

15 Summary

16 Future items ² Integration with Quantum IPAM and L3 API ² Firewall ² Virtual network to physical network, and vice versa Convert among GRE key, VLAN tag, ² Distributed controllers No single point of failure Datacenter-wide scalability 16

17 Summary ² Ryu is an open-sourced network operating system licensed under Apache License v2. Site: ML: ² Set up Ryu environment with VM images OpenStack-environment-VM-image-file- HOWTO 17

18 Thank you! Any questions? 18

19 Appendix

20 Block diagram of Ryu... RyuApp GREtunnel RyuApp Discovery RyuApp VLAN REST API Higher level event Switch management/ofp event Storage Memory RyuApp magement HTTP server (WSGI) Openflow protocol Parser/serializer Event queue/dispatcher 20

21 OpenStack basics ² ² ² ² ² ² OpenStack Nova: cloud management system Quantum: network management system Nova compute node Physical machine that runs guest VM instances Nova network node Physical machine that runs networks gateway to the outside network Quantum server Manages network configuration Nova requests quantum-server for network configuration Quantum agent It runs on nova compute/network node Quantum plugin Plugin for each network technology Ryu plugin 21

22 GRE tunneling with openstack l l l Network Tenant creation l l GRE key assignment Gateway creation Guest VM instance creation l l Port creation - tenant key port relationship Setting flow to the VM port Tunnel port management l l Tunnel port creation/deletion - Track physical compute node Setting flow to the tunnel port

23 Quantum server Tunnel id Quantum db: (datapath id, Tunnel ip) Network id(uuid) creation/deletionq On vm creation: port uuid, mac address Ryu db (in memory) (Tenant id, tunnel id) (dpid, port, tenant id, mac addr) (dpid, port, local_ip, remote_ip) The Agent polls db: Create vport- gre Update port status VM Port: (dpid, Tenant uuid, mac addr) Tunnel port: (dpid, local_ip, remote_ip) (tenant uuid, tunnel_id) (tenant, tunnel) Ryu Data`low Ryu agent Vif driver vport- gre: remote_ip=xxx, local_ip=yyy, key=0 OVS vm port(dpid, tenant uuid, mac addr) OVS Vif driver Ryu agent Vif driver creates vm port Gw port(dpid, Tenant uuid, mac addr) (tenant uuid, tunnel_id) Vif driver Ryu agent OVS OVS linux_net driver Ryu agent Linux_net driver creates gw ports

24 Network Creation 7. (tenant_id, network_id, dpid, Port, mac) Quantum server 8 (network_id, dpid, port, mac) 3. Network uuid,tunnel key 2. Create net 4. uuid Ryu 9. set `low entryies 1. create network nova- network 5.plug linux_net driver 6. Create gw- xxx OVS Network- node

25 Instance Creation 6. (tenant_id, network_id, dpid, Port, mac) Quantum server 3. uuid 7. (network_id, dpid, port, mac) Ryu 8. set `low entryies 2. Create port 1. create instance nova- compute 4.plug vif driver 5. Create tap- xxx OVS compute- node

26 Node boot up Quantum server Quantum db Ryu 3. Get list of (dpid, ip address) (and polling) 2. Register (dpid, ipaddress) 5. register (dpid, port- id, remote_dpid) 4. Create vport- gre to ip address Ryu agent 1. Get IP address OVS ryu_v2.ini Compute/Network- node

27 Flow Table Usage In port match Src table Tunnel out Local out Table 0 Table 1 Table 2 action match action match action VM port in_port src mac set_tunnel goto table 1 tunnel_id dst mac output(tunnel) goto table 2 in_port drop tunnel_id goto table 2 tunnel_id dst mac output(vm) Tunnel port in_port tunnel_id goto table 2 tunnel_id drop in_port drop GRE tunnel tunnel port OVS VM port VM1 VM2