NET1821BU The Future of Network Virtualization with NSX-T #VMworld #NET1821BU
NET1821BU THE FUTURE OF NETWORKING AND SECURITY WITH NSX-T Bruce Davie CTO, APJ 2
DISCLAIMER This presentation may contain product features that are currently under development. This overview of new technology represents no commitment from VMware to deliver these features in any generally available product. Features are subject to change, and must not be included in contracts, purchase orders, or sales agreements of any kind. Technical feasibility and market demand will affect final delivery. Pricing and packaging for any new technologies or features discussed or presented have not been determined. VMworld 2017 Content: Not for publication 3
12 HOURS UNIVERSITY COLLEGE LONDON MELBOURNE UNIVERSITY
INFORMATION SUPERHIGHWAY SUPER TELEPHONE NETWORK 5 SUPER VIDEO NETWORK INTERNET
L2 networks MPLS L3 networks
VPN MPLS 7
TWO NETWORK APPROACHES Build to meet needs of today s applications Build flexible, programmable infrastructure for future innovation 8
THE ONLY CONSTANT IS CHANGE New types of infrastructure VMworld 2017 New application architectures Content: Not for publication New shiny objects
NSX PROVIDES FLEXIBILITY FOR HETEROGENEITY Branch offices/edge Computing/IOT Cloud VMworld 2017 Content: Not for publication New app frameworks BARE METAL On-premises End users
NSX EMPOWERS MODERN APP DEVELOPMENT Renovate Build new On-demand infrastructure Service-like experience Programmatic DevOps-centric IT
ROADMAP INSIDE VIEW Control plane Management plane Data plane WHAT YOU CAN DO Programmatic networking & security for: Multi-cloud Application frameworks Developer cloud
NETWORK VIRTUALIZATION ARCHITECTURE Logically centralized control, distributed enforcement CLOUD CONSUMPTION MANAGEMENT PLANE CONTROL PLANE VMworld 2017 Content: Not for Self-service portal Cloud management API entry-point, UI publication Maps desired logical state to physical world DATA PLANE Scale-out distributed forwarding
MANAGEMENT, CONTROL, AND DATA PLANES Mapping state at many levels MANAGEMENT PLANE CONTROL PLANE VMworld 2017 Desired state Network topology request Request stored and acknowledged Content: Not for publication Calculate data plane state Discovered state Translated state DATA PLANE Realized state Identify data plane resources
INSIDE VIEW Control plane Management plane Data plane
CONTROL PLANE CHALLENGES MANAGEMENT PLANE CONTROL PLANE DATA PLANE Heterogeneity Scalability
CONTROL PLANE AND HETEROGENEITY DATA PLANE MANAGEMENT PLANE CONTROL PLANE VMworld 2017 Content: Not for publication DP 1 DP 2 DP 3 DP 4
CONTROL PLANE HETEROGENEITY AND SCALE DATA PLANE MANAGEMENT PLANE CONTROL PLANE VMworld 2017 Content: Not for publication DP 1 DP 2 DP 3 DP 4
A BETTER WAY LOCAL CONTROL PLANE MANAGEMENT PLANE CENTRAL CONTROL PLANE CLUSTER LCP 1 LCP 2 LCP 3 LCP 4 DATA PLANE DP 1 DP 2 DP 3 DP 4
INSIDE VIEW Control plane Management plane Data plane
INCREASED PRESSURE ON THE MANAGEMENT PLANE MANAGEMENT PLANE API REQUEST API REQUEST REQUIREMENTS Persistence Scale High availability IMPLEMENTATIONVMworld Distributed, shared log API REQUEST 2017 Content: Not for publication RESULTS Scalable API service
INDEPENDENTLY SCALABLE CONTROL, MANAGEMENT, AND PERSISTENCE MANAGEMENT PLANE CONTROL PLANE LOG NODE LOG NODE LOG NODE Desired state AKA source of truth
DISTRIBUTED LOG: SCALABLE SOURCE OF TRUTH MANAGEMENT PLANE VMworld 2017 Content: Not for Log 13 Log 14 DISTRIBUTED LOG Not just a place to store error messages publication IT IS: I/O bandwidth A data structure scales with disk units No single Append point of only failure Globally Immutable consistent history view of of desired state transactions Parallel reads and writes to redundant disks
DISTRIBUTED LOG 201 MANAGEMENT PLANE API REQUEST Log 12 API REQUEST Log 13 Get token Get token Sequencer Sequencer Layout Log 12 Log 13 Log 14 TO LEARN MORE https://github.com/corfudb/corfudb Storage Storage
INSIDE VIEW Control plane Management plane Data plane
HETEROGENEOUS DATA PLANE DATA PLANE DP 1 DP 2 DP 3 DP 4 Edge DPDK Public cloud DP 5 DP 5
DPDK BENEFITS System level L3 performance (MPPS) 350 300 250 200 150 100 50 0 55 L3FWD PERFORMANCE GENERATIONAL GAINS 80.1 IPV4 L3 Forwarding performance of 64byte packets 164.9 2010 (25 WMR) 2011 (15 SNB) 2012 (25 SNB) 2013 (25 IVB) 2014 (25 HSW) 2015 (25 BDW) 255 279.9 346.7 180 Gbps Source: Intel. Video: DPDK Performance Benchmarking. 2016. https://software.intel.com/en-us/videos/dpdk-performance-benchmarking
HIGH-PERFORMANCE ARCHITECTURE Cache Multi-context appliance Flow cache
ROADMAP INSIDE VIEW Control plane Management plane Data plane WHAT YOU CAN DO Programmatic networking & security for: Multi-cloud Application frameworks Developer cloud
WHAT YOU CAN DO Developer cloud Container networking Multi-cloud HOW IT WORKS AND WHY IT MATTERS
OPENSTACK COMPONENTS Horizon (web portal) Nova (compute) vcenter vsphere Neutron (network) NSX Install, Configure and Troubleshoot CLI Tools / SDKs Cinder (block storage) Log Insight Log collection, O/S Content pack Glance (images) vcenter Datastores VVols / vsan / VMFS / NFS Heat (orchestration) vrops OpenStack mgmt pack Local DB Keystone (identity) LDAP Ceilometer (metering) Basic open source Swift (object store) 3 rd -party object storage vrb Cost visibility, governance, etc... OpenStack Components: VMware Technology Integrations: Current
DEVELOPER CLOUD Developer DevOps Heat, Terraform, Kubernetes, etc. Configuration templates API Puppet Chef Ansible Configuration management tools NETWORKING SECURITY NETWORKING SECURITY Provision infra using standard APIs Infrastructure as code
INFRASTRUCTURE AS CODE AND CONTINUOUS DEPLOYMENT DevOps Infrastructure code Commits infrastructure code to VCS Iterate Continuous Integration Server (e.g., Jenkins) Feedback from quality testing Detect change and integrate Feedback from monitoring and metrics Version Control System (e.g., Git) Development Testing / Staging / UAT Production
WHAT YOU CAN DO Developer cloud Container networking Multi-cloud HOW IT WORKS AND WHY IT MATTERS
CONTAINERS AND NETWORK SECURITY Flat container networks create opportunities for attackers Internet Port 80 Website Website Website Website Vault Vault Internal network Database Confidential information
ENTERPRISE NETWORKING FOR CONTAINERS NSX provides segmentation, visibility and integration Internet Port 80 Website Website Website Website Vault Internal network Vault Database Physical network infrastructure
KUBERNETES AND NSX COMPONENTS Network Container Plugin (NCP) Kubernetes master etcd API-Server Scheduler NS: foo K8s / OS Adapter PaaS Adapter CaaS Adapter More NSX Container Plugin NCM Infrastructure NSX/Kubernetes topology NS: bar NSX Manager API Client NSX NSX Manager
KUBERNETES DEMO Network, load balancing, and security configured as part of Kubernetes deployment Yelb-ui Deployment Kubernetes Yelb-appserver Redis Deployment Deployment Admin config App-driven config Logical Router Layer 3 Yelb ui Yelb appserver Redis server
CONTAINER NETWORKING
WHAT YOU CAN DO Developer cloud Container networking Multi-cloud HOW IT WORKS AND WHY IT MATTERS
NSX ON-PREMISES AND IN THE CLOUD NSX on-premises We give you bits You install On your servers / In your network You patch, upgrade Perpetual license (usually) NSX as a Service Just log in and use No installation Our servers / Our network We take care of patches/upgrades Pay per use Features are (mostly) the same
NSX CLOUD SERVICE PUBLIC CLOUD Customer VPCs Gateway VPC OVS Agent Windows AMI CLOUD GATEWAY OVS Agent Linux AMI VPC#1 VPC#2 SaaS Components CLOUD PLUGIN NSX Controller NSX Manager AWS / other cloud management portal
YOUR JOURNEY Start thinking differently about networking VMworld 2017 Start building a flexible infrastructure that allows innovation NSX is your foundation for the future of networking Make a difference at your company and in your future Content: Not for publication
At VMworld Transform Networking and Security Showcase Keynote [TS7003KU] 8/29, 12:30 p.m. - 1:30 p.m. Hands on Lab: VMware NSX-T with Kubernetes [ELW182602U] 8/29, 3:00 p.m. - 4:30 p.m. NSX-T Advanced Architecture Concepts [NET1863BU] 8/30, 10:00 a.m. - 11:00 a.m. Learn VMware Network Virtualization Blog & YouTube Channel Tech Docs & POC Guide on NSX VMTN Community Cloud services: cloud.vmware.com Connect NSX VMUG VMware{code} Slack Channel