Introduction to Cisco Virtual Topology System (VTS) Vijay Arumugam Kannan - Product Manager, VTS
Agenda Cisco Data Center SDN Strategy Cisco Virtual Topology System (VTS) VTS Use Cases Cisco Virtual Topology System VTS Functionality & Workflows VTS Demo Q & A
Data Center Trends Today s App + + + Scale: Connectivity, Tenancy, Secure Access Integration: APIs, IOT, M2M, Cloud Social Media Data: Volume, Streaming & Predictive Analytics Agile: CI/CD, Devops, Scale Out, Containers, Microservices Traditional Applications Monolithic Model Multi-tier Apps Application Shift Cloud-native applications Business Agility with cloud model Micro-services / Bi-Modal IT / DevOps Physical and Manual Single Tenant, L2 based Data Center Limited Mobility, Bare metal workloads Manual Interaction Static Networks, L2 based Data Center Complex, Custom & Closed Cloud Shift Networking Shift Distributed and Automated Multi-tenant,. Dynamic and virtual workloads Policy Driven Automation L3 Fabric Data Center, SDN Framework for cross-domain automation, and abstraction, analytics (visibility) and programmability Application and Server migration towards virtualization & cloud create requirements for agile networks 3
Service Orchestration velocity hindered by manual network process Service Orchestration Compute Orchestration Network Orchestration ware vcenter Compute is completely Virtualized Compute Request completed in Seconds Network is partially Virtualized Network Change Request completed in day s/weeks Manual Network Change Request VLAN configuration IP Configuration Firewall Configuration Automated Compute Request Virtualized Compute Auto Instantiation x86 Serv er x86 Serv er 4
Technology Trends Each addressing an aspect of challenges and opportunities Scalable Fabric Scalable Fabric Data Center CLOS Fabric to scale out based on Network and Compute SDN Network Virtualization Network Virtualization Abstract network connectivity and services in to logical virtual networks that are decoupled from underlying physical infrastructure (abstraction, multi-tenancy and agility) SDN Control & Data Plane separation Centralized Control (automation & programmability) Open APIs Open APls Distributed control plane components, Bare Metal, Physical network entities, all exposing APIs (programmability)
Service Orchestration Compute Orchestration ware vcenter Network Orchestration SDN Controller f or automation, programmability and NVE management Network Ov erlays based Network Virtualization prov ides flexibility ], tenant isolation and allows f or resources to be dy namically prov isioned Compute is completely Virtualized Compute Request completed in Seconds Network is completely Virtualized Network Change Request completed in seconds NX-API, CLI, YANG Automated Network Change Request Virtualized L2/L3 networks Policy based Configuration Abstraction & Programmability Automated Compute Request Virtualized Compute Auto Instantiation L3 CLOS f abric that scales out based on compute and network to cater to distributed nature of applications is the f oundation of business agility SDN Based Overlays introduces agility and automation to Network Orchestration 6
Network virtualization: ability to separate, abstract and decouple the physical infrastructure & topology from a logical topology or infrastructure typically by creating overlay networks.. Network overlays disassociates applications from physical networks infrastructure & topology, allowing a transition to cloud based multitenanted & scalable networks. Simplified workload provisioning Multi-tenancy at scale Flexible workload placement/mobility Application and Server migration towards virtualization & cloud are driving the current network transition to the SDN/Network Overlays in the data center
MPBGP-EVPN &VXLAN based Overlays EVPN T1,S1 T1,S2 T2,S3 Overlay Forwarding Table MAC, IP Address MAC, IP Address MAC, IP Address P1/2 2 3 Layer-2 MAC and Layer-3 IP information distribution by Control- Plane (BGP) VXLAN T2,S4 MAC, IP Address 4 Built in multi-tenancy (at scale) Integrated Routing/Bridging (IRB) for Optimized Forwarding Minimize flooding through ARP suppression Fast convergence upon network failures and host movements Security through peer-authentication IP routing proven, stable, scalable ECMP utilize all available network paths Flexible placement of multitenant segments Better utilization of network paths Scalable network domain (16M VNI vs. 4K VLANs) BGP-EVPN/VXLAN based overlays provides flexibility, manageability, isolation, multi-tenancy, scalability & convergence. 8
Cisco SDN: Providing Choice in Automation and Programmability Application Centric Infrastructure Programmable Fabric Programmable Network VTS DB DB Web Web App Web App Turnkey integrated solution with security, centralized management, compliance and scale Automated application centric-policy model with embedded security Broad and deep ecosystem VxLAN-BGP EVPN standard-based 3 rd party controller support VTS for software overlay provisioning and management across N2K-N9K Modern NX-OS with enhanced NX-APIs Automation Ecosystem (Puppet, Chef, Ansible etc.) Common NX-API across N2K-N9K Mass Market (commercial, enterprises, public sector) Service Providers Mega Scale Datacenters 9
Flexible Overlays with VTS
Cisco Virtual Topology System (VTS) Open standards based Overlay Provisioning and Management System Cisco Network Services Orchestrator ware vcenter GUI REST API Automates Overlay provisioning across Cisco Datacenter Top of Rack Nexus switches (Nexus 2000- Nexus 9000), Virtual Switches & DCI routers Automates fabric provisioning for both virtual and bare metal workloads. Cisco Virtual Topology System Programmable using North Bound REST APIs Virtual Compute Environment YANG CLI NX-API BGP-EVPN Cisco Nexus 2000, 3000, 5000, and 7000 Series Cisco Nexus 9000 Series Cisco ASR 9000 Series VTF DVS Tighter Integration with Orchestration systems such as Openstack, vcenter and Cisco NSO OS OS Automated DCI / WAN Bare Metal Virtualized Simplified Management for Ease of Operations 11
VTS : Realizing the Cloud Enabled Data Center Support Scale out architectures in terms of network and compute Scalable Fabric Service Aware Overlay Flexible, on-demand EVPN/VXLAN based overlays with underlay awareness. Abstracted & Virtualized Network As A Service Automation of fabric provisioning for physical and virtual workloads. Deployment Flexibility, Visibility, management & Troubleshooting Orchestration Cisco Virtual Topology System Policies Declarative, transactional, granular policies for instantiation of overlays & secure connectivity Scale & Automation Drives Business Success Cisco Virtual Topology System (VTS) is the cornerstone of Cisco SP DC SDN strategy with increased investment and customer dep loyment across 12 Worldwide Tier 1 Service Providers
Model based provisioning What does the user see? User Policy Conceptual, Simple & Abstract External Network Network Segment A App Zone1 Network Segment B Firewall App Zone2 Network Segment C Provisioning Actions Virtual Topology Controller DCI Router Border Leaf Border Leaf & DCI (Integrated or Separated) DC Fabric (OSPF or BGP as the Underlay Protocol) SPINE Policy & Models to Infrastructure Mapping Network Based s LEAF Host Based S VTF OVS/DVS SR-IOV VNFs Appliance Tenant Appliance Tenant Tenant Tenant Bare Metal Appliance (Eg, Firewall) Bare Metal Application Inventory (Devices, Software, Capabilities, Groups & Topology) Tenant Host Tenant Host Tenant Host Host Physical Network Appliances OVS/DVS TOR/Leaf Serv ices DCI VTF
Policy Plane Control Plane VTS Architecture Custom Orchestrator Openstack vcenter VTS GUI Container REST API Virtual Topology System Service and Infrastructure Policy Resource Management Inventory Database Device Management Service Routing IOS XRv Control Plane Federation MP-BGP Route Reflector NETCONF/YANG CLI NXAPI SNMP REST API Virtual Compute Environment Cisco Nexus 2000, 3000, 5000, and 7000 Series Cisco Nexus 9000 Series Cisco ASR 9000 Series VTF DVS
VTS Architecture Hardware Hardware Switches DCI Border Leaf Nexus 9200/9300/5600/7x00 Nexus 9300/9500/5000/7x00 (RR) ASR9000, Nexus 7x00 DCI REST API Cisco VTS NX-API, CLI, YANG ware vcenter x86 Serv er x86 Serv er
VTS Architecture Software Virtual Topology Forwarder DCI Border Leaf REST API Cisco VTS NX-API, CLI, YANG ware vcenter
VTS Architecture Virtual Topology Forwarder DCI Border Leaf User space, Multi-tenant, line rate packet forwarder Uses Vector Packet Processing technology VTF () Tenant Tenant VTF () Tenant Tenant Fully integrated with Intel DPDK REST API NX-API, CLI, YANG Cisco VTS Supports VXLAN, can be extended to support MPLSoGRE, L2TPv3, MPLSoUDP, native MPLS and SR vswitch NIC ESXi vswitch NIC K vswitch Programmed by VTS using Restconf/YANG ware vcenter Cisco US Patent 7,931,636 (filed 2004)
Virtual Topology Forwarder User space, Multi-tenant, line rate packet forwarder Uses Vector Packet Processing technology V M/Container V M/Container V M/Container VPP Fully integrated with Intel DPDK Guest 1 Guest 2 virtio virtio virtio Supports VXLAN, MPLSoGRE, L2TPv3, MPLSoUDP, native MPLS and SR vhost-user User Space Programmed by VTS Open Sourced at http://www.fd.io Multi-threaded and 64-bit clean Supports for IPv4 & IPv6 PCI Pass through/sr-iov NI C K ernel Space Server 18
VPP vs OVS Performance Benchmarking
VTS Flexible Network Overlays Hardware based Overlays Software (VTF) based Overlays Hardware (TOR Leaf Switch) Hybrid Overlays Software (Virtual Topology Forwarder / Fd.io) 20
VTS Forwarding North-South Traffic (DCI, WAN) DCI Border Leaf RES T API Cisco VTS NX-API, CLI, YANG Extend L3 VXLAN to DC-gateways Associate L3 VNID to VRF Conf igure external VRF peering on DC-gw Optionally, configure DCI VRF peering, VPN L2/L3 VxLAN L2 (VLAN) Default route-policy Conf igure internal subnets attached to Router as aggregates on DC-gw (Towards DCI) Conf igure default-originate on DC-gw or DCI (Towards ov erlay) ware vcenter
VTS - EVPN Control Plane Reachability information Border Leaf REST API Cisco VTS NX- API, CLI, YANG RestConf RR DCI ware vcenter MP BGP 2 MP BGP propagates routes for hosts to all other s 2 s advertise host routers (IP+MAC) to local hosts 2 VTS is used to deploy the RR at the s or in VTS Control plane Use MP-BGP with EVPN Address Family on Nexus and VTS to distribute reachability information 1 2 Hostt routes are installed in the RIB 3 TOR 4 VTS then provisions VTFs with information through RestConf interface 1 2 4 3 5 Overlay Forwarding Table 2016 4 Cisco MAC, and/or IP its Address affiliates. All rights 2 reserved. Cisco Public
VTS Use Cases
VTS Use Cases Multi-Tenant Data Centers Network-Function Virtualization
Multi Tenant Data Center US Tier1 Service Provider Border / Services Leaf PE OTNGN (CORE MPLS) PE Border Leaf Multi M environment with different trust zones Tenancy based on IPv4/IPv6(dual stack) capable overlay networks Hybrid overlays Underlay Manager VTS Redirect select traffic to the services connected to the BL Leaf Bare Metal Host Host DCNM UCSD Vcenter Host Bare Metal Business Unit1 Business Unit2 Business Unit3 VTS BMA vrr Host Host Bare Metal Host VTF Rack1 Rack2 Business Unit4 POD1 POD2 POD3 POD4
Multi Tenant Colocation Environment Service Provider in Europe Internet and VPN as service offerings End Customers attached directly via Baremetal to Fabric Ability to connect the same customers across multiple Data Center. FW and LB within the Fabric. 26
Multi Site Data Centers Community Cloud Provider in Asia For Disaster recovery, High Availability Integrate EVPN/VXLAN to MPLS-L3VPN IP/MPLS WAN 27
Cisco NFV Integration with VTS ware vcenter VXLAN NFV x86 Serv er Bare Metal Network Function x86 Serv er NFV 28
NFV Use case Service Provider in Asia Orchestration & Controllers Layer Admin Tools Customer Portal REST API NSO OSS/BSS NSO: Network Service Orchestrator VTS: Virtual Topology System VTS: Virtual Topology System : Top of Rack switch PNF: Physical Network Function VNF: Virtual Network Function dvs: distributed Virtual Switch PE: Provider Edge ESC vcenter VTS Plug-in VTS Virtual Overlay Networking Layer BGP-EVPN MPLS VPN Netw ork VXLAN VPN PE & VXLAN Gateway Nexus 9300 () Nexus 9300 () VLANs VLANs VLANs VLANs Virtual Infrastructure, VNF & PNF Layer PNF1 dvs dvs PNF2 VNF1 VNF2 VNF1 VNF2 29
VTS Functionality & Workflows
VTS Functionality: Discovery & Topology DCI Border Leaf Discov ery M Integration Dynamic Provisioning REST API Cisco VTS NX-API, CLI, YANG Dev ice Topology Discov ery LLDP Import configuration file Serv er Discovery ware vcenter LLDP Import Server to TOR Connection 31
VTS Functionality - Resource Pools DCI Manual resources management leads to errors and misconfigurations Border Leaf Automated Resource Allocation and de-allocation on provisioning Automated VLANs to VNIs to ensure connectivity REST API Cisco VTS NX-API, CLI, YANG Global Resource Pools VNI (VXLAN Network Identifier) Multicast IP Pool Local Dev ice Resource Pools VLAN ware vcenter 32
VTS Functionality: Infrastructure Policy Cisco VTS DC POD A [L3GW DCI] [L3GW DCI] [L3GW DCI] [L3GW DCI] DC POD B Border Leaf [L3GW BL] [L3GW BL] Border Leaf [L3GW BL] [L3GW BL] [L3GW L3] [L3GW L3] Distributed L2/L3 gateway Mode Centralized L3 Gateway [L2GW ] [L2GW ] [L2GW ] [L2GW ] [L2GW ]
Cisco VTS Operational models VTS GUI based M Initiated Multi M (Roadmap) vcenter VTS vcenter VTS VTS Network and Compute groups work in Silos Port-group and vlan information are exchanged offline as the s are attached. VTS Plugin in M initiated workflow. Network objects creation is initiated in M Degree of Automation The Network segments are shared across Ms Network objects can be created at Ms or at VTS 34
VTS Functionality: Overlay Configuration through GUI Create a Tenant Add Network to the Tenant Add Subnet Select the and host facing ports VLAN and VNID is automatically allocated Layer-2 VXLAN segment is configured on the switches
VTS : OpenStack Workflow 1 Create Tenant Networks 2 Tenent and Tenant Networks Created NX-API, CLI, YANG REST API Cisco VTS VXLAN 3 VNID assigned for each network 4 Attach to Network OpenStack Project View 5 Host info captured by VTS and mapped to the right & port using topology database x86 Serv er x86 Serv er 36
VTS : OpenStack Workflow 1 Create Tenant Networks 2 REST API 3 Tenent and Tenant Networks Created Cisco VTS VNID assigned for each network NX-API, CLI, YANG VXLAN 6 VTS provisions, VLAN for each and EVPN on /VTF VXLAN vlan 1,1700-711,2000 vlan 1706 vn-segment 46006 evpn evi 46006 vni bgp rd auto route-target import auto route-target export auto interface nve1 no shutdown source-interface loopback0 member vni 46006 host-reachability protocol bgp mcast-group 224.1.1.1 4 Attach to Network OpenStack Project View 5 Host info captured by VTS and mapped to the right & port using topology database VLAN VLAN VLAN 7 Neutron agent modified to request VLAN information from VTS before programming vswitch VLAN x86 Serv er x86 Serv er 37
VTS : OpenStack Workflow 6 VTS provisions, VLAN for each and EVPN on /VTF 9 VTS provisions L3 VXLAN (distributed L2/L3), Anycast gateway with EVPN vlan 1708 vn-segment 46008 1 Create Tenant Networks 2 Tenent and Tenant Networks Created NX-API, CLI, YANG vrf context vni-46008 vni 46008 rd auto address-family ipv4 unicast route-target both auto fabric forwarding anycast-gateway-mac 0002.0002.0002 #Anycast Gateway MAC, identically configured on all s 4 Attach to Network 8 OpenStack Project View Create router and attach interfaces to tenant networks REST API 5 7 3 Cisco VTS VNID assigned for each network Host info captured by VTS and mapped to the right & port using topology database Neutron agent modified to request VLAN information from VTS before programming vswitch VLAN x86 Serv er VXLAN VLAN x86 Serv er VLAN VXLAN VLAN interface Vlan1706 no shutdown vrf member vni-46008 ip address 192.168.4.1/24 ---> Anycast GW Address fabric forwarding mode anycast-gateway interface Vlan1708 no shutdown vrf member vni-46008 ip forward router bgp 23 router-id 4.4.4.4 address-family ipv4 unicast address-family l2vpn evpn retain route-target all.. vrf vni-46008 address-family ipv4 unicast advertise l2vpn evpn evpn evi 46008 vni bgp rd auto route-target import auto route-target export auto 38
Demo: VTS Functionality & Workflow
Summary
Why Cisco VTS? Open Agility and Automation Seamless Integration Scale Performance Efficiency Investment Protection Policy Driven Control & Data Plane Netw ork as a Service Multi- Multi-M Scale-Out PODs Host Based Overlays Infrastructure Programmable Architecture Integration w ith Orchestrators Heterogeneous Workloads Fabric Efficiency N2k-N9k, ASR Support Netw ork Connectivity (NB & SB) Automated DCI/WAN Custom NB Integration Bare metal Apps/Services Group Based Policies Interoperability (MPLS/VPN, OTV) Multi-Tenancy Services Integration (P&V) Multi-POD & Multi-DC Interoperability Service Assurance 41
Cisco Differentiation NFV Ecosystem Full stack NFV solution Integration with NSO and VNF life-cycle manager ESC Dynamic service chaining capabilities Virtual Topology System (Policy Plane & Control Plane) Transactional policy models; ability to flag transaction errors & rollback Architecture to easily integrate third party network elements Virtual Topology Forwarder Network Endpoint Ecosystems User space without any kernel modifications Multi-tenanted, L2/L3 capable including VXLAN & MPLS Line rate packet forwarder Enabling SW and HW overlays in bare-metal and virtualized environment N2k-N9k, ASR 9K, and Virtual forwarder support
For More Information http://www.cisco.com/go/vts
Thank you