naas in openstack - cloudcamp moscow

Network as a Service

in OpenStack

Ilya Alekseyevilyaalekseyev@acm.org

Agenda

1. OpenStack2. Network as a Service3. Network as a Service in OpenStack4. DevOps applications5. OpenStack Community

Agenda

1. OpenStack2. Network as a Service3. Network as a Service in OpenStack4. DevOps applications5. OpenStack Community

OpenStack

OpenStack – open source cloud software

OpenStack

OpenStack:● truly open source cloud software (Apache2

license)● open design process● open development process● open source code● open community

OpenStack

OpenStack contains 5 projects:● Compute (Nova) – Cloud fabric● Storage (Swift) – Cloud storage● Image service (Glance) – VM image

management● Identity (Keystone) – user management● Dashboard (Horizon) – cloud management

web interface

OpenStack

NovaSwiftGlanceKeystone Dashboard

OpenStack Nova

● VM lifecycle management● Hypervisor agnostic: KVM, LXC, QEMU,

UML, VMWare ESX/ESXi, XenServer/XCP, HyperV (before Essex release)

● 3 network models: Flat, FlatDHCP, VLAN● Role based access control● Block device management● REST API: OpenStack & Amazon EC2

OpenStack Swift

● Redundant object storage● High availability● Leverages commodity hardware● No single point of failure● Multi-dimensional scalability● REST API: OpenStack & Amazon S3

OpenStack Glance

● Image as a Service● Container support:

ovf, bare, aki, ari, ami

● Disk format support: raw, vhd, vmdk, vdi, iso, qcow2, aki, ari, ami

OpenStack Keystone

● Provides unified authentication across all OpenStack projects and integrates with existing authentication systems

● Role based access control● Storage support: KVS, SQLDB, LDAP, PAM

OpenStack Horizon

Web dashboard for cloud management

Agenda

1. OpenStack2. Network as a Service3. Network as a Service in OpenStack4. Possible applications5. OpenStack Community

Network as a Service

● multiple networks per tenant● multiple network interfaces per VM● ability to connect networks to VM network

interfaces● isolation between networks● control over IP addressing● API for network management

Network as a Service

● multiple networks per tenant● multiple network interfaces per VM● ability to connect networks to VM network

interfaces● isolation between networks● control over IP addressing● API for network management

Network infrastructure, but virtual

Agenda

1. OpenStack2. Network as a Service3. Network as a Service in OpenStack4. DevOps applications5. OpenStack Community

Network as a Service in OpenStack

I’m serious… and DON’T call me Shirley

Network as a Service in OpenStack

Two incubated OpenStack projects:● Quantum – network connectivity as a service

○ software defined networks (SDN)○ OpenFlow○ QoS○ Monitoring

● Melange – IP managementinitial focus is on IP address management (IPAM) and address discovery (DHCP/dnsmasq) functionality

Network as a Service in OpenStack

Quantum● Multiple networks per tenant● Connection between VM network interface

(vNIC) and virtual networks● L2 isolation support

Supported technology:● OpenVSwitch● Linux Bridge● Cisco UCS/Nexus● Ryu OpenFlow Controller

Agenda

1. OpenStack2. Network as a Service3. Network as a Service in OpenStack4. DevOps applications5. OpenStack Community

DevOps Applications

DevOps - collaboration and integration of IT infrastructure operations, software engineering and QA

DevOps Applications

DevOps in cloud:● Dynamic

environment● Changes in

environment could be automated

● Ability to provide same infrastructure for development and QA

DevOps Applications

Distributed system examplesome cases for distributed systems that needs

network management capabilities

DevOps Applications

Distributed system troubles:● Split Brain

Split-brain occurs when all of the private links go down simultaneously, but the cluster nodes are still running.

● Data channel low throughput Is network capabilities enough for your data flow?

● Site failuresAutonomous part of system failure

● Delayed messagesMessages to remote systems arrived too late

...

DevOps Applications

Cloud simulation with NaaS:● Split Brain - disable connectivity between

cluster nodes● Data channel low throughput - QoS on vNIC● Site failures - creation of separate networks

for autonomous parts● Delayed messages - simulate network

connectivity failures programmatically

Agenda

1. OpenStack2. Network as a Service3. Network as a Service in OpenStack4. DevOps applications5. OpenStack Community

OpenStack Community Resources

http://www.openstack.orghttps://www.launchpad.net/~openstackhttp://wiki.openstack.org

OpenStack Community in Russia

OpenStack Community in Russia

http://www.oscloud.ruhttp://www.openstack.ru

Thank you

Ilya Alekseyev

Russian OpenStack Communityhttp://www.oscloud.ru

ilyaalekseyev@acm.org