nova networking to neutron: it‘s time for sdn – hi london!
TRANSCRIPT
CONFIDENTIAL-SOLELYFORAUTHORIZEDPERSONSHAVINGANEEDTOKNOWPROPRIETARY–USEPURSUANTTOCOMPANYINSTRUCTION
©2016Nokia.Allrightsreserved.NuageNetworksisaNokiaventure.
NovaNetworkingtoNeutron:It‘sRmeforSDN–HiLondon!
@nuagenetworks
CONFIDENTIAL-SOLELYFORAUTHORIZEDPERSONSHAVINGANEEDTOKNOWPROPRIETARY–USEPURSUANTTOCOMPANYINSTRUCTION
©2016Nokia.Allrightsreserved.NuageNetworksisaNokiaventure.
Nova-NetworkisDEPRECATED!!!h;ps://review.openstack.org/#/c/310539/
5/11/16
2
Novanetworkisnowdeprecated.BasedontheresultsofthecurrentOpenStackUserSurveylessthan10%ofourusersremainonNovanetwork.ThisisthesignalthatitisRmemigratetoNeutron.NonewfeatureswillbeaddedtoNovanetwork,andbugswillonlybefixedonacasebycasebasis.
CONFIDENTIAL-SOLELYFORAUTHORIZEDPERSONSHAVINGANEEDTOKNOWPROPRIETARY–USEPURSUANTTOCOMPANYINSTRUCTION
©2016Nokia.Allrightsreserved.NuageNetworksisaNokiaventure.
5/11/16
3
hcp://docs.openstack.org/openstack-ops/content/nova-network-deprecaRon.html
TheBadNews:ThereisnoCleanUpgradePickaControlPlane/LearntheOPSGUIDE!
hcp://docs.openstack.org/openstack-ops/content/openstack-ops_preface.html
InstalltheControlPlane/NeutronDBNodeorSDN
InstalltheComputeDataPath/OVS/LibvirtUpdate
hcp://docs.openstack.org/liberty/networking-guide/migraRon-nova-network-to-neutron.html
VirtualMachine
CONFIDENTIAL-SOLELYFORAUTHORIZEDPERSONSHAVINGANEEDTOKNOWPROPRIETARY–USEPURSUANTTOCOMPANYINSTRUCTION
©2016Nokia.Allrightsreserved.NuageNetworksisaNokiaventure.
5/12/16
4
…andbasicallyjoinOpenStackOperatorshcps://wiki.openstack.org/wiki/OperaRonsIrc:#openstack-operatorsOpenStackOperatorsdiscussionchannel
CONFIDENTIAL-SOLELYFORAUTHORIZEDPERSONSHAVINGANEEDTOKNOWPROPRIETARY–USEPURSUANTTOCOMPANYINSTRUCTION
©2016Nokia.Allrightsreserved.NuageNetworksisaNokiaventure.
CurrentnetworkingArchitecturesinOpenStack
WhyOpenStackNetworkingandNova-NetworkandNeutron/SDN
5/11/16
5
CONFIDENTIAL-SOLELYFORAUTHORIZEDPERSONSHAVINGANEEDTOKNOWPROPRIETARY–USEPURSUANTTOCOMPANYINSTRUCTION
©2016Nokia.Allrightsreserved.NuageNetworksisaNokiaventure.
5/11/16
6
OVSPluginvs.SDNNuage(insertedonKVMHypervisors)NeutronDatapathonCompute–SDNInserWon
GREEncapsulated
br-int
br-tun
patch-tun
patch-int
PortVLAN:10 PortVLAN:20
VM1TenantA
VM2TenantA
VM3TenantB
eth0eth0eth0
qbra
qvba
vneta
qvoa
qbrb
qvbb
ventb
qvob
qbrc
qvbc
vnetc
qvo
gre-10.0.0.1
eth0
TAPDevice
vethpair
LinuxBridge
OpenvSwitch
ConfiguredbyNovaCompute
ConfiguredbyNeutronL2Agent
o Tenantswillbe
separatedbyinternalassignedVLANS
o VLANSwillbemappedegresstowardsGREtunnelswhichareuniquebytunnelID
VM1TenantA
VM2TenantA
VM3TenantB
eth0eth0eth0
tapa tapb tapc
alubr0
VXLANEncapsulated
eth0
PolicyDrivenConfiguraWonfrom
NuageVSP
NeutronOVSDatapath(supportsL2only)
NuageDatapath(supportsdistributedL2,L3,FloaRngIP,…)
PHYPort
CONFIDENTIAL-SOLELYFORAUTHORIZEDPERSONSHAVINGANEEDTOKNOWPROPRIETARY–USEPURSUANTTOCOMPANYINSTRUCTION
©2016Nokia.Allrightsreserved.NuageNetworksisaNokiaventure.
5/11/16
7
DatapathComparetoNeutron+Nuage
br-intint-br-ext
VM1TenantA
VM2TenantA
VM3TenantB
eth0eth0eth0
qbra
qvba
vneta
qvoa
qbrb
qvbb
vnetb
qvob
qbrc
qvbc
vnetc
qvoc
TAPDevice
vethpair
LinuxBridge
OpenvSwitch
VM3TenantB
eth0
qbrd
qvbd
vnetd
PHYPort
qvod
br-ext
phy-br-ext
InternalRouterNamespace
qr-f qr-g
IP IP IP IP
IP IP
qr-fqrouter-yInternalRouterNamespace
qr-h qr-jIP IP
qr-n qrouter-z
FloaRngIPNamespace
qfloat-x qf-nqr-m
qf-x
br-tun
int-br-tun1
int-br-tun1
FlowTableentry
FlowTableentry
DVRAGENT(EnhancedL3
Agent)
PrivateNetwork
eth1
PublicNetwork
eth0
Ext-IP
alubr0VRS
(SingleOVSbridge)
o SingleOVSBridgeo IsFlow-Basedo PerformsFirewalling,
Switching,RouRng,NAT,…
o ProcessesARP,DHCPLOCALLY
o NoDedicatedNetworkNodeforo non-DVRcase:
RouRng,DNAT,SNAT,DHCP
o DVRcase:SNAT,DHCP
CONFIDENTIAL-SOLELYFORAUTHORIZEDPERSONSHAVINGANEEDTOKNOWPROPRIETARY–USEPURSUANTTOCOMPANYINSTRUCTION
©2016Nokia.Allrightsreserved.NuageNetworksisaNokiaventure.
ComputeNodeComputeNode
ComputeNode NetworkNode
br-int
qbr..
5/11/16
8
LinuxBridgeInterfacesareGoneNeutronL3Datapath
VM1TenantA
VM2TenantA
A Q
B
C
qbr..
R
S
D T
br-tun
E
F
G
br-tunH
br-intJ
I
M O
dhcprouter
PN
K
br-ext L
ML2OVS/NetworkNode
VM1TenantA
VM2TenantA
A B
VM1TenantA
VM2TenantA
C D
alubr0 alubr0
VRS-GSolwareGW
alubr0
HardwareGW
alubr0
VXLAN VXLANVXLAN
VXLAN
NuageVSP
CONFIDENTIAL-SOLELYFORAUTHORIZEDPERSONSHAVINGANEEDTOKNOWPROPRIETARY–USEPURSUANTTOCOMPANYINSTRUCTION
©2016Nokia.Allrightsreserved.NuageNetworksisaNokiaventure.
NeutronServer
RabbitMQ
L3Agent
OVSAgent
MetadataProxy
MetadataAgent
Keepalived
OVS
dnsmasq
NetworkNode
OVSAgent
OVS
ComputeNode
RabbitMQ
MySQL
NuageArchitectureDifferenWaWono NeutronrequireshighDatabasereadandwriteoperaRonsandMessaging
o SincethereisNOseparatecontrolplane,Neutronserverhastodealwitheverycomputenodewithoutanyoffload
o NodatabaseinquirycachesupportedfortheDatabasewhichtremendouslyincreasedDatabasereadpressure
o SQLAlchemydesigninneutroncodeaddsDatabasepressureandMetadatacachinginefficiency
CONFIDENTIAL-SOLELYFORAUTHORIZEDPERSONSHAVINGANEEDTOKNOWPROPRIETARY–USEPURSUANTTOCOMPANYINSTRUCTION
©2016Nokia.Allrightsreserved.NuageNetworksisaNokiaventure.
Demo/QnA
CONFIDENTIAL-SOLELYFORAUTHORIZEDPERSONSHAVINGANEEDTOKNOWPROPRIETARY–USEPURSUANTTOCOMPANYINSTRUCTION
©2016Nokia.Allrightsreserved.NuageNetworksisaNokiaventure.
ThenewlyannouncedvspkandassociatedtoolsarenowavailableonGitHubandPIP:hcps://github.com/nuagenetworksBlogs:hcps://filipv.net/hcp://nuagenetworks.github.io/
NuageNetworksCommunityForums
CONFIDENTIAL-SOLELYFORAUTHORIZEDPERSONSHAVINGANEEDTOKNOWPROPRIETARY–USEPURSUANTTOCOMPANYINSTRUCTION
©2016Nokia.Allrightsreserved.NuageNetworksisaNokiaventure.
AboutNuageNetworks§ NuageisaEuropeanstartupwithofficesintheSiliconeValley
§ AnNokiabackedventurefocusedondatacenterandbranchofficenetworkevoluRonfortheSolwareDefinedCloudCompuRngWorld
§ CreaRonofanAbstracRon&AutomaRonlayerbetweennetworkingdecouplingHardware
§ APIandPolicynetworkingdesignreflecRngbusinessdirecRves,notnetwork
§ AcRveinmanydiverseNetworkingForumsandOpenSourceProjects