xaas/openstack - cisco...(swift) openstack image service (glance) openstack network service...

XaaS/OpenStack

Jiri Chaloupka – Systems Engineer CCIE# 39800

Cisco and/or its affiliates. All rights reserved. Presentation_ID Cisco Public

At a more detailed level, there are many resources inside the cloud

Applications

Runtimes

Databases

Servers

Security

Virtualization Storage

Networking

Cisco and/or its affiliates. All rights reserved. Presentation_ID Cisco Public

Private Cloud

What resources you manage inside the cloud defines the following…

Infrastructure as a Service

(IAAS)

Platform as a Service (PAAS)

Software as a Service (SAAS)

How do these differ from one another?

Cisco and/or its affiliates. All rights reserved. Presentation_ID Cisco Public

Applications Runtimes

Databases

Servers Security

Virtualization

Storage Networking

Private Cloud

Infrastructure as a Service

(IAAS)

Platform as a Service (PAAS)

Software as a Service (SAAS)

Applications Runtimes

Databases

Servers Security

Virtualization

Storage Networking

Applications Runtimes

Databases

Servers Security

Virtualization

Storage Networking

Applications Runtimes

Databases

Servers Security

Virtualization

Storage Networking

Managed by You Managed by Vendor

Cisco and/or its affiliates. All rights reserved. Presentation_ID Cisco Public

You start with a Physical Switch

Network

Physical Devices and Physical Connections

Cisco and/or its affiliates. All rights reserved. Presentation_ID Cisco Public

Then you add an overlay

Overlay provides base for logical

network

Cisco and/or its affiliates. All rights reserved. Presentation_ID Cisco Public

Logical “switch” devices overlay the

physical network

Underlying physical network carries data

traffic for overlay network

They define their own topology

Cisco and/or its affiliates. All rights reserved. Presentation_ID Cisco Public

Multiple “overlay” networks can co-exist

at the same time

Overlays provides logical network constructs for

different tenants (customers)

Cisco and/or its affiliates. All rights reserved. Presentation_ID Cisco Public

Overlay Taxonomy

Overlay Control Plane

Encapsulation Service = Virtual Network (VN) Identifier = VN Identifier (VNI)

Underlay Control Plane

Underlay Network Hosts

(end-points)

Edge Devices Edge Device

10

§  VXLAN

§  FabricPath

§ MPLS(vPE)

Cisco and/or its affiliates. All rights reserved. Presentation_ID Cisco Public

Main Benefit of Overlays?

Overlay Network can be created and torn down without changing underlying physical network

Cisco and/or its affiliates. All rights reserved. Presentation_ID Cisco Public

What about Openstack? Where does that fit in?

Cisco and/or its affiliates. All rights reserved. Presentation_ID Cisco Public

Openstack is an IAAS (Infrastructure As A Service) cloud computing project

It is also referred to as a Cloud Operating System

“…provides a means to control (administer) compute, storage, network and virtualization technologies…”

Cisco and/or its affiliates. All rights reserved. Presentation_ID Cisco Public

Applications

With IAAS, compute, storage, networking and virtualization resources are managed by the Vendor

(this defines them as an IAAS provider)

Runtimes

Databases

Servers

Security

Virtualization Storage

Networking

Managed by You Managed by Vendor

Cisco and/or its affiliates. All rights reserved. Presentation_ID Cisco Public

Openstack lets the provider manage these resources

Servers

Virtualization Storage

Networking

Cisco and/or its affiliates. All rights reserved. Presentation_ID Cisco Public

Openstack provides web based front end to manage those cloud resources…

Cisco and/or its affiliates. All rights reserved. Presentation_ID Cisco Public

Openstack consists of a number of components

Openstack Compute (NOVA)

Openstack Object Store

(SWIFT)

Openstack Image Service

(GLANCE)

Openstack Network Service

(NEUTRON)

Cisco and/or its affiliates. All rights reserved. Presentation_ID Cisco Public

Openstack Compute (NOVA)

Openstack Compute (NOVA)

Openstack Object Store

(SWIFT)

Openstack Image Service

(GLANCE)

Openstack Network Service

(NEUTRON)

Allows the administrator to create and manage Virtual Machines (VM’s) using various (stored) machine images

Cisco and/or its affiliates. All rights reserved. Presentation_ID Cisco Public

Object Store (SWIFT)

Openstack Compute (NOVA)

Openstack Object Store

(SWIFT)

Openstack Image Service

(GLANCE)

Openstack Network Service

(NEUTRON)

Provides the ability to store objects – basically it is the component that is responsible for managing storage and reading/writing objects to that storage

An object could be a video file, a document, a picture, a database… basically anything that you would normally store on your computer

Cisco and/or its affiliates. All rights reserved. Presentation_ID Cisco Public

Image Store (GLANCE)

Openstack Compute (NOVA)

Openstack Object Store

(SWIFT)

Openstack Image Service

(GLANCE)

Openstack Network Service

(NEUTRON)

This is the component responsible for managing the different operating system images (Windows, Linux, etc) that NOVA uses to create virtual

machine’s

Cisco and/or its affiliates. All rights reserved. Presentation_ID Cisco Public

Network Service (QUANTUM) à NEUTRON

Openstack Compute (NOVA)

Openstack Object Store

(SWIFT)

Openstack Image Service

(GLANCE)

Openstack Network Service

(NEUTRON)

Allows the administrator to create and manage virtual networks

This is the piece that has relevance to our SDN story

Cisco and/or its affiliates. All rights reserved. Presentation_ID Cisco Public

NEUTRON (ex Quantum) is used to help manage the overlay (virtual) networks

Cisco and/or its affiliates. All rights reserved. Presentation_ID Cisco Public

NEUTRON Quick DeepDive

Cisco and/or its affiliates. All rights reserved. Presentation_ID Cisco Public

A simple OpenStack Deployment

Control Node

Mysql

RabbitMQ

Nova-api

Nova-scheduler

Keystone

Neutron Server

Network Node

Neutron-plugin-agent

Neutron-L3-agent

Neutron-dhcp-agent

Compute Nodes Compute Nodes Compute Nodes

Nova-compute

Neutron-plugin-agent

Data Network

External Network IPMI Network

Management Network

Cisco and/or its affiliates. All rights reserved. Presentation_ID Cisco Public

ML2 Architecture Diagram - IceHouse Neutron Server

ML2 Plugin

Type Manager Mechanism Manager

API Extensions

GR

E TypeD

river

Arista

VLA

N TypeD

river

VX

LAN

TypeD

river

Cisco N

exus

Hyper-V

L2 Population

Linuxbridge

Open vS

witch

Tail-F NC

S

Cisco and/or its affiliates. All rights reserved. Presentation_ID Cisco Public

ML2 With Current Agents

Neutron Server ML2 Plugin

Host A

Linuxbridge Agent

Host B

Hyper-V Agent

Host C

Open vSwitch Agent

Host D

Open vSwitch Agent

API Network

●  ML2 Plugin works with existing agents

●  Separate agents for Linuxbridge, Open vSwitch, and Hyper-V

Cisco and/or its affiliates. All rights reserved. Presentation_ID Cisco Public

Cisco Nexus Plugin Diagram

http://docwiki.cisco.com/wiki/OpenStack:Grizzly-Nexus-Plugin

Cisco and/or its affiliates. All rights reserved. Presentation_ID Cisco Public

Service Chaining with Nexus 1000V

API Network is typically routable to enable public access

Cloud Controller Node

nova-scheduler

mysql, rabbit...

nova-api

neutron-server

keystone

Compute Node

nova-compute

*-plugin-agent

Compute Node

nova-compute

*-plugin-agent

Compute Node

nova-compute

*-plugin-agent

Compute Node

nova-compute

*-plugin-agent

Network Node

dhcp-agent

*-plugin-agent

l3-agent

Network Node

dhcp-agent

*-plugin-agent

l3-agent

Network Node

dhcp-agent

*-plugin-agent

l3-agent

Management Network

API Network

Data Network

External Network

Internet

N1000V

•  Foundation of Virtual Services Architecture •  vPath Service Insertion/Chaining •  VXLAN Overlay Networking

VSM/N1000V

Cisco and/or its affiliates. All rights reserved. Presentation_ID Cisco Public

Network Node

dhcp-agent

*-plugin-agent

CSR 1000V Routing

API Network is typically routable to enable public access

Cloud Controller Node

nova-scheduler

mysql, rabbit...

nova-api

quantum-server

keystone

Compute Node

nova-compute

*-plugin-agent

Compute Node

nova-compute

*-plugin-agent

Compute Node

nova-compute

*-plugin-agent

Compute Node

nova-compute

*-plugin-agent

Management Network

API Network

Data Network

External Network

Internet

N1000V

CSR 1000V

Network or Compute node(s) hosts CSR

VSM/N1000V

CSR Provides per tenant isolation and full IOS capabilities including VPN, BGP, OSFP, MPLS, etc.

Cisco and/or its affiliates. All rights reserved. Presentation_ID Cisco Public

Networking Diagram – Open vSwitch (OVS)

30 Source: www.openstack.org

Cisco and/or its affiliates. All rights reserved. Presentation_ID Cisco Public

br-ex

External Network

br-int

br-tun GRE

Host B

patch-tun

patch-int

Host A

VM 1

App_Network 10.0.2.0/24

External_Network 172.18.0.0/24

DB_Network 10.0.3.0/23

Neutron/Quantum Internals

Router

VM 2 VM 2

VM 1

VM 3 DB_Network

Alternatively, tunnel to Host B could be external VLAN

VXLAN Tunnels Possible as well

172.18.0.3 Floating IP

Cisco and/or its affiliates. All rights reserved. Presentation_ID Cisco Public Source: www.canonical.com

Canonical/Ubuntu – Openstack releases

Cisco and/or its affiliates. All rights reserved. Presentation_ID Cisco Public

Cisco and Openstack?

http://www.openstack.org/user-stories/cisco-webex/

Cisco/Openstack Blueprints Nova Scheduler Neutron VPNaaS (Cisco CSR1000v) RaaS – CSR1000v UCS Manager ML2 IPv6 …..

Cisco and/or its affiliates. All rights reserved. Presentation_ID Cisco Public

The OpenStack Challenge

80% of all Openstack Installation fail due to Implementation and Integration Issues

Prosíme, ohodnoťte tuto přednášku

•  Děkujeme