8/16/2019 OpenContrail Juniper

1/10

Marcio PilottoGerente de Engenharia de SistemasJuniper Networks

8/16/2019 OpenContrail Juniper

2/10

Network Virtualization

RedVirtual Network

GreenVirtual Network

BlueVirtual Network

VM VM

VM VM

VM VM

VM VM

VM VM

Switches

Virtualized Servers

Dynamic Network Virtualization at ScaleWithout the complexity, scaling limitations, and stability issues of VLANs

Bare Metal Servers

8/16/2019 OpenContrail Juniper

3/10

Virtual Network Policies

Virtual Network Policies At a high level of abstraction, applied at the boundaries of virtual networks.

VM VM VM

GreenVirtual Network

VM VM VM

RedVirtual Network

Policyonly HTTP

NAT

8/16/2019 OpenContrail Juniper

4/10

Service Chaining

Service ChainingPolicy based application of virtual and physical services with scale-out.

Firewall, Intrusion Prevention, Load balancer, Cache, WAN optimizer, proxy, ...

VM VM VM

GreenVirtual Network

VM VM VM

RedVirtual Network

VirtualService

DPI

VirtualServiceCache

PhysicalServiceFirewall

Policyonly HTTP

NAT + DPI + Cache + Firewall

8/16/2019 OpenContrail Juniper

5/10

CloudStackOpenStack

ContrailController

VMG1

VMR1

VMG2

VMR2

Contrail Controller

REST APIs

XMPP

VirtualizedServer

Contrail vRouter

Hypervisor

Routing InstanceOverlay TunnelMPLS/GRE, MPLS/UDP, VXLAN

Underlay Switch

Physical Realization Logical Abstraction

GreenVirtual Network

VM VM VM VM

RedVirtual Network

VM VM VM VM

Network Virtualization

8/16/2019 OpenContrail Juniper

6/10

ContrailController

VMR1

VMR2

BGP + NetconfL3VPN or E-VPN

Overlay TunnelVXLAN

RedVirtual Network

VM VM

Gateway Switch

Bare Metal Server(Non-Virtualized Server)

Gateway to Bare Metal ServerPhysical Realization Logical Abstraction

CloudStackOpenStack

8/16/2019 OpenContrail Juniper

7/10

BMS INTEGRATION

Bare MetalServer

Virtual Machines onany Hypervisor

Top of Rack Switch

VirtualNetwork

VM1

VM2

L3 GW

!

VLANGreen

PHYSICAL

VM

1

VM2

WAN /Internet

L3 GW

LOGICAL

Control using EVPN (BGP) for QFXConfig using OVS-DB/XMPP / Netconf

Config using XMPP / Netconf

Control using BGP (L3VPN / EVPN)

VXLANTunnels

! Contrail enables Legacy VLAN basedarchitecture interconnecting with a Cloudarchitecture

! Does not need a gateway when going fromone VN to another on the Contrail overlay

VLANBlue

Green

VM4

VM5VM4

VM5

Blue

VM3

VirtualNetwork

VM3

Contrail allows inter-VN trafficin the overlay without havingto go through the L3 GW

For traffic from VM in overlayto non-overlay VMs or BMS,traffic needs to go through the

L3 GW

Intra-VN traffic from VM toBMS goes through the TOR.

Phy + VirtInterconnect

8/16/2019 OpenContrail Juniper

8/10

North-Bound REST APIs

Service Data Model(Logical Abstraction)

Transformation Engine

Technology Data Model(Physical Realization)

Analytics

South-Bound Protocols

C o n

t r a

i l S

D N C

o n

t r o

l l e r

SDN as a Compiler

8/16/2019 OpenContrail Juniper

9/10

ConfigurationNodes

ControlNodes

AnalyticsNodes

IF-MAP

REST REST

XMPP

BGP

BGP, Netconf

Highly Available Scale-Out

vRouters Gateways

BGP

Logically Centralized(Physically Distributed)

Horizontally Scalable

Highly Available(Active-Active)

Federated

8/16/2019 OpenContrail Juniper

10/10

opencontrail.org

• Internet Scale Technology Applied to the Cloud• Massively Scalable• Standard Proven Technologies, Multi-Vendor• Network Virtualization• Virtual Network Policies• Service Chaining• Cloud Interconnect• Seamless Integration with Physical Network

• Integrated Rich Analytics