Hands-On Workshop, OpenStack Summit, Austin€¦ · 1. Intro + Workshop logistics - Sumit, 5 mins...
Transcript of Hands-On Workshop, OpenStack Summit, Austin€¦ · 1. Intro + Workshop logistics - Sumit, 5 mins...
![Page 1: Hands-On Workshop, OpenStack Summit, Austin€¦ · 1. Intro + Workshop logistics - Sumit, 5 mins 2. OpenStack *aaS services and SFC in Neutron and GBP - Igor, 10 mins 3. GBP Intro](https://reader036.fdocuments.in/reader036/viewer/2022062917/5ed3756a4bb814069d3561eb/html5/thumbnails/1.jpg)
Developing, Deploying, and Consuming L4-7 Network Services in an OpenStack Cloud
Hands-On Workshop, OpenStack Summit, Austinhttps://wiki.openstack.org/wiki/GroupBasedPolicy/Austin
Sumit Naiksatam, Igor Duarte Cardoso, Hemanth Ravi, Ivar Lazzaro, Jason Plank, David Grizzanti
![Page 2: Hands-On Workshop, OpenStack Summit, Austin€¦ · 1. Intro + Workshop logistics - Sumit, 5 mins 2. OpenStack *aaS services and SFC in Neutron and GBP - Igor, 10 mins 3. GBP Intro](https://reader036.fdocuments.in/reader036/viewer/2022062917/5ed3756a4bb814069d3561eb/html5/thumbnails/2.jpg)
![Page 3: Hands-On Workshop, OpenStack Summit, Austin€¦ · 1. Intro + Workshop logistics - Sumit, 5 mins 2. OpenStack *aaS services and SFC in Neutron and GBP - Igor, 10 mins 3. GBP Intro](https://reader036.fdocuments.in/reader036/viewer/2022062917/5ed3756a4bb814069d3561eb/html5/thumbnails/3.jpg)
Agenda1. Intro + Workshop logistics - Sumit, 5 mins
2. OpenStack *aaS services and SFC in Neutron and GBP - Igor, 10 mins
3. GBP Intro + Service Chain consumption workflow (tenant API) - Sumit, 20 mins
4. Service Chain deployment workflow (Operator API) - Ivar, 20 mins
5. BYOF - Service Developer workflow - Hemanth, 20 mins
6. HA for Services + Sungard Production setup tour - David, 10 mins
7. Q/A
![Page 4: Hands-On Workshop, OpenStack Summit, Austin€¦ · 1. Intro + Workshop logistics - Sumit, 5 mins 2. OpenStack *aaS services and SFC in Neutron and GBP - Igor, 10 mins 3. GBP Intro](https://reader036.fdocuments.in/reader036/viewer/2022062917/5ed3756a4bb814069d3561eb/html5/thumbnails/4.jpg)
LogisticsWorkshop Resources:
https://wiki.openstack.org/wiki/GroupBasedPolicy/Austin
Workshop Guide:
https://goo.gl/EwAJeg
Contains lab access information
Also, GBP devstack available to practice after workshop
![Page 5: Hands-On Workshop, OpenStack Summit, Austin€¦ · 1. Intro + Workshop logistics - Sumit, 5 mins 2. OpenStack *aaS services and SFC in Neutron and GBP - Igor, 10 mins 3. GBP Intro](https://reader036.fdocuments.in/reader036/viewer/2022062917/5ed3756a4bb814069d3561eb/html5/thumbnails/5.jpg)
OpenStack *aaS services and SFC in Neutron and GBP
![Page 6: Hands-On Workshop, OpenStack Summit, Austin€¦ · 1. Intro + Workshop logistics - Sumit, 5 mins 2. OpenStack *aaS services and SFC in Neutron and GBP - Igor, 10 mins 3. GBP Intro](https://reader036.fdocuments.in/reader036/viewer/2022062917/5ed3756a4bb814069d3561eb/html5/thumbnails/6.jpg)
OpenStack *aaS services and SFC in Neutron and GBP
![Page 7: Hands-On Workshop, OpenStack Summit, Austin€¦ · 1. Intro + Workshop logistics - Sumit, 5 mins 2. OpenStack *aaS services and SFC in Neutron and GBP - Igor, 10 mins 3. GBP Intro](https://reader036.fdocuments.in/reader036/viewer/2022062917/5ed3756a4bb814069d3561eb/html5/thumbnails/7.jpg)
OpenStack *aaS services and SFC in Neutron and GBP
![Page 8: Hands-On Workshop, OpenStack Summit, Austin€¦ · 1. Intro + Workshop logistics - Sumit, 5 mins 2. OpenStack *aaS services and SFC in Neutron and GBP - Igor, 10 mins 3. GBP Intro](https://reader036.fdocuments.in/reader036/viewer/2022062917/5ed3756a4bb814069d3561eb/html5/thumbnails/8.jpg)
OpenStack *aaS services and SFC in Neutron and GBP
![Page 9: Hands-On Workshop, OpenStack Summit, Austin€¦ · 1. Intro + Workshop logistics - Sumit, 5 mins 2. OpenStack *aaS services and SFC in Neutron and GBP - Igor, 10 mins 3. GBP Intro](https://reader036.fdocuments.in/reader036/viewer/2022062917/5ed3756a4bb814069d3561eb/html5/thumbnails/9.jpg)
OpenStack *aaS services and SFC in Neutron and GBP
● VPNaaS, FWaaS, LBaaS
● GBP can easily instantiate them
● GBP can also chain them
● Instantiation/configuration and chaining/plumbing are not coupled
● Other drivers or plumbers can easily be introduced
![Page 10: Hands-On Workshop, OpenStack Summit, Austin€¦ · 1. Intro + Workshop logistics - Sumit, 5 mins 2. OpenStack *aaS services and SFC in Neutron and GBP - Igor, 10 mins 3. GBP Intro](https://reader036.fdocuments.in/reader036/viewer/2022062917/5ed3756a4bb814069d3561eb/html5/thumbnails/10.jpg)
Policy Based Service Lifecycle Management
![Page 11: Hands-On Workshop, OpenStack Summit, Austin€¦ · 1. Intro + Workshop logistics - Sumit, 5 mins 2. OpenStack *aaS services and SFC in Neutron and GBP - Igor, 10 mins 3. GBP Intro](https://reader036.fdocuments.in/reader036/viewer/2022062917/5ed3756a4bb814069d3561eb/html5/thumbnails/11.jpg)
Group Based Policy Model
![Page 12: Hands-On Workshop, OpenStack Summit, Austin€¦ · 1. Intro + Workshop logistics - Sumit, 5 mins 2. OpenStack *aaS services and SFC in Neutron and GBP - Igor, 10 mins 3. GBP Intro](https://reader036.fdocuments.in/reader036/viewer/2022062917/5ed3756a4bb814069d3561eb/html5/thumbnails/12.jpg)
Resource Model
![Page 13: Hands-On Workshop, OpenStack Summit, Austin€¦ · 1. Intro + Workshop logistics - Sumit, 5 mins 2. OpenStack *aaS services and SFC in Neutron and GBP - Igor, 10 mins 3. GBP Intro](https://reader036.fdocuments.in/reader036/viewer/2022062917/5ed3756a4bb814069d3561eb/html5/thumbnails/13.jpg)
Resource Model
![Page 14: Hands-On Workshop, OpenStack Summit, Austin€¦ · 1. Intro + Workshop logistics - Sumit, 5 mins 2. OpenStack *aaS services and SFC in Neutron and GBP - Igor, 10 mins 3. GBP Intro](https://reader036.fdocuments.in/reader036/viewer/2022062917/5ed3756a4bb814069d3561eb/html5/thumbnails/14.jpg)
1-2-3 Easy!1. Define service chains using simple
commands/UI
2. Create Application Policy to redirect
to service chain
3. Groups provide & consume
Application Policy, done!
![Page 15: Hands-On Workshop, OpenStack Summit, Austin€¦ · 1. Intro + Workshop logistics - Sumit, 5 mins 2. OpenStack *aaS services and SFC in Neutron and GBP - Igor, 10 mins 3. GBP Intro](https://reader036.fdocuments.in/reader036/viewer/2022062917/5ed3756a4bb814069d3561eb/html5/thumbnails/15.jpg)
Consuming - Tenant Workflow
![Page 16: Hands-On Workshop, OpenStack Summit, Austin€¦ · 1. Intro + Workshop logistics - Sumit, 5 mins 2. OpenStack *aaS services and SFC in Neutron and GBP - Igor, 10 mins 3. GBP Intro](https://reader036.fdocuments.in/reader036/viewer/2022062917/5ed3756a4bb814069d3561eb/html5/thumbnails/16.jpg)
Workshop Goal
Web
FW+ LB
HTTPExternal-World App
LBHTTPDB
FW(3306)TCP
External Group PRS Service
ChainInternal Group V
M
![Page 17: Hands-On Workshop, OpenStack Summit, Austin€¦ · 1. Intro + Workshop logistics - Sumit, 5 mins 2. OpenStack *aaS services and SFC in Neutron and GBP - Igor, 10 mins 3. GBP Intro](https://reader036.fdocuments.in/reader036/viewer/2022062917/5ed3756a4bb814069d3561eb/html5/thumbnails/17.jpg)
Deploying - Operator Workflow
![Page 18: Hands-On Workshop, OpenStack Summit, Austin€¦ · 1. Intro + Workshop logistics - Sumit, 5 mins 2. OpenStack *aaS services and SFC in Neutron and GBP - Igor, 10 mins 3. GBP Intro](https://reader036.fdocuments.in/reader036/viewer/2022062917/5ed3756a4bb814069d3561eb/html5/thumbnails/18.jpg)
Separation of ConcernsOperators do this once: So that Users only have to do this:
![Page 19: Hands-On Workshop, OpenStack Summit, Austin€¦ · 1. Intro + Workshop logistics - Sumit, 5 mins 2. OpenStack *aaS services and SFC in Neutron and GBP - Igor, 10 mins 3. GBP Intro](https://reader036.fdocuments.in/reader036/viewer/2022062917/5ed3756a4bb814069d3561eb/html5/thumbnails/19.jpg)
Operator Workflow
Provide basic infrastructure constructs your cloud’s Tenants, so that they don’t have to worry about them.
● External Connectivity Policies
● Service Chain Policies
● Application Contracts
![Page 20: Hands-On Workshop, OpenStack Summit, Austin€¦ · 1. Intro + Workshop logistics - Sumit, 5 mins 2. OpenStack *aaS services and SFC in Neutron and GBP - Igor, 10 mins 3. GBP Intro](https://reader036.fdocuments.in/reader036/viewer/2022062917/5ed3756a4bb814069d3561eb/html5/thumbnails/20.jpg)
Operator Workflow
Provide basic infrastructure constructs your cloud’s Tenants, so that they don’t have to worry about them.
● External Connectivity Policies
● Service Chain Policies
● Application Contracts
![Page 21: Hands-On Workshop, OpenStack Summit, Austin€¦ · 1. Intro + Workshop logistics - Sumit, 5 mins 2. OpenStack *aaS services and SFC in Neutron and GBP - Igor, 10 mins 3. GBP Intro](https://reader036.fdocuments.in/reader036/viewer/2022062917/5ed3756a4bb814069d3561eb/html5/thumbnails/21.jpg)
External Connectivity● Neutron External Network
● Neutron Subnet
● External Segment
● Nat Pool
![Page 22: Hands-On Workshop, OpenStack Summit, Austin€¦ · 1. Intro + Workshop logistics - Sumit, 5 mins 2. OpenStack *aaS services and SFC in Neutron and GBP - Igor, 10 mins 3. GBP Intro](https://reader036.fdocuments.in/reader036/viewer/2022062917/5ed3756a4bb814069d3561eb/html5/thumbnails/22.jpg)
Service Chain● Network Service Policy
● Service Profile
● Service Chain Node
● Service Chain Spec
● Policy Action
● Policy Rule
![Page 23: Hands-On Workshop, OpenStack Summit, Austin€¦ · 1. Intro + Workshop logistics - Sumit, 5 mins 2. OpenStack *aaS services and SFC in Neutron and GBP - Igor, 10 mins 3. GBP Intro](https://reader036.fdocuments.in/reader036/viewer/2022062917/5ed3756a4bb814069d3561eb/html5/thumbnails/23.jpg)
Developing - Service Developer WorkflowBYOF - Bring Your Own Function!
![Page 24: Hands-On Workshop, OpenStack Summit, Austin€¦ · 1. Intro + Workshop logistics - Sumit, 5 mins 2. OpenStack *aaS services and SFC in Neutron and GBP - Igor, 10 mins 3. GBP Intro](https://reader036.fdocuments.in/reader036/viewer/2022062917/5ed3756a4bb814069d3561eb/html5/thumbnails/24.jpg)
Develop Firewall Service on a VM
fw-consumer
fw-provider
FW(allow icmp + ssh)
TCP
PRS Service Chain
Internal Group V
M
![Page 25: Hands-On Workshop, OpenStack Summit, Austin€¦ · 1. Intro + Workshop logistics - Sumit, 5 mins 2. OpenStack *aaS services and SFC in Neutron and GBP - Igor, 10 mins 3. GBP Intro](https://reader036.fdocuments.in/reader036/viewer/2022062917/5ed3756a4bb814069d3561eb/html5/thumbnails/25.jpg)
Service VMService
VMService VM
Service Lifecycle Management Framework - NFP
GBPService Chaining
Network Function
Orchestrator
Tenant (Over-the-cloud)
RPCNamespace
Proxy
Network Plugin Framework (NFP)
Infra (Under-the-Cloud)
RPC
REST
![Page 26: Hands-On Workshop, OpenStack Summit, Austin€¦ · 1. Intro + Workshop logistics - Sumit, 5 mins 2. OpenStack *aaS services and SFC in Neutron and GBP - Igor, 10 mins 3. GBP Intro](https://reader036.fdocuments.in/reader036/viewer/2022062917/5ed3756a4bb814069d3561eb/html5/thumbnails/26.jpg)
NFP Framework Features● Provides orchestration, configuration and visibility for Network Functions● Rendering of Service Chains via GBP NB APIs
○ NFP orchestrates Network Function Devices○ NFP renders Network Functions
● Network Function Management South Bound REST APIs○ Service Insertion for configuring Interfaces & Routes○ Service Configuration○ Service Health Monitoring
● Any L2, L3, L4-7 Network Function can be supported ○ BYOF! (“Bring your own Function”)
![Page 27: Hands-On Workshop, OpenStack Summit, Austin€¦ · 1. Intro + Workshop logistics - Sumit, 5 mins 2. OpenStack *aaS services and SFC in Neutron and GBP - Igor, 10 mins 3. GBP Intro](https://reader036.fdocuments.in/reader036/viewer/2022062917/5ed3756a4bb814069d3561eb/html5/thumbnails/27.jpg)
HA for Services
![Page 28: Hands-On Workshop, OpenStack Summit, Austin€¦ · 1. Intro + Workshop logistics - Sumit, 5 mins 2. OpenStack *aaS services and SFC in Neutron and GBP - Igor, 10 mins 3. GBP Intro](https://reader036.fdocuments.in/reader036/viewer/2022062917/5ed3756a4bb814069d3561eb/html5/thumbnails/28.jpg)
Sungard Availability Services● Target Market
○ 80% mid-to-large enterprise customers
● Typical Customer○ Shrink wrapped applications○ Looking for a mix of self-managed and Sungard AS managed offerings
● Platform Expectations○ Cloud Native & Traditional Networking models○ Above the hypervisor services (per tenant FW, LB, VPN)○ Service-chaining
![Page 29: Hands-On Workshop, OpenStack Summit, Austin€¦ · 1. Intro + Workshop logistics - Sumit, 5 mins 2. OpenStack *aaS services and SFC in Neutron and GBP - Igor, 10 mins 3. GBP Intro](https://reader036.fdocuments.in/reader036/viewer/2022062917/5ed3756a4bb814069d3561eb/html5/thumbnails/29.jpg)
Thank You