Nexus1000V on KVM and OpenStack Integration

13
© 2011 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 1 Aug 2013

description

 

Transcript of Nexus1000V on KVM and OpenStack Integration

Page 1: Nexus1000V on KVM and OpenStack Integration

© 2011 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 1

Aug 2013

Page 2: Nexus1000V on KVM and OpenStack Integration

© 2011 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 2

• Overview of Virtualization

• Overview of Nexus1000V

• Nexus1000V on KVM

• COI Grizzly Overview

• Neutron Work-flow with Nexus1000V

• Demo of Nexus1000V integration with Openstack

• Q/A

Page 3: Nexus1000V on KVM and OpenStack Integration

© 2011 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 3

Several Operating Systems and

Applications running on 1 physical

server or host

Benefits:

- Efficient use of resources

- Lower Costs

- Redundancy

Source:vmware.com

Page 4: Nexus1000V on KVM and OpenStack Integration

© 2011 Cisco and/or its affiliates. All rights reserved. 4

PHYSICAL

WORKLOAD

VIRTUAL

WORKLOAD

CLOUD

WORKLOAD

• One app per Server

• Static

• Manual provisioning

• Many apps per Server

• Mobile

• Dynamic provisioning

• Multi-tenant per Server

• Elastic

• Automated Scaling

HYPERVISOR VDC-1 VDC-2

Page 5: Nexus1000V on KVM and OpenStack Integration

© 2011 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 5

1. vMotion moves VMs across physical ports—the network policy must follow vMotion (across racks, PODS, DCs)

2. Must view or apply network/security policy to locally switched traffic

3. Need to maintain segregation of duties while ensuring non-disruptive operations

Port Group

Server Admin

Network Admin

Security

Admin

Page 6: Nexus1000V on KVM and OpenStack Integration

© 2011 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 6

Network Edge has moved inside the

Server

vSwitch – to switch traffic to and from

the Virtual Machines

Consistency wrt policies, features,

security and management Port Group

Network Admin

Security

Admin

vSwitch

vSwitch

Page 7: Nexus1000V on KVM and OpenStack Integration

© 2011 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 7

Hypervisor Hypervisor Hypervisor

VSM + VEMs = Nexus 1000 Virtual Chassis

VEM-N VEM-1 VEM-2

Distributed Virtual Switch

2 components:

- Virtual Supervisor Module – Control Plane

- Virtual Ethernet Module - Data Plane

• VSM and VEM uses L3 mode of communication

• VSM can be a Virtual Appliance (VM) or a Physical Appliance (N1110)

L3

Mo

de

VSM1

VSM2

Virtual Appliance

Page 8: Nexus1000V on KVM and OpenStack Integration

© 2011 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 8

• Port-profiles – templates to configure network and policy parameters for multiple VMs in one shot.

• Rich feature-set (aligns with Physical switches)

Eg: ACL, QoS

Netflow, SNMP

Port-security, PVLAN, DHCP snooping, DAI, IPSG

VXLAN

• Multi-hypervisor support

ESX (VMWare), Hyper-V (Microsoft), KVM (Linux)

Page 9: Nexus1000V on KVM and OpenStack Integration

© 2011 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 9

• VEM on KVM Hypervisor

• Openstack for creating, managing Virtual Machines

• Puppet for installing VEMs

• VXLAN-VLAN Gateway : to bridge traditional networks to virtual networks

Page 10: Nexus1000V on KVM and OpenStack Integration

© 2011 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 10

Page 11: Nexus1000V on KVM and OpenStack Integration

© 2011 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 11

• Cisco OpenStack Installer (Cisco OSI) simplifies the OpenStack installation process

• Configure an initial Build server outside the Openstack cluster environment, After that it is used as an out-of-band automation and management workstation to bring up, control, and reconfigure (if necessary) the nodes of the OpenStack cluster.

• This build server primarily functions as a Puppet server for software deployment and configuration management onto the OpenStack cluster, as well as a Cobbler installation server to manage the PXE boot used for rapid bootstrapping of the OpenStack cluster.

• VSM, VEM and VxLAN-VLAN Gateway Installation

Page 12: Nexus1000V on KVM and OpenStack Integration

© 2011 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 12

Page 13: Nexus1000V on KVM and OpenStack Integration

© 2011 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 13