XaaS/OpenStack - Cisco...(SWIFT) Openstack Image Service (GLANCE) Openstack Network Service...

XaaS/OpenStack

Jiri Chaloupka – Systems Engineer CCIE# 39800

Cisco and/or its affiliates. All rights reserved. Presentation_ID Cisco Public

At a more detailed level, there are many resources inside the cloud

Applications

Runtimes

Databases

Servers

Security

Virtualization Storage

Networking


Private Cloud

What resources you manage inside the cloud defines the following…

Infrastructure as a Service

(IAAS)

Platform as a Service (PAAS)

Software as a Service (SAAS)

How do these differ from one another?


Applications Runtimes

Databases

Servers Security

Virtualization

Storage Networking

Private Cloud

Infrastructure as a Service

(IAAS)

Platform as a Service (PAAS)

Software as a Service (SAAS)


Databases

Servers Security

Virtualization

Storage Networking


Databases

Servers Security

Virtualization

Storage Networking


Databases

Servers Security

Virtualization

Storage Networking

Managed by You Managed by Vendor


You start with a Physical Switch

Network

Physical Devices and Physical Connections


Then you add an overlay

Overlay provides base for logical

network


Logical “switch” devices overlay the

physical network

Underlying physical network carries data

traffic for overlay network

They define their own topology


Multiple “overlay” networks can co-exist

at the same time

Overlays provides logical network constructs for

different tenants (customers)


Overlay Taxonomy

Overlay Control Plane

Encapsulation Service = Virtual Network (VN) Identifier = VN Identifier (VNI)

Underlay Control Plane

Underlay Network Hosts

(end-points)

Edge Devices Edge Device

10

§  VXLAN

§  FabricPath

§ MPLS(vPE)


Main Benefit of Overlays?

Overlay Network can be created and torn down without changing underlying physical network


What about Openstack? Where does that fit in?


Openstack is an IAAS (Infrastructure As A Service) cloud computing project

It is also referred to as a Cloud Operating System

“…provides a means to control (administer) compute, storage, network and virtualization technologies…”


Applications

With IAAS, compute, storage, networking and virtualization resources are managed by the Vendor

(this defines them as an IAAS provider)

Runtimes

Databases

Servers

Security


Networking

Managed by You Managed by Vendor


Openstack lets the provider manage these resources

Servers


Networking


Openstack provides web based front end to manage those cloud resources…


Openstack consists of a number of components

Openstack Compute (NOVA)

Openstack Object Store

(SWIFT)

Openstack Image Service

(GLANCE)

Openstack Network Service

(NEUTRON)





(SWIFT)


(GLANCE)


(NEUTRON)

Allows the administrator to create and manage Virtual Machines (VM’s) using various (stored) machine images


Object Store (SWIFT)



(SWIFT)


(GLANCE)


(NEUTRON)

Provides the ability to store objects – basically it is the component that is responsible for managing storage and reading/writing objects to that storage

An object could be a video file, a document, a picture, a database… basically anything that you would normally store on your computer


Image Store (GLANCE)



(SWIFT)


(GLANCE)


(NEUTRON)

This is the component responsible for managing the different operating system images (Windows, Linux, etc) that NOVA uses to create virtual

machine’s


Network Service (QUANTUM) à NEUTRON



(SWIFT)


(GLANCE)


(NEUTRON)

Allows the administrator to create and manage virtual networks

This is the piece that has relevance to our SDN story


NEUTRON (ex Quantum) is used to help manage the overlay (virtual) networks


NEUTRON Quick DeepDive


A simple OpenStack Deployment

Control Node

Mysql

RabbitMQ

Nova-api

Nova-scheduler

Keystone

Neutron Server

Network Node

Neutron-plugin-agent

Neutron-L3-agent

Neutron-dhcp-agent

Compute Nodes Compute Nodes Compute Nodes

Nova-compute

Neutron-plugin-agent

Data Network

External Network IPMI Network

Management Network


ML2 Architecture Diagram - IceHouse Neutron Server

ML2 Plugin

Type Manager Mechanism Manager

API Extensions

GR

E TypeD

river

Arista

VLA

N TypeD

river

VX

LAN

TypeD

river

Cisco N

exus

Hyper-V

L2 Population

Linuxbridge

Open vS

witch

Tail-F NC

S


ML2 With Current Agents

Neutron Server ML2 Plugin

Host A

Linuxbridge Agent

Host B

Hyper-V Agent

Host C

Open vSwitch Agent

Host D

Open vSwitch Agent

API Network

●  ML2 Plugin works with existing agents

●  Separate agents for Linuxbridge, Open vSwitch, and Hyper-V


Cisco Nexus Plugin Diagram

http://docwiki.cisco.com/wiki/OpenStack:Grizzly-Nexus-Plugin


Service Chaining with Nexus 1000V

API Network is typically routable to enable public access

Cloud Controller Node

nova-scheduler

mysql, rabbit...

nova-api

neutron-server

keystone

Compute Node

nova-compute

*-plugin-agent

Compute Node

nova-compute

*-plugin-agent

Compute Node

nova-compute

*-plugin-agent

Compute Node

nova-compute

*-plugin-agent

Network Node

dhcp-agent

*-plugin-agent

l3-agent

Network Node

dhcp-agent

*-plugin-agent

l3-agent

Network Node

dhcp-agent

*-plugin-agent

l3-agent

Management Network

API Network

Data Network

External Network

Internet

N1000V

•  Foundation of Virtual Services Architecture •  vPath Service Insertion/Chaining •  VXLAN Overlay Networking

VSM/N1000V


Network Node

dhcp-agent

*-plugin-agent

CSR 1000V Routing

API Network is typically routable to enable public access

Cloud Controller Node

nova-scheduler

mysql, rabbit...

nova-api

quantum-server

keystone

Compute Node

nova-compute

*-plugin-agent

Compute Node

nova-compute

*-plugin-agent

Compute Node

nova-compute

*-plugin-agent

Compute Node

nova-compute

*-plugin-agent

Management Network

API Network

Data Network

External Network

Internet

N1000V

CSR 1000V

Network or Compute node(s) hosts CSR

VSM/N1000V

CSR Provides per tenant isolation and full IOS capabilities including VPN, BGP, OSFP, MPLS, etc.


Networking Diagram – Open vSwitch (OVS)

30 Source: www.openstack.org


br-ex

External Network

br-int

br-tun GRE

Host B

patch-tun

patch-int

Host A

VM 1

App_Network 10.0.2.0/24

External_Network 172.18.0.0/24

DB_Network 10.0.3.0/23

Neutron/Quantum Internals

Router

VM 2 VM 2

VM 1

VM 3 DB_Network

Alternatively, tunnel to Host B could be external VLAN

VXLAN Tunnels Possible as well

172.18.0.3 Floating IP


Cisco and Openstack?

http://www.openstack.org/user-stories/cisco-webex/

Cisco/Openstack Blueprints Nova Scheduler Neutron VPNaaS (Cisco CSR1000v) RaaS – CSR1000v UCS Manager ML2 IPv6 …..


The OpenStack Challenge

80% of all Openstack Installation fail due to Implementation and Integration Issues

Prosíme, ohodnoťte tuto přednášku

•  Děkujeme

XaaS/OpenStack - Cisco...(SWIFT) Openstack Image Service (GLANCE) Openstack Network Service...

Documents

Transcript of XaaS/OpenStack - Cisco...(SWIFT) Openstack Image Service (GLANCE) Openstack Network Service...