SlideShare a Scribd company logo
So	
  What’s	
  the	
  Deal	
  with	
  Neutron?	
  
	
  OpenStack	
  MeetUp	
  
January	
  2015	
  
Agenda	
  
▪  Network	
  VirtualizaEon	
  Requirements	
  
▪  EvoluEon	
  of	
  Neutron	
  Networking	
  
▪  Open	
  Source	
  Network	
  SoluEons	
  
▪  Quiz!	
  
1	
  
2	
  
Network Virtualization

Requirements
What is Network Virtualization (NV)?
3	
  
Taking logical (virtual) networks
and services, and decoupling
them from the underlying network
hardware.
Well suited for highly virtualized
environments.
Any Application
Virtual Networks
MidoNet	
  VirtualizaEon	
  PlaOorm	
  
Logical	
  L2	
  
Existing Network Hardware
Any Cloud Management Platform
Distributed	
  Firewall	
  
service	
  
Distributed	
  
Load	
  Balancer	
  ser	
  
Logical	
  L3	
  
Distributed	
  VPN	
  
Service	
  
KVM, ESXi, Xen LXC

Recommended for you

What's new in Neutron Juno
What's new in Neutron JunoWhat's new in Neutron Juno
What's new in Neutron Juno

The document summarizes new features in Neutron for the Juno release, including improvements to achieve parity with Nova networking functionality, the addition of distributed virtual routing to improve scalability, L3 high availability using VRRP, full IPv6 support, and enhancements to security group implementation and communication between agents and servers.

openstackneutron
Tech Talk by John Casey (CTO) CPLANE_NETWORKS : High Performance OpenStack Ne...
Tech Talk by John Casey (CTO) CPLANE_NETWORKS : High Performance OpenStack Ne...Tech Talk by John Casey (CTO) CPLANE_NETWORKS : High Performance OpenStack Ne...
Tech Talk by John Casey (CTO) CPLANE_NETWORKS : High Performance OpenStack Ne...

OpenStack is HOT! No doubt about it. A recent survey by The New Stack and The Linux Foundation shows OpenStack as the most popular open source project ahead of other hot projects like Docker and KVM. OpenStack is now taking its rightful place as the open source cloud solution for enterprises and service providers. To date OpenStack networking has not yet achieved the performance, scalability and reliability that many large enterprises demand. CPLANE NETWORKS solves that problem by delivering secure multi-tenant virtual networking that overcomes the limitations of the standard Neutron networking service. By making all networking services local to the compute node and achieving near line-rate throughput, CPLANE NETWORKS Dynamic Virtual Networks (DVN) delivers mega-scale networking for the most demanding application environments. In this session John Casey will cover the basics of DVN and explain how CPLANE NETWORKS achieves "at scale" network performance within and across data centers. About John Casey John Casey has over 20 years of deep technology leadership. His proven success with a variety of technical leadership roles in Telecom, Enterprise and Government and in software design and development provide the foundation for the system architecture and engineering team. Previously John led worldwide deployment teams for both IBM’s Software Group and Narus, Inc. His work in large scale, high performance system design at Transarc Labs and Walker Interactive Systems brings leadership to the CPLANE NETWORKS product suite.

openstackopenflowvxlan
Arista Nuage meetup dublin 18-2
Arista Nuage meetup dublin 18-2Arista Nuage meetup dublin 18-2
Arista Nuage meetup dublin 18-2

Nuage Arista Hardware VTEP. Demoing the integration of Arista switch into Nuage VSP and automatic way of building Vxlan tunnels from virtual to bare metal infrastructure.

nuage arista sdn devops vxlan
Requirements for NV
4	
  
Requirements
4
Tenant/Project A
Network A1
VM1 VM3
Network A2
VM5
Tenant/Project B
Network B1
VM2 VM4
uplink
Provider Virtual
Router (L3)
Tenant A
Virtual Router
Tenant B
Virtual Router
VM6
Virtual L2
Switch B1
Virtual L2
Switch A1
Virtual L2
Switch A2
TenantB office
Tenant B
VPN Router
Office
Network
Requirements for NV
5	
  
Requirements
5
Tenant/Project A
Network A1
VM1 VM3
Network A2
VM5
Tenant/Project B
Network B1
VM2 VM4
uplink
Provider Virtual
Router (L3)
Tenant A
Virtual Router
Tenant B
Virtual Router
VM6
Virtual L2
Switch B1
Virtual L2
Switch A1
Virtual L2
Switch A2
TenantB office
Tenant B
VPN Router
Office
Network
Isolated tenant
networks
(virtual data center)
Requirements for NV
6	
  
Requirements
6
Tenant/Project A
Network A1
VM1 VM3
Network A2
VM5
Tenant/Project B
Network B1
VM2 VM4
uplink
Provider Virtual
Router (L3)
Tenant A
Virtual Router
Tenant B
Virtual Router
VM6
Virtual L2
Switch B1
Virtual L2
Switch A1
Virtual L2
Switch A2
TenantB office
Tenant B
VPN Router
Office
Network
L3 Isolation
(similar to VPC and VRF)
Requirements for NV
7	
  
Requirements
7
Tenant/Project A
Network A1
VM1 VM3
Network A2
VM5
Tenant/Project B
Network B1
VM2 VM4
uplink
Provider Virtual
Router (L3)
Tenant A
Virtual Router
Tenant B
Virtual Router
VM6
Virtual L2
Switch B1
Virtual L2
Switch A1
Virtual L2
Switch A2
TenantB office
Tenant B
VPN Router
Office
Network
Fault-tolerant devices and links
Redundant, optimized, and
fault tolerant paths to to/
from external networks
(e.g. via eBGP)

Recommended for you

MidoNet 101: Face to Face with the Distributed SDN
MidoNet 101: Face to Face with the Distributed SDNMidoNet 101: Face to Face with the Distributed SDN
MidoNet 101: Face to Face with the Distributed SDN

Midokura has made the source code for MidoNet freely available at www.midonet.org, delivering the truly open, vendor-agnostic network virtualization solution available for the OpenStack and the Docker community. About MidoNet Taking an overlay-based approach to network virtualization, MidoNet sits on top of any IP-connected network, and pushes the network intelligence to the edge of the network, in software. MidoNet makes it possible to build an IaaS cloud with fully virtualized and distributed scale-out L2-L4 networking. FOSDEM 2015 Presenters: Antonio Sagliocco, Alex Bikfalvi in Midokura Engineering

#midonet #network virtualization #sdn #openstack #
#NET5488 - Troubleshooting Methodology for VMware NSX - VMworld 2015
#NET5488 - Troubleshooting Methodology for VMware NSX - VMworld 2015#NET5488 - Troubleshooting Methodology for VMware NSX - VMworld 2015
#NET5488 - Troubleshooting Methodology for VMware NSX - VMworld 2015

The document provides an overview of troubleshooting methodology for VMware NSX. It discusses that NSX implements logical switching and routing services on top of an IP transport network. The key things to check when troubleshooting include validating the IP transport connectivity using tools like ping, and examining the VTEP tables and MAC tables on the NSX controller and hosts for a given virtual network identifier (VNI) to understand virtual machine connectivity and forwarding. An example is provided where pinging between VMs populates the MAC tables on hosts, demonstrating how NSX forwarding works based on these tables.

troubleshootingvxlannet5488
Accelerating SDN Applications with Open Source Network Overlays
Accelerating SDN Applications with Open Source Network OverlaysAccelerating SDN Applications with Open Source Network Overlays
Accelerating SDN Applications with Open Source Network Overlays

By defining the configuration of the network versus of a specific device, OpenContrail + Cumulus Linux can simplify & automate network orchestration.

opencontrailcumulus linuxcumulus networks
Requirements for NV
8	
  
8
Tenant/Project A
Network A1
VM1 VM3
Network A2
VM5
Tenant/Project B
Network B1
VM2 VM4
uplink
Provider Virtual
Router (L3)
Tenant A
Virtual Router
Tenant B
Virtual Router
VM6
Virtual L2
Switch B1
Virtual L2
Switch A1
Virtual L2
Switch A2
TenantB office
Tenant B
VPN Router
Office
Network
Fault-tolerant devices and links
Fault tolerant
devices and links
Requirements for NV
9	
  
Device-agnostic networking services:
•  Load Balancing
•  Firewalls
•  Stateful NAT
•  VPN
Networks and services must be fault
tolerant and scalable
Requirements for NV
10	
  
Single pane of glass to manage it all.
Bonus Requirements for NV
11	
  
Integration with cloud or
virtualization management
systems.
Optimize network by exploiting
management configuration.
Single virtual hop for networking
services
Fully distributed control plane
(ARP, DHCP, ICMP)

Recommended for you

VMworld 2013: Troubleshooting VXLAN and Network Services in a Virtualized Env...
VMworld 2013: Troubleshooting VXLAN and Network Services in a Virtualized Env...VMworld 2013: Troubleshooting VXLAN and Network Services in a Virtualized Env...
VMworld 2013: Troubleshooting VXLAN and Network Services in a Virtualized Env...

This document discusses troubleshooting VXLAN and network services in a virtualized environment using VMware NSX. It covers VXLAN packet flow, NSX enhancements to the data and control planes, configuration and consumption demos, packet walks in unicast mode, troubleshooting demos using NSX Manager tools, dynamic routing details and demos, and network virtualization operations. The key takeaways are that multicast is not required in the physical network for VXLAN, NSX provides tools to troubleshoot networks and services, and NSX integrates with operations tools for analysis and alerting.

vxlanvmworld 2013vmware
VMware nsx network virtualization tool
VMware nsx network virtualization toolVMware nsx network virtualization tool
VMware nsx network virtualization tool

VMware NSX is a network virtualization and security platform that provides logical switching, routing, firewalling, and load balancing capabilities. It emerged from VMware's acquisition of Nicira. NSX for vSphere is deployed most often as it integrates natively with VMware platforms like vCenter. The NSX architecture consists of edge nodes, controllers, and a manager to program the hypervisor kernel modules that implement the distributed data, control, and management planes. Key NSX components provide distributed logical routing, switching, and firewalling at the hypervisor level for scalability. The NSX edge services gateway delivers integrated network functions like firewall, VPN, and load balancing as virtual appliances.

Virt july-2013-meetup
Virt july-2013-meetupVirt july-2013-meetup
Virt july-2013-meetup

This document introduces programmable virtual networks and discusses their advantages over traditional network slicing. It describes FlowVisor, an early network slicing tool, and its limitations in providing full network virtualization. The document then introduces OpenVirteX, a new system that aims to provide complete programmable virtual networks through topology, address, and policy virtualization. OpenVirteX maps virtual and physical network elements and allows independent control of virtual networks. While still in development, OpenVirteX has the potential to enable more flexible and innovative virtualized networks than previous solutions.

Checklist for Network Virtualization
12	
  
q  Multi-tenancy
q  Scalable, fault-tolerant devices
(or device-agnostic network
services).
q  L2 isolation
q  L3 routing isolation
•  VPC
•  Like VRF (virtual routing
and fwd-ing)
q  Scalable gateways
q  Scalable control plane
•  ARP, DHCP, ICMP
q  Floating/Elastic Ips
q  Stateful NAT
•  Port masquerading
•  DNAT
q  ACLs
q  Stateful (L4) Firewalls
•  Security Groups
q  Load Balancing with health checks
q  Single Pane of Glass (API, CLI, GUI)
q  Integration with management platforms
•  OpenStack, CloudStack
•  vSphere, RHEV, System Center
q  Decoupled from Physical Network
Evolution of Network Virtualization
13	
  
INNOVATION	
  IN	
  NETWORKING	
  AGILITY	
  
VLAN configured
on physical switches
•  Static
•  Manual
•  Complex
•  Tenant state
maintained in
physical network
Manual End-to-End
VLAN
APPROACH
13
Using VLANs for NV
14	
  
q  Multi-tenancy
q  Scalable, fault-tolerant devices
(or device-agnostic network
services).
ü  L2 isolation
q  L3 routing isolation
•  VPC
•  Like VRF (virtual routing
and fwd-ing)
q  Scalable gateways
q  Scalable control plane
•  ARP, DHCP, ICMP
q  Floating/Elastic IPs
q  Stateful NAT
•  Port masquerading
•  DNAT
q  ACLs
q  Stateful (L4) Firewalls
•  Security Groups
q  Load Balancing with health checks
q  Single Pane of Glass (API, CLI, GUI)
q  Integration with management platforms
•  OpenStack, CloudStack
•  vSphere, RHEV, System Center
q  Decoupled from Physical Network
Evolution of Network Virtualization
15	
  
INNOVATION	
  IN	
  NETWORKING	
  AGILITY	
  
Reactive End-to-End
Requires programming
of flows
•  Limited scalability
•  Hard to manage
•  Impact to
performance
•  Still requires tenant
state in physical
network
OPENFLOW
REACTIVE
APPOACH
VLAN configured
on physical switches
•  Static
•  Manual
•  Complex
•  Tenant state
maintained in
physical network
Manual End-to-End
VLAN
APPROACH
15

Recommended for you

OpenStack Neutron 201 1hr
OpenStack Neutron 201 1hr OpenStack Neutron 201 1hr
OpenStack Neutron 201 1hr

David Lenwell from Akanda will briefly recap basic Neutron topics around network architecture and common features such as security groups, plugins and agents, then dive in deeper, focusing on advanced services such as Routing and Load Balancing. We will then drill down into typical service provider network designs and the specific technologies in use such as Linuxbridge. We will discuss the Neutron Advanced Services driver model and how it can be useful to Service Providers (and Enterprises) based on our team's experience powering DreamCompute’s networking capabilities using Akanda. We will review Akanda, an open source suite of software, services, orchestration, and tools for providing L3+ services in OpenStack that builds on top of Linux and OpenStack Neutron. Using Akanda, an OpenStack provider can provide tenants with a rich, powerful set of L3+ services. Finally, we will provide an update on the latest discussions heading into Tokyo such as the status of LBaaS, FWaaS as well as the newer Neutron projects such as L2 Gateway, the Neutron Stadium effort and the new Lieutenant system.

openstacksdnneutron
Tech Tutorial by Vikram Dham: Let's build MPLS router using SDN
Tech Tutorial by Vikram Dham: Let's build MPLS router using SDNTech Tutorial by Vikram Dham: Let's build MPLS router using SDN
Tech Tutorial by Vikram Dham: Let's build MPLS router using SDN

Synopsis We will start with MPLS 101 and then look into MPLS related OpenFlow actions. In the second half we will delve into RouteFlow architecture and extend it to enable Label Distribution Protocol (LDP) and MPLS routing. We will conclude with a mini-net based test bed switching traffic using MPLS labels instead of IP addresses. This will be a hands on workshop. VM Images for Virtual Box will be provided. Attendees are expected to bring their laptops loaded with Virtual Box. About Vikram Dham Vikram is the CTO and co-founder of Kamboi Technologies, LLC where he advises networking companies, switch vendors and early adopters on SDN technology and distributed software development. Also, he is the founder of Bay Area Network Virtualization (BANV) meet-up group, that brings together technologists in the SDN/NFV/NV domain for technical talks, workshops and creates a truly "open" platform for sharing knowledge. He has used SDN technologies for building software related to traffic engineering, security and routing. In the past, he was the Principal Engineer at Slingbox where he architected & built the distributed networking software for peer to peer connectivity of millions of end points. He holds MS degree in EE with a specialization in Computer Networks from Virginia Tech and has worked on research projects with companies like ECI Telecom, Raytheon and Avaya Research Labs.

quaggalxcrouteflow
6WINDGate™ - Accelerated Data Plane Solution for EPC and vEPC
6WINDGate™ - Accelerated Data Plane Solution for EPC and vEPC6WINDGate™ - Accelerated Data Plane Solution for EPC and vEPC
6WINDGate™ - Accelerated Data Plane Solution for EPC and vEPC

The document discusses 6WIND and its 6WINDGate software. It begins by stating that 6WIND aims to replace dedicated networking hardware with commodity servers and virtualization using its software. It then provides facts about 6WIND, including that it has over 150 man years of experience developing 6WINDGate, which supports major hardware platforms. Finally, it outlines the key benefits of 6WINDGate, such as enabling high performance networking on standard platforms for both physical and virtual environments.

6windgate6windeast-west communications
What is OpenFlow?
16	
  
A communication protocol that gives access to the forwarding
plane of a network switch over the network.
What is OpenFlow?
17	
  
A centralized remote controller
decides the path of packets
through the switches
Using OpenFlow for NV
18	
  
ü  Multi-tenancy
q  Scalable, fault-tolerant devices
(or device-agnostic network
services).
ü  L2 isolation
△  L3 routing isolation
•  VPC
•  Like VRF (virtual routing
and fwd-ing)
q  Scalable gateways
q  Scalable control plane
•  ARP, DHCP, ICMP
q  Floating/Elastic IPs
q  Stateful NAT
•  Port masquerading
•  DNAT
q  ACLs
q  Stateful (L4) Firewalls
•  Security Groups
q  Load Balancing with health checks
△  Single Pane of Glass (API, CLI, GUI)
△  Integration with management platforms
•  OpenStack, CloudStack
•  vSphere, RHEV, System Center
q  Decoupled from Physical Network
Evolution of Network Virtualization
19	
  
Virtual Network
Overlays
Decoupling hardware
and software
•  Cloud-ready agility
•  Unlimited scalability
•  Open, standards-based
•  No impact to physical
network
PROACTIVE
SOFTWARE OVERLAY
INNOVATION	
  IN	
  NETWORKING	
  AGILITY	
  
Reactive End-to-End
Requires programming
of flows
•  Limited scalability
•  Hard to manage
•  Impact to
performance
•  Still requires tenant
state in physical
network
OPENFLOW
REACTIVE
APPOACH
VLAN configured
on physical switches
•  Static
•  Manual
•  Complex
•  Tenant state
maintained in
physical network
Manual End-to-End
VLAN
APPROACH
19

Recommended for you

OpenStack in Action 4! Emilien Macchi & Sylvain Afchain - What's new in neutr...
OpenStack in Action 4! Emilien Macchi & Sylvain Afchain - What's new in neutr...OpenStack in Action 4! Emilien Macchi & Sylvain Afchain - What's new in neutr...
OpenStack in Action 4! Emilien Macchi & Sylvain Afchain - What's new in neutr...

Paris, 5th December 2013 : OpenStack in Action 4! organized by eNovance, brings together members of the OpenStack community.

openstack in actionenovance
VMworld 2013: Designing Network Virtualization for Data-Centers: Greenfield D...
VMworld 2013: Designing Network Virtualization for Data-Centers: Greenfield D...VMworld 2013: Designing Network Virtualization for Data-Centers: Greenfield D...
VMworld 2013: Designing Network Virtualization for Data-Centers: Greenfield D...

VMworld 2013 Ben Basler, VMware Roberto Mari, VMware Learn more about VMworld and register at http://www.vmworld.com/index.jspa?src=socmed-vmworld-slideshare

vmworld 2013vmwaretechnology exchange
Pushing Packets - How do the ML2 Mechanism Drivers Stack Up
Pushing Packets - How do the ML2 Mechanism Drivers Stack UpPushing Packets - How do the ML2 Mechanism Drivers Stack Up
Pushing Packets - How do the ML2 Mechanism Drivers Stack Up

Architecting a private cloud to meet the use cases of its users can be a daunting task. How do you determine which of the many L2/L3 Neutron plugins and drivers to implement? Does network performance outweigh reliability? Are overlay networks just as performant as VLAN networks? The answers to these questions will drive the appropriate technology choice. In this presentation, we will look at many of the common drivers built around the ML2 framework, including LinuxBridge, OVS, OVS+DPDK, SR-IOV, and more, and will provide performance data to help drive decisions around selecting a technology that's right for the situation. We will discuss our experience with some of these technologies, and the pros and cons of one technology over another in a production environment.

openstackneutronnetworking
20	
  
How do overlays achieve
real network
virtualization?
21	
  
Encapsulation and Tunneling
Provides isolation
22	
  
Stateless core. Stateful edge.
23	
  
Network processing at the edge
Decoupled from the physical network

Recommended for you

L4-L7 services for SDN and NVF by Youcef Laribi
L4-L7 services for SDN and NVF by Youcef LaribiL4-L7 services for SDN and NVF by Youcef Laribi
L4-L7 services for SDN and NVF by Youcef Laribi

In this talk, we will discuss how L4-L7 devices can integrate in various SDN architectures, discuss benefits and some of the challenges that such integration represents. We will also talk about how SDN and NFV relate, and what are the different challenges to successfully deploy L4-L7 devices as Virtual Network Functions (VNFs) or provide such services to the NFV Infrastructure (VIM). Bio Youcef Laribi is a Principal Architect in the Delivery Networks BU at Citrix. He is responsible for driving the integration projects of the NetScaler ADC product with several Cloud, SDN and Automation environments including OpenStack, CloudStack, VMware NSX and Cisco ACI. He is also the Citrix representative on the OpenDaylight Technical Steering Committee. His background is mainly in Operating Systems and Distributed Systems, and he worked on several middleware technologies from DCE and CORBA in the early days, to J2EE and .NET to SOA and micro-services today. Youcef speaks 4 languages and holds a PhD and an MSc in Computer Science from the French INPG Institute in Grenoble, France.

sdncitrixnfv
Reference design for v mware nsx
Reference design for v mware nsxReference design for v mware nsx
Reference design for v mware nsx

The document discusses NSX design and deployment considerations including: 1. Physical and logical infrastructure requirements for NSX including IP connectivity and MTU size. 2. Edge cluster design with options for collapsed or separated edge and infrastructure racks. 3. NSX manager and controller placement and sizing within management clusters. 4. Transport zone, VTEP, and VXLAN switching concepts which are fundamental to the NSX overlay architecture.

From Nova-Network to Neutron and Beyond: A Look at OpenStack Networking
From Nova-Network to Neutron and Beyond: A Look at OpenStack NetworkingFrom Nova-Network to Neutron and Beyond: A Look at OpenStack Networking
From Nova-Network to Neutron and Beyond: A Look at OpenStack Networking

This document provides an overview of the evolution of network virtualization and OpenStack networking. It describes how networking started with manually configured VLANs, moved to OpenFlow which required programming flows, and then to network overlays using software defined networking. It outlines the requirements for network virtualization. It also details the evolution of OpenStack networking from Nova network to Quantum/Neutron, including the transition to using overlays and supporting plugins. Key features of Neutron are summarized, as well as upcoming features planned for future OpenStack releases.

#oslax@metacloudinc@_techcet_
24	
  
Virtual network changes don’t affect
the physical network
25	
  
Single virtual hop network services
avoid “traffic trombones”
26	
  
Centralized state and control for
maximum agility
27	
  
Scalable, fault tolerant gateways to
external networks

Recommended for you

[OpenStack Day in Korea 2015] Track 3-6 - Archiectural Overview of the Open S...
[OpenStack Day in Korea 2015] Track 3-6 - Archiectural Overview of the Open S...[OpenStack Day in Korea 2015] Track 3-6 - Archiectural Overview of the Open S...
[OpenStack Day in Korea 2015] Track 3-6 - Archiectural Overview of the Open S...

OpenStack Day in Korea 2015 -Track 3-6 Archiectural Overview of the Open Source Dan Mihai Dumitriu - Midokura

openstack day in koreaopenstack koreaopenstack
Operators experience and perspective on SDN with VLANs and L3 Networks
Operators experience and perspective on SDN with VLANs and L3 NetworksOperators experience and perspective on SDN with VLANs and L3 Networks
Operators experience and perspective on SDN with VLANs and L3 Networks

Presentation from OpenStack Summit Austin 2016. Video is available at https://www.youtube.com/watch?v=-1bWYvbUbLI

sdnnfvopencontrail
Quantum - The Network Mechanics
Quantum - The Network MechanicsQuantum - The Network Mechanics
Quantum - The Network Mechanics

Quantum is an OpenStack networking project that provides networking as a service between interfaces managed by other projects like Nova. It uses plugins to support different networking technologies and providers. Quantum provides advanced network topologies and tenant control over networking that was not possible with just Nova networking. The Grizzly release includes improvements to security groups, load balancing as a service, new plugins, and seamless upgrades from Folsom.

networkingquantumopenstack
Using Overlays for NV
28	
  
ü  Multi-tenancy
ü  Scalable, fault-tolerant devices
(or device-agnostic network
services).
ü  L2 isolation
ü  L3 routing isolation
•  VPC
•  Like VRF (virtual routing
and fwd-ing)
ü  Scalable Gateways
ü  Scalable control plane
•  ARP, DHCP, ICMP
ü  Floating/Elastic IPs
ü  Stateful NAT
•  Port masquerading
•  DNAT
ü  ACLs
ü  Stateful (L4) Firewalls
•  Security Groups
ü  Load Balancing with health checks
ü  Single Pane of Glass (API, CLI, GUI)
ü  Integration with management platforms
•  OpenStack, CloudStack
•  vSphere, RHEV, System Center
ü  Decoupled from Physical Network
29	
  
Sounds great, but when
will it be a reality?
Network Virtualization Overlays Today
30	
  
OpenStack	
  
31	
  

Recommended for you

OpenStack Quantum
OpenStack QuantumOpenStack Quantum
OpenStack Quantum

Quantum is an OpenStack networking project that provides networking as a service. It uses plugins to support various technologies like SDN, overlay tunneling, and fabric solutions. This allows tenants to create their own network topologies with control over addressing, segmentation, and services. Quantum provides APIs for networks, subnets, and ports that integrate with Nova to attach virtual network interfaces to instances.

indiaopenstack
ONUG Tutorial: Bridges and Tunnels Drive Through OpenStack Networking
ONUG Tutorial: Bridges and Tunnels Drive Through OpenStack NetworkingONUG Tutorial: Bridges and Tunnels Drive Through OpenStack Networking
ONUG Tutorial: Bridges and Tunnels Drive Through OpenStack Networking

This document summarizes OpenStack networking (Neutron) and discusses its key components and architecture. It describes how Neutron provides network abstraction and virtualization through pluggable backend drivers. It also outlines some common Neutron features like security groups and highlights new capabilities in the Juno release like IPv6 support and distributed virtual routing. The document concludes by looking ahead to further networking developments in OpenStack.

OpenStack 2012 fall summit observation - Quantum/SDN
OpenStack 2012 fall summit observation - Quantum/SDNOpenStack 2012 fall summit observation - Quantum/SDN
OpenStack 2012 fall summit observation - Quantum/SDN

- The keynote at the OpenStack 2012 Fall Summit highlighted Rackspace's decreasing contribution to OpenStack commits over time and Rackspace's private cloud which runs OpenStack and sees high usage. - The Quantum project in OpenStack provides network connectivity as a service and allows different virtualization technologies to be plugged in as backends. It has evolved to add L3 and L4-L7 network services. - Quantum uses a plugin architecture so that different virtual network backends like Open vSwitch, Linux bridge can be used. Extensions allow for additional network properties and new services like routing, load balancing to be added.

quantumsdnopenstack
What	
  is	
  OpenStack?	
  
32	
  
OpenStack	
  Releases	
  
33	
  
Release schedule: time-based scheme with major release ~ every 6 months
Codenames are alphabetical:
•  Austin: The first design summit took place in Austin, TX
•  Bexar: The second design summit took place in San Antonio, TX (Bexar county).
•  Cactus: Cactus is a city in Texas
•  Diablo: Diablo is a city in the bay area near Santa Clara, CA
•  Essex: Essex is a city near Boston, MA
•  Folsom: Folsom is a city near San Francisco, CA
•  Grizzly: Grizzly is an element of the state flag of California (design summit takes
place in San Diego, CA)
•  Havana: Havana is an unincorporated community in Oregon
•  Icehouse: Ice House is a street in Hong Kong
•  Juno: Juno is a locality in Georgia
•  Kilo: Paris (Sèvres, actually, but that's close enough) is home to the Kilogram,
the only remaining SI unit tied to an artifact
34	
  
Before	
  Neutron:	
  Nova	
  Networking	
  
•  Nova-Networking was the only option in OpenStack prior to Quantum/Neutron
•  Original project from A release
•  No IPv6 in first release but eventually introduced
•  Still available today as an alternative to Neutron, but will be phased out
Options Available within nova-networking initially:
•  Only Flat
•  Flat DHCP
Limitations
•  No flexibility with topologies (no 3-tier)
•  Tenants can’t create/manage L3 Routers
•  Scaling limitations (L2 domain)
•  No 3rd party vendors supported
•  Complex HA model
35	
  
Nova-­‐network	
  slightly	
  evolves	
  
Introduced VLAN DHCP mode
Improvements:
•  L2 Isolation – each project gets a
VLAN assigned to it
Limitations
•  Need to pre-configure VLANs on
physical network
•  Scaling Limitations - VLANs
•  No L3
•  No 3-tier topologies
•  No 3rd party vendors

Recommended for you

Open stack networking_101_update_2014-os-meetups
Open stack networking_101_update_2014-os-meetupsOpen stack networking_101_update_2014-os-meetups
Open stack networking_101_update_2014-os-meetups

This is the latest Update to my OpenStack Networking / Neutron 101 Slides with some more Information and caveats on the new DVR and Gateway HA Features

openstack networkingopenstackneutron
Understanding and deploying Network Virtualization
Understanding and deploying Network VirtualizationUnderstanding and deploying Network Virtualization
Understanding and deploying Network Virtualization

Analogous to server virtualization, Network Virtualization decouples and isolates virtual networks (i.e. tenant) from the underlying network hardware. One of the key value propositions of Software-Defined Networking (SDN) is to enable the provisioning and operation of virtual networks. This tutorial motivates the need for network virtualization, describes the high-level requirements, provides an overview of all architectural approaches, and gives you a clear picture of the vendor landscape. Previously presented at ONUG Fall 2013 and Spring 2014.

architecturessdnnetwork virtualization
CloudStack and SDN
CloudStack and SDNCloudStack and SDN
CloudStack and SDN

Software Defined Networking is seeing a lot of momentum these days. With server virtualization solving the virtual machines problem, and large scale object storage solving the distributed storage challenge, SDN is seen as key in virtual networking. In this talk we don't try to define SDN but rather dive straight into what in our opinion is the core enabled of SDN: the virtual switch OVS. OVS can help manage VLAN for guest network isolation, it can re-route any traffic at L2-L4 by keeping forwarding tables controlled by a remote controller (Openfow controller). We show these few OVS capabilities and highlight how they are used in CloudStack and Xen. Xen Summit presentation of CloudStack and Software Defined Networks. OpenVswitch is the default bridge in Xen and supported in XenServer and Xen Cloud Platform

openflowopenvswitchsdn
36	
  
Nova-­‐network	
  slightly	
  evolves	
  
C & D Releases had two general categories:
•  Flat Networking
•  VLAN Networking
Limitations
•  Need to pre-configure VLANs on physical network
•  Scaling Limitations - VLANs
•  No L3
•  No 3-tier topologies
•  No 3rd party vendors
Quantum	
  
37	
  
OpenStack Networking branches out of the Nova project
•  Tech Preview of Quantum appeared in D release
•  Brought ability to have a multi-tiered network, with isolated network
segments for various applications or customers
•  Quantum-server allowed for Python daemon to expose the OpenStack
Networking API and passes requests to 3rd party plugins
•  Officially released in Folsom Release
Introducing Neutron	
  
38	
  
•  Pluggable Architecture
•  Standard API
•  Many choices
Plugins Available
•  MidoNet
•  OVS Plugin
•  Linux Bridges
•  Flat DHCP
•  VLAN DHCP
•  ML2
•  More Services (LBaaS, VPNaaS)
•  Flexible network topologies
•  NSX
•  Plumgrid
•  Nuage
•  Contrail
•  Ryu
•  Name Change from Quantum to Neutron was announced in April 2013
•  Legal Agreement to phase out code name “Quantum” due to
trademark of Quantum Corporation
OpenStack Networking as a First Class Service
Evolution of Neutron	
  
39	
  
Release	
  Name	
  	
   Release	
  Date	
   Included	
  Components	
  
AusEn	
   21	
  October	
  2010	
   Nova,	
  Swi]	
  
Bexar	
   3	
  February	
  2011	
   Nova,	
  Glance,	
  Swi]	
  
Cactus	
   15	
  April	
  2011	
   Nova,	
  Glance,	
  Swi]	
  
Diablo	
   22	
  September	
  2011	
   Nova,	
  Glance,	
  Swi]	
  
Essex	
   5	
  April	
  2012	
   Nova,	
  Glance,	
  Swi],	
  Horizon,	
  
Keystone	
  
Folsom	
   27	
  September	
  2012	
  	
   Nova,	
  Glance,	
  Swi],	
  Horizon,	
  
Keystone,	
  Quantum,	
  Cinder	
  
Grizzly	
   4	
  April	
  2013	
   Nova,	
  Glance,	
  Swi],	
  Horizon,	
  
Keystone,	
  Quantum,	
  Cinder	
  
Havana	
   17	
  October	
  2013	
   Nova,	
  Glance,	
  Swi],	
  Horizon,	
  
Keystone,	
  Neutron,	
  Cinder	
  
Icehouse	
   April	
  2014	
   Nova,	
  Glance,	
  Swi],	
  Horizon,	
  
Keystone,	
  Neutron,	
  Cinder	
  
Juno	
   October	
  2014	
   Nova,	
  Glance,	
  Swi],	
  Horizon,	
  
Keystone,	
  Neutron,	
  Cinder,	
  Heat,	
  
Trove,	
  Sahara	
  

Recommended for you

Yechielthur1100red hat-cloud-infrastructure-networking-deep-dive-140417165107...
Yechielthur1100red hat-cloud-infrastructure-networking-deep-dive-140417165107...Yechielthur1100red hat-cloud-infrastructure-networking-deep-dive-140417165107...
Yechielthur1100red hat-cloud-infrastructure-networking-deep-dive-140417165107...

This document provides an overview and agenda for a presentation on Red Hat Cloud Infrastructure networking. It discusses challenges with traditional VLAN-based networking and how new technologies like SDN, NFV, and network virtualization are creating exciting opportunities. It covers Red Hat's solutions for hybrid cloud networking which include Red Hat Enterprise Virtualization (RHEV) and Red Hat Enterprise Linux OpenStack Platform with the Neutron networking component. RHEV provides networking functionality within private clouds while Neutron can provide networking for both private and public cloud environments, including integration with RHEV.

OpenStack Networking
OpenStack NetworkingOpenStack Networking
OpenStack Networking

Overview of OpenStack Networking and Open vSwitch presented at Cloud Tech Meetup #3 in Kharkiv, Ukraine on May 30th, 2013

networkingovsquantum
OpenStack Networking and Automation
OpenStack Networking and AutomationOpenStack Networking and Automation
OpenStack Networking and Automation

- OpenStack provides network virtualization and automation capabilities through projects like Neutron, Heat, and plugins like Midonet. - Neutron evolved networking in OpenStack to allow pluggable networking models beyond the initial Nova networking. It supports overlay technologies and network automation. - Heat allows you to define infrastructure like servers, networks, and their relationships in templates that can be deployed through the OpenStack API. This provides automation of virtual network deployment. - Plugins like Midonet provide distributed virtual networking models to improve scalability and performance over overlay approaches like OVS. They also allow automation of physical network configuration.

icehouseopenstackml2
Latest	
  Neutron	
  Features	
  
40	
  
Havana Release Brought:
•  LBaaS: shipped an updated API and HAProxy driver support
•  VPNaaS: supports IPSec and L3 agent ships with an OpenSwan driver
•  FWaaS: enables tenant to configure security at the edge and on VIFs
•  New ML2 plugin: supports local, flat, VLAN, GRE and VXLAN network
types via a type drivers and different mechanism drivers
Icehouse Release:
•  New vendor plugins, LBaaS drivers and VPNaaS drivers
•  OVS plugin and Linux Bridge plugin are deprecated: The ML2 plugin
combines OVS and Linux Bridge support into one plugin
•  Neutron team has extended support for legacy Quantum configuration
file options for one more release
Latest	
  Neutron	
  Features	
  
41	
  
Juno Features:
•  DVR functionality: Define API to create and deploy DVRs to improve the
performance
•  Group-based Policy Abstractions for Neutron: API extensions for easier
consumption of the networking resources by separate organizations and
management systems
•  IPv6 advancements:
•  Add RADVD to namespace to handle RAs
•  SLAAC
•  Stateful and stateless DHCP for IPv6
•  LBaaS new API driver and object model improvement for complex cases
•  Quotas extension support in MidoNet plugin
•  Incubator system:
•  Instead of only using the summit for developing new features,
features can be developed and gestate over time
Upcoming	
  Neutron	
  Features	
  
42	
  
Expectations for Kilo:
•  Neutron Core and Vendor Code decompositions
•  Remove bottlenecks from contribution process
•  Allows vendors to develop and control their own code at their own pace
•  Allows different levels of engagement in Neutron community
•  Promotes lightweight plugins and drivers with external libraries for
backend implementations
•  Allow Floating IP to be specified
•  Agent child process status
•  ARP spoof filtering using ebtables
•  Conntrack Zones support
•  DHCP Service LoadBalancing Support and Options for IPv4 and IPv6
•  New Iptables driver to improve performance of IptablesManager and reduce
complexity of IptablesFirewall and IptablesManager relations
•  LBaaS Layer 7 Rules and TLS Specification
•  MTU Selection and advertisement
43	
  
OVS Plugin Overview

Recommended for you

Quantum - Virtual networks for Openstack
Quantum - Virtual networks for OpenstackQuantum - Virtual networks for Openstack
Quantum - Virtual networks for Openstack

An overview of Quantum, the soon-to-be default Openstack network service. These slides introduce Quantum, its design goals, and discusses the API. It also tries to address how quantum relates to Software Defined Networking (SDN)

apiopen sourcequantum
Bridges and Tunnels: A Drive Through OpenStack Networking
Bridges and Tunnels: A Drive Through OpenStack NetworkingBridges and Tunnels: A Drive Through OpenStack Networking
Bridges and Tunnels: A Drive Through OpenStack Networking

Neutron is OpenStack's networking component that provides network connectivity between interface devices managed by other OpenStack services like Nova. It uses plugins like ML2 to support different networking types (VLAN, GRE, VXLAN) through mechanisms like Open vSwitch. Key components include agents that run on hypervisor and network nodes to implement networking and agents that handle configuration like DHCP and metadata proxy.

networkingneutronopenstack
VMworld 2013: Advanced VMware NSX Architecture
VMworld 2013: Advanced VMware NSX Architecture VMworld 2013: Advanced VMware NSX Architecture
VMworld 2013: Advanced VMware NSX Architecture

VMworld 2013 Bruce Davie, VMware Learn more about VMworld and register at http://www.vmworld.com/index.jspa?src=socmed-vmworld-slideshare

vmwarevmworld 2013nsx
44	
  
OVS Agent - receives tunnel/flow setup info from OVS Plugin, and programs Open
vSwitch to setup tunnels and send traffic through the tunnel
DHCP Agent - Sets up dnsmasq in a namespace per network/subnet and enters mac/
ip into dhcp lease file
L3 Agent – OVS Plugin orchestrates to set up IPTables, Routing, NAT tables
OVS	
  Open	
  Source	
  Plugin
45	
  
Neutron Network Node is a SPOF
Need to use corosync, etc for active/standby failover.
Challenging at Scale
Since there’s a single network node, this becomes a bottleneck fairly quickly.
Inefficient Networking
IPTables, L3 Agent, multiple hops for single flow are causing unnecessary traffic
and added latency on your physical network
Challenges	
  with	
  OVS	
  Plugin
46	
  
MidoNet Overview
47	
  
MidoNet	
  Network	
  VirtualizaEon	
  PlaOorm	
  
Logical	
  L2	
  Switching	
  -­‐	
  L2	
  isolaEon	
  and	
  path	
  opEmizaEon	
  with	
  distributed	
  
virtual	
  switching	
  
Interconnect	
  with	
  VLAN	
  enabled	
  network	
  via	
  L2	
  Gateway	
  	
  
Logical	
  L3	
  RouEng	
  –	
  L3	
  isolaEon	
  and	
  rouEng	
  between	
  virtual	
  networks	
  
No	
  need	
  to	
  exit	
  the	
  so]ware	
  container	
  -­‐	
  no	
  hardware	
  required	
  
Distributed	
  Firewall	
  –	
  Provides	
  ACLs,	
  high	
  performance	
  kernel	
  integrated	
  
firewall	
  via	
  a	
  flexible	
  rule	
  chain	
  system	
  
Logical	
  Layer	
  4	
  Load	
  Balancer	
  –	
  Provides	
  applicaEon	
  load	
  balancing	
  in	
  
so]ware	
  form	
  -­‐	
  no	
  need	
  for	
  hardware	
  based	
  firewalls	
  
VxLAN/GRE	
  –	
  Provides	
  VxLAN	
  and	
  GRE	
  tunneling	
  
Provides	
  L2	
  connecEvity	
  across	
  L3	
  transport.	
  This	
  is	
  useful	
  when	
  L2	
  fabric	
  
doesn’t	
  reach	
  all	
  the	
  way	
  from	
  the	
  racks	
  hosEng	
  the	
  VMs	
  to	
  the	
  	
  physical	
  	
  L2	
  
segment	
  of	
  interest.	
  	
  	
  
MidoNet/Neutron	
  API–	
  Alignment	
  with	
  OpenStack	
  Neutron’s	
  API	
  for	
  
integraEon	
  into	
  compaEble	
  cloud	
  management	
  so]ware	
  
v
Any Application
MidoNet	
  Network	
  VirtualizaEon	
  PlaOorm	
  
Any Network Hardware
OpenStack/Cloud Management System
Distributed	
  
Firewall	
  
Layer	
  4	
  
Load	
  Balancer	
  
VxLAN/GRE	
  
Any Hypervisor
Logical	
  L2	
   Logical	
  L3	
   NAT	
  
MidoNet
/	
  
Neutron	
  
API	
  
NAT	
  –	
  Provides	
  Dynamic	
  NAT,	
  Port	
  masquerading	
  

Recommended for you

Introduction to SDN
Introduction to SDNIntroduction to SDN
Introduction to SDN

This document provides an introduction to software defined networking (SDN). It discusses the history and disadvantages of traditional networking approaches. SDN aims to address these issues by separating the network control and forwarding functions, and enabling programmability of the network. The key components of an SDN architecture are described, including the OpenFlow protocol for communication between the control plane and data plane. Several SDN controllers and their programming languages are also mentioned. The document concludes with the objectives of running an SDN demonstration lab using Mininet to experiment with OpenFlow and SDN controllers like Ryu.

sdnsoftware defined networking
VMworld 2014: Advanced Topics & Future Directions in Network Virtualization w...
VMworld 2014: Advanced Topics & Future Directions in Network Virtualization w...VMworld 2014: Advanced Topics & Future Directions in Network Virtualization w...
VMworld 2014: Advanced Topics & Future Directions in Network Virtualization w...

This document provides an overview and update on VMware's NSX network virtualization platform and previews future directions. It discusses expanding NSX capabilities like physical network integration, new encapsulation formats, and multi-site network virtualization. The presentation also explores advanced topics such as distributed logical routing, handling elephant flows, and enabling service chaining through network virtualization. Overall, the document outlines how NSX provides network virtualization and previews exciting new capabilities and use cases for virtualized networking.

network2014nsx
Networking is NOT Free: Lessons in Network Design
Networking is NOT Free: Lessons in Network DesignNetworking is NOT Free: Lessons in Network Design
Networking is NOT Free: Lessons in Network Design

An in-depth critique of the existing OpenStack networking approach, with a focus on how the Nova network controller is more of a hindrance than a help. Discusses the gap in Quantum's functionality required to close the gap, and alternative solutions. How can we make networking in OpenStack robust, high performance, and fault tolerant? What do typical large scale networks look like and what lessons can we learn from them? Is there an approach to networking we can take that is the same with a handful of servers as it is with hundreds of racks?

openstack
OpenStack	
  IntegraEon	
  
	
  	
  
5
Easy	
  integraEon	
  with	
  OpenStack:	
  
MidoNet	
  provides	
  a	
  plugin	
  for	
  Neutron.	
  	
  
Neutron MidoNet Plugin
Architecture	
  Overview
50	
  
Neutron Network Node is a SPOF
Need to use corosync, etc for active/standby failover.
Challenging at Scale
Since there’s a single network node, this becomes a bottleneck fairly quickly.
Inefficient Networking
IPTables, L3 Agent, multiple hops for single flow are causing unnecessary traffic
and added latency on your physical network
Challenges	
  with	
  OVS	
  Plugin
51	
  
MidoNet	
  Distributed	
  Model

Recommended for you

SDN & NFV Introduction - Open Source Data Center Networking
SDN & NFV Introduction - Open Source Data Center NetworkingSDN & NFV Introduction - Open Source Data Center Networking
SDN & NFV Introduction - Open Source Data Center Networking

This document introduces software defined networking (SDN) and network functions virtualization (NFV) concepts. It discusses challenges with traditional networking and how SDN and NFV address these by decoupling the control and data planes, centralizing network intelligence, and abstracting the underlying network infrastructure. It then provides examples of open source SDN technologies like OpenDaylight, Open vSwitch, and OpenStack that can be used to build programmable software-defined networks and virtualized network functions.

network virtualizationservice chainingopenvswitch
CNSCon 2024 Lightning Talk: Don’t Make Me Impersonate My Identity
CNSCon 2024 Lightning Talk: Don’t Make Me Impersonate My IdentityCNSCon 2024 Lightning Talk: Don’t Make Me Impersonate My Identity
CNSCon 2024 Lightning Talk: Don’t Make Me Impersonate My Identity

Identities are a crucial part of running workloads on Kubernetes. How do you ensure Pods can securely access Cloud resources? In this lightning talk, you will learn how large Cloud providers work together to share Identity Provider responsibilities in order to federate identities in multi-cloud environments.

securitykubernetespod identities
KubeCon NA'22 Lightning Talk: Where did all my IPs go?
KubeCon NA'22 Lightning Talk: Where did all my IPs go?KubeCon NA'22 Lightning Talk: Where did all my IPs go?
KubeCon NA'22 Lightning Talk: Where did all my IPs go?

Kubernetes cluster planning requires quite a few things to get started. What about IPs? Common IP management hurdles with Kubernetes clusters include IP assignments when building a cluster and challenges faced when deploying in a multi-faceted environment. Kubernetes Admins often need to use IP addressing handed out by Network Admins juggling other non-k8s workload IP assignments and IP exhaustion. In this talk, Cynthia will discuss new and existing KEPs that SIG-network has implemented to help mitigate IP challenges. Such features include discontiguous cluster CIDRs and the journey to IPv6. Cynthia will also discuss how the best practices for Kubernetes IP management are changing with these new capabilities to help scale and grow instead of rebuild. https://sched.co/184sj

kubeconkubernetesnetworking
52	
  
Centralized	
  Controller	
  Model
53	
  
MidoNet	
  Distributed	
  Model
54	
  
AcEve/Standby	
  GW	
  Model
55	
  
Fully	
  Distributed	
  GW	
  Model

Recommended for you

Kernel advantages for Istio realized with Cilium
Kernel advantages for Istio realized with CiliumKernel advantages for Istio realized with Cilium
Kernel advantages for Istio realized with Cilium

Istio brings a myriad of options to provide routing rules, encryption, and monitoring for microservices, typically in container environments. Cilium provides accelerated network security using a modern kernel technology called BPF. Put the two together and what do you get? A distributed security solution enabling microservices traffic management, security, and monitoring while enforcing policy as close to the microservices as possible. Cynthia Thomas and Romain Lenglet discuss the architectural and performance benefits of using Cilium with Istio and provide a demo of this BPF-based, Linux kernel technology. Cilium provides an API-aware security solution that can make a decision on every single microservice flow, with the ability to enforce protocols such as HTTP, Kafka, and gRPC. By addressing security policy at the API layer, you can enforce policy efficiently with kernel capabilities while reducing the attack surface in a microservices deployment.

istiokubernetescilium
Cilium:: Application-Aware Microservices via BPF
Cilium:: Application-Aware Microservices via BPFCilium:: Application-Aware Microservices via BPF
Cilium:: Application-Aware Microservices via BPF

Intro to Cilium Microservices Security with Kubernetes Integration Open Source Cilium website: cilium.io GH: github.com/cilium/cilium Join our Slack! cilium.herokuapp.com Follow us on Twitter! @ciliumproject @_techcet_

ciliumsecuritymicroservices
Cilium: Seattle Kubernetes MeetUp Dec 2017
Cilium: Seattle Kubernetes MeetUp Dec 2017Cilium: Seattle Kubernetes MeetUp Dec 2017
Cilium: Seattle Kubernetes MeetUp Dec 2017

BPF (Berkeley Packet Filter) is becoming the fastest growing technology in the Linux kernel and is revolutionizing networking, security and tracing. At the same time, the rise of container-based orchestration platforms such as Kubernetes is creating demand for routing, load-balancing & security infrastructure that is highly scalable, application-aware, and resilient. This talk introduces the open source project Cilium - a modern networking and security platform for microservices. Cilium is built on top of BPF and provides Linux native networking and security services with application protocol awareness. Cilium works hand in hand with application proxies such as Envoy and the services management orchestration layer Istio to provide infrastructure services in a transparent manner and with minimal overhead. This talk will discuss the challenges of exposing services via APIs and the solution that Cilium provides to enforce least privilege security.

securitymicroserviceskubernetes
56	
  
So what’s next for
Network Virtualization?
57	
  
Get more out of the physical network.
58	
  
Network Virtualization
decouples the logical
network from the physical
network.
NVOs can’t ignore the physical network
59	
  
Dynamic changes to logical
network are not dependent on the
physical network configuration.
Sharing state to and from the
physical network can be
supplementary.
-  Monitoring
-  Coordination
-  Traffic Engineering

Recommended for you

Cilium – Kernel Native Security & DDOS Mitigation for Microservices with BPF
Cilium – Kernel Native Security & DDOS Mitigation for Microservices with BPFCilium – Kernel Native Security & DDOS Mitigation for Microservices with BPF
Cilium – Kernel Native Security & DDOS Mitigation for Microservices with BPF

We have introduced Cilium at DockerCon US 2017 this year. Cilium provides application-aware network connectivity, security, and load-balancing for containers. This talk will follow up on the introduction and deep dive into recent kernel developments that address two fundamental questions: How can I provide application-aware security and routing efficiently without overhead embedded into every service? How can container hosts protect themselves from internal and external DDoS attacks? The solutions include: kproxy: a kernel-based socket proxy which allows for application-aware routing and security enforcement with minimal overhead. XDP: A lightning-fast packet processing datapath using BPF. The technology is intended for DDoS mitigation, load-balancing, and forwarding. This talk will deep dive into these exciting technologies and show how Cilium makes BPF and these kernel features available on Linux for your Docker containers.

ciliumbpfcontainers
Secure Your Containers: What Network Admins Should Know When Moving Into Prod...
Secure Your Containers: What Network Admins Should Know When Moving Into Prod...Secure Your Containers: What Network Admins Should Know When Moving Into Prod...
Secure Your Containers: What Network Admins Should Know When Moving Into Prod...

This session offers techniques for securing Docker containers and hosts using open source network virtualization technologies to implement microsegmentation. Come learn real tips and tricks that you can apply to keep your production environment secure.

containerssecuritycnm
Cookies program to display the information though cookie creation
Cookies program to display the information though cookie creationCookies program to display the information though cookie creation
Cookies program to display the information though cookie creation

Java Servlet programs

60	
  
Get more intelligence out of your network
NVOs provide a wealth of information
61	
  
NVOs centralize information on
your network
We can start taking advantage of
this information
-  Security
-  Compliance
-  Optimizing Networks
62	
  
Bridge physical and virtual networks
more efficiently
Midokura VTEP Solution
63	
  
MidoNet MidoNet	
  
Virtual
Any	
  Cloud	
  Management	
  PlaLorm	
  
MidoNet	
  Network	
  State	
  Database	
  
VM VM VM VM VM VM
IP Fabric
	
  	
  
Server	
   Storage	
   Services	
  
Physical
VM VM
VTEP	
  
OVSDBc	
  
VxLAN Tunnel
Physical Connection
OVSDB
TCP/IP
Key
OVSDBs	
  

Recommended for you

Comparison Table of DiskWarrior Alternatives.pdf
Comparison Table of DiskWarrior Alternatives.pdfComparison Table of DiskWarrior Alternatives.pdf
Comparison Table of DiskWarrior Alternatives.pdf

To help you choose the best DiskWarrior alternative, we've compiled a comparison table summarizing the features, pros, cons, and pricing of six alternatives.

data recoverydatadiskwarrior
WPRiders Company Presentation Slide Deck
WPRiders Company Presentation Slide DeckWPRiders Company Presentation Slide Deck
WPRiders Company Presentation Slide Deck

YOUR RELIABLE WEB DESIGN & DEVELOPMENT TEAM — FOR LASTING SUCCESS WPRiders is a web development company specialized in WordPress and WooCommerce websites and plugins for customers around the world. The company is headquartered in Bucharest, Romania, but our team members are located all over the world. Our customers are primarily from the US and Western Europe, but we have clients from Australia, Canada and other areas as well. Some facts about WPRiders and why we are one of the best firms around: More than 700 five-star reviews! You can check them here. 1500 WordPress projects delivered. We respond 80% faster than other firms! Data provided by Freshdesk. We’ve been in business since 2015. We are located in 7 countries and have 22 team members. With so many projects delivered, our team knows what works and what doesn’t when it comes to WordPress and WooCommerce. Our team members are: - highly experienced developers (employees & contractors with 5 -10+ years of experience), - great designers with an eye for UX/UI with 10+ years of experience - project managers with development background who speak both tech and non-tech - QA specialists - Conversion Rate Optimisation - CRO experts They are all working together to provide you with the best possible service. We are passionate about WordPress, and we love creating custom solutions that help our clients achieve their goals. At WPRiders, we are committed to building long-term relationships with our clients. We believe in accountability, in doing the right thing, as well as in transparency and open communication. You can read more about WPRiders on the About us page.

web development agencywpriderswordpress development
Manual | Product | Research Presentation
Manual | Product | Research PresentationManual | Product | Research Presentation
Manual | Product | Research Presentation

Manual Method of Product Research | Helium10 | MBS RETRIEVER

product researchhelium10 | mbs retriever
64	
  
Break through performance barriers
of software networking
40Gb	
  VxLAN	
  Offloading:	
  virtualized	
  environments	
  require	
  high	
  
throughput	
  infrastructure	
  
	
  
•  IntegraEon	
  with	
  Mellanox	
  provides	
  40	
  Gbps	
  
saturaEon	
  	
  
•  VxLAN	
  offloading	
  improves	
  CPU	
  uElizaEon	
  levels	
  
•  Scale	
  with	
  performance	
  through	
  HW	
  interconnect	
  
•  Increase	
  throughput	
  with	
  offloading	
  where	
  no	
  
offloading	
  would	
  otherwise	
  have	
  flat	
  results	
  
•  High	
  bandwidth	
  can	
  now	
  be	
  achieved	
  in	
  so]ware	
  
Performance
Open	
  Source	
  So]ware	
  
	
  
66	
  
MidoNet Unleashed
• Apache 2 Licensed
• Build a truly open and
neutral community of users
and vendors
• Heavily focused on
providing a networking
solution that functions well
for production environments
• Available since OpenStack
Paris at midonet.org
67	
  

Recommended for you

論文紹介:A Systematic Survey of Prompt Engineering on Vision-Language Foundation ...
論文紹介:A Systematic Survey of Prompt Engineering on Vision-Language Foundation ...論文紹介:A Systematic Survey of Prompt Engineering on Vision-Language Foundation ...
論文紹介:A Systematic Survey of Prompt Engineering on Vision-Language Foundation ...

Jindong Gu, Zhen Han, Shuo Chen, Ahmad Beirami, Bailan He, Gengyuan Zhang, Ruotong Liao, Yao Qin, Volker Tresp, Philip Torr "A Systematic Survey of Prompt Engineering on Vision-Language Foundation Models" arXiv2023 https://arxiv.org/abs/2307.12980

How Social Media Hackers Help You to See Your Wife's Message.pdf
How Social Media Hackers Help You to See Your Wife's Message.pdfHow Social Media Hackers Help You to See Your Wife's Message.pdf
How Social Media Hackers Help You to See Your Wife's Message.pdf

In the modern digital era, social media platforms have become integral to our daily lives. These platforms, including Facebook, Instagram, WhatsApp, and Snapchat, offer countless ways to connect, share, and communicate.

social media hackerfacebook hackerhire a instagram hacker
Understanding Insider Security Threats: Types, Examples, Effects, and Mitigat...
Understanding Insider Security Threats: Types, Examples, Effects, and Mitigat...Understanding Insider Security Threats: Types, Examples, Effects, and Mitigat...
Understanding Insider Security Threats: Types, Examples, Effects, and Mitigat...

Today’s digitally connected world presents a wide range of security challenges for enterprises. Insider security threats are particularly noteworthy because they have the potential to cause significant harm. Unlike external threats, insider risks originate from within the company, making them more subtle and challenging to identify. This blog aims to provide a comprehensive understanding of insider security threats, including their types, examples, effects, and mitigation techniques.

insider securitycybersecurity threatsenterprise security
Who are the members?
How can you contribute to MidoNet?
69	
  
• Check out the website:
www.midonet.org
• Join the MidoNet community! Wiki, Jenkins, Gerrit,
Ask, IRC, ML, Github
• Packages are available; easy to install with MidoStack
• Sign Legal to Contribute
• Midokurians on hand to support community
70	
  
MidoNet	
  Advantages	
  
	
  
Check	
  out	
  our	
  blog:	
  
hjp://blog.midokura.com/	
  
	
  
Follow	
  us	
  on	
  Twijer:	
  
@midokura	
  	
  
@midonet	
  
	
  
	
  
Thank You
Midokura Enterprise
MidoNet
www.midokura.com
Follow us on Twitter:
@midokura
@midonet
@_techcet_
MidoNet
www.midonet.org
	
  
	
  
	
  
	
  

Recommended for you

What’s New in Teams Calling, Meetings and Devices May 2024
What’s New in Teams Calling, Meetings and Devices May 2024What’s New in Teams Calling, Meetings and Devices May 2024
What’s New in Teams Calling, Meetings and Devices May 2024

This is a powerpoint that features Microsoft Teams Devices and everything that is new including updates to its software and devices for May 2024

microsoft teamsmicrosoft
UiPath Community Day Kraków: Devs4Devs Conference
UiPath Community Day Kraków: Devs4Devs ConferenceUiPath Community Day Kraków: Devs4Devs Conference
UiPath Community Day Kraków: Devs4Devs Conference

We are honored to launch and host this event for our UiPath Polish Community, with the help of our partners - Proservartner! We certainly hope we have managed to spike your interest in the subjects to be presented and the incredible networking opportunities at hand, too! Check out our proposed agenda below 👇👇 08:30 ☕ Welcome coffee (30') 09:00 Opening note/ Intro to UiPath Community (10') Cristina Vidu, Global Manager, Marketing Community @UiPath Dawid Kot, Digital Transformation Lead @Proservartner 09:10 Cloud migration - Proservartner & DOVISTA case study (30') Marcin Drozdowski, Automation CoE Manager @DOVISTA Pawel Kamiński, RPA developer @DOVISTA Mikolaj Zielinski, UiPath MVP, Senior Solutions Engineer @Proservartner 09:40 From bottlenecks to breakthroughs: Citizen Development in action (25') Pawel Poplawski, Director, Improvement and Automation @McCormick & Company Michał Cieślak, Senior Manager, Automation Programs @McCormick & Company 10:05 Next-level bots: API integration in UiPath Studio (30') Mikolaj Zielinski, UiPath MVP, Senior Solutions Engineer @Proservartner 10:35 ☕ Coffee Break (15') 10:50 Document Understanding with my RPA Companion (45') Ewa Gruszka, Enterprise Sales Specialist, AI & ML @UiPath 11:35 Power up your Robots: GenAI and GPT in REFramework (45') Krzysztof Karaszewski, Global RPA Product Manager 12:20 🍕 Lunch Break (1hr) 13:20 From Concept to Quality: UiPath Test Suite for AI-powered Knowledge Bots (30') Kamil Miśko, UiPath MVP, Senior RPA Developer @Zurich Insurance 13:50 Communications Mining - focus on AI capabilities (30') Thomasz Wierzbicki, Business Analyst @Office Samurai 14:20 Polish MVP panel: Insights on MVP award achievements and career profiling

#uipathcommunity#automation#automationdeveloper
BT & Neo4j: Knowledge Graphs for Critical Enterprise Systems.pptx.pdf
BT & Neo4j: Knowledge Graphs for Critical Enterprise Systems.pptx.pdfBT & Neo4j: Knowledge Graphs for Critical Enterprise Systems.pptx.pdf
BT & Neo4j: Knowledge Graphs for Critical Enterprise Systems.pptx.pdf

Presented at Gartner Data & Analytics, London Maty 2024. BT Group has used the Neo4j Graph Database to enable impressive digital transformation programs over the last 6 years. By re-imagining their operational support systems to adopt self-serve and data lead principles they have substantially reduced the number of applications and complexity of their operations. The result has been a substantial reduction in risk and costs while improving time to value, innovation, and process automation. Join this session to hear their story, the lessons they learned along the way and how their future innovation plans include the exploration of uses of EKG + Generative AI.

neo4jneo4j webinarsgraph database

More Related Content

What's hot

Technical Deep Dive into MidoNet - Taku Fukushima, Developer at Midokura
Technical Deep Dive into MidoNet - Taku Fukushima, Developer at MidokuraTechnical Deep Dive into MidoNet - Taku Fukushima, Developer at Midokura
Technical Deep Dive into MidoNet - Taku Fukushima, Developer at Midokura
MidoNet
 
Network and Service Virtualization tutorial at ONUG Spring 2015
Network and Service Virtualization tutorial at ONUG Spring 2015Network and Service Virtualization tutorial at ONUG Spring 2015
Network and Service Virtualization tutorial at ONUG Spring 2015
SDN Hub
 
VMware NSX and Arista L2 Hardware VTEP Gateway Integration
VMware NSX and Arista L2 Hardware VTEP Gateway IntegrationVMware NSX and Arista L2 Hardware VTEP Gateway Integration
VMware NSX and Arista L2 Hardware VTEP Gateway Integration
Bayu Wibowo
 
What's new in Neutron Juno
What's new in Neutron JunoWhat's new in Neutron Juno
What's new in Neutron Juno
Jaume Devesa Gomez
 
Tech Talk by John Casey (CTO) CPLANE_NETWORKS : High Performance OpenStack Ne...
Tech Talk by John Casey (CTO) CPLANE_NETWORKS : High Performance OpenStack Ne...Tech Talk by John Casey (CTO) CPLANE_NETWORKS : High Performance OpenStack Ne...
Tech Talk by John Casey (CTO) CPLANE_NETWORKS : High Performance OpenStack Ne...
nvirters
 
Arista Nuage meetup dublin 18-2
Arista Nuage meetup dublin 18-2Arista Nuage meetup dublin 18-2
Arista Nuage meetup dublin 18-2
Patrick Lynchehaun
 
MidoNet 101: Face to Face with the Distributed SDN
MidoNet 101: Face to Face with the Distributed SDNMidoNet 101: Face to Face with the Distributed SDN
MidoNet 101: Face to Face with the Distributed SDN
MidoNet
 
#NET5488 - Troubleshooting Methodology for VMware NSX - VMworld 2015
#NET5488 - Troubleshooting Methodology for VMware NSX - VMworld 2015#NET5488 - Troubleshooting Methodology for VMware NSX - VMworld 2015
#NET5488 - Troubleshooting Methodology for VMware NSX - VMworld 2015
Dmitri Kalintsev
 
Accelerating SDN Applications with Open Source Network Overlays
Accelerating SDN Applications with Open Source Network OverlaysAccelerating SDN Applications with Open Source Network Overlays
Accelerating SDN Applications with Open Source Network Overlays
Cumulus Networks
 
VMworld 2013: Troubleshooting VXLAN and Network Services in a Virtualized Env...
VMworld 2013: Troubleshooting VXLAN and Network Services in a Virtualized Env...VMworld 2013: Troubleshooting VXLAN and Network Services in a Virtualized Env...
VMworld 2013: Troubleshooting VXLAN and Network Services in a Virtualized Env...
VMworld
 
VMware nsx network virtualization tool
VMware nsx network virtualization toolVMware nsx network virtualization tool
VMware nsx network virtualization tool
Daljeet Singh Randhawa
 
Virt july-2013-meetup
Virt july-2013-meetupVirt july-2013-meetup
Virt july-2013-meetup
nvirters
 
OpenStack Neutron 201 1hr
OpenStack Neutron 201 1hr OpenStack Neutron 201 1hr
OpenStack Neutron 201 1hr
David Lenwell
 
Tech Tutorial by Vikram Dham: Let's build MPLS router using SDN
Tech Tutorial by Vikram Dham: Let's build MPLS router using SDNTech Tutorial by Vikram Dham: Let's build MPLS router using SDN
Tech Tutorial by Vikram Dham: Let's build MPLS router using SDN
nvirters
 
6WINDGate™ - Accelerated Data Plane Solution for EPC and vEPC
6WINDGate™ - Accelerated Data Plane Solution for EPC and vEPC6WINDGate™ - Accelerated Data Plane Solution for EPC and vEPC
6WINDGate™ - Accelerated Data Plane Solution for EPC and vEPC
6WIND
 
OpenStack in Action 4! Emilien Macchi & Sylvain Afchain - What's new in neutr...
OpenStack in Action 4! Emilien Macchi & Sylvain Afchain - What's new in neutr...OpenStack in Action 4! Emilien Macchi & Sylvain Afchain - What's new in neutr...
OpenStack in Action 4! Emilien Macchi & Sylvain Afchain - What's new in neutr...
eNovance
 
VMworld 2013: Designing Network Virtualization for Data-Centers: Greenfield D...
VMworld 2013: Designing Network Virtualization for Data-Centers: Greenfield D...VMworld 2013: Designing Network Virtualization for Data-Centers: Greenfield D...
VMworld 2013: Designing Network Virtualization for Data-Centers: Greenfield D...
VMworld
 
Pushing Packets - How do the ML2 Mechanism Drivers Stack Up
Pushing Packets - How do the ML2 Mechanism Drivers Stack UpPushing Packets - How do the ML2 Mechanism Drivers Stack Up
Pushing Packets - How do the ML2 Mechanism Drivers Stack Up
James Denton
 
L4-L7 services for SDN and NVF by Youcef Laribi
L4-L7 services for SDN and NVF by Youcef LaribiL4-L7 services for SDN and NVF by Youcef Laribi
L4-L7 services for SDN and NVF by Youcef Laribi
buildacloud
 
Reference design for v mware nsx
Reference design for v mware nsxReference design for v mware nsx
Reference design for v mware nsx
solarisyougood
 

What's hot (20)

Technical Deep Dive into MidoNet - Taku Fukushima, Developer at Midokura
Technical Deep Dive into MidoNet - Taku Fukushima, Developer at MidokuraTechnical Deep Dive into MidoNet - Taku Fukushima, Developer at Midokura
Technical Deep Dive into MidoNet - Taku Fukushima, Developer at Midokura
 
Network and Service Virtualization tutorial at ONUG Spring 2015
Network and Service Virtualization tutorial at ONUG Spring 2015Network and Service Virtualization tutorial at ONUG Spring 2015
Network and Service Virtualization tutorial at ONUG Spring 2015
 
VMware NSX and Arista L2 Hardware VTEP Gateway Integration
VMware NSX and Arista L2 Hardware VTEP Gateway IntegrationVMware NSX and Arista L2 Hardware VTEP Gateway Integration
VMware NSX and Arista L2 Hardware VTEP Gateway Integration
 
What's new in Neutron Juno
What's new in Neutron JunoWhat's new in Neutron Juno
What's new in Neutron Juno
 
Tech Talk by John Casey (CTO) CPLANE_NETWORKS : High Performance OpenStack Ne...
Tech Talk by John Casey (CTO) CPLANE_NETWORKS : High Performance OpenStack Ne...Tech Talk by John Casey (CTO) CPLANE_NETWORKS : High Performance OpenStack Ne...
Tech Talk by John Casey (CTO) CPLANE_NETWORKS : High Performance OpenStack Ne...
 
Arista Nuage meetup dublin 18-2
Arista Nuage meetup dublin 18-2Arista Nuage meetup dublin 18-2
Arista Nuage meetup dublin 18-2
 
MidoNet 101: Face to Face with the Distributed SDN
MidoNet 101: Face to Face with the Distributed SDNMidoNet 101: Face to Face with the Distributed SDN
MidoNet 101: Face to Face with the Distributed SDN
 
#NET5488 - Troubleshooting Methodology for VMware NSX - VMworld 2015
#NET5488 - Troubleshooting Methodology for VMware NSX - VMworld 2015#NET5488 - Troubleshooting Methodology for VMware NSX - VMworld 2015
#NET5488 - Troubleshooting Methodology for VMware NSX - VMworld 2015
 
Accelerating SDN Applications with Open Source Network Overlays
Accelerating SDN Applications with Open Source Network OverlaysAccelerating SDN Applications with Open Source Network Overlays
Accelerating SDN Applications with Open Source Network Overlays
 
VMworld 2013: Troubleshooting VXLAN and Network Services in a Virtualized Env...
VMworld 2013: Troubleshooting VXLAN and Network Services in a Virtualized Env...VMworld 2013: Troubleshooting VXLAN and Network Services in a Virtualized Env...
VMworld 2013: Troubleshooting VXLAN and Network Services in a Virtualized Env...
 
VMware nsx network virtualization tool
VMware nsx network virtualization toolVMware nsx network virtualization tool
VMware nsx network virtualization tool
 
Virt july-2013-meetup
Virt july-2013-meetupVirt july-2013-meetup
Virt july-2013-meetup
 
OpenStack Neutron 201 1hr
OpenStack Neutron 201 1hr OpenStack Neutron 201 1hr
OpenStack Neutron 201 1hr
 
Tech Tutorial by Vikram Dham: Let's build MPLS router using SDN
Tech Tutorial by Vikram Dham: Let's build MPLS router using SDNTech Tutorial by Vikram Dham: Let's build MPLS router using SDN
Tech Tutorial by Vikram Dham: Let's build MPLS router using SDN
 
6WINDGate™ - Accelerated Data Plane Solution for EPC and vEPC
6WINDGate™ - Accelerated Data Plane Solution for EPC and vEPC6WINDGate™ - Accelerated Data Plane Solution for EPC and vEPC
6WINDGate™ - Accelerated Data Plane Solution for EPC and vEPC
 
OpenStack in Action 4! Emilien Macchi & Sylvain Afchain - What's new in neutr...
OpenStack in Action 4! Emilien Macchi & Sylvain Afchain - What's new in neutr...OpenStack in Action 4! Emilien Macchi & Sylvain Afchain - What's new in neutr...
OpenStack in Action 4! Emilien Macchi & Sylvain Afchain - What's new in neutr...
 
VMworld 2013: Designing Network Virtualization for Data-Centers: Greenfield D...
VMworld 2013: Designing Network Virtualization for Data-Centers: Greenfield D...VMworld 2013: Designing Network Virtualization for Data-Centers: Greenfield D...
VMworld 2013: Designing Network Virtualization for Data-Centers: Greenfield D...
 
Pushing Packets - How do the ML2 Mechanism Drivers Stack Up
Pushing Packets - How do the ML2 Mechanism Drivers Stack UpPushing Packets - How do the ML2 Mechanism Drivers Stack Up
Pushing Packets - How do the ML2 Mechanism Drivers Stack Up
 
L4-L7 services for SDN and NVF by Youcef Laribi
L4-L7 services for SDN and NVF by Youcef LaribiL4-L7 services for SDN and NVF by Youcef Laribi
L4-L7 services for SDN and NVF by Youcef Laribi
 
Reference design for v mware nsx
Reference design for v mware nsxReference design for v mware nsx
Reference design for v mware nsx
 

Similar to What's the deal with Neutron?

From Nova-Network to Neutron and Beyond: A Look at OpenStack Networking
From Nova-Network to Neutron and Beyond: A Look at OpenStack NetworkingFrom Nova-Network to Neutron and Beyond: A Look at OpenStack Networking
From Nova-Network to Neutron and Beyond: A Look at OpenStack Networking
Cynthia Thomas
 
[OpenStack Day in Korea 2015] Track 3-6 - Archiectural Overview of the Open S...
[OpenStack Day in Korea 2015] Track 3-6 - Archiectural Overview of the Open S...[OpenStack Day in Korea 2015] Track 3-6 - Archiectural Overview of the Open S...
[OpenStack Day in Korea 2015] Track 3-6 - Archiectural Overview of the Open S...
OpenStack Korea Community
 
Operators experience and perspective on SDN with VLANs and L3 Networks
Operators experience and perspective on SDN with VLANs and L3 NetworksOperators experience and perspective on SDN with VLANs and L3 Networks
Operators experience and perspective on SDN with VLANs and L3 Networks
Jakub Pavlik
 
Quantum - The Network Mechanics
Quantum - The Network MechanicsQuantum - The Network Mechanics
Quantum - The Network Mechanics
Kiran Murari
 
OpenStack Quantum
OpenStack QuantumOpenStack Quantum
OpenStack Quantum
openstackindia
 
ONUG Tutorial: Bridges and Tunnels Drive Through OpenStack Networking
ONUG Tutorial: Bridges and Tunnels Drive Through OpenStack NetworkingONUG Tutorial: Bridges and Tunnels Drive Through OpenStack Networking
ONUG Tutorial: Bridges and Tunnels Drive Through OpenStack Networking
markmcclain
 
OpenStack 2012 fall summit observation - Quantum/SDN
OpenStack 2012 fall summit observation - Quantum/SDNOpenStack 2012 fall summit observation - Quantum/SDN
OpenStack 2012 fall summit observation - Quantum/SDN
Te-Yen Liu
 
Open stack networking_101_update_2014-os-meetups
Open stack networking_101_update_2014-os-meetupsOpen stack networking_101_update_2014-os-meetups
Open stack networking_101_update_2014-os-meetups
yfauser
 
Understanding and deploying Network Virtualization
Understanding and deploying Network VirtualizationUnderstanding and deploying Network Virtualization
Understanding and deploying Network Virtualization
SDN Hub
 
CloudStack and SDN
CloudStack and SDNCloudStack and SDN
CloudStack and SDN
Sebastien Goasguen
 
Yechielthur1100red hat-cloud-infrastructure-networking-deep-dive-140417165107...
Yechielthur1100red hat-cloud-infrastructure-networking-deep-dive-140417165107...Yechielthur1100red hat-cloud-infrastructure-networking-deep-dive-140417165107...
Yechielthur1100red hat-cloud-infrastructure-networking-deep-dive-140417165107...
Công TÔ
 
OpenStack Networking
OpenStack NetworkingOpenStack Networking
OpenStack Networking
Ilya Shakhat
 
OpenStack Networking and Automation
OpenStack Networking and AutomationOpenStack Networking and Automation
OpenStack Networking and Automation
Adam Johnson
 
Quantum - Virtual networks for Openstack
Quantum - Virtual networks for OpenstackQuantum - Virtual networks for Openstack
Quantum - Virtual networks for Openstack
salv_orlando
 
Bridges and Tunnels: A Drive Through OpenStack Networking
Bridges and Tunnels: A Drive Through OpenStack NetworkingBridges and Tunnels: A Drive Through OpenStack Networking
Bridges and Tunnels: A Drive Through OpenStack Networking
markmcclain
 
VMworld 2013: Advanced VMware NSX Architecture
VMworld 2013: Advanced VMware NSX Architecture VMworld 2013: Advanced VMware NSX Architecture
VMworld 2013: Advanced VMware NSX Architecture
VMworld
 
Introduction to SDN
Introduction to SDNIntroduction to SDN
Introduction to SDN
Muhammad Moinur Rahman
 
VMworld 2014: Advanced Topics & Future Directions in Network Virtualization w...
VMworld 2014: Advanced Topics & Future Directions in Network Virtualization w...VMworld 2014: Advanced Topics & Future Directions in Network Virtualization w...
VMworld 2014: Advanced Topics & Future Directions in Network Virtualization w...
VMworld
 
Networking is NOT Free: Lessons in Network Design
Networking is NOT Free: Lessons in Network DesignNetworking is NOT Free: Lessons in Network Design
Networking is NOT Free: Lessons in Network Design
Randy Bias
 
SDN & NFV Introduction - Open Source Data Center Networking
SDN & NFV Introduction - Open Source Data Center NetworkingSDN & NFV Introduction - Open Source Data Center Networking
SDN & NFV Introduction - Open Source Data Center Networking
Thomas Graf
 

Similar to What's the deal with Neutron? (20)

From Nova-Network to Neutron and Beyond: A Look at OpenStack Networking
From Nova-Network to Neutron and Beyond: A Look at OpenStack NetworkingFrom Nova-Network to Neutron and Beyond: A Look at OpenStack Networking
From Nova-Network to Neutron and Beyond: A Look at OpenStack Networking
 
[OpenStack Day in Korea 2015] Track 3-6 - Archiectural Overview of the Open S...
[OpenStack Day in Korea 2015] Track 3-6 - Archiectural Overview of the Open S...[OpenStack Day in Korea 2015] Track 3-6 - Archiectural Overview of the Open S...
[OpenStack Day in Korea 2015] Track 3-6 - Archiectural Overview of the Open S...
 
Operators experience and perspective on SDN with VLANs and L3 Networks
Operators experience and perspective on SDN with VLANs and L3 NetworksOperators experience and perspective on SDN with VLANs and L3 Networks
Operators experience and perspective on SDN with VLANs and L3 Networks
 
Quantum - The Network Mechanics
Quantum - The Network MechanicsQuantum - The Network Mechanics
Quantum - The Network Mechanics
 
OpenStack Quantum
OpenStack QuantumOpenStack Quantum
OpenStack Quantum
 
ONUG Tutorial: Bridges and Tunnels Drive Through OpenStack Networking
ONUG Tutorial: Bridges and Tunnels Drive Through OpenStack NetworkingONUG Tutorial: Bridges and Tunnels Drive Through OpenStack Networking
ONUG Tutorial: Bridges and Tunnels Drive Through OpenStack Networking
 
OpenStack 2012 fall summit observation - Quantum/SDN
OpenStack 2012 fall summit observation - Quantum/SDNOpenStack 2012 fall summit observation - Quantum/SDN
OpenStack 2012 fall summit observation - Quantum/SDN
 
Open stack networking_101_update_2014-os-meetups
Open stack networking_101_update_2014-os-meetupsOpen stack networking_101_update_2014-os-meetups
Open stack networking_101_update_2014-os-meetups
 
Understanding and deploying Network Virtualization
Understanding and deploying Network VirtualizationUnderstanding and deploying Network Virtualization
Understanding and deploying Network Virtualization
 
CloudStack and SDN
CloudStack and SDNCloudStack and SDN
CloudStack and SDN
 
Yechielthur1100red hat-cloud-infrastructure-networking-deep-dive-140417165107...
Yechielthur1100red hat-cloud-infrastructure-networking-deep-dive-140417165107...Yechielthur1100red hat-cloud-infrastructure-networking-deep-dive-140417165107...
Yechielthur1100red hat-cloud-infrastructure-networking-deep-dive-140417165107...
 
OpenStack Networking
OpenStack NetworkingOpenStack Networking
OpenStack Networking
 
OpenStack Networking and Automation
OpenStack Networking and AutomationOpenStack Networking and Automation
OpenStack Networking and Automation
 
Quantum - Virtual networks for Openstack
Quantum - Virtual networks for OpenstackQuantum - Virtual networks for Openstack
Quantum - Virtual networks for Openstack
 
Bridges and Tunnels: A Drive Through OpenStack Networking
Bridges and Tunnels: A Drive Through OpenStack NetworkingBridges and Tunnels: A Drive Through OpenStack Networking
Bridges and Tunnels: A Drive Through OpenStack Networking
 
VMworld 2013: Advanced VMware NSX Architecture
VMworld 2013: Advanced VMware NSX Architecture VMworld 2013: Advanced VMware NSX Architecture
VMworld 2013: Advanced VMware NSX Architecture
 
Introduction to SDN
Introduction to SDNIntroduction to SDN
Introduction to SDN
 
VMworld 2014: Advanced Topics & Future Directions in Network Virtualization w...
VMworld 2014: Advanced Topics & Future Directions in Network Virtualization w...VMworld 2014: Advanced Topics & Future Directions in Network Virtualization w...
VMworld 2014: Advanced Topics & Future Directions in Network Virtualization w...
 
Networking is NOT Free: Lessons in Network Design
Networking is NOT Free: Lessons in Network DesignNetworking is NOT Free: Lessons in Network Design
Networking is NOT Free: Lessons in Network Design
 
SDN & NFV Introduction - Open Source Data Center Networking
SDN & NFV Introduction - Open Source Data Center NetworkingSDN & NFV Introduction - Open Source Data Center Networking
SDN & NFV Introduction - Open Source Data Center Networking
 

More from Cynthia Thomas

CNSCon 2024 Lightning Talk: Don’t Make Me Impersonate My Identity
CNSCon 2024 Lightning Talk: Don’t Make Me Impersonate My IdentityCNSCon 2024 Lightning Talk: Don’t Make Me Impersonate My Identity
CNSCon 2024 Lightning Talk: Don’t Make Me Impersonate My Identity
Cynthia Thomas
 
KubeCon NA'22 Lightning Talk: Where did all my IPs go?
KubeCon NA'22 Lightning Talk: Where did all my IPs go?KubeCon NA'22 Lightning Talk: Where did all my IPs go?
KubeCon NA'22 Lightning Talk: Where did all my IPs go?
Cynthia Thomas
 
Kernel advantages for Istio realized with Cilium
Kernel advantages for Istio realized with CiliumKernel advantages for Istio realized with Cilium
Kernel advantages for Istio realized with Cilium
Cynthia Thomas
 
Cilium:: Application-Aware Microservices via BPF
Cilium:: Application-Aware Microservices via BPFCilium:: Application-Aware Microservices via BPF
Cilium:: Application-Aware Microservices via BPF
Cynthia Thomas
 
Cilium: Seattle Kubernetes MeetUp Dec 2017
Cilium: Seattle Kubernetes MeetUp Dec 2017Cilium: Seattle Kubernetes MeetUp Dec 2017
Cilium: Seattle Kubernetes MeetUp Dec 2017
Cynthia Thomas
 
Cilium – Kernel Native Security & DDOS Mitigation for Microservices with BPF
Cilium – Kernel Native Security & DDOS Mitigation for Microservices with BPFCilium – Kernel Native Security & DDOS Mitigation for Microservices with BPF
Cilium – Kernel Native Security & DDOS Mitigation for Microservices with BPF
Cynthia Thomas
 
Secure Your Containers: What Network Admins Should Know When Moving Into Prod...
Secure Your Containers: What Network Admins Should Know When Moving Into Prod...Secure Your Containers: What Network Admins Should Know When Moving Into Prod...
Secure Your Containers: What Network Admins Should Know When Moving Into Prod...
Cynthia Thomas
 

More from Cynthia Thomas (7)

CNSCon 2024 Lightning Talk: Don’t Make Me Impersonate My Identity
CNSCon 2024 Lightning Talk: Don’t Make Me Impersonate My IdentityCNSCon 2024 Lightning Talk: Don’t Make Me Impersonate My Identity
CNSCon 2024 Lightning Talk: Don’t Make Me Impersonate My Identity
 
KubeCon NA'22 Lightning Talk: Where did all my IPs go?
KubeCon NA'22 Lightning Talk: Where did all my IPs go?KubeCon NA'22 Lightning Talk: Where did all my IPs go?
KubeCon NA'22 Lightning Talk: Where did all my IPs go?
 
Kernel advantages for Istio realized with Cilium
Kernel advantages for Istio realized with CiliumKernel advantages for Istio realized with Cilium
Kernel advantages for Istio realized with Cilium
 
Cilium:: Application-Aware Microservices via BPF
Cilium:: Application-Aware Microservices via BPFCilium:: Application-Aware Microservices via BPF
Cilium:: Application-Aware Microservices via BPF
 
Cilium: Seattle Kubernetes MeetUp Dec 2017
Cilium: Seattle Kubernetes MeetUp Dec 2017Cilium: Seattle Kubernetes MeetUp Dec 2017
Cilium: Seattle Kubernetes MeetUp Dec 2017
 
Cilium – Kernel Native Security & DDOS Mitigation for Microservices with BPF
Cilium – Kernel Native Security & DDOS Mitigation for Microservices with BPFCilium – Kernel Native Security & DDOS Mitigation for Microservices with BPF
Cilium – Kernel Native Security & DDOS Mitigation for Microservices with BPF
 
Secure Your Containers: What Network Admins Should Know When Moving Into Prod...
Secure Your Containers: What Network Admins Should Know When Moving Into Prod...Secure Your Containers: What Network Admins Should Know When Moving Into Prod...
Secure Your Containers: What Network Admins Should Know When Moving Into Prod...
 

Recently uploaded

Cookies program to display the information though cookie creation
Cookies program to display the information though cookie creationCookies program to display the information though cookie creation
Cookies program to display the information though cookie creation
shanthidl1
 
Comparison Table of DiskWarrior Alternatives.pdf
Comparison Table of DiskWarrior Alternatives.pdfComparison Table of DiskWarrior Alternatives.pdf
Comparison Table of DiskWarrior Alternatives.pdf
Andrey Yasko
 
WPRiders Company Presentation Slide Deck
WPRiders Company Presentation Slide DeckWPRiders Company Presentation Slide Deck
WPRiders Company Presentation Slide Deck
Lidia A.
 
Manual | Product | Research Presentation
Manual | Product | Research PresentationManual | Product | Research Presentation
Manual | Product | Research Presentation
welrejdoall
 
論文紹介:A Systematic Survey of Prompt Engineering on Vision-Language Foundation ...
論文紹介:A Systematic Survey of Prompt Engineering on Vision-Language Foundation ...論文紹介:A Systematic Survey of Prompt Engineering on Vision-Language Foundation ...
論文紹介:A Systematic Survey of Prompt Engineering on Vision-Language Foundation ...
Toru Tamaki
 
How Social Media Hackers Help You to See Your Wife's Message.pdf
How Social Media Hackers Help You to See Your Wife's Message.pdfHow Social Media Hackers Help You to See Your Wife's Message.pdf
How Social Media Hackers Help You to See Your Wife's Message.pdf
HackersList
 
Understanding Insider Security Threats: Types, Examples, Effects, and Mitigat...
Understanding Insider Security Threats: Types, Examples, Effects, and Mitigat...Understanding Insider Security Threats: Types, Examples, Effects, and Mitigat...
Understanding Insider Security Threats: Types, Examples, Effects, and Mitigat...
Bert Blevins
 
What’s New in Teams Calling, Meetings and Devices May 2024
What’s New in Teams Calling, Meetings and Devices May 2024What’s New in Teams Calling, Meetings and Devices May 2024
What’s New in Teams Calling, Meetings and Devices May 2024
Stephanie Beckett
 
UiPath Community Day Kraków: Devs4Devs Conference
UiPath Community Day Kraków: Devs4Devs ConferenceUiPath Community Day Kraków: Devs4Devs Conference
UiPath Community Day Kraków: Devs4Devs Conference
UiPathCommunity
 
BT & Neo4j: Knowledge Graphs for Critical Enterprise Systems.pptx.pdf
BT & Neo4j: Knowledge Graphs for Critical Enterprise Systems.pptx.pdfBT & Neo4j: Knowledge Graphs for Critical Enterprise Systems.pptx.pdf
BT & Neo4j: Knowledge Graphs for Critical Enterprise Systems.pptx.pdf
Neo4j
 
20240704 QFM023 Engineering Leadership Reading List June 2024
20240704 QFM023 Engineering Leadership Reading List June 202420240704 QFM023 Engineering Leadership Reading List June 2024
20240704 QFM023 Engineering Leadership Reading List June 2024
Matthew Sinclair
 
Quantum Communications Q&A with Gemini LLM
Quantum Communications Q&A with Gemini LLMQuantum Communications Q&A with Gemini LLM
Quantum Communications Q&A with Gemini LLM
Vijayananda Mohire
 
TrustArc Webinar - 2024 Data Privacy Trends: A Mid-Year Check-In
TrustArc Webinar - 2024 Data Privacy Trends: A Mid-Year Check-InTrustArc Webinar - 2024 Data Privacy Trends: A Mid-Year Check-In
TrustArc Webinar - 2024 Data Privacy Trends: A Mid-Year Check-In
TrustArc
 
Quality Patents: Patents That Stand the Test of Time
Quality Patents: Patents That Stand the Test of TimeQuality Patents: Patents That Stand the Test of Time
Quality Patents: Patents That Stand the Test of Time
Aurora Consulting
 
Pigging Solutions Sustainability brochure.pdf
Pigging Solutions Sustainability brochure.pdfPigging Solutions Sustainability brochure.pdf
Pigging Solutions Sustainability brochure.pdf
Pigging Solutions
 
How RPA Help in the Transportation and Logistics Industry.pptx
How RPA Help in the Transportation and Logistics Industry.pptxHow RPA Help in the Transportation and Logistics Industry.pptx
How RPA Help in the Transportation and Logistics Industry.pptx
SynapseIndia
 
How to Build a Profitable IoT Product.pptx
How to Build a Profitable IoT Product.pptxHow to Build a Profitable IoT Product.pptx
How to Build a Profitable IoT Product.pptx
Adam Dunkels
 
Research Directions for Cross Reality Interfaces
Research Directions for Cross Reality InterfacesResearch Directions for Cross Reality Interfaces
Research Directions for Cross Reality Interfaces
Mark Billinghurst
 
Fluttercon 2024: Showing that you care about security - OpenSSF Scorecards fo...
Fluttercon 2024: Showing that you care about security - OpenSSF Scorecards fo...Fluttercon 2024: Showing that you care about security - OpenSSF Scorecards fo...
Fluttercon 2024: Showing that you care about security - OpenSSF Scorecards fo...
Chris Swan
 
Paradigm Shifts in User Modeling: A Journey from Historical Foundations to Em...
Paradigm Shifts in User Modeling: A Journey from Historical Foundations to Em...Paradigm Shifts in User Modeling: A Journey from Historical Foundations to Em...
Paradigm Shifts in User Modeling: A Journey from Historical Foundations to Em...
Erasmo Purificato
 

Recently uploaded (20)

Cookies program to display the information though cookie creation
Cookies program to display the information though cookie creationCookies program to display the information though cookie creation
Cookies program to display the information though cookie creation
 
Comparison Table of DiskWarrior Alternatives.pdf
Comparison Table of DiskWarrior Alternatives.pdfComparison Table of DiskWarrior Alternatives.pdf
Comparison Table of DiskWarrior Alternatives.pdf
 
WPRiders Company Presentation Slide Deck
WPRiders Company Presentation Slide DeckWPRiders Company Presentation Slide Deck
WPRiders Company Presentation Slide Deck
 
Manual | Product | Research Presentation
Manual | Product | Research PresentationManual | Product | Research Presentation
Manual | Product | Research Presentation
 
論文紹介:A Systematic Survey of Prompt Engineering on Vision-Language Foundation ...
論文紹介:A Systematic Survey of Prompt Engineering on Vision-Language Foundation ...論文紹介:A Systematic Survey of Prompt Engineering on Vision-Language Foundation ...
論文紹介:A Systematic Survey of Prompt Engineering on Vision-Language Foundation ...
 
How Social Media Hackers Help You to See Your Wife's Message.pdf
How Social Media Hackers Help You to See Your Wife's Message.pdfHow Social Media Hackers Help You to See Your Wife's Message.pdf
How Social Media Hackers Help You to See Your Wife's Message.pdf
 
Understanding Insider Security Threats: Types, Examples, Effects, and Mitigat...
Understanding Insider Security Threats: Types, Examples, Effects, and Mitigat...Understanding Insider Security Threats: Types, Examples, Effects, and Mitigat...
Understanding Insider Security Threats: Types, Examples, Effects, and Mitigat...
 
What’s New in Teams Calling, Meetings and Devices May 2024
What’s New in Teams Calling, Meetings and Devices May 2024What’s New in Teams Calling, Meetings and Devices May 2024
What’s New in Teams Calling, Meetings and Devices May 2024
 
UiPath Community Day Kraków: Devs4Devs Conference
UiPath Community Day Kraków: Devs4Devs ConferenceUiPath Community Day Kraków: Devs4Devs Conference
UiPath Community Day Kraków: Devs4Devs Conference
 
BT & Neo4j: Knowledge Graphs for Critical Enterprise Systems.pptx.pdf
BT & Neo4j: Knowledge Graphs for Critical Enterprise Systems.pptx.pdfBT & Neo4j: Knowledge Graphs for Critical Enterprise Systems.pptx.pdf
BT & Neo4j: Knowledge Graphs for Critical Enterprise Systems.pptx.pdf
 
20240704 QFM023 Engineering Leadership Reading List June 2024
20240704 QFM023 Engineering Leadership Reading List June 202420240704 QFM023 Engineering Leadership Reading List June 2024
20240704 QFM023 Engineering Leadership Reading List June 2024
 
Quantum Communications Q&A with Gemini LLM
Quantum Communications Q&A with Gemini LLMQuantum Communications Q&A with Gemini LLM
Quantum Communications Q&A with Gemini LLM
 
TrustArc Webinar - 2024 Data Privacy Trends: A Mid-Year Check-In
TrustArc Webinar - 2024 Data Privacy Trends: A Mid-Year Check-InTrustArc Webinar - 2024 Data Privacy Trends: A Mid-Year Check-In
TrustArc Webinar - 2024 Data Privacy Trends: A Mid-Year Check-In
 
Quality Patents: Patents That Stand the Test of Time
Quality Patents: Patents That Stand the Test of TimeQuality Patents: Patents That Stand the Test of Time
Quality Patents: Patents That Stand the Test of Time
 
Pigging Solutions Sustainability brochure.pdf
Pigging Solutions Sustainability brochure.pdfPigging Solutions Sustainability brochure.pdf
Pigging Solutions Sustainability brochure.pdf
 
How RPA Help in the Transportation and Logistics Industry.pptx
How RPA Help in the Transportation and Logistics Industry.pptxHow RPA Help in the Transportation and Logistics Industry.pptx
How RPA Help in the Transportation and Logistics Industry.pptx
 
How to Build a Profitable IoT Product.pptx
How to Build a Profitable IoT Product.pptxHow to Build a Profitable IoT Product.pptx
How to Build a Profitable IoT Product.pptx
 
Research Directions for Cross Reality Interfaces
Research Directions for Cross Reality InterfacesResearch Directions for Cross Reality Interfaces
Research Directions for Cross Reality Interfaces
 
Fluttercon 2024: Showing that you care about security - OpenSSF Scorecards fo...
Fluttercon 2024: Showing that you care about security - OpenSSF Scorecards fo...Fluttercon 2024: Showing that you care about security - OpenSSF Scorecards fo...
Fluttercon 2024: Showing that you care about security - OpenSSF Scorecards fo...
 
Paradigm Shifts in User Modeling: A Journey from Historical Foundations to Em...
Paradigm Shifts in User Modeling: A Journey from Historical Foundations to Em...Paradigm Shifts in User Modeling: A Journey from Historical Foundations to Em...
Paradigm Shifts in User Modeling: A Journey from Historical Foundations to Em...
 

What's the deal with Neutron?

  • 1. So  What’s  the  Deal  with  Neutron?    OpenStack  MeetUp   January  2015  
  • 2. Agenda   ▪  Network  VirtualizaEon  Requirements   ▪  EvoluEon  of  Neutron  Networking   ▪  Open  Source  Network  SoluEons   ▪  Quiz!   1  
  • 4. What is Network Virtualization (NV)? 3   Taking logical (virtual) networks and services, and decoupling them from the underlying network hardware. Well suited for highly virtualized environments. Any Application Virtual Networks MidoNet  VirtualizaEon  PlaOorm   Logical  L2   Existing Network Hardware Any Cloud Management Platform Distributed  Firewall   service   Distributed   Load  Balancer  ser   Logical  L3   Distributed  VPN   Service   KVM, ESXi, Xen LXC
  • 5. Requirements for NV 4   Requirements 4 Tenant/Project A Network A1 VM1 VM3 Network A2 VM5 Tenant/Project B Network B1 VM2 VM4 uplink Provider Virtual Router (L3) Tenant A Virtual Router Tenant B Virtual Router VM6 Virtual L2 Switch B1 Virtual L2 Switch A1 Virtual L2 Switch A2 TenantB office Tenant B VPN Router Office Network
  • 6. Requirements for NV 5   Requirements 5 Tenant/Project A Network A1 VM1 VM3 Network A2 VM5 Tenant/Project B Network B1 VM2 VM4 uplink Provider Virtual Router (L3) Tenant A Virtual Router Tenant B Virtual Router VM6 Virtual L2 Switch B1 Virtual L2 Switch A1 Virtual L2 Switch A2 TenantB office Tenant B VPN Router Office Network Isolated tenant networks (virtual data center)
  • 7. Requirements for NV 6   Requirements 6 Tenant/Project A Network A1 VM1 VM3 Network A2 VM5 Tenant/Project B Network B1 VM2 VM4 uplink Provider Virtual Router (L3) Tenant A Virtual Router Tenant B Virtual Router VM6 Virtual L2 Switch B1 Virtual L2 Switch A1 Virtual L2 Switch A2 TenantB office Tenant B VPN Router Office Network L3 Isolation (similar to VPC and VRF)
  • 8. Requirements for NV 7   Requirements 7 Tenant/Project A Network A1 VM1 VM3 Network A2 VM5 Tenant/Project B Network B1 VM2 VM4 uplink Provider Virtual Router (L3) Tenant A Virtual Router Tenant B Virtual Router VM6 Virtual L2 Switch B1 Virtual L2 Switch A1 Virtual L2 Switch A2 TenantB office Tenant B VPN Router Office Network Fault-tolerant devices and links Redundant, optimized, and fault tolerant paths to to/ from external networks (e.g. via eBGP)
  • 9. Requirements for NV 8   8 Tenant/Project A Network A1 VM1 VM3 Network A2 VM5 Tenant/Project B Network B1 VM2 VM4 uplink Provider Virtual Router (L3) Tenant A Virtual Router Tenant B Virtual Router VM6 Virtual L2 Switch B1 Virtual L2 Switch A1 Virtual L2 Switch A2 TenantB office Tenant B VPN Router Office Network Fault-tolerant devices and links Fault tolerant devices and links
  • 10. Requirements for NV 9   Device-agnostic networking services: •  Load Balancing •  Firewalls •  Stateful NAT •  VPN Networks and services must be fault tolerant and scalable
  • 11. Requirements for NV 10   Single pane of glass to manage it all.
  • 12. Bonus Requirements for NV 11   Integration with cloud or virtualization management systems. Optimize network by exploiting management configuration. Single virtual hop for networking services Fully distributed control plane (ARP, DHCP, ICMP)
  • 13. Checklist for Network Virtualization 12   q  Multi-tenancy q  Scalable, fault-tolerant devices (or device-agnostic network services). q  L2 isolation q  L3 routing isolation •  VPC •  Like VRF (virtual routing and fwd-ing) q  Scalable gateways q  Scalable control plane •  ARP, DHCP, ICMP q  Floating/Elastic Ips q  Stateful NAT •  Port masquerading •  DNAT q  ACLs q  Stateful (L4) Firewalls •  Security Groups q  Load Balancing with health checks q  Single Pane of Glass (API, CLI, GUI) q  Integration with management platforms •  OpenStack, CloudStack •  vSphere, RHEV, System Center q  Decoupled from Physical Network
  • 14. Evolution of Network Virtualization 13   INNOVATION  IN  NETWORKING  AGILITY   VLAN configured on physical switches •  Static •  Manual •  Complex •  Tenant state maintained in physical network Manual End-to-End VLAN APPROACH 13
  • 15. Using VLANs for NV 14   q  Multi-tenancy q  Scalable, fault-tolerant devices (or device-agnostic network services). ü  L2 isolation q  L3 routing isolation •  VPC •  Like VRF (virtual routing and fwd-ing) q  Scalable gateways q  Scalable control plane •  ARP, DHCP, ICMP q  Floating/Elastic IPs q  Stateful NAT •  Port masquerading •  DNAT q  ACLs q  Stateful (L4) Firewalls •  Security Groups q  Load Balancing with health checks q  Single Pane of Glass (API, CLI, GUI) q  Integration with management platforms •  OpenStack, CloudStack •  vSphere, RHEV, System Center q  Decoupled from Physical Network
  • 16. Evolution of Network Virtualization 15   INNOVATION  IN  NETWORKING  AGILITY   Reactive End-to-End Requires programming of flows •  Limited scalability •  Hard to manage •  Impact to performance •  Still requires tenant state in physical network OPENFLOW REACTIVE APPOACH VLAN configured on physical switches •  Static •  Manual •  Complex •  Tenant state maintained in physical network Manual End-to-End VLAN APPROACH 15
  • 17. What is OpenFlow? 16   A communication protocol that gives access to the forwarding plane of a network switch over the network.
  • 18. What is OpenFlow? 17   A centralized remote controller decides the path of packets through the switches
  • 19. Using OpenFlow for NV 18   ü  Multi-tenancy q  Scalable, fault-tolerant devices (or device-agnostic network services). ü  L2 isolation △  L3 routing isolation •  VPC •  Like VRF (virtual routing and fwd-ing) q  Scalable gateways q  Scalable control plane •  ARP, DHCP, ICMP q  Floating/Elastic IPs q  Stateful NAT •  Port masquerading •  DNAT q  ACLs q  Stateful (L4) Firewalls •  Security Groups q  Load Balancing with health checks △  Single Pane of Glass (API, CLI, GUI) △  Integration with management platforms •  OpenStack, CloudStack •  vSphere, RHEV, System Center q  Decoupled from Physical Network
  • 20. Evolution of Network Virtualization 19   Virtual Network Overlays Decoupling hardware and software •  Cloud-ready agility •  Unlimited scalability •  Open, standards-based •  No impact to physical network PROACTIVE SOFTWARE OVERLAY INNOVATION  IN  NETWORKING  AGILITY   Reactive End-to-End Requires programming of flows •  Limited scalability •  Hard to manage •  Impact to performance •  Still requires tenant state in physical network OPENFLOW REACTIVE APPOACH VLAN configured on physical switches •  Static •  Manual •  Complex •  Tenant state maintained in physical network Manual End-to-End VLAN APPROACH 19
  • 21. 20   How do overlays achieve real network virtualization?
  • 22. 21   Encapsulation and Tunneling Provides isolation
  • 23. 22   Stateless core. Stateful edge.
  • 24. 23   Network processing at the edge Decoupled from the physical network
  • 25. 24   Virtual network changes don’t affect the physical network
  • 26. 25   Single virtual hop network services avoid “traffic trombones”
  • 27. 26   Centralized state and control for maximum agility
  • 28. 27   Scalable, fault tolerant gateways to external networks
  • 29. Using Overlays for NV 28   ü  Multi-tenancy ü  Scalable, fault-tolerant devices (or device-agnostic network services). ü  L2 isolation ü  L3 routing isolation •  VPC •  Like VRF (virtual routing and fwd-ing) ü  Scalable Gateways ü  Scalable control plane •  ARP, DHCP, ICMP ü  Floating/Elastic IPs ü  Stateful NAT •  Port masquerading •  DNAT ü  ACLs ü  Stateful (L4) Firewalls •  Security Groups ü  Load Balancing with health checks ü  Single Pane of Glass (API, CLI, GUI) ü  Integration with management platforms •  OpenStack, CloudStack •  vSphere, RHEV, System Center ü  Decoupled from Physical Network
  • 30. 29   Sounds great, but when will it be a reality?
  • 34. OpenStack  Releases   33   Release schedule: time-based scheme with major release ~ every 6 months Codenames are alphabetical: •  Austin: The first design summit took place in Austin, TX •  Bexar: The second design summit took place in San Antonio, TX (Bexar county). •  Cactus: Cactus is a city in Texas •  Diablo: Diablo is a city in the bay area near Santa Clara, CA •  Essex: Essex is a city near Boston, MA •  Folsom: Folsom is a city near San Francisco, CA •  Grizzly: Grizzly is an element of the state flag of California (design summit takes place in San Diego, CA) •  Havana: Havana is an unincorporated community in Oregon •  Icehouse: Ice House is a street in Hong Kong •  Juno: Juno is a locality in Georgia •  Kilo: Paris (Sèvres, actually, but that's close enough) is home to the Kilogram, the only remaining SI unit tied to an artifact
  • 35. 34   Before  Neutron:  Nova  Networking   •  Nova-Networking was the only option in OpenStack prior to Quantum/Neutron •  Original project from A release •  No IPv6 in first release but eventually introduced •  Still available today as an alternative to Neutron, but will be phased out Options Available within nova-networking initially: •  Only Flat •  Flat DHCP Limitations •  No flexibility with topologies (no 3-tier) •  Tenants can’t create/manage L3 Routers •  Scaling limitations (L2 domain) •  No 3rd party vendors supported •  Complex HA model
  • 36. 35   Nova-­‐network  slightly  evolves   Introduced VLAN DHCP mode Improvements: •  L2 Isolation – each project gets a VLAN assigned to it Limitations •  Need to pre-configure VLANs on physical network •  Scaling Limitations - VLANs •  No L3 •  No 3-tier topologies •  No 3rd party vendors
  • 37. 36   Nova-­‐network  slightly  evolves   C & D Releases had two general categories: •  Flat Networking •  VLAN Networking Limitations •  Need to pre-configure VLANs on physical network •  Scaling Limitations - VLANs •  No L3 •  No 3-tier topologies •  No 3rd party vendors
  • 38. Quantum   37   OpenStack Networking branches out of the Nova project •  Tech Preview of Quantum appeared in D release •  Brought ability to have a multi-tiered network, with isolated network segments for various applications or customers •  Quantum-server allowed for Python daemon to expose the OpenStack Networking API and passes requests to 3rd party plugins •  Officially released in Folsom Release
  • 39. Introducing Neutron   38   •  Pluggable Architecture •  Standard API •  Many choices Plugins Available •  MidoNet •  OVS Plugin •  Linux Bridges •  Flat DHCP •  VLAN DHCP •  ML2 •  More Services (LBaaS, VPNaaS) •  Flexible network topologies •  NSX •  Plumgrid •  Nuage •  Contrail •  Ryu •  Name Change from Quantum to Neutron was announced in April 2013 •  Legal Agreement to phase out code name “Quantum” due to trademark of Quantum Corporation OpenStack Networking as a First Class Service
  • 40. Evolution of Neutron   39   Release  Name     Release  Date   Included  Components   AusEn   21  October  2010   Nova,  Swi]   Bexar   3  February  2011   Nova,  Glance,  Swi]   Cactus   15  April  2011   Nova,  Glance,  Swi]   Diablo   22  September  2011   Nova,  Glance,  Swi]   Essex   5  April  2012   Nova,  Glance,  Swi],  Horizon,   Keystone   Folsom   27  September  2012     Nova,  Glance,  Swi],  Horizon,   Keystone,  Quantum,  Cinder   Grizzly   4  April  2013   Nova,  Glance,  Swi],  Horizon,   Keystone,  Quantum,  Cinder   Havana   17  October  2013   Nova,  Glance,  Swi],  Horizon,   Keystone,  Neutron,  Cinder   Icehouse   April  2014   Nova,  Glance,  Swi],  Horizon,   Keystone,  Neutron,  Cinder   Juno   October  2014   Nova,  Glance,  Swi],  Horizon,   Keystone,  Neutron,  Cinder,  Heat,   Trove,  Sahara  
  • 41. Latest  Neutron  Features   40   Havana Release Brought: •  LBaaS: shipped an updated API and HAProxy driver support •  VPNaaS: supports IPSec and L3 agent ships with an OpenSwan driver •  FWaaS: enables tenant to configure security at the edge and on VIFs •  New ML2 plugin: supports local, flat, VLAN, GRE and VXLAN network types via a type drivers and different mechanism drivers Icehouse Release: •  New vendor plugins, LBaaS drivers and VPNaaS drivers •  OVS plugin and Linux Bridge plugin are deprecated: The ML2 plugin combines OVS and Linux Bridge support into one plugin •  Neutron team has extended support for legacy Quantum configuration file options for one more release
  • 42. Latest  Neutron  Features   41   Juno Features: •  DVR functionality: Define API to create and deploy DVRs to improve the performance •  Group-based Policy Abstractions for Neutron: API extensions for easier consumption of the networking resources by separate organizations and management systems •  IPv6 advancements: •  Add RADVD to namespace to handle RAs •  SLAAC •  Stateful and stateless DHCP for IPv6 •  LBaaS new API driver and object model improvement for complex cases •  Quotas extension support in MidoNet plugin •  Incubator system: •  Instead of only using the summit for developing new features, features can be developed and gestate over time
  • 43. Upcoming  Neutron  Features   42   Expectations for Kilo: •  Neutron Core and Vendor Code decompositions •  Remove bottlenecks from contribution process •  Allows vendors to develop and control their own code at their own pace •  Allows different levels of engagement in Neutron community •  Promotes lightweight plugins and drivers with external libraries for backend implementations •  Allow Floating IP to be specified •  Agent child process status •  ARP spoof filtering using ebtables •  Conntrack Zones support •  DHCP Service LoadBalancing Support and Options for IPv4 and IPv6 •  New Iptables driver to improve performance of IptablesManager and reduce complexity of IptablesFirewall and IptablesManager relations •  LBaaS Layer 7 Rules and TLS Specification •  MTU Selection and advertisement
  • 44. 43   OVS Plugin Overview
  • 45. 44   OVS Agent - receives tunnel/flow setup info from OVS Plugin, and programs Open vSwitch to setup tunnels and send traffic through the tunnel DHCP Agent - Sets up dnsmasq in a namespace per network/subnet and enters mac/ ip into dhcp lease file L3 Agent – OVS Plugin orchestrates to set up IPTables, Routing, NAT tables OVS  Open  Source  Plugin
  • 46. 45   Neutron Network Node is a SPOF Need to use corosync, etc for active/standby failover. Challenging at Scale Since there’s a single network node, this becomes a bottleneck fairly quickly. Inefficient Networking IPTables, L3 Agent, multiple hops for single flow are causing unnecessary traffic and added latency on your physical network Challenges  with  OVS  Plugin
  • 48. 47   MidoNet  Network  VirtualizaEon  PlaOorm   Logical  L2  Switching  -­‐  L2  isolaEon  and  path  opEmizaEon  with  distributed   virtual  switching   Interconnect  with  VLAN  enabled  network  via  L2  Gateway     Logical  L3  RouEng  –  L3  isolaEon  and  rouEng  between  virtual  networks   No  need  to  exit  the  so]ware  container  -­‐  no  hardware  required   Distributed  Firewall  –  Provides  ACLs,  high  performance  kernel  integrated   firewall  via  a  flexible  rule  chain  system   Logical  Layer  4  Load  Balancer  –  Provides  applicaEon  load  balancing  in   so]ware  form  -­‐  no  need  for  hardware  based  firewalls   VxLAN/GRE  –  Provides  VxLAN  and  GRE  tunneling   Provides  L2  connecEvity  across  L3  transport.  This  is  useful  when  L2  fabric   doesn’t  reach  all  the  way  from  the  racks  hosEng  the  VMs  to  the    physical    L2   segment  of  interest.       MidoNet/Neutron  API–  Alignment  with  OpenStack  Neutron’s  API  for   integraEon  into  compaEble  cloud  management  so]ware   v Any Application MidoNet  Network  VirtualizaEon  PlaOorm   Any Network Hardware OpenStack/Cloud Management System Distributed   Firewall   Layer  4   Load  Balancer   VxLAN/GRE   Any Hypervisor Logical  L2   Logical  L3   NAT   MidoNet /   Neutron   API   NAT  –  Provides  Dynamic  NAT,  Port  masquerading  
  • 49. OpenStack  IntegraEon       5 Easy  integraEon  with  OpenStack:   MidoNet  provides  a  plugin  for  Neutron.     Neutron MidoNet Plugin
  • 51. 50   Neutron Network Node is a SPOF Need to use corosync, etc for active/standby failover. Challenging at Scale Since there’s a single network node, this becomes a bottleneck fairly quickly. Inefficient Networking IPTables, L3 Agent, multiple hops for single flow are causing unnecessary traffic and added latency on your physical network Challenges  with  OVS  Plugin
  • 57. 56   So what’s next for Network Virtualization?
  • 58. 57   Get more out of the physical network.
  • 59. 58   Network Virtualization decouples the logical network from the physical network.
  • 60. NVOs can’t ignore the physical network 59   Dynamic changes to logical network are not dependent on the physical network configuration. Sharing state to and from the physical network can be supplementary. -  Monitoring -  Coordination -  Traffic Engineering
  • 61. 60   Get more intelligence out of your network
  • 62. NVOs provide a wealth of information 61   NVOs centralize information on your network We can start taking advantage of this information -  Security -  Compliance -  Optimizing Networks
  • 63. 62   Bridge physical and virtual networks more efficiently
  • 64. Midokura VTEP Solution 63   MidoNet MidoNet   Virtual Any  Cloud  Management  PlaLorm   MidoNet  Network  State  Database   VM VM VM VM VM VM IP Fabric     Server   Storage   Services   Physical VM VM VTEP   OVSDBc   VxLAN Tunnel Physical Connection OVSDB TCP/IP Key OVSDBs  
  • 65. 64   Break through performance barriers of software networking
  • 66. 40Gb  VxLAN  Offloading:  virtualized  environments  require  high   throughput  infrastructure     •  IntegraEon  with  Mellanox  provides  40  Gbps   saturaEon     •  VxLAN  offloading  improves  CPU  uElizaEon  levels   •  Scale  with  performance  through  HW  interconnect   •  Increase  throughput  with  offloading  where  no   offloading  would  otherwise  have  flat  results   •  High  bandwidth  can  now  be  achieved  in  so]ware   Performance
  • 67. Open  Source  So]ware     66  
  • 68. MidoNet Unleashed • Apache 2 Licensed • Build a truly open and neutral community of users and vendors • Heavily focused on providing a networking solution that functions well for production environments • Available since OpenStack Paris at midonet.org 67  
  • 69. Who are the members?
  • 70. How can you contribute to MidoNet? 69   • Check out the website: www.midonet.org • Join the MidoNet community! Wiki, Jenkins, Gerrit, Ask, IRC, ML, Github • Packages are available; easy to install with MidoStack • Sign Legal to Contribute • Midokurians on hand to support community
  • 71. 70   MidoNet  Advantages     Check  out  our  blog:   hjp://blog.midokura.com/     Follow  us  on  Twijer:   @midokura     @midonet      
  • 72. Thank You Midokura Enterprise MidoNet www.midokura.com Follow us on Twitter: @midokura @midonet @_techcet_ MidoNet www.midonet.org