Tech Talk by John Casey (CTO) CPLANE_NETWORKS : High Performance OpenStack Networks
- 1. October 30, 2014 Presentation for
- 2. Agenda âą Company overview âą Market focus âą Products âą High-performance OpenStackÂź Networking âą DVN demo âą Bonus session! âą High-performance Wide Area Networking âą DVNi demo âą Q&A Property 10/30/2014 of CPLANE NETWORKS 2
- 3. Who We are Property 10/30/2014 of CPLANE NETWORKS 3 Software only Network Orchestration âą Dynamic Virtual Networks âą Policy and structure network orchestration âą Physical network integration and optimization âą Converged Virtual LAN and WAN âą Orchestrate NFV Services OpenStack Networking âą Production ready Neutron Plugin SDN Customization and Integration âą Sophisticated SDN platform allows custom solution - both inside and outside the data center POWERFUL SDN PLATFORM DYNAMIC VIRTUAL NETWORKING PRODUCTS SDNCUSTOMIZATION & INTEGRATION HIGH PERFORMANCE OpenStackÂź NETWORKING
- 4. CPLANEâs Advantage: Service Orchestration Engine Property 10/30/2014 of CPLANE NETWORKS 4 Service Orchestration Engine Northbound Services (RESTful) Southbound Services (NetConf, CLI, SNMP, API, etc.) Service Orchestration Path and Flow Computation Policy Management Topology and State Cloud Operating Systems Network Applications Virtual Network Services Physical Network Services CPLANE NETWORKS âą Built from the ground up for network services orchestration âąFunction-independent scaling âąFull HA
- 5. Fully Automated End-to-End Networking End-to-End Networks Scalable OpenStack network virtualization in the data center Seamless, interconnected networks between data centers (WAN) NFV Orchestration Service Convergence & Integration Data Center OVS/VXLAN Networks MPLS/WAN Service Orchestration Data Center OVS/VXLAN Networks WAN (DVNi) DATA CENTER (DVN) DATA CENTER (DVN) EDGE - (DVNe) EDGE - (DVNe) Dynamic Wide Area Networks CloudNetworking Platform CloudNetworking Platform CloudNetworking Platform 10/30/2014 Property of CPLANE NETWORKS 5
- 6. Our Products 6 âąDynamic Virtual Network (DVN) âąOperational efficiency, reliability and secure multi-tenancy of OpenStackÂź networking âąScale OpenStack network performance through elimination of OpenStack bottlenecks âąClose the gap between NetOpsand DevOpsthrough common Application-aware network âąMPLS/WAN Network Provisioning and Orchestration (DVNi) âąCreates Multi-datacenter Wide Area Networks (WAN) âąProvides L2/L3 VPN with dynamic Class of Service/Quality of Service âąProvides optimal network utilization through patented bandwidth management âąNetwork Function Virtualization Orchestration and Integration (DNVe) âąCustom integration with 3rdparty hardware and software âąMulti-function gateways, load-balancers, and security Property 10/30/2014 of CPLANE NETWORKS
- 7. 10/30/2014 Property of CPLANE NETWORKS 7 Dynamic Virtual Networks
- 8. Design goals and philosophy âą Be networking technology agnostic, but implementation specific ââTechnology Evolves, But Customers Migrate Slowlyâ â Hardware technologies (LAN/WAN) â Protocols (VXLAN, GRE, MPLS, BGP) â Open Virtual Switch / Others? âą Scalability in mind â Millions of vms, 10âs thousands of servers â Intra and Inter Data Center âą Make OpenStackBetter! â Network node backhaul problem â Better isolation between Nova and Neutron â Nova scheduler should include other resources âą Manageability, deployment and resiliency â Must be automatic / maintenance free âą OpenFlowTMis interesting/innovative âstill immature â Connection management â Reactive model ânot enough âą Prefer aggregate service event push over reactive â Higher level service knowledge â Steady-state should be fast â Structural changes can take time âą We can enhance/optimize OVS! ï â Data Plane â Control Plane â Management Plane âą Basis for Virtual Networks as a platform for future â Integrate with the hardware layer â Solve other domain problems âą Application âą Security Property of CPLANE NETWORKS 8 Deliver Multi-tenancy Network Orchestration 10/30/2014
- 9. Move to Workloads and DevOpsModel âą Deploy/Remove apps in minutes âą Centralized knowledge of app topology âą Policy driven to adhere to Corp Governance âą Organization silos provide oversight Tenant Based Cloud Networking Property 10/30/2014 of CPLANE NETWORKS 9 Server1 Server1 Server1 192.168.0.2 192.168.0.2 192.168.0.2 Server1 Server1 Server1 192.168.2.2 192.168.2.2 192.168.2.2 Router Internet Or Other DC Routing VM VM VM VM VM Spine Router LEAF Spine Router Spine Router LEAF LEAF LEAF LEAF LEAF Routing VM VM VM Server1 192.168.0.2 VM VM VM App1 L2 & L3 App2 L2 VM VM VM VM VM VM VM App3 L2 & L3 + Physical VM VM f(n) Security Perimeter Security Perimeter Security Perimeter Physical Resource Functions (Workloads) Application workloads Attributes: âąApplication workloads âąOptimized for east-west traffic âąDynamic VM Topologies âą10ks of VMs, 1000s of VM groups âąMinutes to deploy applications âąNetOpsmoves to oversight role (BM/QoSManagment) f(n) Note: Traditional DC Network design ToR/Agg/R-Core can still be used for small / medium scale deployments OGRâą
- 10. Inter-Data CenterTenant Based Cloud Networking Property 10/30/2014 of CPLANE NETWORKS 10 Server1 Server1 Server1 192.168.0.2 192.168.0.2 192.168.0.2 Server1 Server1 Server1 192.168.2.2 192.168.2.2 192.168.2.2 Router Routing VM VM VM VM VM Spine Router LEAF Spine Router Spine Router LEAF LEAF LEAF LEAF LEAF Routing VM VM VM Server1 192.168.0.2 VM VM VM App1 L2 & L3 App2 L2 VM VM VM VM VM VM VM App3 L2 & L3 + Physical VM VM f(n) Security Perimeter Security Perimeter Physical Resource Functions (Workloads) Application workloads OGRâą Overlay Router Extends Tenant Network to Edge Router f(n) Note: Traditional DC Network design ToR/Agg/R-Core can still be used for small / medium scale deployments OGRâą OGR BGP
- 11. Virtual Extensible Local Area Network (VXLAN) âą IETF VXLAN â Uses multi-cast â High overhead â Low scalability â Switching only (L2) âą CPLANE Controller-Based VXLAN â Common encapsulation â Low overhead â High scalability â Routing (L3) and Switching â Local ARP Resolution âą Ethernet in IP overlay network â Entire L2 frame encapsulated in UDP â 50 bytes of overhead âą Include 24 bit VXLAN Identifier â 16 M logical networks âą VXLAN is routable âą Tunnel between hosts â VMs do NOT see VXLAN ID Outer MAC DA Outer MAC SA Outer 802.1Q Outer IP DA Outer IP SA Outer UDP VXLAN ID (24 bits) Inner MAC DA InnerMAC SA Optional Inner 802.1Q Original Ethernet Payload CRC VXLAN Encapsulation Original Ethernet Frame 10/30/2014 Property of CPLANE NETWORKS 11
- 12. Inter-Data Center using MPLSTenant Based Cloud Networking Property 10/30/2014 of CPLANE NETWORKS 12 MPLS Core Router MPLS Core Router MPLS Core Router SF Data Center NY Data Center Tokyo Data Center MPLS âFull Mesh LSPs Traffic Engineer Core Backup path failover âą Easy migration from Carrier Service âąGreater flexibility, reduce cost âąIntegrate with OpenStack Model Bandwidth guarantees, Resiliency and Fast Reroute
- 13. Inter-Data Center Using MPLSTenant Based Cloud Networking Property 10/30/2014 of CPLANE NETWORKS 13 MPLS Core Router MPLS Core Router MPLS Core Router SF Data Center NY Data Center Tokyo Data Center âą Per-tenant connectivity via OGR-MPLS âąAggregate or per tenant L3VPN/L2VPN âąSupports CoS/QoSover WAN âą Per tenant L2 or L3 VPN âąMultiple CoSper VPN âąEdge Policy QoS âąApplication Packet Marking T1 T2 MPLS Edge Router MPLS Edge Router MPLS Edge Router
- 14. OpenStack Virtual Networking Property 10/30/2014 of CPLANE NETWORKS 14 OpenStackâą VXLAN Virtual Overlay Networking â Havana/Icehouse via Neutron plugin Features: âą Autonomous Compute Node Architecture âEliminate need for separate Network Nodeâą âLocal ARP resolution proxy âDirect virtual routing and switching âLocal Floating IP âLocal NAT âLocal DHCP âą Near line rate using optimized OVS âą Tenant Isolation via efficient VXLAN âą Supports 1000s of compute nodes âą OGRâą Gateway to physical networks and MPLS WAN âą Hardware Assist GW/LBAAS âą Integration with CPLANEâs MPLS WAN Product
- 15. CPLANE VXLANRouting and Autonomous Compute Nodes Property 10/30/2014 of CPLANE NETWORKS 15 âą DVN eliminates the need for the physical OpenStack Network Node to perform âTenant Routing âMetadata Proxy âDHCP services âFloating IP âNAT âą VM to VM routed traffic is sent directly to each destination node âą OGRâą routes VM traffic to physical networks and MPLS WAN OpenStack Icehouse Dependent on Network Node CPLANE Autonomous Compute Nodes MPLS WAN & Physical Workloads
- 16. Event Driven, Deterministic Policy Orchestration Property 10/30/2014 of CPLANE NETWORKS 16 OpenStackÂź Controller Neutron ReST API Compute Node CP Agent OVS VM VM VM Compute Node CP Agent OVS VM VM VM Compute Node CP Agent OVS VM VM VNF OpenStack User Events âąCreate VM(s) âąConnect VMs to Network âąRoute VMs together CPLANE SDN/DVN Controller âąTurns Neutron Events into Flows Models âąCalculates which OVS will be affected by which Flow Model based on the VM topology âąSends Flow Models to the appropriate OVS via CP-Agent Flow Models: A sequence of OVS flow table entries designed to perform a specific routing or switching function OGR Node CP Agent OVS FLOWS MODELS âąBase Flows âąBase Subnet Flows âąBase L2 Flows âąL2 Local Flows âąL2 Remote Flows âąL3 Remote Flows âąFloatingIP Flows âąNAT Flows âąOGR Compute Flows Switch MF-Dev T1 ORCHESTRATION âąPNF and NFV âąQoSPolicies âąLB Policies âąACL/ Firewall Controller
- 17. CPLANE OVS Component Architecture Property 10/30/2014 of CPLANE NETWORKS 17 NIC Card âą CPLANE AGENT âHandles all management needed for on compute node (OVS) âRegistration/recovery âCaching, health, logging âOS Functions âą CLI management still exist but NOT needed for managing compute node âovs-vsctl âovs-dptl âovs-ofctlâstill maybe used for deep debugging âovs-appctlâstill maybe used for deep debugging CPLANE AGENT Communication with DVN Controller
- 18. Manageability Single Pane of Glass Property 10/30/2014 of CPLANE NETWORKS 18 Graphical Topology Element (EMS) View â Bridges / ARP Tables Service Assurance â Connectivity Validation Service Detail âDrill Down
- 19. Version 1.2 âą Fully Autonomous Compute node â Localized DHCP per Network âą Enhanced UI display â New per-node network ARP table view âą Keystone Integration âAuthentication/Authorization â Controller users authenticate with keystone â Role based authorization limits views to network services Property 10/30/2014 of CPLANE NETWORKS 19
- 20. 10/30/2014 Property of CPLANE NETWORKS 20 Dynamic Virtual Networks Interconnect
- 21. Dynamic Virtual Networks Interconnect (DVNi) Transit Layer (MPLS-TE) Build End-to-Edge or Full Mesh LSPs â Graphically draw, generate, pre-validate and apply configurations Automatic topology discovery â Computed from existing LSP configuration Multi-vendor LER/LSR router support â Juniper, Cisco and others Automatic computation of backup Paths â No single point of failure in network LSP Computation using with CSPF â Bandwidth aware Full support for path coloring constraints. i.e.: â Resource class affinities Transactional control provisioning â With full roll-back capability Property 10/30/2014 of CPLANE NETWORKS 21
- 22. Dynamic Virtual Networks Interconnect (DVNi) VPN Service Layer Property 10/30/2014 of CPLANE NETWORKS 22 Northbound Services (RESTful) Southbound Services (NetConf, CLI, SNMP, API, etc.) Service Orchestration Path and Flow Computation Policy Management Topology and State Cloud Operating Systems Network Applications âą Automated L3 (2547) and L2 (PW, VPLS) Multi-site VPN âąProvides CoSand protects service SLAs with built-in admission control âąReviews, stores and audits all network element changes along with current service state and VPN topology âąAutomation and control of network resources such as bandwidth, VRFs, queues and access control lists âąSupports Hub-and-spoke and full- mesh VPN topologies âąEasily integrates with OpenStack for complete end-to-end provisioning MPLS Multi-site Data Center Interconnectivity
- 23. Demo Environment âą Management Network â SNMP discovery â Management Plane (cli) Property 10/30/2014 of CPLANE NETWORKS 23 âą Physical Equipment âCisco (PE, P) âJuniper (PE) âą Configuration âOSPF IGP (also support ISIS) âMPLS RSVP-TE protocol on all NN links âMP-BGP on all PE Routers âL2/3 VPN Services on PE Access Points Cisco 7204core1lo0 10.255.255.1Cisco 7204core3lo0 10.255.255.3Cisco 7204edge1lo0 10.255.255.11Cisco 7204core2lo0 10.255.255.2Juniper M5edge3lo0 10.255.255.13Cisco 7204edge4lo0 10.255.255.14fa1/0 10.10.1.1/29fa3/0 10.10.1.2/29fa3/010.10.1.17/29fa3/0 10.10.1.18/29fa4/0 10.10.1.25/29fa1/0 10.10.1.26/29fa2/0 10.5.1.1/29fa1/0 10.5.1.2/29fa2/0 10.5.1.9/29Fa0/0/0 10.5.1.10/29fa1/0 10.5.1.25/29fa4/0 10.5.1.26/29fa2/010.7.1.1/29fa3/010.7.1.9/29fa2/0 10.7.1.25/29fa3/0 10.7.1.33/29Fa0/0/2 10.7.1.57/29