Radware bringing mission and performance critical applications to cloud stack.1
- 1. Bringing Mission and Performance Critical Applications to CloudStack Sam Bercovici, Director Cloud Integration
- 2. What we want to discuss • Load Balancing Models in the Cloud • Radware’s LBaaS Solution Architecture and Workflow • LBaaS Solution Comparison • Operations Capabilities
- 3. Leadership in Application Delivery Radware is one of the ADC market leaders and the most innovative vendor: • Cloud • Virtualization • SDN • NFV Slide 3 Source: Gartner (October 2013) Magic Quadrant for Application Delivery Controllers
- 4. Why is load balancing critical for cloud applications? Slide 4 GSLB Local Scale-Out Fault Tolerance Global Scale-Out
- 5. Tenant Operated load balancing • Tenant, insatiate a new load balancer VMs – Public Catalog / Market Place – Image uploading into the cloud • The VM license can be bought directly from ADC vendor (BYOL) or cloud provider • Billing / Licensing models – Perpetual – Periodic • VM is managed by tenant. Slide 5
- 6. Virtual Application Delivery Infrastructure (VADI) • Unprecedented Consolidation • Rapid & flexible Application Rollout • Anywhere & everywhere HA • Operational Simplicity DCIM eco-system APsolute Vision Alteon VA Alteon VA for Cloud Alteon Density = Low Cost vADC Isolation = Hardware Equivalent Slide 6
- 7. Load balancing as a Service • Tenant, configures/operates logical load balancer capabilities via UI / API – Application driven • Billing / Licensing models – Per-use – Periodic • Back-end solution managed by cloud operator / service provider Slide 7
- 8. LBaaS features comparison Category Feature CS AWS OS Core Model Protocols: HTTP, HTTPS, TCP, UDP √ √ √ Agorithms: round-robin, least-connect, source-IP √ ? √ persistency: source-IP, cookie, SSL-ID √ √ √ Health checks: ping, tcp, http, https √ √ √ Multiple service in one VIP Ex: http and https under one vip √ √ F HTTPS Termination Certificate Management X √ F Default certificate + key X √ F SNI support X X F Back end encryption X X F Client authentication X X F L7 capabilities Content Switching X X F Content Modification X X ? Slide 8
- 9. Load balancing in Cloud Stack • Are you using/providing load balancing capabilities in/with cloud stack hosted applications? • Are you using/providing Cloud Stack LBaaS? • Are you or your tenant using self-managed load balancing? • What are the use cases (ex: dev&test, production, etc.)? Slide 9
- 10. Radware’s LBaaS Solution Architecture and Workflow
- 11. Our customers tell us they want: Service Level Assurance for applications provide guaranteed SLA and isolation Migrate existing applications to cloud be feature compliant (SSL, L7, etc.) with legacy enterprise Load Balancers Use network virtualization interoperate with overlay networks and bypass its inherit performance bottlenecks Multi site application deployments provide GSLB and hybrid-cloud interoperability Slide 11 Cloud Load Balancing services must
- 12. Radware LBaaS Solution Architecture and Workflow External Network Router L3 Tenant1 Network Tenant1 VIP1 Management Network L3 Tenant2 Network App1 VM 1 VM 2 Tenant2 VM 3 App2 VM 3 VM 4 VM 5 App1 VM 1 VM 2 VIP2 VIP1VIP1 VIP2 VIP3VIP3 Alteon Tenant Elasticity: On-demand provisioning of LB capacity Interoperability: Overlay Network Agnostic Efficiency: Overlay Network Gateway Bypass High Availability Tenant Isolation and SLA Guarantee Slide 12
- 13. Cloud OS Alteon LBaaS for Cloud OS Slide 13 Compute, Storage & Network Pool Tenant facing Cloud UI / Dashboard Custom UI Advanced Features Extension: SSL Acceleration Security L7 Policy LBaaS Driver / Plugin Alteon VA Alteon VA Alteon VA Alteon VA Alteon VA Tenant On-demand provisioning service VMs HA Pairs Alteon VA services attached to tenant network
- 14. vDirect Radware LBaaS Solution Control Flow CloudStack Web UI LBaaS Radware LBaaS Driver Tenant Compute, Storage & Network Pool Alteon-VA Image Create First VIP Alteon VA Tenant Slide 14
- 16. Radware LBaaS Solution Architecture and Workflow External Network Router L3 Tenant1 Network Tenant1 VIP1 Management Network L3 Tenant2 Network App1 VM 1 VM 2 Tenant2 VM 3 App2 VM 3 VM 4 VM 5 App1 VM 1 VM 2 VIP2 VIP1VIP1 VIP2 VIP3VIP3 Alteon VA Tenant Elasticity: On-demand provisioning of LB capacity Interoperability: Overlay Network Agnostic Efficiency: Overlay Network Gateway Bypass High Availability Tenant Isolation and SLA Guarantee Slide 16
- 17. Competing LBaaS External Solutions External Network Router L3 Tenant1 Network Tenant1 VIP1 L3 Tenant2 Network App1 Tenant2 VM 1 VM 2 VM 3 App2 VM 3 VM 4 VM 5 App1 VM 1 VM 2 VIP2 VIP1VIP1 VIP2 VIP3VIP3 Shared & External Load Balancer Static pre-provisioning Overlay network dependency Tenants are not isolated Slide 17
- 18. Openstack LBaaS Solution Selection Criteria Radware External Elasticity: On-demand provisioning of LB capacity Interoperability: Overlay Network Agnostic Efficiency: Overlay Network Gateway Bypass ? High Availability Tenant Isolation and SLA Guarantee Slide 18
- 19. Summary Elasticity: On-demand provisioning of LB capacity Interoperability: Overlay Network Agnostic Efficiency: Overlay Network Gateway Bypass High Availability Tenant Isolation and SLA Guarantee Enterprise Grade LBaaS for OpenStack! Slide 19
Editor's Notes
- #5: Application scale out and high availability (in site and across sites) are the fundamental functional requirements from cloud LBaaS
- #14: Similarly, what we see in front of us is the basic architecture of OpenStack cloud management platform which has 3 main modules, Nova the compute module, Swift and Cinder the Storage modules and Neutron, the networking module. Each module is responsible for provisioning and management of resources in their respective domains. Neutron the networking module has one distinct area of interest to our context here which is a specific implementation of management of LBaaS resources. To date the only LBaaS resources supported by OpenStack are haproxy, a basic opensource LB project, and the Alteon Enterprise Grade ADC. Similarly in this case as well the provisioning and management of LB resources is performed by the vDirect service management application and provisioned ADC resources are Alteon VA. Effectively once the solution is installed, any request for load balancing services for applications will be fulfilled by vDirect and the service will be provisioned over Alteon VA. For deploying advanced ADC functionality that is currently not supported by OpenStack, once cloud operators layer their own custom UI on-top of the OpenStack Horizon UI, vDirect offers additional API’s that will enable advanced enterprise grade ADC functionality.