Your SlideShare is downloading. ×
OpenStack in Action 4! Emilien Macchi & Sylvain Afchain - What's new in neutron ?
Upcoming SlideShare
Loading in...5
×

Thanks for flagging this SlideShare!

Oops! An error has occurred.

×
Saving this for later? Get the SlideShare app to save on your phone or tablet. Read anywhere, anytime – even offline.
Text the download link to your phone
Standard text messaging rates apply

OpenStack in Action 4! Emilien Macchi & Sylvain Afchain - What's new in neutron ?

1,064

Published on

Paris, 5th December 2013 : OpenStack in Action 4! organized by eNovance, brings together members of the OpenStack community.

Paris, 5th December 2013 : OpenStack in Action 4! organized by eNovance, brings together members of the OpenStack community.

Published in: Technology
0 Comments
3 Likes
Statistics
Notes
  • Be the first to comment

No Downloads
Views
Total Views
1,064
On Slideshare
0
From Embeds
0
Number of Embeds
0
Actions
Shares
0
Downloads
70
Comments
0
Likes
3
Embeds 0
No embeds

Report content
Flagged as inappropriate Flag as inappropriate
Flag as inappropriate

Select your reason for flagging this presentation as inappropriate.

Cancel
No notes for slide

Transcript

  • 1. What's new in virtual OpenStack networking
  • 2. from eNovance import Neutron Founded 2008 Sylvain Afchain •  Senior Developer •  Neutron contributor Emilien Macchi •  OpenStack Engineer •  Automation, deployments Team 90+ Growth 200% Clients 200+
  • 3. Neutron “Pluggable, scalable, APIdriven network and IP management”
  • 4. New features in Havana
  • 5. Before ML2... Neutron server with Open-vSwitch plugin OR Neutron server with Linux Bridge plugin OR...
  • 6. ML2 (Modular Layer 2) •  New reference plugin •  Handles numerous of L2 technologies: Flat, VLAN, •  •  VXLAN, GRE Works with existing drivers: Linux Bridge, Open-vSwitch, Arista, Cisco, Hyper-V New mechanism: L2 population (partial-mesh and forwarding table population)
  • 7. Before L2 population... Full mesh
  • 8. With L2 population Partial mesh
  • 9. FWaaS Without... VM Layer 2 Layer 3 VM BR-INT VROUTER BR-EX SECURITY GROUPS
  • 10. FWaaS With... VM Layer 2 Layer 3 VM VM BR-INT SECURITY GROUPS VM BR-INT VROUTER VROUTER BR-EX BR-EX SECURITY GROUPS FIREWALL
  • 11. FWaaS (Firewall as a Service) •  Service plugin + Agent + Drivers •  Concept: IPtables rules on virtual routers •  Drivers: IPtables or vArmour •  Complements Security Groups
  • 12. VPNaaS (virtual private network) •  Scope: Layer 3 Site-to-site (IPsec) •  Experimental in Havana •  Only preshared keys, no certificates •  OpenSwan as default driver
  • 13. VPNaaS VM VM 10.0.0.4 VM 10.0.0.5 10.1.0.5 10.1.0.1 10.0.0.1 Router Router 172.24.1.21 172.24.1.22 VPN 172.24.1.0/24
  • 14. Metering •  Service plugin + Agent + Drivers •  Concept: IPtables rules on virtual routers •  Drivers: IPtables •  Collects traffic counters with labels and sends to Ceilometer •  Next steps: use metering for Layer 3 scheduling
  • 15. Roadmap to Icehouse
  • 16. L3 high availability •  Bring high availability on virtual routers •  Delete SPOF in L3 Agent •  Allow routers to be scheduled on two L3 Agents •  Master / Slave model •  VIP managed by Keepalived •  TCP sessions managed by conntrackd •  Add new L3 schedulers
  • 17. L3 high availability Without... VM L2 Agent L3 Agent VM BR-INT VROUTER BR-EX Internet VM lost connectivity
  • 18. L3 high availability With... Without... VM L2 Agent L3 Agent VM VM BR-INT BR-INT VROUTER VROUTER BR-EX Internet VM VM lost connectivity VROUTER BR-EX Internet 2 L3 Agents External connectivity is backuped
  • 19. L3 on edge? (proposal) •  Move floating IP on compute nodes •  Improve North-South traffic •  VMs without floating IP continue to use L3 agent to •  reach external networks VMs with floating IP reach external network on the compute edge.
  • 20. Havana follow-up •  VPNaaS: SSL support with OpenVPN driver •  VPNaaS: Layer 2 private networks (L2TP, MPLS) •  LBaaS: new drivers (vendors) •  Metering: improve API to get traffic counters
  • 21. Icehouse: new puppies •  L2 driver for OpenDaylight •  Framework for Advanced Services in Virtual Machines •  Neutron server is multi-workers •  More Tempest coverage (QA) •  L3 scheduling improvements
  • 22. Questions ? sylvain@enovance.com emilien@enovance.com @eNovance

×