More Related Content
Similar to Interop2018 contrail ContrailEnterpriseMulticloud (20)
More from Daisuke Nakajima (14)
Interop2018 contrail ContrailEnterpriseMulticloud
- 2. © 2018 Juniper Networks
AGENDA
2
•
•
• Contrail Enterprise Multicloud
- 6. © 2018 Juniper Networks
K8S/OpenShift
LB
Web
API
DB
node node
node nodeService:
Web:replicas:2
label:apache
API:replicas:3
label:nginx
DB :replicas:2
label:sql
- 13. © 2018 Juniper Networks
Kubernetes / Openshift IP
LB
Web
API
DB
pod network
10.0.64.0/14
Service network
203.0.113.0/16
.1 .2 .3 .4 .5 .6 .7 .8
IP
.1
- 14. © 2018 Juniper Networks
LB
Web
API
DB
pod network
10.0.64.0/14
Service network
203.0.113.0/14
.1 .2 .3 .4 .5 .6 .7 .8
.1
A B
- 15. © 2018 Juniper Networks
VLAN
VXLAN
•
o VLAN
§
o VXLAN
§ VNI
o L2 Fabric
§
•
o
o
•
o
- 16. © 2018 Juniper Networks
Private
cloud
DC
WAN/ Interconnect
HUMAN ERRORS =
•
•
• OS
•
•
COMPLEXITY
•
•
•
INCONSISTENCY
“ Web ”
“ ”
“Web Web 2 ”
REVENUE-LOSS
LONG LEAD TIME
Private
cloud
DC
- 18. © 2018 Juniper Networks
CONTRAIL ENTERPRISE MULTICLOUD
Operator
Username
Password
Contrail Command Contrail Command Contrail Command
Multicloud
Architecture
Build Fabric
Provide Hybrid Connectivity
Build PODs
Apply Netw / Sec. Policies
User Conn. & Policies
Monitor / Troubleshoot
Contrail Command…
vRouter
(+security)
OpenShift
Kubernetes
VMware
OpenStack
AWS VPC - 1
GCP VPC - 2
- 19. © 2018 Juniper Networks
One Platform for All Clouds
•
• L2
• LABEL FW
•
•
AWS VPC - 1
GCP VPC - 2
Manage workloads in multiple clouds as though they were in one
Contrail Enterprise Multicloud
Multivendor
Orchestration
& Management
vRouter
(+security)
OpenShift
Kubernetes
USE CASE: PRIVATE TO PUBLIC CLOUD
- 20. © 2018 Juniper Networks
CONTRAIL ENTERPRISE MULTICLOUD
20
AWS VPC - 1
vRouter
(+security)
OpenShift
Kubernetes
• TLS/Ipsec
o
o
•
• L2
TLS/IPsec
MAC:A MAC:B
DMACSMACPAYLOAD
DMACSMACPAYLOAD
TLS SIP DIP
DMACSMACPAYLOAD
MPLS GRE SIP DIP
DMACSMACPAYLOAD MPLS GRE SIP DIP
DMACSMACPAYLOAD MPLS GRE SIP DIP
- 21. © 2018 Juniper Networks
CONTRAIL ENTERPRISE MULTICLOUD
FW
Label:Web Label:API Label:DB
Web App DB
Policy = P1
Label:Web Label:API Label:DB
App:Service1
Dep:Production
App:Service1
Dep:Develop
•
o IP
o FW
• FW
o Node Contrail FW
• FW
o FW
o
- 22. © 2018 Juniper Networks
CONTRAIL ENTERPRISE MULTICLOUD
apiVersion: v1
kind: Pod
metadata:
name: cirros-vn1-1
annotations: {
"opencontrail.org/network" : '{"domain":"default-domain", "project": "juniper-test", "name":"pod-service-1"}'
}
labels:
application: service-app1
label: web
spec:
replicas: 2
containers:
- name: cirros-vn1-1
image: docker.io/cirros
imagePullPolicy: IfNotPresent
- 23. © 2018 Juniper Networks
CONTRAIL ENTERPRISE MULTICLOUD
apiVersion: v1
kind: Pod
metadata:
name: cirros-vn1-1
annotations: {
"opencontrail.org/network" : '{"domain":"default-domain", "project": ”new-service", "name":”web-network"}'
}
labels:
application: service-app1
label: web
- 24. © 2018 Juniper Networks
CONTRAIL ENTERPRISE MULTICLOUD
Service:1
Namespace : A
Service : A Service : B
Service:2
Service : B
Namespace : B
Service : A Service : B
Service:3
VRF
VRF
VRF
C
A
B
- 25. © 2018 Juniper Networks
CONTRAIL ENTERPRISE MULTICLOUD
Discovery / Onboarding of
devices • UI DC
• ZTP/ZTR
•
• Juniper MX, QFX
• Third party devices and PNF/VNF*
•
•
• Ethernet, IP overlays
• Playbook
•
• LLDP
• EVPN/VXLAN (
• interfaces, igp, analytics, protocols, policies,
loopbacks, overlay protocol (EVPN BGP)
netconf
netconf
- 26. © 2018 Juniper Networks
CONTRAIL ENTERPRISE MULTICLOUD
Ansible integration
• Contrail Ansible
•
• Ansible
- 27. © 2018 Juniper Networks
CONTRAIL ENTERPRISE MULTICLOUD
Demo
AWS VPC - 1
192.168.10.0/24
- 28. © 2018 Juniper Networks
CONTRAIL ENTERPRISE MULTICLOUD
IP FW
Any Cloud Any Workload Any Deployment
Contrail Enterprise Multicloud
- 29. © 2018 Juniper Networks
TungstenFabric
https://tungstenfabric.io/
Linux Foundation
https://www.linuxfoundation.org/projects/networking/
TungstanFabric + Openshift Origin
http://komadori-blog.blogspot.com/2018/06/openshift-enterprise.html
TungstenFabric
https://connpass.com/event/90787/