Puppet for Networking - Junos

2,621 views

Published on

"Puppet for Networking" by Jeremy Schulman of Juniper at Puppet Camp Raleigh 2013.

Published in: Technology
0 Comments
2 Likes
Statistics
Notes
  • Be the first to comment

No Downloads
Views
Total views
2,621
On SlideShare
0
From Embeds
0
Number of Embeds
28
Actions
Shares
0
Downloads
94
Comments
0
Likes
2
Embeds 0
No embeds

No notes for slide
  • this slide sets the "story building" around networking industry, automation, workflowsherpa, etc.
  • - By automating common, yet complex tasks, they can reduce or shift the engineer staff required to manage their network. – Complex systems appear fragile when manually operated because humans make mistakes. IT organizations can overcome their fears of network automation by the managing risk in solution development. Today, server and application automation is the standard. Network automation is next.– In many cases the network infrastructure is a "utility" to the applications that run the business. By automating the deployment and lifecycle of networking infrastructure change, the IT organization provides a better value to both internal and external "customers".
  • this slide sets the story for the broken workflow process when server/apps intersect with network, like ToR switching changes.
  • “What makes it special? What is secret sauce? Why is this a superior approach?”
  • Puppet for Networking - Junos

    1. 1. Copyright © 2013 Juniper Networks, Inc. www.juniper.netCopyright © 2013 Juniper Networks, Inc. www.juniper.netFRICTIONLESS IT AUTOMATIONJeremy Schulman - Director | Infrastructure Automation@nwkautomaniac
    2. 2. Copyright © 2013 Juniper Networks, Inc. www.juniper.net
    3. 3. Copyright © 2013 Juniper Networks, Inc. www.juniper.netFRICTIONLESS IT AUTOMATION Lower Costs Costs to manually do the work Costs due to delays and errors Reduce Risk Manually operated complex systems are fragile Improve Service Network infrastructure is a "utility" that runs the business Server and application automation is the standard Network automation must "level-up"
    4. 4. Copyright © 2013 Juniper Networks, Inc. www.juniper.netNodalAutomation(Puppet, Chef)ad-hocscriptingIT WorkflowOrchestrationBusinessWorkflowOrchestrationJNCIAAssociateJNCISSpecialistJNCIPProfessionalJNCIEExpertITNetworkValue is a function ofautomation programmingand system integration thatdrives the businessValue is a function ofmastering vendor CLIand networking domainknowledge
    5. 5. Copyright © 2013 Juniper Networks, Inc. www.juniper.netFRICTION
    6. 6. Copyright © 2013 Juniper Networks, Inc. www.juniper.netFRICTIONLESS
    7. 7. Copyright © 2013 Juniper Networks, Inc. www.juniper.net1. DEFINE 2. SIMULATE4. REPORTRe-usable infrastructure-as-code Before deploying changesAutomatically and reliablyInsight into changesPUPPET: SOFTWARE-DEFINED INFRASTRUCTUREDESIREDSTATECURRENTSTATE3. ENFORCE}
    8. 8. Copyright © 2013 Juniper Networks, Inc. www.juniper.netPUPPET "NETDEV" MODULENetDev is a vendor-neutral network abstractionframework developed by Juniper Networks andcontributed freely to the DevOps communityJuniper has contributed basic layer-1 and layer-2network abstractionsDevOps can extend the framework to define anyabstractions or features they need for their environmentThe NetDev framework is open and free; i.e. the“DevOps” way
    9. 9. Copyright © 2013 Juniper Networks, Inc. www.juniper.netNETDEVRESOURCES TYPESResource Descriptionnetdev_vlan Manages VLAN configurationnetdev_interface Manages Physical Interface configurationnetdev_l2_interface Manages VLAN to interface assignmentsnetdev_lag Manages Link Aggregation Group configurationclass color_switch {netdev_vlan { "Pink": vlan_id => 703 }netdev_vlan { "Green": vlan_id => 500 }netdev_l2_interface { ge-0/0/19:untagged_vlan => Pink,}netdev_l2_interface { ge-0/0/20:description => "My port, back off!",untagged_vlan => Blue,tagged_vlans => [ Green, Black, Yellow ],}}
    10. 10. Copyright © 2013 Juniper Networks, Inc. www.juniper.netPUPPET FOR JUNOS“DevOps” Approach: NetDev module source code is in Github All packages are stored where they should be(Puppet Forge,…) Support done on J-Net community forum Juniper technical documentation available Free, “BSD-style” license
    11. 11. Copyright © 2013 Juniper Networks, Inc. www.juniper.netDevice running Junos OSPuppet NetDev modulesRuby GemsRuby InterpreterXMLPuppet Agent(client)Puppet Master(server)netdevjpuppetpackagePUPPET FOR JUNOS(FreeBSD)
    12. 12. Copyright © 2013 Juniper Networks, Inc. www.juniper.netLEARN MORE ABOUT PUPPET FOR JUNOS
    13. 13. Copyright © 2013 Juniper Networks, Inc. www.juniper.netJUNOS XML APIFOR SERVER-BASED AUTOMATIONSecure TCP/IPconnections viaSSHv2 (RFC4742)XMLNETCONF XMLPROTOCOL(RFC4741)SwitchingSecurity RoutingManagement SystemAutomate config changes,remote invocation ofoperational commands,collection of logs Secure and connection oriented … SSHv2 as transport Structured and transaction based … XML as RPC request / response User-class privilege aware … Native to Junos Comprehensive & Consistent ... Automate everythingNETCONF client librariesexist for a number ofprogramming languages suchasJava, Perl, Ruby, Python, andeven SLAX !
    14. 14. Copyright © 2013 Juniper Networks, Inc. www.juniper.netTHANK YOU !

    ×