EWERK and ENA contributed developers to the Tungsten Fabric SDN Special Interest Group. The goals were to integrate the widely adopted Tungsten Fabric into Apache CloudStack to provide advanced routing, security, and high performance networking features. This would allow features like static NAT, load balancing, firewalling, and encapsulated VM traffic between hosts using MPLS or VXLAN. The integration work added a Tungsten Fabric provider to CloudStack, allowed creating VMs with Tungsten networks, and added network policy and source NAT/port forwarding features. More testing is needed with the community.

1. Tungsten Fabric
SDN Integration

2. Special Interest Group – Tungsten Fabric SDN
EWERK
EWERK and ENA chose to each contribute a dedicated developer to the
Tungsten SIG.
Development by Le Minh Huy and Radu Todirica. Technical support by
Simon Weller and Sven Vogel.
Thanks for Daan Hoogland for continued help with code review.
2

3. Overview and Goals

4. Add a widely adopted
SDN fabric to fill a
feature gap in ACS
Attempt to provide as
close to a fully featured
integration as possible
Initial focus on KVM, but
can be easily expanded
for example of VMware
Enable advanced
routing functionality
Offload network
processing for high
performance
Utilize Tungsten for enhanced
security and compliance
4
Goals

5. Tungsten Fabric Features
5
Managed Network lifecycle
High performance (DPDK)
Static NAT, Source NAT, Port
forwarding and Load Balancing

6. 6
Full API set
Firewall capabilities
MPLS over UDP, LDP
EVPN and VXLAN Support

7. 7
Dual stack IPv4 and
IPv6 support
Application based security policies
(east/west concept)
VM traffic encapsulated
between hosts via
MPLS or VXLAN

8. Integration with ACS
(Demo)

10. Integration
with ACS
9
1. Adding a Tungsten Fabric
provider in CloudStack
6. Support SSL for haproxy
loadbalacer for Apache
Cloudstack
3. Creating a CloudStack
virtual machine with a
Tungsten Fabric network
4. Adding Tungsten
Fabric Network Policy
feature
2. Creating a virtual
network in
Tungsten Fabric
5. Adding Tungsten Fabric
Source Nat, Static Nat and
Port forwarding feature

11. What‘s left to do?
10
Testing all the
Tungsten features
together with
Community
Code Reviews
Create Documentation and
Installation Instructions

12. Where can you find it?
11
PR UI: https://github.com/apache/cloudstack/pull/5579
PR Backend: https://github.com/apache/cloudstack/pull/4205
Target Version is ACS 4.18
Please test it!

13. Questions?
12
Sven Vogel – sven.vogel@qform.de