The OpenStack infrastructure services for compute, networking, and storage have matured and are seeing increased adoption in production environments. In this tutorial session we will show you how to combine these fundamental services with other ancillary services around image management, security, monitoring, policy-based orchestration to build, deploy and consume rich networking services in your OpenStack Cloud. This tutorial session is aimed at developers, operators, and users alike. A working environment will be provided to the attendees for experimentation. If you are a developer or vendor, you will learn how to leverage existing OpenStack constructs to expose your service offering. If you are an operator, you will learn how to configure, deploy and expose these service offerings in a few simple steps. If you are a user, you will learn how to consume single services, or compose a chain of services, and incorporate them in your application topology.

1. Developing, Deploying, and Consuming L4-7
Network Services in an OpenStack Cloud
Hands-On Workshop, OpenStack Summit, Austin
https://wiki.openstack.org/wiki/GroupBasedPolicy/Austin
Sumit Naiksatam, Igor Duarte Cardoso, Hemanth Ravi, Ivar Lazzaro, Jason Plank, David Grizzanti

3. Agenda
1. Intro + Workshop logistics - Sumit, 5 mins
2. OpenStack *aaS services and SFC in Neutron and GBP - Igor, 10 mins
3. GBP Intro + Service Chain consumption workflow (tenant API) - Sumit, 20 mins
4. Service Chain deployment workflow (Operator API) - Ivar, 20 mins
5. BYOF - Service Developer workflow - Hemanth, 20 mins
6. HA for Services + Sungard Production setup tour - David, 10 mins
7. Q/A

4. Logistics
Workshop Resources:
https://wiki.openstack.org/wiki/GroupBasedPolicy/Austin
Workshop Guide:
https://goo.gl/EwAJeg
Contains lab access information
Also, GBP devstack available to practice after workshop

5. OpenStack *aaS services and SFC in Neutron and GBP

6. OpenStack *aaS services and SFC in Neutron and GBP

7. OpenStack *aaS services and SFC in Neutron and GBP

8. OpenStack *aaS services and SFC in Neutron and GBP

9. OpenStack *aaS services and SFC in Neutron and GBP
VPNaaS, FWaaS, LBaaS
GBP can easily instantiate them
GBP can also chain them
Instantiation/configuration and chaining/plumbing are not coupled
Other drivers or plumbers can easily be introduced

10. Policy Based Service Lifecycle Management

11. Group Based Policy Model

12. Resource Model

13. Resource Model

14. 1-2-3 Easy!
1. Define service chains using simple
commands/UI
2. Create Application Policy to redirect
to service chain
3. Groups provide & consume
Application Policy, done!

15. Consuming - Tenant Workflow

16. Workshop Goal
Web
FW
+
LB
HTTPExternal-
World App
LBHTTP
DB
FW
(3306)TCP
External
Group
PRS
Service
Chain
Internal
Group
V
M

17. Deploying - Operator Workflow

18. Separation of Concerns
Operators do this once: So that Users only have to do this:

19. Operator Workflow
Provide basic infrastructure constructs your cloud’s Tenants, so that they don’t have to worry about
them.
● External Connectivity Policies
● Service Chain Policies
● Application Contracts

20. Operator Workflow
Provide basic infrastructure constructs your cloud’s Tenants, so that they don’t have to worry about
them.
● External Connectivity Policies
● Service Chain Policies
● Application Contracts

21. External Connectivity
Neutron External Network
Neutron Subnet
External Segment
Nat Pool

22. Service Chain
Network Service Policy
Service Profile
Service Chain Node
Service Chain Spec
Policy Action

23. Developing - Service Developer Workflow
BYOF - Bring Your Own Function!

24. Develop Firewall Service on a VM
fw-
consumer
fw-
provider
FW
(allow
icmp
+ ssh)
TCP
PRS
Service
Chain
Internal
Group
V
M

25. Service
VM
Service
VM
Service
VM
Service Lifecycle Management Framework - NFP
GBP
Service Chaining
Network
Function
Orchestrator
Tenant (Over-the-
cloud)
RPC
Namespace
Proxy
Network Plugin Framework (NFP)
Infra (Under-the-Cloud)
RPC
REST

26. NFP Framework Features
Provides orchestration, configuration and visibility for Network Functions
Rendering of Service Chains via GBP NB APIs
NFP orchestrates Network Function Devices
NFP renders Network Functions
Network Function Management South Bound REST APIs
Service Insertion for configuring Interfaces & Routes
Service Configuration
Service Health Monitoring

27. HA for Services

28. Sungard Availability Services
Target Market
80% mid-to-large enterprise customers
Typical Customer
Shrink wrapped applications
Looking for a mix of self-managed and Sungard AS managed offerings
Platform Expectations
Cloud Native & Traditional Networking models
Above the hypervisor services (per tenant FW, LB, VPN)
Service-chaining

29. Thank You

30. Legal Notices and Disclaimers by Intel Author - Igor Duarte Cardoso
Intel technologies’ features and benefits depend on system configuration and may require enabled hardware,
software or service activation. Learn more at intel.com, or from the OEM or retailer.
No computer system can be absolutely secure.
Tests document performance of components on a particular test, in specific systems. Differences in hardware,
software, or configuration will affect actual performance. Consult other sources of information to evaluate
performance as you consider your purchase. For more complete information about performance and
benchmark results, visit http://www.intel.com/performance.
Intel, the Intel logo and others are trademarks of Intel Corporation in the U.S. and/or other countries. *Other
names and brands may be claimed as the property of others.
© 2016 Intel Corporation.