© 2016 Nokia. All rights reserved. Nuage Networks is a Nokia venture.
Avoiding Silos in Container Networking
Patrick.lynchehaun@nuagenetworks.net
@nuagenetworks
© 2016 Nokia. All rights reserved. Nuage Networks is a Nokia venture.
...use BGP (as a Service)
.... Old School style
3/24/2017
2
Restful API
MP-BGP Control Plane
OpenVswitch / VxLAN
© 2016 Nokia. All rights reserved. Nuage Networks is a Nokia venture.
TIME
Front End
MiddleWare
SQL DB
App Logic
Idle
1 2 3 4 5
Container Environments Are More
Dynamic than the Old World
Containers are created and destroyed on the fly (scatter/gather)
To adapt to the demand Overlay SDN needs to follow ,in real time, enforcing
the Security, QoS, NAT or service chaining policies for each container.
© 2016 Nokia. All rights reserved. Nuage Networks is a Nokia venture.
MP-BGP Control Plane Scale & Convergence For 100K Containers –
IN SOFTWARE – BGP as a Service…. Ultra fast.
3/24/2017
4
• 100,000 Containers
• 500 Containers per hypervisor
• 200 Networks in 200 VRFs (router contexts)
• 200 Hypervisors
• 20 Networks per hypervisor
• Total Convergence Time: 9:24 !
• BGP runs the Internet – since the 1990s
Nuage BGP
Nuage SDN Overlay
Nuage BGP
© 2016 Nokia. All rights reserved. Nuage Networks is a Nokia venture.
Challenges With Container Networking …the real world
5
Integration
Complex
Deployments
Security Cloud
• App Isolation
• Micro-segmentation
• Monitoring &
Visibility
• Connect containers
to VMs and bare
metal servers
• DC GW Integration
• Public breakout
• Integration with
Container
Orchestration
workflows
• Mesos, Docker,
Kubernetes,
OpenShift – CNM/CNI
V
M
C
B
M
• Private Cloud
• Public Cloud
• Hybrid Cloud
Copyright 2013 Alcatel-Lucent. All rights reserved.
CONFIDENTIAL - SOLELY FOR AUTHORIZED PERSONS HAVING A NEED TO KNOW
PROPRIETARY – USE PURSUANT TO COMPANY INSTRUCTION
Nuage Networks
OVERLAY NETWORKS DOCKER AND
AND MORE & POLICIES
© 2016 Nokia. All rights reserved. Nuage Networks is a Nokia venture.
Overlay-based Virtual Networks
Deployment With SDN
Master Node Node
VSDKAPI
XMPP
VRS-K8S
Nuage-Kube-Mon
Kubernetes Cluster
MP-BGP
Controller
VxLAN VNI = 100
VxLAN VNI = 200
API
Policy
Engine
Provides Multi-tenancy
and App Isolation
Control over IP Addressing
VRS-K8S
© 2016 Nokia. All rights reserved. Nuage Networks is a Nokia venture.
DOCKER ON OPENSTACK VMS (POD TO VM
COMMUNICATION) – NO SILOS!
8
Physical
Server
Docker Node
VM Docker Node
(Physical Server)
Nuage
MP-BGP
Controller
VMVM
Policy
Groups
© 2016 Nokia. All rights reserved. Nuage Networks is a Nokia venture.
10
Virtual
Routing &
Switching
MP-BGP
Controller
API Virtual
Service
Directory
VPN Connection
VPC
Container Multi-Cloud Deployments
Cloud
VM
SDN-WAN
SDN-WAN IPSec Tunnel
© 2016 Nokia. All rights reserved. Nuage Networks is a Nokia venture.
X
3/24/2017 11
© 2016 Nokia. All rights reserved. Nuage Networks is a Nokia venture.
 Nuage Networks VSP
 Nuage Networks VSPK (Open Source)
 http://github.com/nuagenetworks
 http://nuagenetworks.github.io/
 Nuage Networks VSP Installation Required
Open Automated Secure Flexible Scalable
CHALLENGE – DEPLOY DOCKER AND SDN FOR TESTING
© 2016 Nokia. All rights reserved. Nuage Networks is a Nokia venture.
Nuage Networks
Data Center
VSD VSC
lab01.nuagex.io
Private
Data Center
© 2016 Nokia. All rights reserved. Nuage Networks is a Nokia venture.
1. 2. 3.
Create a free account @
nuagex.io
Auto Deploy Management
& Control elements of the
Nuage Networks VSP
Auto Install VRS on host
machine(s)
Instantiate VM or container
based workloads and Run
your test workload(s)
Connected workloads in less than 5 minutes!
Login Deploy Run
© 2016 Nokia. All rights reserved. Nuage Networks is a Nokia venture.
LAUNCH DATE nuagex.io
© 2016 Nokia. All rights reserved. Nuage Networks is a Nokia venture.
Nuage Networks
Data Center
VSD VSC
lab01.nuagex.io
Private
Data Center
© 2016 Nokia. All rights reserved. Nuage Networks is a Nokia venture.
THANK YOU
FOR HOSTING

Docker meetupdublin.23.3.2017

  • 1.
    © 2016 Nokia.All rights reserved. Nuage Networks is a Nokia venture. Avoiding Silos in Container Networking Patrick.lynchehaun@nuagenetworks.net @nuagenetworks
  • 2.
    © 2016 Nokia.All rights reserved. Nuage Networks is a Nokia venture. ...use BGP (as a Service) .... Old School style 3/24/2017 2 Restful API MP-BGP Control Plane OpenVswitch / VxLAN
  • 3.
    © 2016 Nokia.All rights reserved. Nuage Networks is a Nokia venture. TIME Front End MiddleWare SQL DB App Logic Idle 1 2 3 4 5 Container Environments Are More Dynamic than the Old World Containers are created and destroyed on the fly (scatter/gather) To adapt to the demand Overlay SDN needs to follow ,in real time, enforcing the Security, QoS, NAT or service chaining policies for each container.
  • 4.
    © 2016 Nokia.All rights reserved. Nuage Networks is a Nokia venture. MP-BGP Control Plane Scale & Convergence For 100K Containers – IN SOFTWARE – BGP as a Service…. Ultra fast. 3/24/2017 4 • 100,000 Containers • 500 Containers per hypervisor • 200 Networks in 200 VRFs (router contexts) • 200 Hypervisors • 20 Networks per hypervisor • Total Convergence Time: 9:24 ! • BGP runs the Internet – since the 1990s Nuage BGP Nuage SDN Overlay Nuage BGP
  • 5.
    © 2016 Nokia.All rights reserved. Nuage Networks is a Nokia venture. Challenges With Container Networking …the real world 5 Integration Complex Deployments Security Cloud • App Isolation • Micro-segmentation • Monitoring & Visibility • Connect containers to VMs and bare metal servers • DC GW Integration • Public breakout • Integration with Container Orchestration workflows • Mesos, Docker, Kubernetes, OpenShift – CNM/CNI V M C B M • Private Cloud • Public Cloud • Hybrid Cloud
  • 6.
    Copyright 2013 Alcatel-Lucent.All rights reserved. CONFIDENTIAL - SOLELY FOR AUTHORIZED PERSONS HAVING A NEED TO KNOW PROPRIETARY – USE PURSUANT TO COMPANY INSTRUCTION Nuage Networks OVERLAY NETWORKS DOCKER AND AND MORE & POLICIES
  • 7.
    © 2016 Nokia.All rights reserved. Nuage Networks is a Nokia venture. Overlay-based Virtual Networks Deployment With SDN Master Node Node VSDKAPI XMPP VRS-K8S Nuage-Kube-Mon Kubernetes Cluster MP-BGP Controller VxLAN VNI = 100 VxLAN VNI = 200 API Policy Engine Provides Multi-tenancy and App Isolation Control over IP Addressing VRS-K8S
  • 8.
    © 2016 Nokia.All rights reserved. Nuage Networks is a Nokia venture. DOCKER ON OPENSTACK VMS (POD TO VM COMMUNICATION) – NO SILOS! 8 Physical Server Docker Node VM Docker Node (Physical Server) Nuage MP-BGP Controller VMVM Policy Groups
  • 9.
    © 2016 Nokia.All rights reserved. Nuage Networks is a Nokia venture. 10 Virtual Routing & Switching MP-BGP Controller API Virtual Service Directory VPN Connection VPC Container Multi-Cloud Deployments Cloud VM SDN-WAN SDN-WAN IPSec Tunnel
  • 10.
    © 2016 Nokia.All rights reserved. Nuage Networks is a Nokia venture. X 3/24/2017 11
  • 11.
    © 2016 Nokia.All rights reserved. Nuage Networks is a Nokia venture.  Nuage Networks VSP  Nuage Networks VSPK (Open Source)  http://github.com/nuagenetworks  http://nuagenetworks.github.io/  Nuage Networks VSP Installation Required Open Automated Secure Flexible Scalable CHALLENGE – DEPLOY DOCKER AND SDN FOR TESTING
  • 12.
    © 2016 Nokia.All rights reserved. Nuage Networks is a Nokia venture. Nuage Networks Data Center VSD VSC lab01.nuagex.io Private Data Center
  • 13.
    © 2016 Nokia.All rights reserved. Nuage Networks is a Nokia venture. 1. 2. 3. Create a free account @ nuagex.io Auto Deploy Management & Control elements of the Nuage Networks VSP Auto Install VRS on host machine(s) Instantiate VM or container based workloads and Run your test workload(s) Connected workloads in less than 5 minutes! Login Deploy Run
  • 14.
    © 2016 Nokia.All rights reserved. Nuage Networks is a Nokia venture. LAUNCH DATE nuagex.io
  • 15.
    © 2016 Nokia.All rights reserved. Nuage Networks is a Nokia venture. Nuage Networks Data Center VSD VSC lab01.nuagex.io Private Data Center
  • 16.
    © 2016 Nokia.All rights reserved. Nuage Networks is a Nokia venture. THANK YOU FOR HOSTING

Editor's Notes

  • #6 Application Security Application Isolation Micro-segmentation Monitoring and Visibility (VSS) CI/CD Workflow and orchestration Integration with Container Orchestration (K8S, Mesos) workflows Advanced application deployments Connect Containers, VMs & bare metal servers Externalize public services using VSG Micro-Services monitoring Visualize micro-service flows Monitor micro-services load and response times
  • #8 This is a high level view of of a VSP deployment with Kubernetes. The integration requirements 2 components. 1. kube-mon – that runs on the K8s master/masters (HA deployments) 2. k8s plugin – that runs on all of the k8s nodes (could be baremetal or virtual) The next slide has more details on this.