Neutron is deployed in the majority of OpenStack clouds but it still constitutes one of the key areas of concerns for organizations world-wide. The transition from traditional hardware-centric networking to the software defined model takes time and learning and requires a mental shift as well as a change in workflows, procedures, tools and best-practices. In this session each participant will be provided with a personal sandbox OpenStack running a live Liberty-based environment and will work on common use cases and applications of SDNs in an OpenStack Cloud. The class will focus on test cases that will move beyond the basics of L2 and L3 and deploy VNFs such as NAT and security policies on top of a 3-tier application topology. The class will also go through exercises that are focused on monitoring and troubleshooting SDNs in an OpenStack cloud.

1. OpenStack Summit | Austin, TX
OpenStack Networking: Hands-on Lab

2. Copyright © PLUMgrid, Inc. 2011-2016
Introduction
Speaker(s)
2
Sr Director Product & Solution Marketing, PLUMgrid
Valentina Alaria
Part of the OpenStack community for 6+ years and has worked with 100s of users throughout their journey of
learning, designing and deploying OpenStack-based cloud solutions. A product innovation strategist and
technology evangelist, Valentina has 10+ years experience with Cloud and Datacenter Infrastructure and has
been involved with SDN since the early days throughout her endeavors at PLUMgrid, Nicira and Cisco.
System Engineer, PLUMgrid
Jamal Arif
Jamal Arif is a self-motivated and passionate professional having 5+ years of experience in Cloud & Data
Center technologies, Telecommunications, Virtualization and Software Defined Networking.
He has been a part of the OpenStack Community for last couple of years with more focus in building SDN
based OpenStack Private/Public Cloud infrastructures for enterprises, telcos, & service providers etc.

3. Copyright © PLUMgrid, Inc. 2011-2016
• OpenStack Networking Refresher
• PLUMgrid Plugin
• Hands-on Lab
• Next Steps
Agenda

4. OpenStack Networking Refresh

5. Copyright © PLUMgrid, Inc. 2011-2016
• Provide Network as a Service
• Provide Operator & Tenants ability to
create and offer rich network topologies
and configure advanced policies
• Offer a technology agnostic layer while
enabling vendor extensions
• Support for advanced services
Why Neutron?
Compute Storage
Network

6. Copyright © PLUMgrid, Inc. 2011-2016
OpenStack Neutron Architecture Components
Neutron Server
Core APIs API Extensions
Plugins

7. Copyright © PLUMgrid, Inc. 2011-2016
Neutron API Flow
Neutron
Server
Plugin
Backend
Implementation
(controllers,
agents,
appliances)
Neutron API
Request

8. Copyright © PLUMgrid, Inc. 2011-2016
What can users do with Neutron?
Provide external
connectivity (e.g. Internet)
to workloads
Interconnect networks
with routers
Create multi-tenant
networks with private IP
space
Connect workloads to
each network

9. Copyright © PLUMgrid, Inc. 2011-2016
• Created by end-users
• Details of how they are “implemented” are hidden from the users
• VMs can connect to tenant networks
• Supported types: flat, local, VLAN, Overlay based
Tenant Network

10. Copyright © PLUMgrid, Inc. 2011-2016
• Created with admin credentials
• Specify they physical implementation and usually map to existing
data center constructs
• VMs can connect directly to provider networks (burning IPs of
physical infra) or via an external network and floating IP/NAT
• Provide connectivity with legacy network
Provider Network

11. Mapping OpenStack to PLUMgrid

12. Copyright © PLUMgrid, Inc. 2011-2016
You always need to select a plugin

13. Copyright © PLUMgrid, Inc. 2011-2016
“Overlay-based” Networking Model
• Multi-tenancy achieved by “overlaying” MAC-in-IP ‘Tunnels’ onto the physical switch fabric (underlay,
transport network)
• Encapsulation header (VXLAN, NVGRE, STT) convey tenant network ID to enable full isolation and
overlapping IP Address spaces support
• Software layers to implement routing / switching operations within and across tenant networks

14. Copyright © PLUMgrid, Inc. 2011-2016
PLUMgrid Open Networking Suite
Internet
IO Visor Gateway
IO Visor Edges (Compute Nodes)
PLUMgrid Directors
VXLAN-based
Overlay
14
PLUMgrid CloudApex & OpsVM

15. Copyright © PLUMgrid, Inc. 2011-2016
From OpenStack Networks to Virtual Domains
OpenStack Networks Virtual Domains

16. Copyright © PLUMgrid, Inc. 2011-2016
PLUMgrid Virtual Network Functions
16
Distributed Virtual Network Functions Description
Connector
• Connectivity: External, Port Bundle (“Multi-gateway LAG”),
Appliance and Inter Virtual Domain
Bridge
• Distributed Layer 2 network function
• Connects VMs on same IP subnet inside Virtual Domain
• Include Private VLAN functionality
Router
• Distributed Layer 3 network function
• Connects VMs from different subnets inside a Virtual Domain
• Includes Dynamic Routing Protocols (RIP, OSPF, BGP)
DHCP
• Distributed DHCP function for dynamic IP Address allocation
• Associated on per Bridge basis
NAT
• Distributed Network Address Translation function
• Supports Inbound / Outbound, Many to One, One to One NAT
Security Policies
• Distributed Layer 4 Security network function
• Substitute for Layer 4 ACLs / Firewalls
DNS • Distributed Domain Name Service

17. Hands-on Lab

18. Copyright © PLUMgrid, Inc. 2011-2016
• Check you have following:
• IP Address
• Password
• Hands-on Lab Guide
Login Information
• If you have VNC client – Good
• If you don't have VNC Client
• Download Real VNC Viewer
• If Macbook
• Open Safari Browser
• vnc://xxx.xxx.xxx.xxx
• Put username and password

19. Copyright © PLUMgrid, Inc. 2011-2016
Hands-on Lab Step by Step
Set up a network topology
for 3 tier app cloud with
web, app, db
Create multiple projects
in OpenStack

20. Copyright © PLUMgrid, Inc. 2011-2016
Hands-on Lab Step by Step
Monitor and troubleshoot
Modify security group and
ingress/egress forwarding
policies
Enable external connectivity

21. Next Steps

22. PLUMgrid Certified OpenStack Networking Associate
Design Center
Transformation
OpenStack
Overiew
OpenStack
Networking
Introduction
Hands-on Lab
Training
Register Today! www.plumgrid.com/plumgrid-university

23. HANDS-ON
23

24. Copyright © PLUMgrid, Inc. 2011-2016
Hands-on Lab
Overview Environment
Use Case
What to Expect
Multi-tenant Virtual Network Infrastructure for
Private Clouds
Strict isolation & micro-segmentation
Rich portfolio of networking functions
On-demand creation of networks via CMS
In-depth control over network functions

25. Visit Us @ Booth C21
THANK YOU!
www.plumgrid.com