Interop Tokyo 2018で公演したContrail Enterprise Multicloudの資料。 Kubernetes/Openshift環境でのネットワーク課題について解説 TungstenFabric/Cotrailでのソリューション

1. © 2018 Juniper Networks
CONTRAIL ENTERPRISE MULTI CLOUD

2. © 2018 Juniper Networks
AGENDA
2
•
•
• Contrail Enterprise Multicloud

3. © 2018 Juniper Networks 3

4. © 2018 Juniper Networks
%
5 -
IT

5. © 2018 Juniper Networks

6. © 2018 Juniper Networks
K8S/OpenShift
LB
Web
API
DB
node node
node nodeService:
Web:replicas:2
label:apache
API:replicas:3
label:nginx
DB :replicas:2
label:sql

7. © 2018 Juniper Networks
K8S/OpenShift
node node
node node

8. © 2018 Juniper Networks

9. © 2018 Juniper Networks
•
•
•
Infrastructure As A Code

10. © 2018 Juniper Networks 10

11. © 2018 Juniper Networks
•
o
o
•
o L2
o L3
o
o VM/
•

12. © 2018 Juniper Networks
A
A A A
A A A

13. © 2018 Juniper Networks
Kubernetes / Openshift IP
LB
Web
API
DB
pod network
10.0.64.0/14
Service network
203.0.113.0/16
.1 .2 .3 .4 .5 .6 .7 .8
IP
.1

14. © 2018 Juniper Networks
LB
Web
API
DB
pod network
10.0.64.0/14
Service network
203.0.113.0/14
.1 .2 .3 .4 .5 .6 .7 .8
.1
A B

15. © 2018 Juniper Networks
VLAN
VXLAN
•
o VLAN
§
o VXLAN
§ VNI
o L2 Fabric
§
•
o
o
•
o

16. © 2018 Juniper Networks
Private
cloud
DC
WAN/ Interconnect
HUMAN ERRORS =
•
•
• OS
•
•
COMPLEXITY
•
•
•
INCONSISTENCY
“ Web ”
“ ”
“Web Web 2 ”
REVENUE-LOSS
LONG LEAD TIME
Private
cloud
DC

17. © 2018 Juniper Networks
CONTRAIL ENTERPRISE MULTICLOUD
17

18. © 2018 Juniper Networks
CONTRAIL ENTERPRISE MULTICLOUD
Operator
Username
Password
Contrail Command Contrail Command Contrail Command
Multicloud
Architecture
Build Fabric
Provide Hybrid Connectivity
Build PODs
Apply Netw / Sec. Policies
User Conn. & Policies
Monitor / Troubleshoot
Contrail Command…
vRouter
(+security)
OpenShift
Kubernetes
VMware
OpenStack
AWS VPC - 1
GCP VPC - 2

19. © 2018 Juniper Networks
One Platform for All Clouds
•
• L2
• LABEL FW
•
•
AWS VPC - 1
GCP VPC - 2
Manage workloads in multiple clouds as though they were in one
Contrail Enterprise Multicloud
Multivendor
Orchestration
& Management
vRouter
(+security)
OpenShift
Kubernetes
USE CASE: PRIVATE TO PUBLIC CLOUD

20. © 2018 Juniper Networks
CONTRAIL ENTERPRISE MULTICLOUD
20
AWS VPC - 1
vRouter
(+security)
OpenShift
Kubernetes
• TLS/Ipsec
o
o
•
• L2
TLS/IPsec
MAC:A MAC:B
DMACSMACPAYLOAD
DMACSMACPAYLOAD
TLS SIP DIP
DMACSMACPAYLOAD
MPLS GRE SIP DIP
DMACSMACPAYLOAD MPLS GRE SIP DIP
DMACSMACPAYLOAD MPLS GRE SIP DIP

21. © 2018 Juniper Networks
CONTRAIL ENTERPRISE MULTICLOUD
FW
Label:Web Label:API Label:DB
Web App DB
Policy = P1
Label:Web Label:API Label:DB
App:Service1
Dep:Production
App:Service1
Dep:Develop
•
o IP
o FW
• FW
o Node Contrail FW
• FW
o FW
o

22. © 2018 Juniper Networks
CONTRAIL ENTERPRISE MULTICLOUD
apiVersion: v1
kind: Pod
metadata:
name: cirros-vn1-1
annotations: {
"opencontrail.org/network" : '{"domain":"default-domain", "project": "juniper-test", "name":"pod-service-1"}'
}
labels:
application: service-app1
label: web
spec:
replicas: 2
containers:
- name: cirros-vn1-1
image: docker.io/cirros
imagePullPolicy: IfNotPresent

23. © 2018 Juniper Networks
CONTRAIL ENTERPRISE MULTICLOUD
apiVersion: v1
kind: Pod
metadata:
name: cirros-vn1-1
annotations: {
"opencontrail.org/network" : '{"domain":"default-domain", "project": ”new-service", "name":”web-network"}'
}
labels:
application: service-app1
label: web

24. © 2018 Juniper Networks
CONTRAIL ENTERPRISE MULTICLOUD
Service:1
Namespace : A
Service : A Service : B
Service:2
Service : B
Namespace : B
Service : A Service : B
Service:3
VRF
VRF
VRF
C
A
B

25. © 2018 Juniper Networks
CONTRAIL ENTERPRISE MULTICLOUD
Discovery / Onboarding of
devices • UI DC
• ZTP/ZTR
•
• Juniper MX, QFX
• Third party devices and PNF/VNF*
•
•
• Ethernet, IP overlays
• Playbook
•
• LLDP
• EVPN/VXLAN (
• interfaces, igp, analytics, protocols, policies,
loopbacks, overlay protocol (EVPN BGP)
netconf
netconf

26. © 2018 Juniper Networks
CONTRAIL ENTERPRISE MULTICLOUD
Ansible integration
• Contrail Ansible
•
• Ansible

27. © 2018 Juniper Networks
CONTRAIL ENTERPRISE MULTICLOUD
Demo
AWS VPC - 1
192.168.10.0/24

28. © 2018 Juniper Networks
CONTRAIL ENTERPRISE MULTICLOUD
IP FW
Any Cloud Any Workload Any Deployment
Contrail Enterprise Multicloud

29. © 2018 Juniper Networks
TungstenFabric
https://tungstenfabric.io/
Linux Foundation
https://www.linuxfoundation.org/projects/networking/
TungstanFabric + Openshift Origin
http://komadori-blog.blogspot.com/2018/06/openshift-enterprise.html
TungstenFabric
https://connpass.com/event/90787/

30. © 2018 Juniper Networks
THANK YOU!