Learn about the Contrail features/offerings for Docker Containers and integration with different Container orchestration echo-systems like K8S and Mesos. About the speaker: Vivekananda Shenoy currently working as a Solution Architect in Juniper Contrail Team within Juniper Networks where he helps some of the large SP & Enterprise Customers to define and implement robust,highly scalable & performing and service rich virtualized network solutions using Juniper Networks Contrail SDN Controller.Started his career as a QA engineer, he has close to 13 years of industry experience working for companies such as Juniper Networks, Cisco Systems, Nokia Corp & Huawei Technologies in the area of next-gen IP-MPLS network design & implementation. On the academic side Vivek has completed his bachelors from National Institute of Technology-Karnataka, India and has certification in Product Management , Cloud Architecture and Linux System performance from UC SantaCruz. In addition he is a Double CCIE (Routing Switching & Service Provider) and also holds JNCIE in the Service Provider track.

1. Opencontrail SDN for Kubernetes
Vivekananda Shenoy
vshenoy@juniper.net

2. 2 © 2017 Juniper Networks, Inc. All rights reserved.JUNIPER NETWORKS CONFIDENTIAL
o What is Kubernetes
Agenda

3. 3 © 2017 Juniper Networks, Inc. All rights reserved.JUNIPER NETWORKS CONFIDENTIAL
Introduction - What is Kubernetes ?
http://www.publicartarchive.org/work/helmsman
The name ?
Greek for “pilot” or “helmsman of a ship”
The project?
Open Source project originally designed by Google (Project Borg) and
donated to the CNCF
Definition - https://kubernetes.io/docs/concepts/overview/what-is-kubernetes/
“Open-source platform for automating deployment, scaling, and
operations of application containers across clusters of hosts, providing
container-centric infrastructure”

4. 4 © 2017 Juniper Networks, Inc. All rights reserved.JUNIPER NETWORKS CONFIDENTIAL
Introduction - What is Kubernetes ?
The focus is on the application
o Deploy / scale / rolling updates / control resources
It is portable
o Runs everywhere (public/private cloud, bare metal, VMs, laptop)
It provides self-healing services
o Auto-restart, auto-rescheduling, auto-scaling, auto-replication
It bridges the Dev/Ops gap
o Taking advantage of application containerization and micro services
o CI/CD environments
o Mechanisms to tie the infrastructure and the applications running on it
Source Livewyer - http://static.lwy.io/img/kubernetes_dashboard_infographic.png

5. 5 © 2016 Juniper Networks, Inc. All rights reserved.JUNIPER NETWORKS CONFIDENTIAL
Kubernetes core concepts
• kube-apiserver
• kube-scheduler
• kube-controller-manager
• container engine
• Kubelet
• Kube-proxy
• Add-ones/others
• POD
• Service
• Replication Controller
• Deployment
• Namespace
• Labels/Selectors/Annotations.
Kubernetes Core-components • Application building blocks

6. 6 © 2017 Juniper Networks, Inc. All rights reserved.JUNIPER NETWORKS CONFIDENTIAL
Master Node #2
API Server
Controller / Replication Mgr
Scheduler
Data Store
(etcd)
N a m e s p a c e - B
N a m e s p a c e - A
…
Containers
…
C1 C2 …
…
Containers
POD 2
C1 C2 …
…
Containers
POD 1 (POD1-IP)
C1 C2 …
Service – S1
Application 1
(Load balancing across multiple PODs)
Service – S2
…
Containers
…
C1 C2 …
…
Containers
POD 6
C1 C2 …
…
Containers
POD 5
C1 C2 …
Service (VIP, Port) Service (VIP, Port)
Minion / NodeMinion / Node
…
Application 2
(Load balancing across multiple PODs)
Repl.
Ctrl
Master
Master Node #1
kube-apiserver
kube-controller-manager
kube-scheduler
Data Store
(etcd)
Architecture
Kubelet Kubelet
Egress Service
USER

7. 7 © 2016 Juniper Networks, Inc. All rights reserved.JUNIPER NETWORKS CONFIDENTIAL
Physical IP Fabric
(no changes)
CONTRAIL ARCHITECTURE
ENABLES INTENT BASED NETWORKING
CONTRAIL CONTROLLER
ORCHESTRATOR
Host O/SvRouter
Network / Storage
orchestration
Gateway
…
Internet / WAN
or Legacy Env.
(Config, Control, Analytics, Svr Mgmt)
(Windows, Linux ….) on BMS
TOR
Compute
orchestration
Virtual Network
Blue
Virtual Network
Red
FW
Logical View
…
Centralized
Policy DefiniPon
Distributed
Policy Enforcement
BGP
BGP XMPPOVSDB

8. 8 © 2016 Juniper Networks, Inc. All rights reserved.JUNIPER NETWORKS CONFIDENTIAL
CONTRAIL KEY features
Routing & Switching
(IPv4, v6)
Network Services
(IPAM, DNS, DHCP
SNAT, FIP, QoS, BGPaaS)
Load Balancing
(customizable ECMP,
LBaaS)
Security & Policies
(Policy Enf.,Distributed FW,
Sec Grp, XMPP Encryp.)
Perf & Scale
(DPDK / SRIOV, Smart
NIC, Infra scale)
Gateway Services
(L2, L3, Software GW)
Rich Analytics,
(Alerts, Overlay-Underlay
Correlation, multi-region)
Service Chaining
(PNF, VNF, v6, 3rd party / TAP,
Health-check, policy-based,
SFC Failover)
HA, Upgrades, Prov.
(Infra Failover, ISSU)
APIs & Orchestration
(multi-vendor Orch., SDN-U,
OpenStack, K8s, vCenter)

9. 9 © 2017 Juniper Networks, Inc. All rights reserved.JUNIPER NETWORKS CONFIDENTIAL
Contrail integration with Kubernetes
contrail-kube-manager
Contrail Controller
contrail-kube-manager listens to K8s API Server
and conveys the API request to Contrail Controller
Compute Node
…
POD 1
C1 …
Compute Node
POD 2
C2 …
POD 3
C3 …
POD 4
C4 …
API Server
K8s and Contrail Controller Nodes
Scheduler …
Replication Ctrl
kubectl
(user commands)
vRouter
(replaces kube-proxy)
CNI Plugin
vRouter
(replaces kube-proxy)
CNI Plugin
KubeletKubelet

10. 10 © 2017 Juniper Networks, Inc. All rights reserved.JUNIPER NETWORKS CONFIDENTIAL
Contrail integration with Kubernetes
Namespace Single project OR Shared project
Pod
Service
Ingress
Network Policy
Virtual Machine
ECMP Loadbalancer
Haproxy Loadbalancer for URL
Security Groups
Kubernetes to Contrail object mapping

11. LIVE DEMO

12. 12 © 2017 Juniper Networks, Inc. All rights reserved.JUNIPER NETWORKS CONFIDENTIAL
Lets build a app.
Front-end
guestbook.opencontrail.org
Redis-slave
Redis-master
PHP App
PHP App
PHP App
Redis Worker
Redis Worker
Redis Master

13. Questions