OpenNebula Networking
Ruben S. Montero
OpenNebula Chief Architect
Techday Madrid
11 March 2016
OpenNebula Network Model: View
Hyper. Hyper. Hyper. Hyper.
Virtual Network
VM VM VM VM
Datacenter Network
● Leaf-Spine switched or routed backbone
● Not controlled by OpenNebula
● Usually just few TOR switches
Virtual switches
Virtual Network
OpenNebula Network Model: “built-in SDN”
Provide a central point to define, consume and set up Virtual
Networks for Virtual Machines
XML-RPC API
OpenNebula daemon
Infrastructure Drivers
Northbound Interface
● Virtual Network abstract management
● Lease addresses to VMs
● Reserve addresses for users or groups
Network Stack
Southbound Interface
● Uniform interface to interface network elements
● Specialized for VM Networking
Northbound Interface
Logical Attributes
Addresses Space (multiple, disjoint ranges)
● IPv4
● IPv6 (Global & ULA)
● Ethernet - MAC addresses
Security Groups
● Managed as a separate entity
● Inbound & Outbound, TCP/UDP/ICMP
Custom Tags
Configuration & Physical Attributes
● Network specific (e.g. BRIDGE, VLAN_ID)
● VM Context (e.g. DNS, GATEWAY)
VirtualNetworkDefinition
Southbound Interface
Three-phase setup
● pre, post and clean right before, after VM boot and shutdown
● It considers live-migrations
OpenNebula Network Drivers
OpenvSwtich VMware DSwtich
Linux Bridge
802.1Q Flat
Security Group*
iptables rules
VXLAN ebtables Flat VLAN Flat Dynamic
NFV Virtual Router*
* [Virtual Router] New in 5.0!
* [Security Group] Propagate updates to running VMs
● Approach: Virtualize some network functions by packaging
into an appliance
● Ease & flexible management of your network
○ Hugepages*,
○ NUMA scheduling*,
○ PCI PF/SR-IOV co-allocation*
* Supported only to some extent in 4.14
● As part of a Virtual Network to include more functionality
○ Virtual Router removed from 4.14 to re-architect it.
NFV Management
Virtual Routers: NFV Demonstration
Virtual
Router
Virtual
Router
Virtual
Router
VR cluster
Virtual NetworkVirtual Network
● Alpine Linux
● Link any VLAN network
● HA configuration
● Support for reconfiguration
● First class management entity
● Sunstone specialized views
● New CLI for vrouters
● Can be configured per VDC
*
* Future plans to expose an OpenFlow interface to be controlled by SDN
Virtual Router: Cross-site Networks
Virtual RouterVirtual Router
VM
Virtual Network (VLAN)Virtual Network (VLAN)
VM VM
Cross-site
Network
VM
Ethernet over IP (GRETAP) + IPSec
● Link multiple virtual networks (L3/L2)
● Support for hybrid configurations
● Support for L3 inter-DC
Virtual Router: SDN integration
SSH OpenFlow
ovswtich / Linux bridge
link
(to other switches)
VXLAN, VLAN, Ether
virtual
appliance
SDN for the Cross-site network
● Flow control (ReactiveFlow app)
● ARP optimizations
● Flow re-balancing
OpenNebula drivers
OpenNebula Network Model: View
Hyper. Hyper. Hyper. Hyper.
Virtual Network
VM VM VM VM
Virtual Network
Network backbone and Internet
VM VM
Compute Fabric
SDN for vSwitches
Two-level SDN
● Hypervisor for VLAN set up and management
● Interconnection and management of VLAN segments
Virtual switch (or routed)
¡GRACIAS!
Techday Madrid
11 March 2016

OpenNebula Networking - Rubén S. Montero

  • 1.
    OpenNebula Networking Ruben S.Montero OpenNebula Chief Architect Techday Madrid 11 March 2016
  • 2.
    OpenNebula Network Model:View Hyper. Hyper. Hyper. Hyper. Virtual Network VM VM VM VM Datacenter Network ● Leaf-Spine switched or routed backbone ● Not controlled by OpenNebula ● Usually just few TOR switches Virtual switches Virtual Network
  • 3.
    OpenNebula Network Model:“built-in SDN” Provide a central point to define, consume and set up Virtual Networks for Virtual Machines XML-RPC API OpenNebula daemon Infrastructure Drivers Northbound Interface ● Virtual Network abstract management ● Lease addresses to VMs ● Reserve addresses for users or groups Network Stack Southbound Interface ● Uniform interface to interface network elements ● Specialized for VM Networking
  • 4.
    Northbound Interface Logical Attributes AddressesSpace (multiple, disjoint ranges) ● IPv4 ● IPv6 (Global & ULA) ● Ethernet - MAC addresses Security Groups ● Managed as a separate entity ● Inbound & Outbound, TCP/UDP/ICMP Custom Tags Configuration & Physical Attributes ● Network specific (e.g. BRIDGE, VLAN_ID) ● VM Context (e.g. DNS, GATEWAY) VirtualNetworkDefinition
  • 5.
    Southbound Interface Three-phase setup ●pre, post and clean right before, after VM boot and shutdown ● It considers live-migrations OpenNebula Network Drivers OpenvSwtich VMware DSwtich Linux Bridge 802.1Q Flat Security Group* iptables rules VXLAN ebtables Flat VLAN Flat Dynamic NFV Virtual Router* * [Virtual Router] New in 5.0! * [Security Group] Propagate updates to running VMs
  • 6.
    ● Approach: Virtualizesome network functions by packaging into an appliance ● Ease & flexible management of your network ○ Hugepages*, ○ NUMA scheduling*, ○ PCI PF/SR-IOV co-allocation* * Supported only to some extent in 4.14 ● As part of a Virtual Network to include more functionality ○ Virtual Router removed from 4.14 to re-architect it. NFV Management
  • 7.
    Virtual Routers: NFVDemonstration Virtual Router Virtual Router Virtual Router VR cluster Virtual NetworkVirtual Network ● Alpine Linux ● Link any VLAN network ● HA configuration ● Support for reconfiguration ● First class management entity ● Sunstone specialized views ● New CLI for vrouters ● Can be configured per VDC * * Future plans to expose an OpenFlow interface to be controlled by SDN
  • 8.
    Virtual Router: Cross-siteNetworks Virtual RouterVirtual Router VM Virtual Network (VLAN)Virtual Network (VLAN) VM VM Cross-site Network VM Ethernet over IP (GRETAP) + IPSec ● Link multiple virtual networks (L3/L2) ● Support for hybrid configurations ● Support for L3 inter-DC
  • 9.
    Virtual Router: SDNintegration SSH OpenFlow ovswtich / Linux bridge link (to other switches) VXLAN, VLAN, Ether virtual appliance SDN for the Cross-site network ● Flow control (ReactiveFlow app) ● ARP optimizations ● Flow re-balancing OpenNebula drivers
  • 10.
    OpenNebula Network Model:View Hyper. Hyper. Hyper. Hyper. Virtual Network VM VM VM VM Virtual Network Network backbone and Internet VM VM Compute Fabric SDN for vSwitches Two-level SDN ● Hypervisor for VLAN set up and management ● Interconnection and management of VLAN segments Virtual switch (or routed)
  • 11.