The evolution of OpenStack Networking
Guido Appenzeller
Chief Technology Strategy Officer
Networking & Security
VMware
VMware
2
Actually, we love OpenStack
NSX
vSphere/ESX
VIO
Vmware Integrated Openstack
OpenStack
NSX + Open
vSwitch
KVM
NSX-MH
Network Virtualization
for KVM/XEN/etc.
OpenStack
Open vSwitch
KVM
Open vSwitch
OpenStack
OVS
KVM
OVN
Open Virtual
Network
OpenStack
Networking is going through
it’s biggest revolution of the
past 20 years.
3
4
Arista 7050S-64
Juniper QFX 3500
Dell Force 10 S4810
IBM BNT Rackswitch G8264
Cisco Nexus 3064
HP5900af 48xg
Alcatel Lucent 6900
Quanta T3048-LY2
Edge Core AS5600-52X
Networking Hardware is a Commodity
All of these switches have the same networking chip
Networking Hardware is a Commodity
Broadcom dominates the silicon market (think Intel x86)
• Currently used by all major ToR switches
OEM Manufacturers build systems based on Broadcom design
• OEMs have a roadmap of upcoming systems
• In many cases, Brand vendors pick existing design and only add their software
• Switches are internally virtually identical
CONFIDENTIAL 5
8
Protocols Features
System
Silicon
Network OS
9
VM #1 VM #2
System
Silicon
Hypervisor
Originally: Server Virtualization
Software
Hardware
Virtual
Machines
Compute
Capacity Network Storage
Applications
Server Virtualization
• Intelligence in the virtualization layer
• Vendor independent x86 capacity
• Transformative operational model
• Automated configuration & management
Intelligence in hardware
Dedicated, vendor specific infrastructure
Manual configuration & management
Manual Operational Model
Automated Operational Model
Create,
Snapshot,
Store,
Move,
Delete,
Restore
Virtual Infrastructure from Pools of Capacity
Software
Hardware
Virtual
Machines
Virtual
Networks
Virtual
Storage
Compute
Capacity
Network
Capacity
Storage
Capacity
Applications
Location Independence
Data Center Virtualization
Pooled compute, network and storage capacity
Vendor independent, best price/performance
Simplified configuration & management
Automated Operational Model
Programmatically Create,
Snapshot,
Store,
Move,
Delete,
Restore
OpenStack
Networking
Models
12
Early Days: Flat & Manual Networks
13
•
•
•
Bridge Bridge
Physical Network via Neutron
14
•
•
•
VLANs VLANs
Neutron
Virtual Networks via Neutron
15
•
•
•
•
vSwitch vSwitch
Neutron
Evolution of Software Defined Networking
16
2008 2015
Research
• OpenFlow
• Mostly in Academia
• Experimental
Products & Architecture
• Overlay Networks
• Centralized Control Planes
• Service Providers & Enterprise
Bare Metal Switches
20162010 2012 2014
Existing Hardware (Extend Life)
New Fabric Designs (L3, ECMP)
Mainstream Deployments
• Operational Readiness
• Easy Deployment
• Operational Tools
Data Center
START
A data point from VMware
17
400
Customers on NSX Today
72%of VMware customers survey plan to
virtualize network in next 18 months
Top Customer Priorities
1. POC-to-Production
2. Multi-vCenter Support
3. Train, Certification & Org
4. Reference Architectures
Data Center
START
Use Cases
18
Experiences from VMware
Micro-
Segmentation
Security
Disaster
Recovery
IT
Automation
Developer
Cloud
Data Center
Migration
/Refresh
Iaas
NSX
Distributed firewalling makes network security
inside data center perimeter operationally feasible
Reduce RTO by 80%
Reduce infrastructure provisioning time
from weeks to minutes
Self service Cloud
Live migrate workloads to new data
center without changing IP addresses.
Best price / performance choice for
new network hardware
Provision or repurpose generic
physical capacity on demand
Open Source
19
Open vSwitch
• Open Source vSwitch for KVM, XEN, HyperV
• Apache License
• Open vSwitch open, this means:
– It’s Used by our competitors. And that’s ok.
– Majority of OVS use is without a VMware product. That’s ok too.
Our goal is to keep Open vSwitch as a production quality foundation
for great SDN products and systems.
20
Open vSwitch and OpenStack
OVS is #1 for OpenStack
• 43% of Production
• 49% of Dev/QA
• 40% of PoC
OVS more popular than
the “default”.
21
Source: 2014 OpenStack Survey
Mailing Lists
Mailing List Subscribers
discuss@openvswitch.org 1544
announce@openvswitch.org 883
dev@openvswitch.org 839
git@openvswitch.org 175
22
(Incomplete) List of Contributors
Open Virtual Network (OVN)
What is OVN?
Virtual Networking for OVS
• New project from the OVS team
• Provides L2, L3 and Security Profiles
• 100% Open Source (Apache)
• Neutron Plugin
• Containers
What it is NOT!
• It’s not a commercial product
• It’s not a control plane for other
vSwitches
• It’s not an extensible controller
platform like ODL, ONOS etc.
24
Open Virtual Network
25
It’s not a general purpose, controller platform.
Hypervisor
Local OVN
controller
Open vSwitch
OpenFlow + OVSDB
protocols
Open Virtual Network
26
Architecture
OVN Database Controller
Hypervisor
Local OVN
controller
Open vSwitch
OpenFlow + OVSDB
protocols
API’s for defining:
- L2 segments
- L3 forwarding
- Security Groups
Thanks!
OVN is being developed in the open. Code will be available soon
in the OVS Github repo:
27
https://github.com/openvswitch/ovs

[OpenStack Day in Korea 2015] Keynote 5 - The evolution of OpenStack Networking

  • 1.
    The evolution ofOpenStack Networking Guido Appenzeller Chief Technology Strategy Officer Networking & Security VMware
  • 2.
    VMware 2 Actually, we loveOpenStack NSX vSphere/ESX VIO Vmware Integrated Openstack OpenStack NSX + Open vSwitch KVM NSX-MH Network Virtualization for KVM/XEN/etc. OpenStack Open vSwitch KVM Open vSwitch OpenStack OVS KVM OVN Open Virtual Network OpenStack
  • 3.
    Networking is goingthrough it’s biggest revolution of the past 20 years. 3
  • 4.
    4 Arista 7050S-64 Juniper QFX3500 Dell Force 10 S4810 IBM BNT Rackswitch G8264 Cisco Nexus 3064 HP5900af 48xg Alcatel Lucent 6900 Quanta T3048-LY2 Edge Core AS5600-52X Networking Hardware is a Commodity All of these switches have the same networking chip
  • 5.
    Networking Hardware isa Commodity Broadcom dominates the silicon market (think Intel x86) • Currently used by all major ToR switches OEM Manufacturers build systems based on Broadcom design • OEMs have a roadmap of upcoming systems • In many cases, Brand vendors pick existing design and only add their software • Switches are internally virtually identical CONFIDENTIAL 5
  • 8.
  • 9.
    9 VM #1 VM#2 System Silicon Hypervisor
  • 10.
    Originally: Server Virtualization Software Hardware Virtual Machines Compute CapacityNetwork Storage Applications Server Virtualization • Intelligence in the virtualization layer • Vendor independent x86 capacity • Transformative operational model • Automated configuration & management Intelligence in hardware Dedicated, vendor specific infrastructure Manual configuration & management Manual Operational Model Automated Operational Model Create, Snapshot, Store, Move, Delete, Restore
  • 11.
    Virtual Infrastructure fromPools of Capacity Software Hardware Virtual Machines Virtual Networks Virtual Storage Compute Capacity Network Capacity Storage Capacity Applications Location Independence Data Center Virtualization Pooled compute, network and storage capacity Vendor independent, best price/performance Simplified configuration & management Automated Operational Model Programmatically Create, Snapshot, Store, Move, Delete, Restore
  • 12.
  • 13.
    Early Days: Flat& Manual Networks 13 • • • Bridge Bridge
  • 14.
    Physical Network viaNeutron 14 • • • VLANs VLANs Neutron
  • 15.
    Virtual Networks viaNeutron 15 • • • • vSwitch vSwitch Neutron
  • 16.
    Evolution of SoftwareDefined Networking 16 2008 2015 Research • OpenFlow • Mostly in Academia • Experimental Products & Architecture • Overlay Networks • Centralized Control Planes • Service Providers & Enterprise Bare Metal Switches 20162010 2012 2014 Existing Hardware (Extend Life) New Fabric Designs (L3, ECMP) Mainstream Deployments • Operational Readiness • Easy Deployment • Operational Tools Data Center START
  • 17.
    A data pointfrom VMware 17 400 Customers on NSX Today 72%of VMware customers survey plan to virtualize network in next 18 months Top Customer Priorities 1. POC-to-Production 2. Multi-vCenter Support 3. Train, Certification & Org 4. Reference Architectures Data Center START
  • 18.
    Use Cases 18 Experiences fromVMware Micro- Segmentation Security Disaster Recovery IT Automation Developer Cloud Data Center Migration /Refresh Iaas NSX Distributed firewalling makes network security inside data center perimeter operationally feasible Reduce RTO by 80% Reduce infrastructure provisioning time from weeks to minutes Self service Cloud Live migrate workloads to new data center without changing IP addresses. Best price / performance choice for new network hardware Provision or repurpose generic physical capacity on demand
  • 19.
  • 20.
    Open vSwitch • OpenSource vSwitch for KVM, XEN, HyperV • Apache License • Open vSwitch open, this means: – It’s Used by our competitors. And that’s ok. – Majority of OVS use is without a VMware product. That’s ok too. Our goal is to keep Open vSwitch as a production quality foundation for great SDN products and systems. 20
  • 21.
    Open vSwitch andOpenStack OVS is #1 for OpenStack • 43% of Production • 49% of Dev/QA • 40% of PoC OVS more popular than the “default”. 21 Source: 2014 OpenStack Survey
  • 22.
    Mailing Lists Mailing ListSubscribers discuss@openvswitch.org 1544 announce@openvswitch.org 883 dev@openvswitch.org 839 git@openvswitch.org 175 22
  • 23.
  • 24.
    Open Virtual Network(OVN) What is OVN? Virtual Networking for OVS • New project from the OVS team • Provides L2, L3 and Security Profiles • 100% Open Source (Apache) • Neutron Plugin • Containers What it is NOT! • It’s not a commercial product • It’s not a control plane for other vSwitches • It’s not an extensible controller platform like ODL, ONOS etc. 24
  • 25.
    Open Virtual Network 25 It’snot a general purpose, controller platform.
  • 26.
    Hypervisor Local OVN controller Open vSwitch OpenFlow+ OVSDB protocols Open Virtual Network 26 Architecture OVN Database Controller Hypervisor Local OVN controller Open vSwitch OpenFlow + OVSDB protocols API’s for defining: - L2 segments - L3 forwarding - Security Groups
  • 27.
    Thanks! OVN is beingdeveloped in the open. Code will be available soon in the OVS Github repo: 27 https://github.com/openvswitch/ovs