Downloaded 13 times
Uploaded bySean Roberts
OpenStack Neutron Advanced Services by Akanda
The document outlines the advanced services of OpenStack Neutron, including load balancing, VPN, and firewall functionalities. It highlights the architecture, plugins, and agents involved in managing network services, as well as the Akanda project which aims to provide orchestration for these advanced services. The presentation emphasizes OpenStack's principles of open development and community collaboration for enhancing networking capabilities.
More Related Content
Similar to OpenStack Neutron Advanced Services by Akanda
OpenStack Neutron Advanced Services by Akanda
- 1.
- 2. About Me • SeanRoberts • VP Development at Akanda Inc • Former OpenStack Board Director • Past Yahoo, VMware, Stanford, and Genentech
- 3. Where Are WeHeaded Today? OpenStack Neutron Networking Basics Advanced Services: LBaaS, VPNaaS, FWaaS Neutron: Liberty and Beyond
- 4.
- 5. OSI Model Physical Layer DataLink Layer Network Layer Transport Layer Session Layer Presentation Layer Application Layer 1 2 3 4 5 6 7 TCP, UDP IPv4,IPv6, ICMP HTTP, DNS, etc ARP, Ethernet, VLAN
- 6. Akanda Project Architecture Akanda Management/ Orchestration PhysicalNetwork (L2) Nova Neutron Open:OVS/LinuxBridge Proprietary Akanda L2 Agnostic Overlay Support Akanda Adv Services: Routing/LB/FW OpenStack APIs
- 7.
- 8.
- 9. Reference Neutron neutron-server Database L3 Agent L3Agent L3 Agent Advanced Service Advanced Service Advanced Services Message Queue DHCP Agent DHCP Agent DHCP Agent L2 Agent L2 Agent L2 Agent L2 Agent L2 Agents
- 10.
- 11. Plugin Extensions ● Addlogical resources to the REST API ● Discovered by server at startup ○ REST: /v2.0/extensions ● Common Extensions ○ Port binding extended attributes, DHCP, L3, Provider, Quota, Security Group
- 12. 2 Types ofPlugins Monolithic Plugin Mech Mgr Modular Plugin Type Mgr
- 13. Monolithic Plugin Typical amongSDN vendors They come in two varieties: ● Proxy ● Direct control PLUGIN
- 14. Modular Plugin Delegates callsto proper drivers Two kinds of drivers ● Type Driver ● Mechanism Driver Mech Mgr PLUGIN Type Mgr
- 15.
- 16. IsolationVLAN • 802.1Q • limited •underlay must support GRE/VXLAN • L2 encapsulated in L3 • routable • overlay independence
- 17.
- 18.
- 19. Reference Implementation Load Balancing asa Service HAProxy Octavia Project http://octavia.io
- 20. VPN as aService OpenSwan Router Metadata Proxy VPN Driver ● Reference implementation uses OpenSwan ● Site-to-Site ● Multiple connections per tenant ● IKE, IPSec
- 21. Firewall as aService • Reference Implementation is Currently Experimental and not production ready • Whats next? L3 Agent Router Metadata Proxy Firewall Driver
- 22.
- 23. What is Akanda ●Akanda is a multi-process, multi- threaded Neutron advanced services orchestration service ● It currently supports routers and in the near future, load balancers, VPNs and firewalls
- 24. Core Akanda Principles ●Simple ● Compatible ● Open Development (Apache v2)
- 25. The Rug reallytied the room together
- 26. Reference Neutron neutron-server Database L3 Agent L3Agent L3 Agent Advanced Service Advanced Service Advanced Services Message Queue DHCP Agent DHCP Agent DHCP Agent L2 Agent L2 Agent L2 Agent L2 Agent L2 Agents
- 27. Neutron + theRug L2 Agent L2 Agent L2 Agent L2 Agent L2 Agent Message Queue L3 Agent L3 AgentService Instance neutron-server Database Akanda (the rug)
- 28. Router Instance Lifecycle ●Router per tenant distributed throughout the cluster ● The router controls the data flow at layer 3 level of the TCP/IP network stack
- 31. Akanda Project Details ●Get the source: https://github. com/stackforge/akanda ● Project status and tarballs: https: //launchpad.net/akanda ● Documentation: http://docs.akanda.io ● IRC - #akanda on freenode.net
- 32.
- 33. OpenStack’s Big Tent ●Open Design ● Open Development ● Open Community ● Open Source
- 34. The Neutron Stadium ●Common Forum ● Improved Consistency ● Shared Governance
- 35. Neutron: Liberty ● IPAM ●BGP Speaker ● NFV Enhancements ● Service Function Chaining ● Enhanced Security Groups ● Paying Down Technical Debt Canadian2006 - Liberty, Saskatchewan (CC-by-sa-3.0) commons.wikimedia.org/w/index.php?title=User:Canadian2006&action=edit&redlink=1
- 36.