Copyright 2017 NOKIA. All rights reserved.
Nuage Networks :
Policy Driven SDN in CloudStack
Sigert Goeminne
CloudStack Developer at Nuage Networks
sigert.goeminne@nuagenetworks.net
London, Aug 17, 2017
Copyright 2017 NOKIA. All rights reserved. 17/8/2017
2
● CloudStack Software engineer @ Nuage Networks in Antwerp
● Strong interest in Cloud & Security
Who am I
Copyright 2017 NOKIA. All rights reserved. 17/8/2017
3
• Nuage Networks
• Today’s ACS 4.10 Nuage VSP plugin
• Upcoming in ACS 4.11
Nuage Networks : Policy Driven SDN in CloudStack
Copyright 2017 NOKIA. All rights reserved. 17/8/2017
4
• Nuage Networks
• Today’s ACS 4.10 Nuage VSP plugin
• Upcoming in ACS 4.11
Nuage Networks : Policy Driven SDN in CloudStack
Copyright 2017 NOKIA. All rights reserved. 17/8/2017
5
• A Nokia venture headquartered in Mountain View, CA
• R&D centers in USA and Europe (Antwerp, Belgium)
• Technology leading in SDN with large customer deployments
• Released our 5.0 in Spring of 2017
Nuage Networks
Copyright 2017 NOKIA. All rights reserved. 17/8/2017
6
Nuage Networks
Virtualized Service
Platform
Nuage Networks : A platform approach to SDN
SDN in the
datacenter
(Virtualized
Cloud Services)
Cloud Security
(Virtualized
Security Services)
SD-WAN
(Virtualized
Network Services)
Rich UI SDK’s (py/java/go)
Copyright 2017 NOKIA. All rights reserved. 17/8/2017
8
Nuage Networks : The VSP Platform
Cloud Service
Management Plane
Virtualized
Services
Directory
Datacenter
Control Plane
Virtualized
Services
Controller
Virtualized Services Directory (VSD)
• Network Policy Engine – abstracts complexity
• Service templates and analytics
Nuage Networks
Virtualized Services Platform
(VSP)
Virtual Routing & Switching (VRS)
• Distributed switch / router – L2-4 rules
• Integration of bare metal assets
Virtualized Services Controller (VSC)
• SDN Controller, programs the network
• Rich routing feature set
Datacenter
Data Plane
Virtual
Routing &
Switching
HYPERVISOR
HYPERVISOR
HYPERVISOR
HYPERVISOR
HYPERVISOR
HYPERVISOR
Brooklyn Datacenter - Zone 1
IP Fabric
Hardware
GW for
Bare Metal
MP-BGP
VXLAN
tunneled
OpenFlow
Copyright 2017 NOKIA. All rights reserved. 17/8/2017
9
• Nuage Networks
• Today’s ACS 4.10 Nuage VSP plugin
• Upcoming in ACS 4.11
• Stay tuned!
Nuage Networks : Policy Driven SDN in CloudStack
Copyright 2017 NOKIA. All rights reserved. 17/8/2017
10
• CloudStack functionality which comes at scale !
Today’s ACS 4.10 Nuage VSP plugin
Copyright 2017 NOKIA. All rights reserved. 17/8/2017
11
• Shared Networks, Isolated Networks and VPC’s
• Source and Static NAT in overlay/underlay
• Network ACL’s and Firewall
• User Data (via VR)
• Guest VM DNS (via VR)
• Internal LB (std system template)
• Advanced SDN features via Domain templates
• NO VR in the data path nor the control path, except for
above mentioned items where we intelligently leverage the VR
Today’s ACS 4.10 Nuage VSP plugin
Copyright 2015 Alcatel-Lucent. All rights reserved. 17/8/2017
12
NuageVsp
Plugin
Cloud Service
Management Plane
Virtualized
Services
Directory
Datacenter
Control Plane
Virtualized
Services
Controller
Datacenter
Data Plane
Virtual
Routing &
Switching
HYPERVISOR
HYPERVISOR
HYPERVISOR
HYPERVISOR
HYPERVISOR
HYPERVISOR
Brooklyn Datacenter - Zone 1
Hardware
GW for
Bare Metal
MP-BGP
NuageVspClient
CloudStack user Nuage VSP user (optional)
java
REST
(Vpc)VR
Plugin
VirtualizedServicesPlatform
VSD
VSC
VRS
OpenFlow
UI, API, cloudmonkey UI, API, vspk
Copyright 2017 NOKIA. All rights reserved. 17/8/2017
13
• Nuage Networks
• Today’s ACS 4.10 Nuage VSP plugin
• Upcoming in ACS 4.11
Nuage Networks : Policy Driven SDN in CloudStack
Copyright 2017 NOKIA. All rights reserved. 17/8/2017
14
Upcoming in ACS 4.11
• VPC-selectable domain template (*)
• VSD managed subnets
• Config Drive support (*)
• Guest VM DHCP options (*)
• Migrating a native cloud to Nuage
* upstream PR
Copyright 2017 NOKIA. All rights reserved. 17/8/2017
15
VPC-selectable domain templates
● Create domain templates (with acl rules, QoS, ...) in VSD
○ instantiate with CloudStack
Copyright 2017 NOKIA. All rights reserved. 17/8/2017
16
VSD managed subnets
● Networks managed by VSD
○ Available in CloudStack
Copyright 2017 NOKIA. All rights reserved. 17/8/2017
17
VSD managed subnets
Copyright 2017 NOKIA. All rights reserved. 17/8/2017
18
User data through Config Drive
Provide user data using a prepared virtual iso attached to
a guest VM at boot time, rather than via wget from VR
❏ Scalable
❏ Open support (cloud-init, ignition)
Copyright 2017 NOKIA. All rights reserved. 17/8/2017
19
Extra DHCP options support
Ability to provide a (set of) DHCP option(s)
on any guest VM NIC
● In line with OpenStack capability
● Could be leveraged to pass User Data as well
● Generic framework
Copyright 2017 NOKIA. All rights reserved. 17/8/2017
20
Network migration
● Migrate existing native networks to Nuage
○ allows for combination of native and nuage networks on same host
● Supports
○ VMware
○ KVM (soon)
● CS configuration
○ Nuagify script
Copyright 2017 NOKIA. All rights reserved.
THANK YOU
Copyright 2017 NOKIA. All rights reserved.

Policy driven SDN in CloudStack

  • 1.
    Copyright 2017 NOKIA.All rights reserved. Nuage Networks : Policy Driven SDN in CloudStack Sigert Goeminne CloudStack Developer at Nuage Networks sigert.goeminne@nuagenetworks.net London, Aug 17, 2017
  • 2.
    Copyright 2017 NOKIA.All rights reserved. 17/8/2017 2 ● CloudStack Software engineer @ Nuage Networks in Antwerp ● Strong interest in Cloud & Security Who am I
  • 3.
    Copyright 2017 NOKIA.All rights reserved. 17/8/2017 3 • Nuage Networks • Today’s ACS 4.10 Nuage VSP plugin • Upcoming in ACS 4.11 Nuage Networks : Policy Driven SDN in CloudStack
  • 4.
    Copyright 2017 NOKIA.All rights reserved. 17/8/2017 4 • Nuage Networks • Today’s ACS 4.10 Nuage VSP plugin • Upcoming in ACS 4.11 Nuage Networks : Policy Driven SDN in CloudStack
  • 5.
    Copyright 2017 NOKIA.All rights reserved. 17/8/2017 5 • A Nokia venture headquartered in Mountain View, CA • R&D centers in USA and Europe (Antwerp, Belgium) • Technology leading in SDN with large customer deployments • Released our 5.0 in Spring of 2017 Nuage Networks
  • 6.
    Copyright 2017 NOKIA.All rights reserved. 17/8/2017 6 Nuage Networks Virtualized Service Platform Nuage Networks : A platform approach to SDN SDN in the datacenter (Virtualized Cloud Services) Cloud Security (Virtualized Security Services) SD-WAN (Virtualized Network Services)
  • 7.
    Rich UI SDK’s(py/java/go)
  • 8.
    Copyright 2017 NOKIA.All rights reserved. 17/8/2017 8 Nuage Networks : The VSP Platform Cloud Service Management Plane Virtualized Services Directory Datacenter Control Plane Virtualized Services Controller Virtualized Services Directory (VSD) • Network Policy Engine – abstracts complexity • Service templates and analytics Nuage Networks Virtualized Services Platform (VSP) Virtual Routing & Switching (VRS) • Distributed switch / router – L2-4 rules • Integration of bare metal assets Virtualized Services Controller (VSC) • SDN Controller, programs the network • Rich routing feature set Datacenter Data Plane Virtual Routing & Switching HYPERVISOR HYPERVISOR HYPERVISOR HYPERVISOR HYPERVISOR HYPERVISOR Brooklyn Datacenter - Zone 1 IP Fabric Hardware GW for Bare Metal MP-BGP VXLAN tunneled OpenFlow
  • 9.
    Copyright 2017 NOKIA.All rights reserved. 17/8/2017 9 • Nuage Networks • Today’s ACS 4.10 Nuage VSP plugin • Upcoming in ACS 4.11 • Stay tuned! Nuage Networks : Policy Driven SDN in CloudStack
  • 10.
    Copyright 2017 NOKIA.All rights reserved. 17/8/2017 10 • CloudStack functionality which comes at scale ! Today’s ACS 4.10 Nuage VSP plugin
  • 11.
    Copyright 2017 NOKIA.All rights reserved. 17/8/2017 11 • Shared Networks, Isolated Networks and VPC’s • Source and Static NAT in overlay/underlay • Network ACL’s and Firewall • User Data (via VR) • Guest VM DNS (via VR) • Internal LB (std system template) • Advanced SDN features via Domain templates • NO VR in the data path nor the control path, except for above mentioned items where we intelligently leverage the VR Today’s ACS 4.10 Nuage VSP plugin
  • 12.
    Copyright 2015 Alcatel-Lucent.All rights reserved. 17/8/2017 12 NuageVsp Plugin Cloud Service Management Plane Virtualized Services Directory Datacenter Control Plane Virtualized Services Controller Datacenter Data Plane Virtual Routing & Switching HYPERVISOR HYPERVISOR HYPERVISOR HYPERVISOR HYPERVISOR HYPERVISOR Brooklyn Datacenter - Zone 1 Hardware GW for Bare Metal MP-BGP NuageVspClient CloudStack user Nuage VSP user (optional) java REST (Vpc)VR Plugin VirtualizedServicesPlatform VSD VSC VRS OpenFlow UI, API, cloudmonkey UI, API, vspk
  • 13.
    Copyright 2017 NOKIA.All rights reserved. 17/8/2017 13 • Nuage Networks • Today’s ACS 4.10 Nuage VSP plugin • Upcoming in ACS 4.11 Nuage Networks : Policy Driven SDN in CloudStack
  • 14.
    Copyright 2017 NOKIA.All rights reserved. 17/8/2017 14 Upcoming in ACS 4.11 • VPC-selectable domain template (*) • VSD managed subnets • Config Drive support (*) • Guest VM DHCP options (*) • Migrating a native cloud to Nuage * upstream PR
  • 15.
    Copyright 2017 NOKIA.All rights reserved. 17/8/2017 15 VPC-selectable domain templates ● Create domain templates (with acl rules, QoS, ...) in VSD ○ instantiate with CloudStack
  • 16.
    Copyright 2017 NOKIA.All rights reserved. 17/8/2017 16 VSD managed subnets ● Networks managed by VSD ○ Available in CloudStack
  • 17.
    Copyright 2017 NOKIA.All rights reserved. 17/8/2017 17 VSD managed subnets
  • 18.
    Copyright 2017 NOKIA.All rights reserved. 17/8/2017 18 User data through Config Drive Provide user data using a prepared virtual iso attached to a guest VM at boot time, rather than via wget from VR ❏ Scalable ❏ Open support (cloud-init, ignition)
  • 19.
    Copyright 2017 NOKIA.All rights reserved. 17/8/2017 19 Extra DHCP options support Ability to provide a (set of) DHCP option(s) on any guest VM NIC ● In line with OpenStack capability ● Could be leveraged to pass User Data as well ● Generic framework
  • 20.
    Copyright 2017 NOKIA.All rights reserved. 17/8/2017 20 Network migration ● Migrate existing native networks to Nuage ○ allows for combination of native and nuage networks on same host ● Supports ○ VMware ○ KVM (soon) ● CS configuration ○ Nuagify script
  • 21.
    Copyright 2017 NOKIA.All rights reserved. THANK YOU
  • 22.
    Copyright 2017 NOKIA.All rights reserved.