SlideShare a Scribd company logo
Tungsten Fabric Overview
MISSION
Build the world’s most ubiquitous, easy-to-use, scalable, secure, and cloud-grade SDN stack, providing a network
fabric connecting all environments, all clouds, all people.
CODE & COMMUNITY
CODE
• 2013-Today: >300 years of work
• 200-300 developer contributions
• ~100 active developers
• Languages: C++, Python, Node, Go
• Apache 2.0 license
• GitHub repositories
• Gerrit review processes
• Launchpad bug tracking and blueprints
• Other OSS used: Cassandra, Kafka, HAproxy,
Docker, Keystone
COMMUNITY
Principles:
• Open and inclusive
• Provide strong technical and architectural
oversight
• Competitive ideas welcome
• Rough consensus and running code will always
win
• Iterate and evolve
COMMUNITY
• Online:
• Downloads and trial sandbox
• Talk with 900+ people: Slack, Mailing lists
• Follow: Blog, YouTube, Facebook, Twitter
• GitHub: Presentations, Tutorials
• Live (see calendar) :
• Conferences: OpenStack, KubeCon, ONS, Re:invent and
GC Next
• Meetups: host your own or join some
• User Group events: often at conferences
• Governance summits
• Groups: Governance, Technical, Infrastructure
• Community manager: Greg Elkinbard
JOIN
• tungsten.io/slack
• tungsten.io/community
COMMUNITY MEMBERS
your logo here
PAST, PRESENT & FUTURE
• OpenStack networking at scale
• NFV service chaining
• Analytics collection/querying
• REST API and GUI
• Docker & ESXi runtime support
• VMware vSphere support
• DPDK vRouter
• Prototype with Kubernetes v1.1
• Node-port service chaining
• Improve analytics with Kafka
• LBaaS
• ToR switch as OVSDB gateway
• Kubernetes and CNI support
• OpenShift and Mesos support
• Containerize project
• New install w/ Ansible or Helm
• Security focus
• Multicloud deployability
• Switching fabric focus
• Declarative network as code
v1 v2 v4v3 v5+
FEATURES
VIRTUAL
NETWORK
GREEN
Host + Hypervisor
Host + Hypervisor
Visualizing Tungsten Fabric’s Operational Effects
VIRTUAL
NETWORK
BLUE
VIRTUAL
NETWORK
YELLOW
TF Security Policy
(e.g. allow only HTTP traffic)
Service Chain
Policy with a
Firewall VNF
IP fabric
(switch underlay)
G1 G2 G3
B3
B1
B2
G1
G3
G2
Y1 Y2 Y3B1 B2 B3
Y2Y3
Y1
VM and virtualized Network
function pool
Intra-network traffic Inter-network traffic traversing a service
… …
LOGICAL
(PolicyDefinition)
PHYSICAL
(PolicyEnforcement)
Non-HTTP
traffic
Security
Groups
Seamless Multi-Cloud Overlay SDN
Telco POPs Private Cloud DC Public Cloud VPCUsers
Multicloud SDN
Virtual Networking: Overlay Virtual Networking provides connectivity for VM’s and Containers
Distributed Compute Platforms: Leverage the right balance of edge compute, private cloud
compute, and public cloud compute to deploy services
Ubiquitous Security – Centralized security policy orchestration with distributed enforcement across multiple clouds
Performance and Scale: Manage remote compute resources, high performance virtual network
functions, and containers using the same tools
Overlay SDN
ARCHITECTURE OVERVIEW
Ethernet / IP
underlay network
TF CONTROLLER, API & GUI
scale-out control and
management container
micro-services
REST
XMPP
ORCHESTRATION NODES
XMPP
virtual overlay networks
TF
Orchestration plug-ins
Control
COMPUTE NODE 2…
TF
vRouter
COMPUTE NODE 1
TF
vRouter
Compute Runtime Compute Runtime
Control
Networks isolated unless
connected with policy
USER EXPERIENCE
• REST API
• HTTPS authentication and role-
based authorization
• Used for GUI
• Used for declarative configurations
as code
• Generated from data model
NORTH-BOUND API GUI
VROUTER DEPLOYMENT MODELS
KERNEL VROUTER DPDK VROUTER
SRIOV/ VROUTER COEXISTENCE SMARTNIC VROUTER
…VM
1
vRouter
Agent
VNF
2
…VM
1
vRouter
Agent
VM
2
…VM
1
vRouter
Agent
VM
2
…VM
1
vRouter
Agent
VM
2
§ vRouter runs as a user
space process and uses
DPDK for fast path
Packet I/O.
§ Full set of SDN
Capabilities Supported
§ Requires the VMs to
have DPDK enabled for
performance benefits
§ vRouter fwding plane runs
within the NIC
§ Workloads are SRIOV-
connected to the NIC
§ Some workloads can directly
SRIOV into the NIC, while others
go through the vRouter
§ Sometimes a VNF can have
multiple interfaces some of which
are SRIOV-ed to the NIC
§ Interfaces that are SRIOV-ed into
NIC don’t get the benefits /
features of vRouter
§ This the normal operation where
fwding plane of vRouter runs in
the kernel and are connected to
VMs using TAP interface (or veth
pair for containers)
§ vRouter itself is enhanced using
other performance related
features:
o TSO / LRO
o Multi-Q Virtio
CONTAINERIZED WORKLOADS
kube-manager
TF Controller
kube-manager listens to K8s API Server and
conveys the API request to the Controller
Compute Node
…
POD 1
C
1
…
Compute Node
POD 2
C
2
…
POD 3
C
3
…
POD 4
C
4
…
API Server
K8s and Contrail Controller Nodes
Scheduler …
Replication Ctrl
kubectl
(user commands)
vRouter
(replaces kube-proxy)
CNI Plugin
vRouter
(replaces kube-proxy)
CNI Plugin
Kubele
t
Kubele
t
DIFFERENT LEVELS OF ISOLATION
N a m e s p a c e - B
S
3
S
4
POD 9
…
POD 13
…
…
N a m e s p a c e - A
S
1
S
2
POD 1
…
POD 5
…
…
N a m e s p a c e - D
S
7
S
8
POD 25
…
POD 29
…
…
N a m e s p a c e - C
S
5
S
6
POD 17
…
POD 21
…
…
N a m e s p a c e - F
S1
1
S1
2
POD 41
…
POD 45
…
…
N a m e s p a c e - E
S
9
S1
0
POD 33
…
POD 37
…
…
DEFAULT CLUSTER MODE NAMESPACE ISOLATION POD / SERVICE ISOLATION
§ This is how Kubernetes networking works
today
§ Flat subnet where -- Any workload can talk to
any other workload
§ In addition to default cluster, operator can
add isolation to different namespaces
transparent to the developer
§ In this mode, each POD is isolated from
one another
§ Note that all three modes can co-exist
The Latest from Tungsten Fabric
Ø Microservices
architecture
Ø Better cloud native
deployment options
Ø Comprehensive
support for Network
objects
Ø Ingress/Egress
Network Policy
Ø High performance
load balancing
Ø Improved flow
performance and
management
Ø SDN for Edge
Compute – Beta
Quality
House Keeping Container SDN VM’s and NFV
CONAINERIZED ARCHITECTURE
…
§ Multiple personalities of containers:
o 3 controller container – (Controller, Analytics,
Analytics DB) each representing a node
o LB to enable HA (based on HAProxy) will be
provided as container not a mandatory item
o vRouter Agent on containers
§ Containers are deployed using either Ansible / K8s / Helm
Charts / Docker Compose
§ Each of the nodes can independently scale (3 x)
§ Can be deployed on Bare Metal or VMs
§ No change in the role / functionality of the Control / config /
analytics nodes
SALIENT ASPECTS
BENEFITS
§ LCM is simplified [All dependencies within the container
(easy bring up) ]
§ Accelerate provisioning
§ Integration with 3rd party provisioning tools simplified
Config +
Control
Analytics
Analytics
DB
Compute Node Compute Node
…
…
…
…
…
…
Docker containers
orchestrated using
K8s or other
orchestration tools
HA Controller Nodes
vRouter
Agent
vRouter
Agent
vRouter vRouter
Containerizing Contrail Control Plane – for easier manageability
INSTALLATION
• Ansible playbook to flexibly deploy Tungsten Fabric binaries
• Helm charts to easily operate Tungsten Fabric components on Kubernetes
• Install-time option with OpenShift to deploy with Tungsten Fabric
• Tungsten Fabric binaries available on DockerHub and we’re improving CI/CD
• Commercial integrations into lifecycle tools like RH OpenStack Director
VERSATILE SDN SOLUTION
L4 Policy
Tungsten Fabric network and security policies
provide fine grain traffic control, while
abstracting away the underlay topology.
1
Svc Chain Policy2
Containers
App Tier DB Tier
BMSVMs VMsFWL
B
Web Tier
VMs
1
2
1
Consistent security and network functionality between VMs, containers, or bare metal.
…
VM
Compute Node
Nested Container
Compute Node
Tungsten Fabric
Username
Passwor
d
…
NFV
Compute Node
SOFTWARE DEFINED SECURE NETWORKING
…
We
b
Ap
p
d
b
App1, Deployment = Dev
We
b
Ap
p
d
b
App1, Deployment = Staging
We
b
Ap
p
d
b
App1, Deployment = Prod
Tungsten fabric provides a rich, consistent set of security policy capabilities across multiple platforms.
We
b
Ap
p
d
b
App1, Deployment = Dev-K8s
We
b
Ap
p
d
b
App1, Deployment = Dev-
Mesos
vRouter Security Groups
We
b
Ap
p
d
b
App1, Deployment = Staging-BMS
B a r e M e t a l S e r v e r
s
Network Policy
Device
Manager
1. Simplified Manageability (change control, etc.
is much easier)
2. Improved Scalability
3. Define / Review / Approve Once à Use
Everywhere
Handling and Matching Flows
22
● 3X flow setup rate improvement
● TCP state machine to bypass flow aging
● Fat flow protocol & port i.e. Protocol: UDP Port:53 (Fat Flow)
● Enable/Disable flows *
* Note: features likes SG, floating-IP, VN based policy and VRF assign rules will not function
3X Improvement
Fat Flow
2.2
Enable/Disable Flows
Contrail 3.0.X/3.1.X
TCP state machine
2.2
FAT Flow Enhancements
Fat Flow Current Implementation
23
A flow key is used to hash into a flow table (identify
a hash bucket). The flow key is based on five tuple
consisting of source and destination IP addresses,
ports and the IP protocol
Flow Key is reduced from a 5-Tuple to a 4-Tuple
consisting of source & destination IP, destination
port and IP protocol. The client port is not used in
the flow key.
SRC IP DST IP SRC Port DST Port IP PacketProtocol
Virtual Machine Interface
FAT Flow
Protocol (TCP/UDP/SCTP & ICMP) & Port Pairs
Flow Key Hash using 5 Tuple
Fat Flow Enhancements
2
4
To enhance vRouter Fat Flow handling to support ignore source/destination port or
source/destination IP address.
1. Ignore both source and destination ports
2. Ignore either source or destination IP
3. Combination of both (1) and (2) above
Virtual Machine Interface
FAT Flow
Protocol (TCP/UDP/SCTP & ICMP), Port Pairs, Ignore
Address (SRC/DST)
Virtual Network
Protocol (TCP/UDP/SCTP & ICMP), Port Pairs, Ignore
Address (SRC/DST)
Try Tungsten Fabric
https://tungstenfabric.github.io/website/Tungsten-Fabric-10-minute-deployment-
with-k8s-on-AWS.html
Tungsten Fabric Overview

More Related Content

What's hot

Lisa 2015-gluster fs-hands-on
Lisa 2015-gluster fs-hands-onLisa 2015-gluster fs-hands-on
Lisa 2015-gluster fs-hands-on
Gluster.org
 
[오픈소스컨설팅] 서비스 메쉬(Service mesh)
[오픈소스컨설팅] 서비스 메쉬(Service mesh)[오픈소스컨설팅] 서비스 메쉬(Service mesh)
[오픈소스컨설팅] 서비스 메쉬(Service mesh)
Open Source Consulting
 
Deep dive into Kubernetes Networking
Deep dive into Kubernetes NetworkingDeep dive into Kubernetes Networking
Deep dive into Kubernetes Networking
Sreenivas Makam
 
Confluent와 함께 Data in Motion 실현
Confluent와 함께 Data in Motion 실현Confluent와 함께 Data in Motion 실현
Confluent와 함께 Data in Motion 실현
confluent
 
차세대 데이터센터 네트워크 전략
차세대 데이터센터 네트워크 전략차세대 데이터센터 네트워크 전략
차세대 데이터센터 네트워크 전략
Woo Hyung Choi
 
Proxmox Talk - Linux Fest Northwest 2018
Proxmox Talk - Linux Fest Northwest 2018Proxmox Talk - Linux Fest Northwest 2018
Proxmox Talk - Linux Fest Northwest 2018
Richard Clark
 
The Basic Introduction of Open vSwitch
The Basic Introduction of Open vSwitchThe Basic Introduction of Open vSwitch
The Basic Introduction of Open vSwitch
Te-Yen Liu
 
The Juniper SDN Landscape
The Juniper SDN LandscapeThe Juniper SDN Landscape
The Juniper SDN Landscape
Chris Jones
 
Microservices Network Architecture 101
Microservices Network Architecture 101Microservices Network Architecture 101
Microservices Network Architecture 101
Cumulus Networks
 
cloud_foundation_on_vxrail_vcf_pnp_licensing_guide.pptx
cloud_foundation_on_vxrail_vcf_pnp_licensing_guide.pptxcloud_foundation_on_vxrail_vcf_pnp_licensing_guide.pptx
cloud_foundation_on_vxrail_vcf_pnp_licensing_guide.pptx
VitNguyn252054
 
Deploying CloudStack and Ceph with flexible VXLAN and BGP networking
Deploying CloudStack and Ceph with flexible VXLAN and BGP networking Deploying CloudStack and Ceph with flexible VXLAN and BGP networking
Deploying CloudStack and Ceph with flexible VXLAN and BGP networking
ShapeBlue
 
Kubernates vs Openshift: What is the difference and comparison between Opensh...
Kubernates vs Openshift: What is the difference and comparison between Opensh...Kubernates vs Openshift: What is the difference and comparison between Opensh...
Kubernates vs Openshift: What is the difference and comparison between Opensh...
jeetendra mandal
 
DockerCon 2017 - Cilium - Network and Application Security with BPF and XDP
DockerCon 2017 - Cilium - Network and Application Security with BPF and XDPDockerCon 2017 - Cilium - Network and Application Security with BPF and XDP
DockerCon 2017 - Cilium - Network and Application Security with BPF and XDP
Thomas Graf
 
macvlan and ipvlan
macvlan and ipvlanmacvlan and ipvlan
macvlan and ipvlan
Suraj Deshmukh
 
How VXLAN works on Linux
How VXLAN works on LinuxHow VXLAN works on Linux
How VXLAN works on LinuxEtsuji Nakai
 
Openstack Neutron, interconnections with BGP/MPLS VPNs
Openstack Neutron, interconnections with BGP/MPLS VPNsOpenstack Neutron, interconnections with BGP/MPLS VPNs
Openstack Neutron, interconnections with BGP/MPLS VPNs
Thomas Morin
 
Awx user guide
Awx user guideAwx user guide
Awx user guidemspirko
 
Open vSwitch 패킷 처리 구조
Open vSwitch 패킷 처리 구조Open vSwitch 패킷 처리 구조
Open vSwitch 패킷 처리 구조
Seung-Hoon Baek
 
XenDesktop&XenApp環境の印刷を極める
XenDesktop&XenApp環境の印刷を極めるXenDesktop&XenApp環境の印刷を極める
XenDesktop&XenApp環境の印刷を極める
Koji Yamada
 
VMware vSphere 6.0 - Troubleshooting Training - Day 5
VMware vSphere 6.0 - Troubleshooting Training - Day 5VMware vSphere 6.0 - Troubleshooting Training - Day 5
VMware vSphere 6.0 - Troubleshooting Training - Day 5
Sanjeev Kumar
 

What's hot (20)

Lisa 2015-gluster fs-hands-on
Lisa 2015-gluster fs-hands-onLisa 2015-gluster fs-hands-on
Lisa 2015-gluster fs-hands-on
 
[오픈소스컨설팅] 서비스 메쉬(Service mesh)
[오픈소스컨설팅] 서비스 메쉬(Service mesh)[오픈소스컨설팅] 서비스 메쉬(Service mesh)
[오픈소스컨설팅] 서비스 메쉬(Service mesh)
 
Deep dive into Kubernetes Networking
Deep dive into Kubernetes NetworkingDeep dive into Kubernetes Networking
Deep dive into Kubernetes Networking
 
Confluent와 함께 Data in Motion 실현
Confluent와 함께 Data in Motion 실현Confluent와 함께 Data in Motion 실현
Confluent와 함께 Data in Motion 실현
 
차세대 데이터센터 네트워크 전략
차세대 데이터센터 네트워크 전략차세대 데이터센터 네트워크 전략
차세대 데이터센터 네트워크 전략
 
Proxmox Talk - Linux Fest Northwest 2018
Proxmox Talk - Linux Fest Northwest 2018Proxmox Talk - Linux Fest Northwest 2018
Proxmox Talk - Linux Fest Northwest 2018
 
The Basic Introduction of Open vSwitch
The Basic Introduction of Open vSwitchThe Basic Introduction of Open vSwitch
The Basic Introduction of Open vSwitch
 
The Juniper SDN Landscape
The Juniper SDN LandscapeThe Juniper SDN Landscape
The Juniper SDN Landscape
 
Microservices Network Architecture 101
Microservices Network Architecture 101Microservices Network Architecture 101
Microservices Network Architecture 101
 
cloud_foundation_on_vxrail_vcf_pnp_licensing_guide.pptx
cloud_foundation_on_vxrail_vcf_pnp_licensing_guide.pptxcloud_foundation_on_vxrail_vcf_pnp_licensing_guide.pptx
cloud_foundation_on_vxrail_vcf_pnp_licensing_guide.pptx
 
Deploying CloudStack and Ceph with flexible VXLAN and BGP networking
Deploying CloudStack and Ceph with flexible VXLAN and BGP networking Deploying CloudStack and Ceph with flexible VXLAN and BGP networking
Deploying CloudStack and Ceph with flexible VXLAN and BGP networking
 
Kubernates vs Openshift: What is the difference and comparison between Opensh...
Kubernates vs Openshift: What is the difference and comparison between Opensh...Kubernates vs Openshift: What is the difference and comparison between Opensh...
Kubernates vs Openshift: What is the difference and comparison between Opensh...
 
DockerCon 2017 - Cilium - Network and Application Security with BPF and XDP
DockerCon 2017 - Cilium - Network and Application Security with BPF and XDPDockerCon 2017 - Cilium - Network and Application Security with BPF and XDP
DockerCon 2017 - Cilium - Network and Application Security with BPF and XDP
 
macvlan and ipvlan
macvlan and ipvlanmacvlan and ipvlan
macvlan and ipvlan
 
How VXLAN works on Linux
How VXLAN works on LinuxHow VXLAN works on Linux
How VXLAN works on Linux
 
Openstack Neutron, interconnections with BGP/MPLS VPNs
Openstack Neutron, interconnections with BGP/MPLS VPNsOpenstack Neutron, interconnections with BGP/MPLS VPNs
Openstack Neutron, interconnections with BGP/MPLS VPNs
 
Awx user guide
Awx user guideAwx user guide
Awx user guide
 
Open vSwitch 패킷 처리 구조
Open vSwitch 패킷 처리 구조Open vSwitch 패킷 처리 구조
Open vSwitch 패킷 처리 구조
 
XenDesktop&XenApp環境の印刷を極める
XenDesktop&XenApp環境の印刷を極めるXenDesktop&XenApp環境の印刷を極める
XenDesktop&XenApp環境の印刷を極める
 
VMware vSphere 6.0 - Troubleshooting Training - Day 5
VMware vSphere 6.0 - Troubleshooting Training - Day 5VMware vSphere 6.0 - Troubleshooting Training - Day 5
VMware vSphere 6.0 - Troubleshooting Training - Day 5
 

Similar to Tungsten Fabric Overview

Kubernetes One-Click Deployment: Hands-on Workshop (Mainz)
Kubernetes One-Click Deployment: Hands-on Workshop (Mainz)Kubernetes One-Click Deployment: Hands-on Workshop (Mainz)
Kubernetes One-Click Deployment: Hands-on Workshop (Mainz)
QAware GmbH
 
Reference design for v mware nsx
Reference design for v mware nsxReference design for v mware nsx
Reference design for v mware nsx
solarisyougood
 
Service Meshes with Istio
Service Meshes with IstioService Meshes with Istio
Service Meshes with Istio
RandyGupta
 
Support of containerized workloads in ONAP
Support of containerized workloads in ONAPSupport of containerized workloads in ONAP
Support of containerized workloads in ONAP
Victor Morales
 
Kubernetes for java developers - Tutorial at Oracle Code One 2018
Kubernetes for java developers - Tutorial at Oracle Code One 2018Kubernetes for java developers - Tutorial at Oracle Code One 2018
Kubernetes for java developers - Tutorial at Oracle Code One 2018
Anthony Dahanne
 
Understanding network and service virtualization
Understanding network and service virtualizationUnderstanding network and service virtualization
Understanding network and service virtualization
SDN Hub
 
Comparison of existing cni plugins for kubernetes
Comparison of existing cni plugins for kubernetesComparison of existing cni plugins for kubernetes
Comparison of existing cni plugins for kubernetes
Adam Hamsik
 
Harmonia open iris_basic_v0.1
Harmonia open iris_basic_v0.1Harmonia open iris_basic_v0.1
Harmonia open iris_basic_v0.1
Yongyoon Shin
 
4. CNCF kubernetes Comparison of-existing-cni-plugins-for-kubernetes
4. CNCF kubernetes Comparison of-existing-cni-plugins-for-kubernetes4. CNCF kubernetes Comparison of-existing-cni-plugins-for-kubernetes
4. CNCF kubernetes Comparison of-existing-cni-plugins-for-kubernetes
Juraj Hantak
 
What's New in Docker - February 2017
What's New in Docker - February 2017What's New in Docker - February 2017
What's New in Docker - February 2017
Patrick Chanezon
 
Red Hat multi-cluster management & what's new in OpenShift
Red Hat multi-cluster management & what's new in OpenShiftRed Hat multi-cluster management & what's new in OpenShift
Red Hat multi-cluster management & what's new in OpenShift
Kangaroot
 
Kubernetes20151017a
Kubernetes20151017aKubernetes20151017a
Kubernetes20151017a
Richard Kuo
 
Manchester MuleSoft Meetup #6 - Runtime Fabric with Mulesoft
Manchester MuleSoft Meetup #6 - Runtime Fabric with Mulesoft Manchester MuleSoft Meetup #6 - Runtime Fabric with Mulesoft
Manchester MuleSoft Meetup #6 - Runtime Fabric with Mulesoft
Akshata Sawant
 
Dragonflow 01 2016 TLV meetup
Dragonflow 01 2016 TLV meetup  Dragonflow 01 2016 TLV meetup
Dragonflow 01 2016 TLV meetup
Eran Gampel
 
Introductio to Docker and usage in HPC applications
Introductio to Docker and usage in HPC applicationsIntroductio to Docker and usage in HPC applications
Introductio to Docker and usage in HPC applications
Richie Varghese
 
Introduction to Software Defined Networking (SDN) presentation by Warren Finc...
Introduction to Software Defined Networking (SDN) presentation by Warren Finc...Introduction to Software Defined Networking (SDN) presentation by Warren Finc...
Introduction to Software Defined Networking (SDN) presentation by Warren Finc...
APNIC
 
Introduction to Software Defined Networking (SDN)
Introduction to Software Defined Networking (SDN)Introduction to Software Defined Networking (SDN)
Introduction to Software Defined Networking (SDN)
Bangladesh Network Operators Group
 
Introduction to istio
Introduction to istioIntroduction to istio
Introduction to istio
Andrea Monacchi
 
Au delà des brokers, un tour de l’environnement Kafka | Florent Ramière
Au delà des brokers, un tour de l’environnement Kafka | Florent RamièreAu delà des brokers, un tour de l’environnement Kafka | Florent Ramière
Au delà des brokers, un tour de l’environnement Kafka | Florent Ramière
confluent
 
Open stackaustinmeetupsept21
Open stackaustinmeetupsept21Open stackaustinmeetupsept21
Open stackaustinmeetupsept21
Brent Doncaster
 

Similar to Tungsten Fabric Overview (20)

Kubernetes One-Click Deployment: Hands-on Workshop (Mainz)
Kubernetes One-Click Deployment: Hands-on Workshop (Mainz)Kubernetes One-Click Deployment: Hands-on Workshop (Mainz)
Kubernetes One-Click Deployment: Hands-on Workshop (Mainz)
 
Reference design for v mware nsx
Reference design for v mware nsxReference design for v mware nsx
Reference design for v mware nsx
 
Service Meshes with Istio
Service Meshes with IstioService Meshes with Istio
Service Meshes with Istio
 
Support of containerized workloads in ONAP
Support of containerized workloads in ONAPSupport of containerized workloads in ONAP
Support of containerized workloads in ONAP
 
Kubernetes for java developers - Tutorial at Oracle Code One 2018
Kubernetes for java developers - Tutorial at Oracle Code One 2018Kubernetes for java developers - Tutorial at Oracle Code One 2018
Kubernetes for java developers - Tutorial at Oracle Code One 2018
 
Understanding network and service virtualization
Understanding network and service virtualizationUnderstanding network and service virtualization
Understanding network and service virtualization
 
Comparison of existing cni plugins for kubernetes
Comparison of existing cni plugins for kubernetesComparison of existing cni plugins for kubernetes
Comparison of existing cni plugins for kubernetes
 
Harmonia open iris_basic_v0.1
Harmonia open iris_basic_v0.1Harmonia open iris_basic_v0.1
Harmonia open iris_basic_v0.1
 
4. CNCF kubernetes Comparison of-existing-cni-plugins-for-kubernetes
4. CNCF kubernetes Comparison of-existing-cni-plugins-for-kubernetes4. CNCF kubernetes Comparison of-existing-cni-plugins-for-kubernetes
4. CNCF kubernetes Comparison of-existing-cni-plugins-for-kubernetes
 
What's New in Docker - February 2017
What's New in Docker - February 2017What's New in Docker - February 2017
What's New in Docker - February 2017
 
Red Hat multi-cluster management & what's new in OpenShift
Red Hat multi-cluster management & what's new in OpenShiftRed Hat multi-cluster management & what's new in OpenShift
Red Hat multi-cluster management & what's new in OpenShift
 
Kubernetes20151017a
Kubernetes20151017aKubernetes20151017a
Kubernetes20151017a
 
Manchester MuleSoft Meetup #6 - Runtime Fabric with Mulesoft
Manchester MuleSoft Meetup #6 - Runtime Fabric with Mulesoft Manchester MuleSoft Meetup #6 - Runtime Fabric with Mulesoft
Manchester MuleSoft Meetup #6 - Runtime Fabric with Mulesoft
 
Dragonflow 01 2016 TLV meetup
Dragonflow 01 2016 TLV meetup  Dragonflow 01 2016 TLV meetup
Dragonflow 01 2016 TLV meetup
 
Introductio to Docker and usage in HPC applications
Introductio to Docker and usage in HPC applicationsIntroductio to Docker and usage in HPC applications
Introductio to Docker and usage in HPC applications
 
Introduction to Software Defined Networking (SDN) presentation by Warren Finc...
Introduction to Software Defined Networking (SDN) presentation by Warren Finc...Introduction to Software Defined Networking (SDN) presentation by Warren Finc...
Introduction to Software Defined Networking (SDN) presentation by Warren Finc...
 
Introduction to Software Defined Networking (SDN)
Introduction to Software Defined Networking (SDN)Introduction to Software Defined Networking (SDN)
Introduction to Software Defined Networking (SDN)
 
Introduction to istio
Introduction to istioIntroduction to istio
Introduction to istio
 
Au delà des brokers, un tour de l’environnement Kafka | Florent Ramière
Au delà des brokers, un tour de l’environnement Kafka | Florent RamièreAu delà des brokers, un tour de l’environnement Kafka | Florent Ramière
Au delà des brokers, un tour de l’environnement Kafka | Florent Ramière
 
Open stackaustinmeetupsept21
Open stackaustinmeetupsept21Open stackaustinmeetupsept21
Open stackaustinmeetupsept21
 

More from Michelle Holley

NFF-GO (YANFF) - Yet Another Network Function Framework
NFF-GO (YANFF) - Yet Another Network Function FrameworkNFF-GO (YANFF) - Yet Another Network Function Framework
NFF-GO (YANFF) - Yet Another Network Function Framework
Michelle Holley
 
Edge and 5G: What is in it for the developers?
Edge and 5G: What is in it for the developers?Edge and 5G: What is in it for the developers?
Edge and 5G: What is in it for the developers?
Michelle Holley
 
5G and Open Reference Platforms
5G and Open Reference Platforms5G and Open Reference Platforms
5G and Open Reference Platforms
Michelle Holley
 
De-fogging Edge Computing: Ecosystem, Use-cases, and Opportunities
De-fogging Edge Computing: Ecosystem, Use-cases, and OpportunitiesDe-fogging Edge Computing: Ecosystem, Use-cases, and Opportunities
De-fogging Edge Computing: Ecosystem, Use-cases, and Opportunities
Michelle Holley
 
Building the SD-Branch using uCPE
Building the SD-Branch using uCPEBuilding the SD-Branch using uCPE
Building the SD-Branch using uCPE
Michelle Holley
 
Enabling Multi-access Edge Computing (MEC) Platform-as-a-Service for Enterprises
Enabling Multi-access Edge Computing (MEC) Platform-as-a-Service for EnterprisesEnabling Multi-access Edge Computing (MEC) Platform-as-a-Service for Enterprises
Enabling Multi-access Edge Computing (MEC) Platform-as-a-Service for Enterprises
Michelle Holley
 
Accelerating Edge Computing Adoption
Accelerating Edge Computing Adoption Accelerating Edge Computing Adoption
Accelerating Edge Computing Adoption
Michelle Holley
 
Install FD.IO VPP On Intel(r) Architecture & Test with Trex*
Install FD.IO VPP On Intel(r) Architecture & Test with Trex*Install FD.IO VPP On Intel(r) Architecture & Test with Trex*
Install FD.IO VPP On Intel(r) Architecture & Test with Trex*
Michelle Holley
 
DPDK & Cloud Native
DPDK & Cloud NativeDPDK & Cloud Native
DPDK & Cloud Native
Michelle Holley
 
OpenDaylight Update (June 2018)
OpenDaylight Update (June 2018)OpenDaylight Update (June 2018)
OpenDaylight Update (June 2018)
Michelle Holley
 
Orchestrating NFV Workloads in Multiple Clouds
Orchestrating NFV Workloads in Multiple CloudsOrchestrating NFV Workloads in Multiple Clouds
Orchestrating NFV Workloads in Multiple Clouds
Michelle Holley
 
Convergence of device and data at the Edge Cloud
Convergence of device and data at the Edge CloudConvergence of device and data at the Edge Cloud
Convergence of device and data at the Edge Cloud
Michelle Holley
 
Intel® Network Builders - Network Edge Ecosystem Program
Intel® Network Builders - Network Edge Ecosystem ProgramIntel® Network Builders - Network Edge Ecosystem Program
Intel® Network Builders - Network Edge Ecosystem Program
Michelle Holley
 
Design Implications, Challenges and Principles of Zero-Touch Management Envir...
Design Implications, Challenges and Principles of Zero-Touch Management Envir...Design Implications, Challenges and Principles of Zero-Touch Management Envir...
Design Implications, Challenges and Principles of Zero-Touch Management Envir...
Michelle Holley
 
Using Microservices Architecture and Patterns to Address Applications Require...
Using Microservices Architecture and Patterns to Address Applications Require...Using Microservices Architecture and Patterns to Address Applications Require...
Using Microservices Architecture and Patterns to Address Applications Require...
Michelle Holley
 
Intel Powered AI Applications for Telco
Intel Powered AI Applications for TelcoIntel Powered AI Applications for Telco
Intel Powered AI Applications for Telco
Michelle Holley
 
Artificial Intelligence in the Network
Artificial Intelligence in the Network Artificial Intelligence in the Network
Artificial Intelligence in the Network
Michelle Holley
 
Service Mesh on Kubernetes with Istio
Service Mesh on Kubernetes with IstioService Mesh on Kubernetes with Istio
Service Mesh on Kubernetes with Istio
Michelle Holley
 
Intel® QuickAssist Technology Introduction, Applications, and Lab, Including ...
Intel® QuickAssist Technology Introduction, Applications, and Lab, Including ...Intel® QuickAssist Technology Introduction, Applications, and Lab, Including ...
Intel® QuickAssist Technology Introduction, Applications, and Lab, Including ...
Michelle Holley
 
Accelerating Virtual Machine Access with the Storage Performance Development ...
Accelerating Virtual Machine Access with the Storage Performance Development ...Accelerating Virtual Machine Access with the Storage Performance Development ...
Accelerating Virtual Machine Access with the Storage Performance Development ...
Michelle Holley
 

More from Michelle Holley (20)

NFF-GO (YANFF) - Yet Another Network Function Framework
NFF-GO (YANFF) - Yet Another Network Function FrameworkNFF-GO (YANFF) - Yet Another Network Function Framework
NFF-GO (YANFF) - Yet Another Network Function Framework
 
Edge and 5G: What is in it for the developers?
Edge and 5G: What is in it for the developers?Edge and 5G: What is in it for the developers?
Edge and 5G: What is in it for the developers?
 
5G and Open Reference Platforms
5G and Open Reference Platforms5G and Open Reference Platforms
5G and Open Reference Platforms
 
De-fogging Edge Computing: Ecosystem, Use-cases, and Opportunities
De-fogging Edge Computing: Ecosystem, Use-cases, and OpportunitiesDe-fogging Edge Computing: Ecosystem, Use-cases, and Opportunities
De-fogging Edge Computing: Ecosystem, Use-cases, and Opportunities
 
Building the SD-Branch using uCPE
Building the SD-Branch using uCPEBuilding the SD-Branch using uCPE
Building the SD-Branch using uCPE
 
Enabling Multi-access Edge Computing (MEC) Platform-as-a-Service for Enterprises
Enabling Multi-access Edge Computing (MEC) Platform-as-a-Service for EnterprisesEnabling Multi-access Edge Computing (MEC) Platform-as-a-Service for Enterprises
Enabling Multi-access Edge Computing (MEC) Platform-as-a-Service for Enterprises
 
Accelerating Edge Computing Adoption
Accelerating Edge Computing Adoption Accelerating Edge Computing Adoption
Accelerating Edge Computing Adoption
 
Install FD.IO VPP On Intel(r) Architecture & Test with Trex*
Install FD.IO VPP On Intel(r) Architecture & Test with Trex*Install FD.IO VPP On Intel(r) Architecture & Test with Trex*
Install FD.IO VPP On Intel(r) Architecture & Test with Trex*
 
DPDK & Cloud Native
DPDK & Cloud NativeDPDK & Cloud Native
DPDK & Cloud Native
 
OpenDaylight Update (June 2018)
OpenDaylight Update (June 2018)OpenDaylight Update (June 2018)
OpenDaylight Update (June 2018)
 
Orchestrating NFV Workloads in Multiple Clouds
Orchestrating NFV Workloads in Multiple CloudsOrchestrating NFV Workloads in Multiple Clouds
Orchestrating NFV Workloads in Multiple Clouds
 
Convergence of device and data at the Edge Cloud
Convergence of device and data at the Edge CloudConvergence of device and data at the Edge Cloud
Convergence of device and data at the Edge Cloud
 
Intel® Network Builders - Network Edge Ecosystem Program
Intel® Network Builders - Network Edge Ecosystem ProgramIntel® Network Builders - Network Edge Ecosystem Program
Intel® Network Builders - Network Edge Ecosystem Program
 
Design Implications, Challenges and Principles of Zero-Touch Management Envir...
Design Implications, Challenges and Principles of Zero-Touch Management Envir...Design Implications, Challenges and Principles of Zero-Touch Management Envir...
Design Implications, Challenges and Principles of Zero-Touch Management Envir...
 
Using Microservices Architecture and Patterns to Address Applications Require...
Using Microservices Architecture and Patterns to Address Applications Require...Using Microservices Architecture and Patterns to Address Applications Require...
Using Microservices Architecture and Patterns to Address Applications Require...
 
Intel Powered AI Applications for Telco
Intel Powered AI Applications for TelcoIntel Powered AI Applications for Telco
Intel Powered AI Applications for Telco
 
Artificial Intelligence in the Network
Artificial Intelligence in the Network Artificial Intelligence in the Network
Artificial Intelligence in the Network
 
Service Mesh on Kubernetes with Istio
Service Mesh on Kubernetes with IstioService Mesh on Kubernetes with Istio
Service Mesh on Kubernetes with Istio
 
Intel® QuickAssist Technology Introduction, Applications, and Lab, Including ...
Intel® QuickAssist Technology Introduction, Applications, and Lab, Including ...Intel® QuickAssist Technology Introduction, Applications, and Lab, Including ...
Intel® QuickAssist Technology Introduction, Applications, and Lab, Including ...
 
Accelerating Virtual Machine Access with the Storage Performance Development ...
Accelerating Virtual Machine Access with the Storage Performance Development ...Accelerating Virtual Machine Access with the Storage Performance Development ...
Accelerating Virtual Machine Access with the Storage Performance Development ...
 

Recently uploaded

Vitthal Shirke Microservices Resume Montevideo
Vitthal Shirke Microservices Resume MontevideoVitthal Shirke Microservices Resume Montevideo
Vitthal Shirke Microservices Resume Montevideo
Vitthal Shirke
 
Software Testing Exam imp Ques Notes.pdf
Software Testing Exam imp Ques Notes.pdfSoftware Testing Exam imp Ques Notes.pdf
Software Testing Exam imp Ques Notes.pdf
MayankTawar1
 
Understanding Globus Data Transfers with NetSage
Understanding Globus Data Transfers with NetSageUnderstanding Globus Data Transfers with NetSage
Understanding Globus Data Transfers with NetSage
Globus
 
Enhancing Research Orchestration Capabilities at ORNL.pdf
Enhancing Research Orchestration Capabilities at ORNL.pdfEnhancing Research Orchestration Capabilities at ORNL.pdf
Enhancing Research Orchestration Capabilities at ORNL.pdf
Globus
 
Advanced Flow Concepts Every Developer Should Know
Advanced Flow Concepts Every Developer Should KnowAdvanced Flow Concepts Every Developer Should Know
Advanced Flow Concepts Every Developer Should Know
Peter Caitens
 
Multiple Your Crypto Portfolio with the Innovative Features of Advanced Crypt...
Multiple Your Crypto Portfolio with the Innovative Features of Advanced Crypt...Multiple Your Crypto Portfolio with the Innovative Features of Advanced Crypt...
Multiple Your Crypto Portfolio with the Innovative Features of Advanced Crypt...
Hivelance Technology
 
Webinar: Salesforce Document Management 2.0 - Smarter, Faster, Better
Webinar: Salesforce Document Management 2.0 - Smarter, Faster, BetterWebinar: Salesforce Document Management 2.0 - Smarter, Faster, Better
Webinar: Salesforce Document Management 2.0 - Smarter, Faster, Better
XfilesPro
 
OpenFOAM solver for Helmholtz equation, helmholtzFoam / helmholtzBubbleFoam
OpenFOAM solver for Helmholtz equation, helmholtzFoam / helmholtzBubbleFoamOpenFOAM solver for Helmholtz equation, helmholtzFoam / helmholtzBubbleFoam
OpenFOAM solver for Helmholtz equation, helmholtzFoam / helmholtzBubbleFoam
takuyayamamoto1800
 
Exploring Innovations in Data Repository Solutions - Insights from the U.S. G...
Exploring Innovations in Data Repository Solutions - Insights from the U.S. G...Exploring Innovations in Data Repository Solutions - Insights from the U.S. G...
Exploring Innovations in Data Repository Solutions - Insights from the U.S. G...
Globus
 
BoxLang: Review our Visionary Licenses of 2024
BoxLang: Review our Visionary Licenses of 2024BoxLang: Review our Visionary Licenses of 2024
BoxLang: Review our Visionary Licenses of 2024
Ortus Solutions, Corp
 
Why React Native as a Strategic Advantage for Startup Innovation.pdf
Why React Native as a Strategic Advantage for Startup Innovation.pdfWhy React Native as a Strategic Advantage for Startup Innovation.pdf
Why React Native as a Strategic Advantage for Startup Innovation.pdf
ayushiqss
 
Globus Compute Introduction - GlobusWorld 2024
Globus Compute Introduction - GlobusWorld 2024Globus Compute Introduction - GlobusWorld 2024
Globus Compute Introduction - GlobusWorld 2024
Globus
 
Large Language Models and the End of Programming
Large Language Models and the End of ProgrammingLarge Language Models and the End of Programming
Large Language Models and the End of Programming
Matt Welsh
 
Using IESVE for Room Loads Analysis - Australia & New Zealand
Using IESVE for Room Loads Analysis - Australia & New ZealandUsing IESVE for Room Loads Analysis - Australia & New Zealand
Using IESVE for Room Loads Analysis - Australia & New Zealand
IES VE
 
2024 RoOUG Security model for the cloud.pptx
2024 RoOUG Security model for the cloud.pptx2024 RoOUG Security model for the cloud.pptx
2024 RoOUG Security model for the cloud.pptx
Georgi Kodinov
 
top nidhi software solution freedownload
top nidhi software solution freedownloadtop nidhi software solution freedownload
top nidhi software solution freedownload
vrstrong314
 
How Does XfilesPro Ensure Security While Sharing Documents in Salesforce?
How Does XfilesPro Ensure Security While Sharing Documents in Salesforce?How Does XfilesPro Ensure Security While Sharing Documents in Salesforce?
How Does XfilesPro Ensure Security While Sharing Documents in Salesforce?
XfilesPro
 
GlobusWorld 2024 Opening Keynote session
GlobusWorld 2024 Opening Keynote sessionGlobusWorld 2024 Opening Keynote session
GlobusWorld 2024 Opening Keynote session
Globus
 
Quarkus Hidden and Forbidden Extensions
Quarkus Hidden and Forbidden ExtensionsQuarkus Hidden and Forbidden Extensions
Quarkus Hidden and Forbidden Extensions
Max Andersen
 
Globus Compute wth IRI Workflows - GlobusWorld 2024
Globus Compute wth IRI Workflows - GlobusWorld 2024Globus Compute wth IRI Workflows - GlobusWorld 2024
Globus Compute wth IRI Workflows - GlobusWorld 2024
Globus
 

Recently uploaded (20)

Vitthal Shirke Microservices Resume Montevideo
Vitthal Shirke Microservices Resume MontevideoVitthal Shirke Microservices Resume Montevideo
Vitthal Shirke Microservices Resume Montevideo
 
Software Testing Exam imp Ques Notes.pdf
Software Testing Exam imp Ques Notes.pdfSoftware Testing Exam imp Ques Notes.pdf
Software Testing Exam imp Ques Notes.pdf
 
Understanding Globus Data Transfers with NetSage
Understanding Globus Data Transfers with NetSageUnderstanding Globus Data Transfers with NetSage
Understanding Globus Data Transfers with NetSage
 
Enhancing Research Orchestration Capabilities at ORNL.pdf
Enhancing Research Orchestration Capabilities at ORNL.pdfEnhancing Research Orchestration Capabilities at ORNL.pdf
Enhancing Research Orchestration Capabilities at ORNL.pdf
 
Advanced Flow Concepts Every Developer Should Know
Advanced Flow Concepts Every Developer Should KnowAdvanced Flow Concepts Every Developer Should Know
Advanced Flow Concepts Every Developer Should Know
 
Multiple Your Crypto Portfolio with the Innovative Features of Advanced Crypt...
Multiple Your Crypto Portfolio with the Innovative Features of Advanced Crypt...Multiple Your Crypto Portfolio with the Innovative Features of Advanced Crypt...
Multiple Your Crypto Portfolio with the Innovative Features of Advanced Crypt...
 
Webinar: Salesforce Document Management 2.0 - Smarter, Faster, Better
Webinar: Salesforce Document Management 2.0 - Smarter, Faster, BetterWebinar: Salesforce Document Management 2.0 - Smarter, Faster, Better
Webinar: Salesforce Document Management 2.0 - Smarter, Faster, Better
 
OpenFOAM solver for Helmholtz equation, helmholtzFoam / helmholtzBubbleFoam
OpenFOAM solver for Helmholtz equation, helmholtzFoam / helmholtzBubbleFoamOpenFOAM solver for Helmholtz equation, helmholtzFoam / helmholtzBubbleFoam
OpenFOAM solver for Helmholtz equation, helmholtzFoam / helmholtzBubbleFoam
 
Exploring Innovations in Data Repository Solutions - Insights from the U.S. G...
Exploring Innovations in Data Repository Solutions - Insights from the U.S. G...Exploring Innovations in Data Repository Solutions - Insights from the U.S. G...
Exploring Innovations in Data Repository Solutions - Insights from the U.S. G...
 
BoxLang: Review our Visionary Licenses of 2024
BoxLang: Review our Visionary Licenses of 2024BoxLang: Review our Visionary Licenses of 2024
BoxLang: Review our Visionary Licenses of 2024
 
Why React Native as a Strategic Advantage for Startup Innovation.pdf
Why React Native as a Strategic Advantage for Startup Innovation.pdfWhy React Native as a Strategic Advantage for Startup Innovation.pdf
Why React Native as a Strategic Advantage for Startup Innovation.pdf
 
Globus Compute Introduction - GlobusWorld 2024
Globus Compute Introduction - GlobusWorld 2024Globus Compute Introduction - GlobusWorld 2024
Globus Compute Introduction - GlobusWorld 2024
 
Large Language Models and the End of Programming
Large Language Models and the End of ProgrammingLarge Language Models and the End of Programming
Large Language Models and the End of Programming
 
Using IESVE for Room Loads Analysis - Australia & New Zealand
Using IESVE for Room Loads Analysis - Australia & New ZealandUsing IESVE for Room Loads Analysis - Australia & New Zealand
Using IESVE for Room Loads Analysis - Australia & New Zealand
 
2024 RoOUG Security model for the cloud.pptx
2024 RoOUG Security model for the cloud.pptx2024 RoOUG Security model for the cloud.pptx
2024 RoOUG Security model for the cloud.pptx
 
top nidhi software solution freedownload
top nidhi software solution freedownloadtop nidhi software solution freedownload
top nidhi software solution freedownload
 
How Does XfilesPro Ensure Security While Sharing Documents in Salesforce?
How Does XfilesPro Ensure Security While Sharing Documents in Salesforce?How Does XfilesPro Ensure Security While Sharing Documents in Salesforce?
How Does XfilesPro Ensure Security While Sharing Documents in Salesforce?
 
GlobusWorld 2024 Opening Keynote session
GlobusWorld 2024 Opening Keynote sessionGlobusWorld 2024 Opening Keynote session
GlobusWorld 2024 Opening Keynote session
 
Quarkus Hidden and Forbidden Extensions
Quarkus Hidden and Forbidden ExtensionsQuarkus Hidden and Forbidden Extensions
Quarkus Hidden and Forbidden Extensions
 
Globus Compute wth IRI Workflows - GlobusWorld 2024
Globus Compute wth IRI Workflows - GlobusWorld 2024Globus Compute wth IRI Workflows - GlobusWorld 2024
Globus Compute wth IRI Workflows - GlobusWorld 2024
 

Tungsten Fabric Overview

  • 2. MISSION Build the world’s most ubiquitous, easy-to-use, scalable, secure, and cloud-grade SDN stack, providing a network fabric connecting all environments, all clouds, all people.
  • 4. CODE • 2013-Today: >300 years of work • 200-300 developer contributions • ~100 active developers • Languages: C++, Python, Node, Go • Apache 2.0 license • GitHub repositories • Gerrit review processes • Launchpad bug tracking and blueprints • Other OSS used: Cassandra, Kafka, HAproxy, Docker, Keystone
  • 5. COMMUNITY Principles: • Open and inclusive • Provide strong technical and architectural oversight • Competitive ideas welcome • Rough consensus and running code will always win • Iterate and evolve
  • 6. COMMUNITY • Online: • Downloads and trial sandbox • Talk with 900+ people: Slack, Mailing lists • Follow: Blog, YouTube, Facebook, Twitter • GitHub: Presentations, Tutorials • Live (see calendar) : • Conferences: OpenStack, KubeCon, ONS, Re:invent and GC Next • Meetups: host your own or join some • User Group events: often at conferences • Governance summits • Groups: Governance, Technical, Infrastructure • Community manager: Greg Elkinbard JOIN • tungsten.io/slack • tungsten.io/community
  • 8. PAST, PRESENT & FUTURE • OpenStack networking at scale • NFV service chaining • Analytics collection/querying • REST API and GUI • Docker & ESXi runtime support • VMware vSphere support • DPDK vRouter • Prototype with Kubernetes v1.1 • Node-port service chaining • Improve analytics with Kafka • LBaaS • ToR switch as OVSDB gateway • Kubernetes and CNI support • OpenShift and Mesos support • Containerize project • New install w/ Ansible or Helm • Security focus • Multicloud deployability • Switching fabric focus • Declarative network as code v1 v2 v4v3 v5+
  • 10. VIRTUAL NETWORK GREEN Host + Hypervisor Host + Hypervisor Visualizing Tungsten Fabric’s Operational Effects VIRTUAL NETWORK BLUE VIRTUAL NETWORK YELLOW TF Security Policy (e.g. allow only HTTP traffic) Service Chain Policy with a Firewall VNF IP fabric (switch underlay) G1 G2 G3 B3 B1 B2 G1 G3 G2 Y1 Y2 Y3B1 B2 B3 Y2Y3 Y1 VM and virtualized Network function pool Intra-network traffic Inter-network traffic traversing a service … … LOGICAL (PolicyDefinition) PHYSICAL (PolicyEnforcement) Non-HTTP traffic Security Groups
  • 11. Seamless Multi-Cloud Overlay SDN Telco POPs Private Cloud DC Public Cloud VPCUsers Multicloud SDN Virtual Networking: Overlay Virtual Networking provides connectivity for VM’s and Containers Distributed Compute Platforms: Leverage the right balance of edge compute, private cloud compute, and public cloud compute to deploy services Ubiquitous Security – Centralized security policy orchestration with distributed enforcement across multiple clouds Performance and Scale: Manage remote compute resources, high performance virtual network functions, and containers using the same tools Overlay SDN
  • 12. ARCHITECTURE OVERVIEW Ethernet / IP underlay network TF CONTROLLER, API & GUI scale-out control and management container micro-services REST XMPP ORCHESTRATION NODES XMPP virtual overlay networks TF Orchestration plug-ins Control COMPUTE NODE 2… TF vRouter COMPUTE NODE 1 TF vRouter Compute Runtime Compute Runtime Control Networks isolated unless connected with policy
  • 13. USER EXPERIENCE • REST API • HTTPS authentication and role- based authorization • Used for GUI • Used for declarative configurations as code • Generated from data model NORTH-BOUND API GUI
  • 14. VROUTER DEPLOYMENT MODELS KERNEL VROUTER DPDK VROUTER SRIOV/ VROUTER COEXISTENCE SMARTNIC VROUTER …VM 1 vRouter Agent VNF 2 …VM 1 vRouter Agent VM 2 …VM 1 vRouter Agent VM 2 …VM 1 vRouter Agent VM 2 § vRouter runs as a user space process and uses DPDK for fast path Packet I/O. § Full set of SDN Capabilities Supported § Requires the VMs to have DPDK enabled for performance benefits § vRouter fwding plane runs within the NIC § Workloads are SRIOV- connected to the NIC § Some workloads can directly SRIOV into the NIC, while others go through the vRouter § Sometimes a VNF can have multiple interfaces some of which are SRIOV-ed to the NIC § Interfaces that are SRIOV-ed into NIC don’t get the benefits / features of vRouter § This the normal operation where fwding plane of vRouter runs in the kernel and are connected to VMs using TAP interface (or veth pair for containers) § vRouter itself is enhanced using other performance related features: o TSO / LRO o Multi-Q Virtio
  • 15. CONTAINERIZED WORKLOADS kube-manager TF Controller kube-manager listens to K8s API Server and conveys the API request to the Controller Compute Node … POD 1 C 1 … Compute Node POD 2 C 2 … POD 3 C 3 … POD 4 C 4 … API Server K8s and Contrail Controller Nodes Scheduler … Replication Ctrl kubectl (user commands) vRouter (replaces kube-proxy) CNI Plugin vRouter (replaces kube-proxy) CNI Plugin Kubele t Kubele t
  • 16. DIFFERENT LEVELS OF ISOLATION N a m e s p a c e - B S 3 S 4 POD 9 … POD 13 … … N a m e s p a c e - A S 1 S 2 POD 1 … POD 5 … … N a m e s p a c e - D S 7 S 8 POD 25 … POD 29 … … N a m e s p a c e - C S 5 S 6 POD 17 … POD 21 … … N a m e s p a c e - F S1 1 S1 2 POD 41 … POD 45 … … N a m e s p a c e - E S 9 S1 0 POD 33 … POD 37 … … DEFAULT CLUSTER MODE NAMESPACE ISOLATION POD / SERVICE ISOLATION § This is how Kubernetes networking works today § Flat subnet where -- Any workload can talk to any other workload § In addition to default cluster, operator can add isolation to different namespaces transparent to the developer § In this mode, each POD is isolated from one another § Note that all three modes can co-exist
  • 17. The Latest from Tungsten Fabric Ø Microservices architecture Ø Better cloud native deployment options Ø Comprehensive support for Network objects Ø Ingress/Egress Network Policy Ø High performance load balancing Ø Improved flow performance and management Ø SDN for Edge Compute – Beta Quality House Keeping Container SDN VM’s and NFV
  • 18. CONAINERIZED ARCHITECTURE … § Multiple personalities of containers: o 3 controller container – (Controller, Analytics, Analytics DB) each representing a node o LB to enable HA (based on HAProxy) will be provided as container not a mandatory item o vRouter Agent on containers § Containers are deployed using either Ansible / K8s / Helm Charts / Docker Compose § Each of the nodes can independently scale (3 x) § Can be deployed on Bare Metal or VMs § No change in the role / functionality of the Control / config / analytics nodes SALIENT ASPECTS BENEFITS § LCM is simplified [All dependencies within the container (easy bring up) ] § Accelerate provisioning § Integration with 3rd party provisioning tools simplified Config + Control Analytics Analytics DB Compute Node Compute Node … … … … … … Docker containers orchestrated using K8s or other orchestration tools HA Controller Nodes vRouter Agent vRouter Agent vRouter vRouter Containerizing Contrail Control Plane – for easier manageability
  • 19. INSTALLATION • Ansible playbook to flexibly deploy Tungsten Fabric binaries • Helm charts to easily operate Tungsten Fabric components on Kubernetes • Install-time option with OpenShift to deploy with Tungsten Fabric • Tungsten Fabric binaries available on DockerHub and we’re improving CI/CD • Commercial integrations into lifecycle tools like RH OpenStack Director
  • 20. VERSATILE SDN SOLUTION L4 Policy Tungsten Fabric network and security policies provide fine grain traffic control, while abstracting away the underlay topology. 1 Svc Chain Policy2 Containers App Tier DB Tier BMSVMs VMsFWL B Web Tier VMs 1 2 1 Consistent security and network functionality between VMs, containers, or bare metal. … VM Compute Node Nested Container Compute Node Tungsten Fabric Username Passwor d … NFV Compute Node
  • 21. SOFTWARE DEFINED SECURE NETWORKING … We b Ap p d b App1, Deployment = Dev We b Ap p d b App1, Deployment = Staging We b Ap p d b App1, Deployment = Prod Tungsten fabric provides a rich, consistent set of security policy capabilities across multiple platforms. We b Ap p d b App1, Deployment = Dev-K8s We b Ap p d b App1, Deployment = Dev- Mesos vRouter Security Groups We b Ap p d b App1, Deployment = Staging-BMS B a r e M e t a l S e r v e r s Network Policy Device Manager 1. Simplified Manageability (change control, etc. is much easier) 2. Improved Scalability 3. Define / Review / Approve Once à Use Everywhere
  • 22. Handling and Matching Flows 22 ● 3X flow setup rate improvement ● TCP state machine to bypass flow aging ● Fat flow protocol & port i.e. Protocol: UDP Port:53 (Fat Flow) ● Enable/Disable flows * * Note: features likes SG, floating-IP, VN based policy and VRF assign rules will not function 3X Improvement Fat Flow 2.2 Enable/Disable Flows Contrail 3.0.X/3.1.X TCP state machine 2.2
  • 23. FAT Flow Enhancements Fat Flow Current Implementation 23 A flow key is used to hash into a flow table (identify a hash bucket). The flow key is based on five tuple consisting of source and destination IP addresses, ports and the IP protocol Flow Key is reduced from a 5-Tuple to a 4-Tuple consisting of source & destination IP, destination port and IP protocol. The client port is not used in the flow key. SRC IP DST IP SRC Port DST Port IP PacketProtocol Virtual Machine Interface FAT Flow Protocol (TCP/UDP/SCTP & ICMP) & Port Pairs Flow Key Hash using 5 Tuple
  • 24. Fat Flow Enhancements 2 4 To enhance vRouter Fat Flow handling to support ignore source/destination port or source/destination IP address. 1. Ignore both source and destination ports 2. Ignore either source or destination IP 3. Combination of both (1) and (2) above Virtual Machine Interface FAT Flow Protocol (TCP/UDP/SCTP & ICMP), Port Pairs, Ignore Address (SRC/DST) Virtual Network Protocol (TCP/UDP/SCTP & ICMP), Port Pairs, Ignore Address (SRC/DST)