Under the Hood: Network Virtualization with
OpenStack Neutron and VMware NSX

+

+

Dimitri Desmidt - NSX Senior Technical Product Manager (ddesmidt@vmware.com)
Gary Kotton – VMware Staff Engineer – OpenStack (gkotton@vmware.com)
Agenda
‣
‣

Comprehensive Demo

‣

Slide 2

VMware on OpenStack

Q&A

2
VMware Philosophy on OpenStack
OpenStack
The Foundation for IT: Software Defined Datacenter

•
•

Virtual Workspace
Manage access to services, applications and data for any
device

Private
Clouds

•

An open framework for building clouds
Assembles a solution from underlying
Compute, Network, Storage components.
Can be managed and automated using
many solutions.

Public Clouds

Hybrid Cloud
Seamlessly extend your data center to the public cloud

Software-Defined Data Center

Customer Choice
•
•

VMware supports Customer choice.
Our support for OpenStack enables choice

Virtualize the entire data center

Management and Automation
Storage and
Availability

Compute

Network and
Security

An Opportunity for VMware SDDC
•
•

3

VMware SDDC provides best-in-class
Compute, Network, Storage & management
solutions for OpenStack.
We view OpenStack as an opportunity for
VMware SDDC portfolio.
VMware Technologies and OpenStack
Tenant-Side
Horizon
( Web Portal )

Nova
(Compute)

vSphere &
vCenter

CLI Tools & Scripts
(DevOps Automation)

Neutron
(Network)

Cinder
(Block Storage)

NSX

vSAN

Cloud Operator Tools
(vCenter, vCOPs, Log Insight etc.)
OpenStack or 3rd Party Component
VMware Component
4

vCAC
Application Director

Glance
(Image Store)

vCenter
(Image Catalog)

Third Party Operator tools
(Puppet/Chef, scripts, nagios...)

Operator-Side

Benefits of
OpenStack API &
Ecosystem

Choice of best-inclass virtualization &
management
technologies
Agenda
‣
‣

Comprehensive Demo

‣

Slide 5

VMware on OpenStack

Q&A

5
Demo 1
• Demonstrate:
• 2 Tiers-Architecture on a mix of ESXi and KVM hypervisors
Physical View

.1

Any L2/L3 fabric
(no VLAN per tenant)

ESXi Cluster

KVM

NSX-L2/L3
GW Cluster

"OpenStack"
(keystone/glance/
neutron/horizon/etc)
+ NSX Plugin
Management

NSX Controller
Cluster

6
Demo 1
• Demonstrate:
• 2 Tiers-Architecture on a mix of ESXi and KVM hypervisors
Physical View

Logical View

.1
.1

Any L2/L3 fabric
(no VLAN per tenant)

ESXi Cluster

KVM

VM VM

VM VM

20.20.20.0/24

NSX-L2/L3
GW Cluster

"OpenStack"
(keystone/glance/
neutron/horizon/etc)
+ NSX Plugin

Logical
Space
LS-1A
VM

LS-1B
VM

VM

VM

Management
NSX Controller
Cluster

7
Demo 1
• Demonstrate:
• 2 Tiers-Architecture on a mix of ESXi and KVM hypervisors

• Neutron + NSX Plugin Pros:
• Multi-tier architecture
Not available via "nova-network".

8
Demo 1
• Demonstrate:
• 2 Tiers-Architecture on a mix of ESXi and KVM hypervisors

• Neutron + NSX Plugin Pros:
• Multi-tier architecture
• No change on the physical fabric
No pre-provisioning of VLAN on the fabric. Actually no VLAN used at all!
Not available via "nova-network".
VM

VM

Hypervisor

VM

VM

Hypervisor1-IP@ 
Hypervisor2-IP@
[STT VM1-IP@  VM2-IP@]

VM

VM

VM

VM

VM

VM

VM1-IP@ 
VM2-IP@

VM

Any L2/L3
Fabric

9
Demo 1
• Demonstrate:
• 2 Tiers-Architecture on a mix of ESXi and KVM hypervisors

• Neutron + NSX Plugin Pros:
• Multi-tier architecture
• No change on the physical fabric
• Distributed Routing
A world without NSX
Web

App

Hypervisor

DB

Web

Hypervisor
x86 Server

DC Fabric

Neutron Router
on Neutron
Server

10
Demo 1
• Demonstrate:
• 2 Tiers-Architecture on a mix of ESXi and KVM hypervisors

• Neutron + NSX Plugin Pros:
• Multi-tier architecture
• No change on the physical fabric
• Distributed Routing
Not available via "nova-network" nor "Neutron"

A world with NSX
Web

App

Hypervisor

DB

Web

Hypervisor
x86 Server

DC Fabric

NSX "North/South" Router

11
Demo 1
• Demonstrate:
• 2 Tiers-Architecture on a mix of ESXi and KVM hypervisors

• Neutron + NSX Plugin Pros:
•
•
•
•

Multi-tier architecture
No change on the physical fabric
Distributed Routing
Very high scale
•

In size of the cloud (thanks to the distribution "active/active" of the Control elements)
Per NSX Domain: 60k VMs, 15k tenants, 1k hypervisors (and improved in each release)

•

In throughput (thanks to the encapsulation off-loaded on the NIC)
Per hypervisor: 20Gbps (with 2x10Gbps NIC bonding)
Per NVP Gateway: 10Gbps++ (per NVP-GW and up to 10x NVP-GW are supported in a Cluster)

Not available via "nova-network" nor "Neutron".

12
Demo 2
• Demonstrate:

• Management / Troubleshooting
• Port Connection Tool
• VMotion / DRS
• TraceFlow
• Port-Mirroring

Physical View

Logical View

.1
.1

Any L2/L3 fabric
(no VLAN per tenant)

ESXi Cluster

KVM

VM VM

VM VM

20.20.20.0/24

NSX-L2/L3
GW Cluster

"OpenStack"
(keystone/glance/
neutron/horizon/etc)
+ NSX Plugin

Logical
Space
LS-1A
VM

LS-1B
VM

VM

VM

Management
NSX Controller
Cluster

13
Demo 2
• Demonstrate:

• Management / Troubleshooting
• Port Connection Tool
• VMotion
• TraceFlow
• Port-Mirroring

• Neutron + NSX Plugin Pros:
• Production tools to manage and support an OpenStack in production efficiently
Not available via "nova-network" nor "Neutron".

14
Demo 3
• Demonstrate:
• L2 Physical-Logical
Physical View

Logical View

.1

VLAN244

.1

Any L2/L3 fabric
(no VLAN per tenant)

ESXi Cluster

KVM

VM VM

VM VM

20.20.20.0/24

NSX-L2/L3
GW Cluster

"OpenStack"
(keystone/glance/
neutron/horizon/etc)
+ NSX Plugin

Logical
Space
LS-1A
VM

LS-1B
VM

VM

VLAN244

VM

Management
NSX Controller
Cluster

15
Demo 3
• Demonstrate:
• L2 Physical-Logical

• Neutron + NSX Plugin Pros:
• More Network Use Cases supported
Physical to Virtual
Remote customer on-boarding
Not available via "nova-network" nor "Neutron".

16
Demo 4
• Demonstrate:

• Network and Security service
• Load-Balancing
• Firewalling
• Static Routing

Physical View

• HA
• Failure of NVP elements
(Controller Node, NVP-GW Node)
• Failure of Hypervisor

Logical View

.1
.1

Any L2/L3 fabric
(no VLAN per tenant)

ESXi Cluster

KVM

VM VM

VM VM

20.20.20.0/24

NSX-L2/L3
GW Cluster

"OpenStack"
(keystone/glance/
neutron/horizon/etc)
+ NSX Plugin

Logical
Space
LS-1A
VM

LS-1B
VM

VM

VM

Management
NSX Controller
Cluster

17
Demo 4
• Demonstrate:

• Network and Security service
• Load-Balancing
• Firewalling
• Static Routing

• HA
• Failure of NVP elements
(Controller Node, NVP-GW Node)
• Failure of Hypervisor

• Neutron + NSX Plugin Pros:
• Rich network services
Not available via "nova-network" nor "Neutron".

• Build-in HA

18
Agenda
‣

Intro – VMware philosophy on OpenStack (5 minutes)

‣

What about a comprehensive demo (20 minutes)
(instead of endless slides)

‣

Slide 19

Q&A (5 minutes)

19
Select OpenStack & VMware NSX customers

Public Clouds

Slide 20

Enterprise Private Clouds

20
How to test?
‣

Hands on lab available:
http://labs.hol.vmware.com/HOL/#lab/698

Slide 21

21
Agenda
‣
‣

Comprehensive Demo

‣

Slide 22

VMware on OpenStack

Q&A

22

VMWare: Nova and NVP Support - Gary Kotton and Dimitri Desmidt

  • 1.
    Under the Hood:Network Virtualization with OpenStack Neutron and VMware NSX + + Dimitri Desmidt - NSX Senior Technical Product Manager (ddesmidt@vmware.com) Gary Kotton – VMware Staff Engineer – OpenStack (gkotton@vmware.com)
  • 2.
  • 3.
    VMware Philosophy onOpenStack OpenStack The Foundation for IT: Software Defined Datacenter • • Virtual Workspace Manage access to services, applications and data for any device Private Clouds • An open framework for building clouds Assembles a solution from underlying Compute, Network, Storage components. Can be managed and automated using many solutions. Public Clouds Hybrid Cloud Seamlessly extend your data center to the public cloud Software-Defined Data Center Customer Choice • • VMware supports Customer choice. Our support for OpenStack enables choice Virtualize the entire data center Management and Automation Storage and Availability Compute Network and Security An Opportunity for VMware SDDC • • 3 VMware SDDC provides best-in-class Compute, Network, Storage & management solutions for OpenStack. We view OpenStack as an opportunity for VMware SDDC portfolio.
  • 4.
    VMware Technologies andOpenStack Tenant-Side Horizon ( Web Portal ) Nova (Compute) vSphere & vCenter CLI Tools & Scripts (DevOps Automation) Neutron (Network) Cinder (Block Storage) NSX vSAN Cloud Operator Tools (vCenter, vCOPs, Log Insight etc.) OpenStack or 3rd Party Component VMware Component 4 vCAC Application Director Glance (Image Store) vCenter (Image Catalog) Third Party Operator tools (Puppet/Chef, scripts, nagios...) Operator-Side Benefits of OpenStack API & Ecosystem Choice of best-inclass virtualization & management technologies
  • 5.
  • 6.
    Demo 1 • Demonstrate: •2 Tiers-Architecture on a mix of ESXi and KVM hypervisors Physical View .1 Any L2/L3 fabric (no VLAN per tenant) ESXi Cluster KVM NSX-L2/L3 GW Cluster "OpenStack" (keystone/glance/ neutron/horizon/etc) + NSX Plugin Management NSX Controller Cluster 6
  • 7.
    Demo 1 • Demonstrate: •2 Tiers-Architecture on a mix of ESXi and KVM hypervisors Physical View Logical View .1 .1 Any L2/L3 fabric (no VLAN per tenant) ESXi Cluster KVM VM VM VM VM 20.20.20.0/24 NSX-L2/L3 GW Cluster "OpenStack" (keystone/glance/ neutron/horizon/etc) + NSX Plugin Logical Space LS-1A VM LS-1B VM VM VM Management NSX Controller Cluster 7
  • 8.
    Demo 1 • Demonstrate: •2 Tiers-Architecture on a mix of ESXi and KVM hypervisors • Neutron + NSX Plugin Pros: • Multi-tier architecture Not available via "nova-network". 8
  • 9.
    Demo 1 • Demonstrate: •2 Tiers-Architecture on a mix of ESXi and KVM hypervisors • Neutron + NSX Plugin Pros: • Multi-tier architecture • No change on the physical fabric No pre-provisioning of VLAN on the fabric. Actually no VLAN used at all! Not available via "nova-network". VM VM Hypervisor VM VM Hypervisor1-IP@  Hypervisor2-IP@ [STT VM1-IP@  VM2-IP@] VM VM VM VM VM VM VM1-IP@  VM2-IP@ VM Any L2/L3 Fabric 9
  • 10.
    Demo 1 • Demonstrate: •2 Tiers-Architecture on a mix of ESXi and KVM hypervisors • Neutron + NSX Plugin Pros: • Multi-tier architecture • No change on the physical fabric • Distributed Routing A world without NSX Web App Hypervisor DB Web Hypervisor x86 Server DC Fabric Neutron Router on Neutron Server 10
  • 11.
    Demo 1 • Demonstrate: •2 Tiers-Architecture on a mix of ESXi and KVM hypervisors • Neutron + NSX Plugin Pros: • Multi-tier architecture • No change on the physical fabric • Distributed Routing Not available via "nova-network" nor "Neutron" A world with NSX Web App Hypervisor DB Web Hypervisor x86 Server DC Fabric NSX "North/South" Router 11
  • 12.
    Demo 1 • Demonstrate: •2 Tiers-Architecture on a mix of ESXi and KVM hypervisors • Neutron + NSX Plugin Pros: • • • • Multi-tier architecture No change on the physical fabric Distributed Routing Very high scale • In size of the cloud (thanks to the distribution "active/active" of the Control elements) Per NSX Domain: 60k VMs, 15k tenants, 1k hypervisors (and improved in each release) • In throughput (thanks to the encapsulation off-loaded on the NIC) Per hypervisor: 20Gbps (with 2x10Gbps NIC bonding) Per NVP Gateway: 10Gbps++ (per NVP-GW and up to 10x NVP-GW are supported in a Cluster) Not available via "nova-network" nor "Neutron". 12
  • 13.
    Demo 2 • Demonstrate: •Management / Troubleshooting • Port Connection Tool • VMotion / DRS • TraceFlow • Port-Mirroring Physical View Logical View .1 .1 Any L2/L3 fabric (no VLAN per tenant) ESXi Cluster KVM VM VM VM VM 20.20.20.0/24 NSX-L2/L3 GW Cluster "OpenStack" (keystone/glance/ neutron/horizon/etc) + NSX Plugin Logical Space LS-1A VM LS-1B VM VM VM Management NSX Controller Cluster 13
  • 14.
    Demo 2 • Demonstrate: •Management / Troubleshooting • Port Connection Tool • VMotion • TraceFlow • Port-Mirroring • Neutron + NSX Plugin Pros: • Production tools to manage and support an OpenStack in production efficiently Not available via "nova-network" nor "Neutron". 14
  • 15.
    Demo 3 • Demonstrate: •L2 Physical-Logical Physical View Logical View .1 VLAN244 .1 Any L2/L3 fabric (no VLAN per tenant) ESXi Cluster KVM VM VM VM VM 20.20.20.0/24 NSX-L2/L3 GW Cluster "OpenStack" (keystone/glance/ neutron/horizon/etc) + NSX Plugin Logical Space LS-1A VM LS-1B VM VM VLAN244 VM Management NSX Controller Cluster 15
  • 16.
    Demo 3 • Demonstrate: •L2 Physical-Logical • Neutron + NSX Plugin Pros: • More Network Use Cases supported Physical to Virtual Remote customer on-boarding Not available via "nova-network" nor "Neutron". 16
  • 17.
    Demo 4 • Demonstrate: •Network and Security service • Load-Balancing • Firewalling • Static Routing Physical View • HA • Failure of NVP elements (Controller Node, NVP-GW Node) • Failure of Hypervisor Logical View .1 .1 Any L2/L3 fabric (no VLAN per tenant) ESXi Cluster KVM VM VM VM VM 20.20.20.0/24 NSX-L2/L3 GW Cluster "OpenStack" (keystone/glance/ neutron/horizon/etc) + NSX Plugin Logical Space LS-1A VM LS-1B VM VM VM Management NSX Controller Cluster 17
  • 18.
    Demo 4 • Demonstrate: •Network and Security service • Load-Balancing • Firewalling • Static Routing • HA • Failure of NVP elements (Controller Node, NVP-GW Node) • Failure of Hypervisor • Neutron + NSX Plugin Pros: • Rich network services Not available via "nova-network" nor "Neutron". • Build-in HA 18
  • 19.
    Agenda ‣ Intro – VMwarephilosophy on OpenStack (5 minutes) ‣ What about a comprehensive demo (20 minutes) (instead of endless slides) ‣ Slide 19 Q&A (5 minutes) 19
  • 20.
    Select OpenStack &VMware NSX customers Public Clouds Slide 20 Enterprise Private Clouds 20
  • 21.
    How to test? ‣ Handson lab available: http://labs.hol.vmware.com/HOL/#lab/698 Slide 21 21
  • 22.

Editor's Notes

  • #4 VMware develops the best-in-class components that make up the Software-defined-Datacenter. The starting point or the fundamental building block of SDDC was the Compute Hypervisor or rather the Virtual Machines running on Hypervisors. VMware’s vision for SDDC is aiming at bringing the benefits of virtualization to the rest of the datacenter, including Networking & Storage subsystems.We believe, Openstack is an open framework for building clouds, that helps one assemble a cloud using a combination of underlying compute, network & storage components. VMware supports customer choice in how they consume and build their cloud environments and our support for OpenStack provides customers with that choice.We also believe that OpenStack is a significant opportunity for VMware’s portfolio of best-in-class SDDC components covering Compute, Network, Storage & Management.
  • #5 Now taking a quick look at OpenStack project components and Vmware’s products, we can quickly see that a cloud requires elements that are Tenant-facing as well as Operator facing. End-users love consuming Nova, Quanutm, Cinder & Glance APIs that provide them a vendor independent, DevOps friendly API for building Cloud Applications. Vmware is enabling our portfolio of products to be compatible with OpenStack’s vendor independent APIs and ecosystem of tooling. We will also ensure that Vmware’s award winning management tools support OpenStack Clouds end-to-end to enable operators to operationalize and manage their cloud infrastructure in an uniform way.