When Network Meets Apps!
Putting networking and application
together
Nati Shalom
GigaSpaces
@natishalom
Samuel Bercovici
Radware
@samuelbercovici
Agenda
• Overview of Networking and Apps
• What’s Changed?
• Putting Networking and Apps by
Example
• Future Work
Let’s Start
With Some
Basic
Definitions..
Application
Application & Tiers
Web
Tier
Middle
Tier
DB
Tier
Zoom into a Tier
Server (Physical/VM)
Operating System (RHEL 6.5 64bits)
Database System (MySQL)
Schema (Word-press)
IP
Address
IP
Address
TCP Port
Logical Connectivity
Web
Tier
Middle
Tier
DB
Tier
Internet
Where is the
network?
Backend ZoneDMZ
Web
Tier
Middle
Tier
DB
Tier
Multicast/Broadcast, Isolation
Personal DataBusiness centerDMZ
Web
Tier
Middle
Tier
DB
Tier
Multicast/Broadcast, Isolation
Web
Tier
Middle
Tier
DB
Tier
Layer 3 Services
• Subnet
• GW
• IPAM – DHCP
• DNS
• Subnet
• GW
• IPAM – DHCP
• DNS
• Subnet
• GW
• IPAM – DHCP
• DNS
Web
Tier
Middle
Tier
DB
Tier
Availability
SLB
Web
Tier
Middle
Tier
DB
Tier
Availability & Scalability
SLB
SLB
SLB
Web
Tier
Middle
Tier
DB
Tier
Security, Availability & Scalability
SLB
SLB
SLB
FW
Web
Tier
Middle
Tier
DB
Tier
Management
SLB
SLB
SLB
FW
VPN Monitoring, CI
Expertise & Responsibilities
• Network / Security Manager
– Network (L2, L3)
– Network Services (Router, NAT, DHCP, DNS, LB)
– Network Security (FW, VPN)
• IT / Application Manager
– Server
– Operating System
– Software Stack
– Application Artifacts
– Server’s Security
Load Balancer - Management
• Network based
– L2 and L3
– L4 Load balancing
• Application based
– Cookie based, L7 Content
Switching, L7 Content
Modifications, etc.
Network Manager
Network Manager ?
Application Manager ?
What’s Changed?
Everything is Software Defined
We Can Automate Everything..
Orchestration
Networking
Compute
Neutron/Nova APIs
• Layer 2 networks
• Layer 3 subnets
– IP address management – DHCP based
– Router / gateway / NAT
• Port
• Security groups
• Floating IP
• Layer 4-7 Services
– Load balancing
– VPN
– Firewall
Putting Network and Apps Together
by Example
HEAT
•OpenStack
Orchestration
TOSCA
•Topology
•Orchestration
•Specification of
•Cloud
•Application
Apache Server DB Server
Apache
Wordpress
MySQL
WordPress Simple Example
• App Network
• App Subnet
• App Port
• Security Group
• Apache Floating IP
• Router Gateway
• Data Network
• Data Subnet
• Data Port
• Security Group
Router
Network Topology View
Heat Topology View
Heat Template
Apache Server DB Server
NodeJS
NodeCeller
MongoDB
TOSCA (Like) Example
• App Network
• App Subnet
• App Port
• Security Group
• Apache Floating IP
• Router Gateway
• Data Network
• Data Subnet
• Data Port
• Security Group
Router
Monitoring, Logging CI
Network View
Topology View
TOSCA (Like) Blueprint
Adding AutoScaling
& Avaliability..
Scalability & Availability
Router
L3
Tenant1 Network
Tenant1 Project
VIP1
Management Network
Web
VM
3
VIP1VIP1
Alteon VA Project
VM
4
VM
5
AutoScaling - Heat Template
• web_server_group - OS::Heat::AutoScalingGroup
• web_server_scaleup_policy - OS::Heat::ScalingPolicy
• web_server_scaledown_policy - OS::Heat::ScalingPolicy
• cpu_alarm_high - OS::Ceilometer::Alarm
• cpu_alarm_low - OS::Ceilometer::Alarm
• monitor - OS::Neutron::HealthMonitor
• pool - OS::Neutron::Pool
• lb - OS::Neutron::LoadBalancer
So far so good, but...
Considering Real Life Scenarios
Continuous Availability
Across AZ’s and Regions
– Adding Affinity Rules for Compute,
Storage
– Auto-Scaling, etc.
Continuous Deployment
– Updating policies and workflow
– Creating new deployments every
day
Real Life
Example
(HP Print)
• 30 HP Helion Public Cloud accounts
• 500+compute instances
• 1400 Peak deployments per day
• 100+compute instances per
management cluster
• 100xdevelopers doing
deployments in a consistent fashion
• <2HMove from HP Helion Public
Cloud tenant to a fully provisioned and
deployed service
Networking and Apps in Real Life...
Future
work..
Putting
TOSCA and
HEAT Closer..
• TOSCA HEAT
Translator Project
(IBM, GigaSpaces, Huawei,
Vnomic ..)
• TOSCA
enablement in
Heat Juno
• Integrating
Cloudify and Heat
Group Based
Policies
• Addressing
Network
Requirements
from the
application
perspective
• Delegation of
Responsibilities
References
• Examples (Step by Step Guide)
– Heat Example
– TOSCA (like) Example
• TOSCA Translator Project
– Git Project
• OpenStack Heat Project
• Cloudify – getcloudify.org
• Radware Load Balancing as a Service
• Group Based Policies – GPB
• AutoScaling Policies – Heat Template

When networks meets apps (open stack atlanta)