Building an Enterprise Cloud on OpenStack

OpenStack Summit Austin 2016

Transcript

1. © 2016 Sungard Availability Services, all rights reserved Building an Enterprise Cloud on OpenStack David Grizzan+, Cloud Architect OpenStack Summit – Aus+n 2016
2. 2 Sungard Availability Services ConfidenBal and Proprietary © 2016 Sungard Availability Services, all rights reserved Sungard Availability Services ▼  Sungard AS provides a variety of IT services to help your company get where it wants to go, including enterprise cloud, application management, IT consulting, disaster recovery services, and more. ▼  Sungard AS provides tailored enterprise cloud services, as well as innovative solutions including: •  Disaster Recovery •  Managed Hosting •  Software •  Consulting
3. 3 Sungard Availability Services ConfidenBal and Proprietary © 2016 Sungard Availability Services, all rights reserved What problem are we trying to solve? •  Target market •  80% mid-to-large enterprise customers •  Control month-to-month spend •  Term & Commit or determinis+c usage based billing •  Typical Customer •  Shrink wrapped applica+ons •  Limited automa+on due to lack of +me/talent •  Access to non-Cloud/non-Internet Sungard services (Hybrid, Colo) •  Looking for a mix of self-managed and Sungard AS managed offerings •  PlaUorm Expecta+ons •  Cloud Na+ve & Tradi+onal Networking models •  Above the hypervisor services (per tenant FW, LB, VPN), service-chaining
4. 4 Sungard Availability Services ConfidenBal and Proprietary © 2016 Sungard Availability Services, all rights reserved What Cisco & ACI bring to the table •  Policy-based automa+on – GBP + ACI to offer managed per tenant network services / chaining •  Distributed neutron networking – Wanted op+mal forwarding with no single point of failure. •  Mul+-hypervisor – Both KVM and VMware are required in our environment •  Standardizing our networking on ACI – Performance, scalable, easily automated, and rich troubleshoo+ng capability
5. 5 Sungard Availability Services ConfidenBal and Proprietary © 2016 Sungard Availability Services, all rights reserved Sungard CustomizaBons •  Chose to u+lize func+onality Horizon brings to the table •  Added branding and billing func+onality •  Integrated custom features without changing Horizon base •  Keystone v3 & mul+-domain support •  Largely using what was already upstream •  Needed customiza+ons to get necessary Single-Sign-On (SSO) integra+on •  Horizon patches for mul+-domain support
6. 6 Sungard Availability Services ConfidenBal and Proprietary © 2016 Sungard Availability Services, all rights reserved Workplaces •  Workplaces allow company tracking of expenses and appropriate department level charging Company Monthly Commit: $7,500 Admin: CTO, CIO or Assignee Workplace 1 Owner: Sue User 1: Dan User 2: Danesh $1,500 Monthly budget 4 VMs, 16-32 GB 80 GB Storage each Owner: Sarah User 1: Sean User 2: Alex 3 VMs, 8 GB 40 GB Storage each Owner: Roger User 1: Shawn User 2: Dave User 3: Sam 10 VMs, 16 GB 120 GB Storage each Development Project 1 (e.g., Automated Customer Entry) Development Project 2 (e.g., Billing Module) Application 3 (e.g., Web Server) Workplace 2 $2,500 Monthly budget Workplace 3 $3,500 Monthly budget
7. 7 Sungard Availability Services ConfidenBal and Proprietary © 2016 Sungard Availability Services, all rights reserved Deployment in the applicaBon lifecycle •  Workplaces allow for self-managed (DIY) and service provider managed capabili+es Workplace 1 Development Project 1 (e.g., Automated Customer Entry) Requirements Specification Development Testing Deployment Maintenance Define Develop Operate Development Project 2 (e.g., Billing Module) Workplace 2 Application 3 (e.g., Web Server) Workplace 3 Under change control Self-Managed
8. 8 Sungard Availability Services ConfidenBal and Proprietary © 2016 Sungard Availability Services, all rights reserved Toolset OpenStack (Juno) Cisco •  Horizon (Kilo) •  Nova •  Neutron w/ Group-Based Policy •  Glance •  Cinder •  Keystone (v3) •  Ceilometer •  Mistral •  Heat •  APIC ACI Integrated GBP •  VxLAN on OVS with Opflex control plane Advanced Services •  ASAv (Firewall/VPN) •  VyOS (Firewall/VPN) •  HAProxy (Load Balancing)
9. 9 Sungard Availability Services ConfidenBal and Proprietary © 2016 Sungard Availability Services, all rights reserved What did all that get us? •  Opflex enabled, APIC controlled, ACI fabric orchestrated by OpenStack APIC
10. 10 Sungard Availability Services ConfidenBal and Proprietary © 2016 Sungard Availability Services, all rights reserved Controller Architecture
11. 11 Sungard Availability Services ConfidenBal and Proprietary © 2016 Sungard Availability Services, all rights reserved Network Reference Architecture Sungard AS Core Internet Cisco ACI Fabric Cst 1 FW Cst 2 FW Cst n FW SGAS services Internet VxLAN VxLAN VxLAN Cust 2 hybrid Cust n hybrid Cust 2 hybrid Cust n hybrid Cust 2 hybrid Cust n hybrid VxLAN VxLAN VxLAN VxLAN VxLAN VxLAN ............. Cst 1 FW Cst 2 FW Cst n FW
12. 12 Sungard Availability Services ConfidenBal and Proprietary © 2016 Sungard Availability Services, all rights reserved OperaBng OpenStack •  Building and suppor+ng mul+ple labs and 5 produc+on sites is hard… •  We have a great team •  Mul+disciplinary, mix of sofware, network, and infrastructure engineers •  Blend works well for us in building and opera+ng a complex plaUorm •  OpenStack doesn’t always make it easy... •  Finding source of the problem is difficult •  Disparate controller architecture makes this more challenging
13. 13 Sungard Availability Services ConfidenBal and Proprietary © 2016 Sungard Availability Services, all rights reserved ContribuBng Back •  Up un+l now, we’ve only contributed minor changes •  Hope to increase our ac+vity in the future •  Most of our interac+on is through our vendors (Cisco and One Convergence)
14. 14 Sungard Availability Services ConfidenBal and Proprietary © 2016 Sungard Availability Services, all rights reserved Where are we now? •  Live in 5 sites •  EMEA and North America •  7 sites globally in 2016
15. 15 Sungard Availability Services ConfidenBal and Proprietary © 2016 Sungard Availability Services, all rights reserved Interested in Learning More about GBP? Come to our Hands On Lab session Developing, Deploying, and Consuming L4-7 Network Services in an OpenStack Cloud- Thursday 4:10pm-5:40pm, JW MarrioI AusKn – 110 East 2nd Street, AusKn, TX 78701
16. 16 Sungard Availability Services ConfidenBal and Proprietary © 2016 Sungard Availability Services, all rights reserved Q A
17. OpenStack Summit Austin, Texas 2016