OpenStack Orc

Orchestrated Service

Transcript

1. OpenStack Orchestrated Service Chaining Su-Hun YUN, Hideyuki Tai, Masashi Kudo NEC #ODSummit
2. Agenda • Virtual Tenant Network (VTN) in ODL • VTN models • Service Chaining • OpenStack integration • Demo #ODSummit
3. Service Chaining with Virtual Tenant Network #ODSummit
4. OpenDaylight Virtual Tenant Network (VTN) Project #ODSummit VTN Coordinator VTN Manager ・Provides VTN API (Northbound) ・Builds VTN models using OpenDaylight API ・Controls multiple SDN controllers VTN Coordinator: ・Enables multi tenant ・End-to-end dynamic path control VTN Manager:
5. Service Abstraction Layer/Core Base Network Functions - Lithium OpenFlow Enabled Devices DLUX VTN Coordinator OpenStack Neutron SDNI Wrapper Network Applications Orchestrations & Services Open vSwitches Additional Virtual & Physical Devices Data Plane Elements (Virtual Switches, Physical Device Interfaces) Controller Platform Services/Applications OpenFlow Stats Manager OVSDB NETCONF PCMM/C OPS SNBI LIS P BGP PCEP SNM P SXP Southbound Interfaces & Protocol Plugins OpenFlow OpenFlow Switch Manager USC CAPWAP OPFLEX CoAP HTTP OpenFlow Forwarding Rules Mgr L2 Switch Host Tracker Topology Processing AAA AuthN Filter OpenDaylight APIs REST/RESTCONF/NETCONF Data Store (Config & Operational) Messaging (Notifications / RPCs) LACP Network Services Service Function Chaining Reservation Virtual Private Network Virtual Tenant Network Mgr. Unified Secure Channel Mgr OVSDB Neutron Device Discovery, Identification & Driver Management LISP Service DOCSIS Abstraction SNMP4SDN Network Abstractions (Policy/Intent) ALTO Protocol Manager Network Intent Composition Group Based Policy Service Platform Services Authentication, Authorization & Accounting Neutron Northbound Persistence SDN Integration Aggregator Time Series Data Repository Link Aggregation Ctl Protocol
6. • Network virtualization for multi tenant, traffic isolation, abstraction of physical network VTN (Virtual Tenant Network) #ODSummit DDoS Server-D LB OFS WAN Optimizer Virtual Physical Server-B Server-B Server-A WAN Optimizer FW VTN #1 Server-C Server-A FW Server-D Server-C DDoS VTN #2 FW OFS LB ODL Controller
7. Policy Target Description VTN logical representation of virtual network Virtual node (vNode) vBridge logical representation of L2 switch function vRouter logical representation of L3 router function vTerminal Logical representation of virtual node that is connected to an interface mapped to a physical port vTunnel logical representation of Tunnel (consists of vTEPs and vBypass(es)) vTEP logical representation of Tunnel End Point (TEP) vBypass logical representation of connectivity between controlled networks Virtual Interface Interface representation of end point on the virtual node (VM, servers, appliance, vBridge, vRouter, etc) VTN Models #ODSummit
8. Intent based actions #ODSummit VTN •Define matching conditions (12 tuples) •Apply intent and actions Traffic Redirect (Eg. Service Chaining) Forward (Eg. To destination Port) Mark (Eg. QoS) Drop (Eg. ACL)
9. Traffic redirection #ODSummit Intent Redirect traffic Server-B Server-A Tenant1 vBridge1 vtn Tenant1 { vbridge vBridge1 { flow-filter in { sequence-number 1 { match flow-list match-list-a action redirect redirect-destination vTerminal1 interface if1 } (snip) } Server-C vTerminal1 192.168.10.3 VTN Model
10. Service Chaining on VTN #ODSummit DDoS Server-D LB OFS WAN Optimizer Virtual Physical Server-B Server-B Server-A WAN Optimizer FW LB Server-C Server-A FW Server-D Server-C DDoS FW OFS VTN #1 VTN #2 ODL Controller
11. OpenStack and VTN #ODSummit
12. OpenStack and VTN #ODSummit Neutron Neutron Interface ML2 Plug-in GUI VTN Coordinator OVSDB VTN Manager OpenStack ODL App MD-SAL OpenFlow OVS Switch OVS Applications Service Chain Policy Switch REST API
13. OpenStack and VTN : Automatic mapping #ODSummit Neutron Neutron Interface ML2 Plug-in GUI VTN Coordinator OVSDB VTN Manager OpenStack ODL App MD-SAL OpenFlow OVS Switch OVS Applications Service Chain Policy Switch REST API FW VM network -> VTN subnet -> vBridge port -> interface port mapping Create FW as VM Ready for service!
14. OpenStack and VTN: service chaining #ODSummit Neutron Neutron Interface ML2 Plug-in GUI VTN Coordinator OVSDB VTN Manager OpenStack ODL App MD-SAL OpenFlow OVS Switch OVS Applications Service Chain Policy Switch REST API FW VM match condition: filter = xyz action: redirect to FW Match condition & action Flow xyz needs to go through FW
15. Demo #ODSummit
16. Demo Features • Seamless integration with OpenStack • Ability to insert service functions dynamically • Not require NSH capability, work with OpenFlow switches • Ability to visualize end-to-end flows #ODSummit
17. Overview Virtual Physical Virtual bridge Virtual Tenant Network host1 host2 Service- function1 Service- function2 host3 OpenStack Node OpenStack Node OpenStack Node Adding 200 ms delay. Adding 200 ms delay. host1 host2 host3 Service- function1 Service- function2 host1 to host3 ODL Controller
18. Overview Virtual Physical Virtual bridge Virtual Tenant Network Virtual terminals host1 host2 Service- function1 Service- function2 host3 OpenStack Node OpenStack Node OpenStack Node Adding 200 ms delay. Adding 200 ms delay. host1 host2 host3 Service- function1 Service- function2 Creating virtual terminals ODL Controller
19. Overview Virtual Physical Virtual bridge Virtual Tenant Network Virtual terminals host1 host2 Service- function1 Service- function2 host3 OpenStack Node OpenStack Node OpenStack Node Adding 200 ms delay. Adding 200 ms delay. host1 host2 host3 Service- function1 Service- function2 [Match Condition] SRC IP: host1 DST IP: host3 [Action] Redirect to “service function1” ODL Controller Configure Traffic Redirection
20. Overview Virtual Physical Virtual bridge Virtual Tenant Network Virtual terminals host1 host2 Service- function1 Service- function2 host3 OpenStack Node OpenStack Node OpenStack Node Adding 200 ms delay. Adding 200 ms delay. host1 host2 host3 Service- function1 Service- function2 Configure Traffic Redirection ODL Controller OpenFlow [Match Condition] SRC IP: host1 DST IP: host3 [Action] Redirect to “service function1”
21. Overview Virtual Physical Virtual bridge Virtual Tenant Network Virtual terminals host1 host2 Service- function1 Service- function2 host3 OpenStack Node OpenStack Node OpenStack Node Adding 200 ms delay. Adding 200 ms delay. host1 host2 host3 Service- function1 Service- function2 ODL Controller OpenFlow Configure Traffic Redirection [Match Condition] SRC IP: host1 DST IP: host3 [Action] Redirect to “service function1”
22. Demo Software Components • OpenDaylight Lithium • odl-vtn-manager-rest enabled • odl-vtn-manager-neutron enabled • VTN Coordinator • GUI for VTN Coordinator • OpenStack Juno #ODSummit
23. OVS host3 Deployment OpenStack (Control Node) OVS OpenStack (Compute Node) OpenDaylight GUI Service Chain Policy Demo Operation VTN Manager Applications OVS MD-SAL Neutron Interface Neutron ML2 Plug-in VTN Coordinator OVSDB OpenFlow OpenFlow switches host1 host2 Service- function1 Service- function2
24. What to expect from VTN in Beryllium? • Integration with the SFC project • Provide VTN visualization and configuration support in DLUX #ODSummit
25. Thank You #ODSummit