This presentation shows how globo.com solved a problem with TCAM specialized memory limitation on the top of rack switches through a Software Defined Networking approach.
Automating Access Control Listswith OpenDaylight and OpenVSwitchGustavo Pantuza, Leopoldo Mauricio
View Slide
AgendaContext Problem Solution
Largest media group in Latin America17 years
Datacenter5000s e r v e r s B a n d w i d t h2.4Tb/s
Fabric PoDsToRVMsContainersBare metal
Cloud
Xen ClustersHostHypervisorOvSVMs
Xen Clusters
EnvironmentsBackend - BEFrontend - FE
DatacenterSpineLeafCoreECMP BGP
Access Control Lists
50000+A C L sACL API
Environment segmentationBE FEBE VRF FE VRFBE FEBE VRF FE VRF
TCAMExpensiveUpgradeSmall
No policies onnetworks
Moving forwardSDN
Network API8000+ Networks500+ Equipments6300+ Vlans1700+ Environments
Network API
Controller
Virtual switch
{"kind": "backend#acl","rules": [{"action": "permit","description": "Access from application A on port 80","destination": "10.0.42.0/24","id": "222222","owner": "user","protocol": "ip","source": "10.5.190.0/24"}]}
{...}
Workers16w o r k e r s
SDN control56s e r v e r s6c l u s t e r s
Controller requests per second62.5r e q s / s e c
No first packetdelay
Network APIResilience
Transparent forusers
Integration of all our cloud servicesTsuru https://tsuru.ioDBaas https://github.com/globocom/database-as-a-serviceNetowrkAPI https://github.com/globocom/GloboNetworkAPIACL APIFSaasDNSaaS
https://opensource.globo.com/
[email protected] [email protected]https://github.com/pantuza Linkedin