Build Testing Infrastructure

Slide 1

Slide 1 text

Build Testing Infrastructure Phil Huang [email protected] Open Networking Solution Engineer, Edgecore Networks

Slide 2

Slide 2 text

Slide 3

Slide 3 text

Goal 5/18/17 © 2017 Edgecore Networks. All rights reserved | www.edge-core.com 3 • Build feature rich firewall solution • Provide VLAN-based network for projects • Provide remote access for customers • Provide SSL-VPN for staff

Slide 4

Slide 4 text

Hardware Requirement • CPU: Up to you (Support Intel VT-d or AMD-V) • RAM: More than 8G • NIC: 2 physical port (one for LAN, one for WAN) 5/18/17 © 2017 Edgecore Networks. All rights reserved | www.edge-core.com 4 1U/2Nodes

Slide 5

Slide 5 text

Slide 6

Slide 6 text

Proxmox VE • Open source virtualization solution • Server virtualization with KVM and Linux Container (LXC) • Features • Central management with Web GUI and command line • A wide variety of storage technologies (File-level or block-level) • ZFS / File / NFS / GlusterFS / LVM / Ceph / Sheepdog • High availability • Shared storage / Cluster management 5/18/17 © 2017 Edgecore Networks. All rights reserved | www.edge-core.com 6

Slide 7

Slide 7 text

Slide 8

Slide 8 text

Virtualization - KVM • KVM (for Kernel-based Virtual Machine) • Full virtualization solution for Linux on x86 hardware containing virtualization extensions (Intel VT or AMD-V) • Features • Paravirtualized drivers (Virto) • Live or offline migration • Snapshots • … 5/18/17 © 2017 Edgecore Networks. All rights reserved | www.edge-core.com 8 Ref: https://www.slideshare.net/NOVL/virtualization-with-kvm-kernelbased-virtual-machine

Slide 9

Slide 9 text

Virtualization - LXC • Consider as something in the middle between chroot and full fledged virtual machine • No emulation, run as process on the host • Features • Kernel namespaces (user, network, pid, mount, ips, uts) • Apparmor and SELinux profiles • Chroot • Kernel capabilities • Cgroups (control groups) • … 5/18/17 © 2017 Edgecore Networks. All rights reserved | www.edge-core.com 9

Slide 10

Slide 10 text

Slide 11

Slide 11 text

Slide 12

Slide 12 text

OPNsense • Complete high-end security firewall platform • Features • Offer dashboard to quickly check the status • Stateful firewall that keep track of the state of network connections • High Availability / Hardware Failover (CARP) • Offers a wide range of VPN technologies ranging from SSL VPN • IPsec / OpenVPN / L2TP / PPPoE / PPTP • Intrusion Detection & Prevention System 5/18/17 © 2017 Edgecore Networks. All rights reserved | www.edge-core.com 12 Ref: https://www.deciso.com/wp-content/uploads/2015/10/Deciso_About_OPNsense_latest.pdf

Slide 13

Slide 13 text

Slide 14

Slide 14 text

CARP • Common Address Redundancy Protocol, CARP • One shared virtual IP to communicate to both networks 5/18/17 © 2017 Edgecore Networks. All rights reserved | www.edge-core.com 14 pfSync Ref: https://docs.opnsense.org/manual/how-tos/carp.html

Slide 15

Slide 15 text

Virtual Private Networking • Virtual Private Network secures public network connections and in doing so it extends the private network into the public network such as internet • Technology of connections • Road warrior • Site-to-Site • VPN solutions • IPsec / OpenVPN / L2TP / PPPoE / PPTP 5/18/17 © 2017 Edgecore Networks. All rights reserved | www.edge-core.com 15

Slide 16

Slide 16 text

Slide 17

Slide 17 text

Slide 18

Slide 18 text

VPN Network Traffic 5/18/17 © 2017 Edgecore Networks. All rights reserved | www.edge-core.com 18 VPN Tunnel (IPSec/OpenVPN/PPTP) eth1: 192.168.100.254 tun0: 10.0.0.1 192.168.100.0/24 VPN-Client 10.0.0.2

Slide 19

Slide 19 text

Slide 20

Slide 20 text

Slide 21

Slide 21 text

Slide 22

Slide 22 text

Slide 23

Slide 23 text

Docker • Isolation, Lightweight, Simplicity, Community • User cases • Containerize Traditional Apps • Continuous Integration and Deployment (CI / CD) • Microservices • IT Infrastructure Optimization 5/18/17 © 2017 Edgecore Networks. All rights reserved | www.edge-core.com 23 Ref: https://github.com/pointful/docker-intro

Slide 24

Slide 24 text

Slide 25

Slide 25 text

Slide 26

Slide 26 text

Slide 27

Slide 27 text

Slide 28

Slide 28 text

Slide 29

Slide 29 text

Slide 30

Slide 30 text

Docker Image • Built on a union filesystem with meta-data for how to run a container • Every command in the Dockerfile creates a new layer in the filesystem • When a container is started all images are merged together into what appears to the process as unified 5/18/17 © 2017 Edgecore Networks. All rights reserved | www.edge-core.com 30

Slide 31

Slide 31 text

Slide 32

Slide 32 text

Create Docker Compose File 5/18/17 © 2017 Edgecore Networks. All rights reserved | www.edge-core.com 32 Docker Compose Source code Ref: http://blog.pichuang.com.tw/How-do-I-use-docker-and-docker-compose/

Slide 33

Slide 33 text

Slide 34

Slide 34 text

Slide 35

Slide 35 text

Slide 36

Slide 36 text

Slide 37

Slide 37 text

Slide 38

Slide 38 text

Slide 39

Slide 39 text

Layer 2 Clos Fabric Topology 5/18/17 © 2017 Edgecore Networks. All rights reserved | www.edge-core.com 39 Ref: https://cumulusnetworks.com/learn/web-scale-networking-resources/validated-design-guides/Cumulus-Linux-Layer-2-HA-Validated-Design-Guide_v1.0.0.pdf