Upgrade to Pro — share decks privately, control downloads, hide ads and more …

The Future of Cloud Networking is VMware NSX (Danish VMUG edition)

The Future of Cloud Networking is VMware NSX (Danish VMUG edition)

This presentation uses NIST SP800-145 (definition of cloud computing) to show why cloud networking has specific needs, then shows how VMware NSX was built to meet those needs.

Scott Lowe

April 03, 2014

More Decks by Scott Lowe

Other Decks in Technology


  1. © 2014 VMware Inc. All rights reserved. Scott Lowe, VCDX

    Engineering Architect 3 April 2014 The Future of Cloud Networking is VMware NSX
  2. CONFIDENTIAL Before we begin • Please get involved and ask

    questions—participation is highly encouraged • Feel free participate via social media with pictures, videos, or other updates; use #VMUGDK, @DenmarkVMUG, or @MyVMUG • Please silence your mobile devices for the benefit of all attendees • This presentation will be available after the event 2
  3. CONFIDENTIAL Who is this guy? • VCDX #39 • Six-time

    vExpert • Author, speaker, blogger • Works in the CTO office of the Networking & Security Business Unit • 3
  4. Networking in the era of cloud computing Why the term

    “cloud networking” isn’t just marketing-speak
  5. CONFIDENTIAL NIST definition of cloud computing • Five “essential characteristics”

    of cloud computing: • On-demand self-service • Resource pooling • Rapid elasticity • Measured service • Broad network access 7 Taken from http://csrc.nist.gov/publications/nistpubs/800-145/SP800-145.pdf
  6. CONFIDENTIAL Five essentials of cloud networking To support cloud computing,

    networking must: 1. Be fully automated & programmable for integration into CMPs (on-demand self-service) 2. Be abstracted from hardware in order to pool available capacity (resource pooling) 3. Support programmability and integration with orchestration/ provisioning solutions (rapid elasticity) 4. Provide fine-grained visibility & accounting (measured service) 5. Support any network topology & any network equipment (broad network access) 10
  7. Components of a cloud networking platform Looking at what is

    needed to build a platform to address the needs of cloud networking
  8. CONFIDENTIAL What’s in a cloud networking platform? • Virtual switch

    at the edge of the network • Centralized control over/knowledge of the logical network topology • Decoupled control plane and data plane • Network isolation mechanism • Virtualized network services (L2, L3, load balancer, firewall) • Programmatic access for integration with CMP 13
  9. CONFIDENTIAL Peeling back the covers a bit 15 • Key

    components of VMware NSX: • Scale-out, highly-available controller cluster • Northbound RESTful API for CMP integration (vCAC, OpenStack, CloudStack) • Virtual switch in the hypervisors at the edge (Open vSwitch for KVM and Xen; NSX vSwitch for vSphere) • Tunneling protocol for data plane traffic (STT, GRE, VXLAN) • Virtualized and distributed network services (load balancing, firewalling, VPN) • Physical switch integration (multi-hypervisor only)
  10. CONFIDENTIAL VMware NSX architectural overview 16 VLAN L2 L3 Virtual

    Network L2 NSX Gateway Physical Network vSphere Host vSphere Host KVM Xen Server NSX vSwitch NSX vSwitch Open vSwitch Open vSwitch Hardware Software Controller Cluster VLAN VTEP API HW Partner VM VM “NSX API” CMP
  11. CONFIDENTIAL VMware NSX management, control, and data planes 17 vCD/vCAC

    vCenter Server NSX Manager Management Plane Control Plane NSX Edge Distributed Router Controller Data Plane NSX Edge Services Router VXLAN DR DFW Security VXLAN DR DFW Security VXLAN DR DFW Security vSphere API REST API vSphere API Control Plane Protocol vSphere API REST API Control Plane Protocol Message Bus