The Future of Cloud Networking is VMware NSX (Danish VMUG edition)

This presentation uses NIST SP800-145 (definition of cloud computing) to show why cloud networking has specific needs, then shows how VMware NSX was built to meet those needs.

Transcript

1. © 2014 VMware Inc. All rights reserved. Scott Lowe, VCDX Engineering Architect 3 April 2014 The Future of Cloud Networking is VMware NSX
2. CONFIDENTIAL Before we begin • Please get involved and ask questions—participation is highly encouraged • Feel free participate via social media with pictures, videos, or other updates; use #VMUGDK, @DenmarkVMUG, or @MyVMUG • Please silence your mobile devices for the benefit of all attendees • This presentation will be available after the event 2
3. CONFIDENTIAL Who is this guy? • VCDX #39 • Six-time vExpert • Author, speaker, blogger • Works in the CTO office of the Networking & Security Business Unit • 3
4. CONFIDENTIAL 4 I know “cloud networking” sounds like...
5. CONFIDENTIAL ...but this is cloud washing! 5
6. Networking in the era of cloud computing Why the term “cloud networking” isn’t just marketing-speak
7. CONFIDENTIAL NIST definition of cloud computing • Five “essential characteristics” of cloud computing: • On-demand self-service • Resource pooling • Rapid elasticity • Measured service • Broad network access 7 Taken from http://csrc.nist.gov/publications/nistpubs/800-145/SP800-145.pdf
8. 8 What does this mean for networking in cloud environments?
9. 9 What does this mean for cloud networking?
10. CONFIDENTIAL Five essentials of cloud networking To support cloud computing, networking must: 1. Be fully automated & programmable for integration into CMPs (on-demand self-service) 2. Be abstracted from hardware in order to pool available capacity (resource pooling) 3. Support programmability and integration with orchestration/ provisioning solutions (rapid elasticity) 4. Provide fine-grained visibility & accounting (measured service) 5. Support any network topology & any network equipment (broad network access) 10
11. Components of a cloud networking platform Looking at what is needed to build a platform to address the needs of cloud networking
12. CONFIDENTIAL What’s in a cloud networking platform? 12
13. CONFIDENTIAL What’s in a cloud networking platform? 12
14. CONFIDENTIAL What’s in a cloud networking platform? 12
15. CONFIDENTIAL What’s in a cloud networking platform? 12
16. CONFIDENTIAL What’s in a cloud networking platform? 12
17. CONFIDENTIAL What’s in a cloud networking platform? 12
18. CONFIDENTIAL What’s in a cloud networking platform? 12
19. CONFIDENTIAL L2 L3 Virtual Network L2 What’s in a cloud networking platform? 12
20. CONFIDENTIAL L2 L3 Virtual Network L2 What’s in a cloud networking platform? CMP 12
21. CONFIDENTIAL What’s in a cloud networking platform? • Virtual switch at the edge of the network • Centralized control over/knowledge of the logical network topology • Decoupled control plane and data plane • Network isolation mechanism • Virtualized network services (L2, L3, load balancer, firewall) • Programmatic access for integration with CMP 13
22. Examining VMware NSX How VMware NSX addresses the needs of cloud networking
23. CONFIDENTIAL Peeling back the covers a bit 15 • Key components of VMware NSX: • Scale-out, highly-available controller cluster • Northbound RESTful API for CMP integration (vCAC, OpenStack, CloudStack) • Virtual switch in the hypervisors at the edge (Open vSwitch for KVM and Xen; NSX vSwitch for vSphere) • Tunneling protocol for data plane traffic (STT, GRE, VXLAN) • Virtualized and distributed network services (load balancing, firewalling, VPN) • Physical switch integration (multi-hypervisor only)
24. CONFIDENTIAL VMware NSX architectural overview 16 VLAN L2 L3 Virtual Network L2 NSX Gateway Physical Network vSphere Host vSphere Host KVM Xen Server NSX vSwitch NSX vSwitch Open vSwitch Open vSwitch Hardware Software Controller Cluster VLAN VTEP API HW Partner VM VM “NSX API” CMP
25. CONFIDENTIAL VMware NSX management, control, and data planes 17 vCD/vCAC vCenter Server NSX Manager Management Plane Control Plane NSX Edge Distributed Router Controller Data Plane NSX Edge Services Router VXLAN DR DFW Security VXLAN DR DFW Security VXLAN DR DFW Security vSphere API REST API vSphere API Control Plane Protocol vSphere API REST API Control Plane Protocol Message Bus
26. CONFIDENTIAL 18 “It’s our network upgrade plan... Or we could virtualize it.”
27. Questions & answers
28. Thank you Scott Lowe slowe@vmware.com @scott_lowe (Twitter) http://blog.scottlowe.org Colossians 3:17 NIV