contrail SDN CONTROLLER

CONTRAIL SDN CONTROLLER

Jakub Pavlik, tcp cloud

Datacenter Use Case

CONTRAIL USE CASE 1: CLOUDENTERPRISE PRIVATE CLOUD

Finance HR Marketing

Physical Service

Appliances

Silo'ed resource allocationManual configurationStatic service deployment

CONTRAIL USE CASE 1: CLOUDENTERPRISE PRIVATE CLOUD

Finance HR Marketing Finance HR Marketing

Physical Service

Appliances

VirtualNetwork

Silo'ed resource allocationManual configurationStatic service deployment

Dynamic resource allocationAutomated configurationDynamic service chains

Network policies enforced as ACLs and

service chains

CONTRAIL USE CASE 2: CLOUDSERVICE PROVIDER CLOUD (IAAS, VPC)

Service ProviderInfrastructure as a Service (IaaS)

Service ProviderL3VPN, E-VPN

Public Cloud Providers, Content Providers, ...

Service ProviderManaged Virtual Private Cloud (VPC)

Enterprise Offices

End-to-End Virtual Network Orchestration and Automation

Enterprise Data Center

Network Virtualisation----

The Importance of Abstraction

"SDN as a Compiler"

WHAT IS NETWORK VIRTUALIZATION

Independent of Physical Network Location or State Logical Network across any server, any rack, any cluster, any data-

center Virtual Machines can migrate without requiring any reworking of

security policies, load balancing, etc New Workloads or Networks should not require provisioning of

physical network Nodes in Physical Network can fail without any disruption to

Workload

Full Isolation for Multi-tenancy and Fault Tolerance MAC and IP Addresses are completely private per tenant Any failures or configuration errors by tenants do not affect other

applications or tenants Any failures in the virtual layer do not propagate to physical layer

CONTRAIL KEY ABSTRACTIONS"LEGO BLOCKS"

Virtual MachinesCloud Tenants and Virtual Network Functions

Virtual NetworksConnect Virtual Machines

Gateway DevicesConnect the Virtual to the Physical

CONTRAIL KEY ABSTRACTIONSCONSTRUCTING COMPLEX USE CASES WITH SIMPLE "LEGO BLOCKS"

VM VM VM

Virtual Network

VM VM VM

Virtual Network

Tenant Virtual Machines

Virtual Firewall

Physical Gateway RouterNon-Virtualized (Bare Metal) Server

Physical Network (Internet, L3VPN, ...)

Virtual Network

PhysicalNetwork

Virtual Load Balancer

Service Chain

VIRTUAL NETWORKAKA NETWORK SLICING, AKA MULTI-TENANCY

OpenStackCloudStack

ContrailController

Contrail Controller

REST APIs

VirtualizedServer

Contrail vRouter

Hypervisor

Routing Instance Overlay TunnelMPLS/GRE, MPLS/UDP, VXLAN

Underlay Switch

GreenVirtual Network

VM VM VM VM

RedVirtual Network

VM VM VM VM

SERVICE CHAININGIN THE CONTEXT OF A DATA CENTER

GreenVirtual Network

RedVirtual Network

ContrailController

OpenStackCloudStack

GATEWAY TO L3VPN

ContrailController

PhysicalL3VPN

BGP + Netconf

Overlay TunnelMPLS/GRE, MPLS/UDP, VXLAN

RedVirtual Network

VM VM VM VM

Route Reflector

LSP (RSVP, LDP)

BGPGateway Router (PE Router)

OpenStackCloudStack

GATEWAY TO BARE-METAL SERVER

ContrailController

BGP + Netconf

Overlay TunnelMPLS/GRE, MPLS/UDP, VXLAN

RedVirtual Network

Gateway Router or Switch

Bare Metal Server(Non-Virtualized Server)

OpenStackCloudStack

Contrail Architecture

CONTRAIL ARCHITECTUREA GENERAL PURPOSE SDN PLATFORM

Physical NetworkInteroperability with traditional network devices

Any-to-any non-blocking low-latency fabric: Q-Fabric or Clos

Virtual Network OverlayMulti-tenancy for private and virtual public clouds

Gateway functions - connect to virtual to physical network

Service chaining (physical and virtual)

MarketingHRFinance

Control Plane - Physical, VirtualOpen, standards-based, federated controller

Scalable and resilientControl Plane

Configuration manager, Automation

Control Plane Control Plane

Orchestration, Automation, AnalyticsOpen source and partner eco system of orchestrators

Api and sdk for integration with OSS / BSS OSS

ROLE OF CONTRAIL IN A VIRTUALIZED ENVIRONMENT

OrchestratorOpenStack, CloudStack

Contrail Controller"Logically Centralized, Physically Distributed"

Physical Network(Fabric)

Physical and

VirtualNetworkServices

Server Server

Storage

Physical Network(Gateway)

Network (Physical and Virtual)

High Level Abstraction

Low Level Realization

Contrail vRouter

SCALE-OUT NETWORK SYSTEM

JUNOSV CONTRAIL System

Configuration Node

Control Node

ControlNode

ComputeNode

(Virtual Router)

ServiceNode

(SRX, Firefly, JSP, ...)

Analytics Node

GatewayNode

(MX, EX/QFX, ...)

Orchestrator(OpenStack)

IF-MAP

XMPP BGP, NETCONF

Logically Centralized(Physically Distributed)

Horizontally Scalable

Highly Available(Active-Active)

Federated

APIS FIRST

ConfigurationNodes

AnalyticsNodes

REST APIs

Contrail Controller

Service Data ModelHigh Level of Abstraction

Generates

Contrail GUI OSS / BSS Service Orchestrator

RICH INTEGRATED ANALYTICS

OPEN CONTRAIL

Contrail is available as Open Source www.opencontrail.org. Commercial support available from Juniper.

Same features and scaling as commercial versionUses proven stable standards. Production-Ready.

Permissive license Apache 2.0

Integrated into open source virtualization stacksOpenStack, CloudStack

Contrail Detailed Walk-Through

LOGICAL TOPOLOGY

Virtual Network

Tenant Virtual Machines

Virtual Firewall

Physical Gateway RouterNon-Virtualized (Bare Metal) Server

Physical Network (Internet, L3VPN, ...)

PHYSICAL TOPOLOGY

OpenStackContrail

ControllerNeutronNova

Virtualized Server

Hypervisor with Contrail vRouter

Non-Virtualized (Bare Metal) Server

Underlay Switches

Gateway Router to Internet or L3VPN

MAPPING OF LOGICAL TO VIRTUAL TOPOLOGY

OpenStackContrail

PHYSICAL LOGICAL

STARTING POINTEMPTY LOGICAL TOPOLOGY

OpenStackContrail

PHYSICAL LOGICAL

CREATE GREEN TENANTCREATE VIRTUAL NETWORK "GREEN"

OpenStackContrail

PHYSICAL LOGICAL

Create VN G

CREATE GREEN TENANTCREATE VIRTUAL MACHINE "G1"

OpenStackContrail

PHYSICAL LOGICAL

Create VM G1Attach to VN G

Nova: Create VM

OpenStackContrail

PHYSICAL LOGICAL

Neutron:Attach VM to VN

XMPP:Create routing-instance

OpenStackContrail

PHYSICAL LOGICAL

Nova: Create VM

OpenStackContrail

PHYSICAL LOGICAL

OpenStackContrail

PHYSICAL LOGICAL

XMPP:Exchange routesCreate tunnels

OpenStackContrail

PHYSICAL LOGICAL

VMG2 VM

Nova: Create VM

OpenStackContrail

PHYSICAL LOGICAL

VMG2 VM

OpenStackContrail

PHYSICAL LOGICAL

VMG2 VM

XMPP:Exchange routesCreate tunnels

CREATE GREEN TENANTEND STATE

OpenStackContrail

PHYSICAL LOGICAL

VMG2 VM

CREATE RED TENANTSAME STEPS AS GREEN TENANT

OpenStackContrail

PHYSICAL LOGICAL

VMG2 VM

CONNECT GREEN TO RED TENANT VIA FIREWALLCREATE VIRTUAL MACHINE FOR FIREWALL

OpenStackContrail

PHYSICAL LOGICAL

VMG2 VM

Create VM FWAttach to VN GAttach to VN R

Nova: Create VM

CONNECT GREEN TO RED TENANT VIA FIREWALLATTACH FIREWALL TO RED AND GREEN VIRTUAL NETWORKS

OpenStackContrail

PHYSICAL LOGICAL

VMG2 VM

Create VM FWAttach to VN GAttach to VN R

Neutron:Attach VM to VNs

XMPP: Create routing-instance

CONNECT GREEN TO RED TENANT VIA FIREWALLAPPLY POLICY, EXCHANGE ROUTES, AND CREATE TUNNELS

OpenStackContrail

PHYSICAL LOGICAL

VMG2 VM

Apply PolicyVN G ↔ VN R

XMPP:Exchange routes

Create tunnels

CONNECT GREEN TO RED TENANT VIA FIREWALLEND STATE

OpenStackContrail

PHYSICAL LOGICAL

VMG2 VM

CONNECT GREEN TO RED TENANT VIA FIREWALLDATA PLANE: RED ↔ GREEN TRAFFIC FORCED THROUGH THE FIREWALL

OpenStackContrail

PHYSICAL LOGICAL

VMG2 VM

CONNECT RED TENANT TO PHYSICAL L3VPNCONFIGURE L3VPN ROUTING INSTANCE

OpenStackContrail

PHYSICAL LOGICAL

VMG2 VM

Apply PolicyVN R ↔ L3VPN

Netconf:Configure

routing-instance

CONNECT RED TENANT TO PHYSICAL L3VPNEXCHANGE ROUTES WITH PHYSICAL ROUTER, CREATE TUNNELS

OpenStackContrail

PHYSICAL LOGICAL

VMG2 VM

BGP:Exchange routes

Create tunnels

CONNECT RED TENANT TO PHYSICAL L3VPNEXCHANGE ROUTES WITH VROUTERS, CREATE TUNNELS

OpenStackContrail

PHYSICAL LOGICAL

VMG2 VM

Create tunnels

CONNECT BARE METAL SERVER TO RED TENANTUSE TOP-OF-RACK SWITCH AS GATEWAY

VN RBMSR4

OpenStackContrail

PHYSICAL LOGICAL

VMG2 VM

CONNECT BARE METAL SERVER TO RED TENANTCREATE ROUTING INSTANCE

VN RBMSR4

OpenStackContrail

PHYSICAL LOGICAL

VMG2 VM

Attach BMS R4to VN R

using switch S

Netconf:Configure

routing-instance

CONNECT BARE METAL SERVER TO RED TENANTEXCHANGE ROUTES WITH PHYSICAL SWITCH, CREATE TUNNELS

VN RBMSR4

OpenStackContrail

PHYSICAL LOGICAL

VMG2 VM

using switch S

BGP:Exchange routes

Create tunnels

CONNECT BARE METAL SERVER TO RED TENANTEXCHANGE ROUTES WITH VROUTERS, CREATE TUNNELS

VN RBMSR4

OpenStackContrail

PHYSICAL LOGICAL

VMG2 VM

using switch S

Create tunnels

CONNECT BARE METAL SERVER TO RED TENANTEND STATE

VN RBMSR4

OpenStackContrail

PHYSICAL LOGICAL

VMG2 VM

CONTRAIL IS BASED ON MPLS VPN TECHNOLOGY

P PPE PE

RouteReflector

UnderlaySwitchvRouter

ControlNode

UnderlaySwitch

vRouterVM VM

MPLS over MPLS

MPLS over GRE or VXLAN

Network Management System (NMS)

DMI ConfigNode

Orchestrator

AnalyticsNode

SDN System

MPLS L3VPN / E-VPN Contrail

contrail SDN CONTROLLER

Documents

Transcript of contrail SDN CONTROLLER

瞻博 OPEN CONTRAIL 构建的智能 SDN 网络 - scut.edu.cn · Reference Architecture Contrail Networking Contrail Cloud Cloud Orchestration Server Management Distributed & Scale-out

Juniper Jumpstarts Innovation: Open Sources SDN Controller

SDN Controller Testing: Part 1 SDN Controller...3 Table of Contents Introduction 4 Testing SDN..... 5 4 Introduction The cost, complexity, and manageability of network infrastructure

OpenDaylight:The Open Source SDN Controller Platformd2zmdbbm9feqrf.cloudfront.net/2016/usa/pdf/PSOSDN-… · · 2016-07-13OpenDaylight:The Open Source SDN Controller Platform ...

SDN-Based Approach to Evaluate the Best Controller ...

Brocade SDN Controller -Sample Code for Brocade vRouter-

OpenStack KOREA 정기 세미나_OpenStack meet iNaaS SDN Controller

INSTALLATION RUNBOOK FOR Huawei SDN controller... · INSTALLATION RUNBOOK FOR Huawei SDN controller Product Name: Huawei AC Controller Driver Version: V200R001 MOS Version: 7.0 OpenStack

SOFTWARE DRIVEN NETWORKS (SDN)(Juniper SRX, etc) Contrail SW Gateway- L2 Service Appliances (F5 Load Balancer,etc) Virtualized Servers (Hypervisor) Contrail Virtual Network Controller

Supporting composed SDN applications and controller ... composed SDN applications and controller independence with NetIDE Alec Leckey Intel Labs. SDN Application Development Java Python

Q3 2013 FINANCIAL RESULTS CONFERENCE CALL...SDN is a growth opportunity in networking systems and software Launched Contrail SDN controller earlier than our original 2014 ship date

【Interop Tokyo 2015】 真のビジネスアジリティを実現するSDNソリューションとは? Contrail SDN controller 最新アップデート

ONOS SDN Controller - Clustering Tests & Experiments

Contrail Partners Contrail Consortium

ONOS - multiple instance setting(Distributed SDN Controller)

SDN CONTROLLER IN VIRTUAL DATA CENTER - …€¦ · sdn controller in virtual data center emil g ągała plnog, 30.09.2013, kraków

Contrail Launch: Capitalize on SDN and Cloud. Now.

SONA: ONOS SDN Controller based OpenStack/Kubernetes ...

GEORGIA TECH SDN EVENT - Juniper Networksforums.juniper.net/jnet/attachments/jnet/NEJUG/3/1/OpenContrail... · GEORGIA TECH SDN EVENT ... MPLS L3VPN / E-VPN Contrail. ... MPLS L2

Lumina SDN Controller€¦ · Lumina SDN Controller Commercial Edition is a quality-assured version of the industry-leading OpenDaylight controller licensed for production networks.

【Interop Tokyo 2015】真のビジネスアジリティを実現するSDNソリューションとは? Contrail SDN controller 最新アップデート