Building OPNFV as a Platform

19
Building OPNFV as a Platform Iben.Rodriguez@Spirent .com Principal Architect Cloud and Virtualization

Transcript of Building OPNFV as a Platform

Page 1: Building OPNFV as a Platform

Building OPNFV as a Platform

[email protected] ArchitectCloud and Virtualization

Page 2: Building OPNFV as a Platform

OPNFV Platform Overview• Security• Functional and

Performance testing

• IPv6 • Policy

Page 3: Building OPNFV as a Platform

 OPNFV Security Group – Project Objectives

• We are an an ‘umbrella’ group to encourage development of security centric functions within the OPNFV eco-system.– Architecture

– Documentation

– Code review

– Upstream inter-work with other groups

– Vulnerability management

– Security research

2023-04-15

Page 4: Building OPNFV as a Platform

 OPNFV Security Group – Current Status

• We have two active projects:– Inspector

• Encourage Security Audit Event in Upstream Projects

– Moon

• Security Orchestration in OPNFV Platform

• Number or participants: – Four

• Started in Jan 22, 2015

2023-04-15

Page 5: Building OPNFV as a Platform

 OPNFV Security Group – Call to Arms

• We need people who have an interest in all aspects of cloud and NFV security to join us.

• Contact info:– https://wiki.opnfv.org/security

– Meeting Times Every Wednesday at 14:00pm UTC

– IRC #opnfv-sec NOTE: we almost only meet on IRC

– Main Contact: Luke Hinds – [email protected]

2023-04-15

Page 6: Building OPNFV as a Platform

OPNFV Platform Overview• Security• Functional and

Performance testing

• IPv6 • Policy

Page 7: Building OPNFV as a Platform

2023-04-15

Page 8: Building OPNFV as a Platform

Functional Testing in OPNFV

• We provide comprehensive testing to verify OPNFV Platform functionality specifically around the VIM and NFVI

• Work:– Test cases are selected then integrated into the CI with new

scenarios being developed and added to the existing ones.

– Analysis of the results (same test suites run on several test beds in various OPNFV Labs (Pharos federation via Octopus)

• Goal– Contribute to robustness & Interoperability of OPNFV

– Define KPI of the Telco Cloud2023-04-15

Page 9: Building OPNFV as a Platform

Functional Testing in OPNFV

• Arno release included BGS+Octopus+Pharos+Functest+Doc

• Functest was used to:– setup test tooling (Rally + Robot)

– run test cases including one that could be considered as performance testing

– Integrate test cases into CI

• For Release 2 we need to synthetize the role of each testing umbrella project

• It's best to have overlapping tests rather than not enough2023-04-15

Page 10: Building OPNFV as a Platform

Functional testing in OPNFV - FuncTest

• Current open task/issues (JIRA used to track such things)– FUNCTEST-1: Rally Bench

– FUNCTEST-2: Tempest

– FUNCTEST-3: vPing

– FUNCTEST-4: vIMS

– FUNCTEST-5: SDN Controller suite

– FUNCTEST-6: CI automation

– FUNCTEST-7: CI -automation

2023-04-15

Page 11: Building OPNFV as a Platform

Functional Testing in OPNFV - FuncTest

• Please join our testing team:– Indicate to the project (mail or IRC) that you would like to join

– Include your skills and interests and any past experience

• For more info: – https://wiki.opnfv.org/_media/opnfv-_functest.pdf

– #opnfv-testperf on Freenode IRC we are always online

• We need people to automate and troubleshoot test cases

• To leverage big data and analytics to play with the results

2023-04-15

Page 12: Building OPNFV as a Platform

Performance Testing in OPNFV

• Yardstick: NFVI verification from VNF perspective– offers both functional and performance test cases addressing

the whole system (where Rally for instance is more used for OpenStack and Robot used for ODL)

• Q-Tip: performance characterization of NFVI bottom-up in white-box

• VSPERF: Virtual Switch Performance

• DPACC: Hardware-assisted Data Plane Acceleration

2023-04-15

Page 13: Building OPNFV as a Platform

OPNFV Platform Overview• Security• Functional and

Performance testing

• IPv6 • Policy

Page 14: Building OPNFV as a Platform

OPNFV specific qualities - IPv6 Current Project Status• Goals

– A meta distribution of IPv6-enabled OPNFV platform

– A methodology of evolving IPv6 OPNFV

• Deliverables:– A script to automate the configuration and provisioning of IPv6

features for both control nodes and virtual workloads

– An Installation Guide and/or User Guide with step-by-step instructions of manual configuration of IPv6 features

– Test cases adapted to IPv6 specific use cases

– Gap analysis and Recommendation for next steps2023-04-15

Page 15: Building OPNFV as a Platform

OPNFV specific qualities - IPv6 Next Steps

• A multi-site, multi-node PoC design and implementation to explore auto configuration and provisioning of IPv6

• Enable community test labs with IPv6 for both internal and external networking of control nodes and virtual workloads.

• Complete easy installation package– Automated configuration script

– Installation Guide

– ISO installer

• Test case development to identify gaps2023-04-15

Page 16: Building OPNFV as a Platform

OPNFV specific qualities - IPv6 Project Contacts

• Project Creation Date: November 25th, 2014

• Lifecycle State: Incubation

• Gerrit Repo: ipv6

• Project Wiki: https://wiki.opnfv.org/ipv6_opnfv_project

• Primary Contact and project lead: Bin Hu [email protected]

• Active contributors from AT&T, Brocade, Cisco, ClearPath, Huawei, Nokia and Red Hat

2023-04-15

Page 17: Building OPNFV as a Platform

OPNFV Platform Overview• Security• Functional and

Performance testing

• IPv6 • Policy

Page 18: Building OPNFV as a Platform

OPNFV Policy - Project Copper / Congress

• Copper was established by Byran from AT&T to define OPNFV specific use cases for Intent and Policy Auditing

• Examples include Local and Geo Redundancy

• Affinity and Anti-Affinity for workloads and processes

• Security controls

2023-04-15

Page 19: Building OPNFV as a Platform

OPNFV Platform Overview• Security• Functional and

Performance testing

• IPv6 • Policy