Download - SDN Controller

CONTRAIL SDN CONTROLLER

Jakub Pavlik, tcp cloud

2 Copyright © 2013 Juniper Networks, Inc.

Datacenter Use Case


CONTRAIL USE CASE 1: CLOUDENTERPRISE PRIVATE CLOUD

Finance HR Marketing

VLAN

Physical Service

Appliances

Silo'ed resource allocationManual configurationStatic service deployment


CONTRAIL USE CASE 1: CLOUDENTERPRISE PRIVATE CLOUD

Finance HR Marketing Finance HR Marketing

VLAN

Physical Service

Appliances

VirtualNetwork

Silo'ed resource allocationManual configurationStatic service deployment

Dynamic resource allocationAutomated configurationDynamic service chains

Network policies enforced as ACLs and

service chains


CONTRAIL USE CASE 2: CLOUDSERVICE PROVIDER CLOUD (IAAS, VPC)

Service ProviderInfrastructure as a Service (IaaS)

Service ProviderL3VPN, E-VPN

Public Cloud Providers, Content Providers, ...

Service ProviderManaged Virtual Private Cloud (VPC)

Enterprise Offices

End-to-End Virtual Network Orchestration and Automation

Enterprise Data Center


Network Virtualisation----

The Importance of Abstraction

"SDN as a Compiler"


WHAT IS NETWORK VIRTUALIZATION Independent of Physical Network Location or State

Logical Network across any server, any rack, any cluster, any data-center

Virtual Machines can migrate without requiring any reworking of security policies, load balancing, etc

New Workloads or Networks should not require provisioning of physical network

Nodes in Physical Network can fail without any disruption to Workload

Full Isolation for Multi-tenancy and Fault Tolerance MAC and IP Addresses are completely private per tenant Any failures or configuration errors by tenants do not affect other

applications or tenants Any failures in the virtual layer do not propagate to physical layer


CONTRAIL KEY ABSTRACTIONS"LEGO BLOCKS"

VN

VM VM

VN

VN

Virtual MachinesCloud Tenants and Virtual Network Functions

Virtual NetworksConnect Virtual Machines

Gateway DevicesConnect the Virtual to the Physical


CONTRAIL KEY ABSTRACTIONSCONSTRUCTING COMPLEX USE CASES WITH SIMPLE "LEGO BLOCKS"

VM VM VM

Virtual Network

VM VM VM

Virtual Network

Tenant Virtual Machines

Virtual Firewall

Physical Gateway RouterNon-Virtualized (Bare Metal) Server

Physical Network (Internet, L3VPN, ...)

Virtual Network

PhysicalNetwork

Virtual Load Balancer

Service Chain


VIRTUAL NETWORKAKA NETWORK SLICING, AKA MULTI-TENANCY

OpenStackCloudStack

ContrailController

VMG1

VMR1

VMG2

VMR2

Contrail Controller

REST APIs

XMPP

VirtualizedServer

Contrail vRouter

Hypervisor

Routing Instance Overlay TunnelMPLS/GRE, MPLS/UDP, VXLAN

Underlay Switch

GreenVirtual Network

VM VM VM VM

RedVirtual Network

VM VM VM VM


SERVICE CHAININGIN THE CONTEXT OF A DATA CENTER

VMG1

VMG2

VMG3

GreenVirtual Network

VMR1

VMR2

VMR3

RedVirtual Network

ContrailController

VMG

VMR

XMPP

OpenStackCloudStack


GATEWAY TO L3VPN

ContrailController

VMR1

VMR2

PhysicalL3VPN

BGP + Netconf

Overlay TunnelMPLS/GRE, MPLS/UDP, VXLAN

RedVirtual Network

VM VM VM VM

Route Reflector

LSP (RSVP, LDP)

BGPGateway Router (PE Router)

OpenStackCloudStack


GATEWAY TO BARE-METAL SERVER

ContrailController

VMR1

VMR2

BGP + Netconf

Overlay TunnelMPLS/GRE, MPLS/UDP, VXLAN

RedVirtual Network

VM VM

Gateway Router or Switch

Bare Metal Server(Non-Virtualized Server)

OpenStackCloudStack


Contrail Architecture


CONTRAIL ARCHITECTUREA GENERAL PURPOSE SDN PLATFORM

Physical NetworkInteroperability with traditional network devicesAny-to-any non-blocking low-latency fabric: Q-Fabric or Clos

Virtual Network OverlayMulti-tenancy for private and virtual public cloudsGateway functions - connect to virtual to physical networkService chaining (physical and virtual)

MarketingHRFinance

Control Plane - Physical, VirtualOpen, standards-based, federated controllerScalable and resilient

Control Plane

Configuration manager, Automation

Control Plane Control Plane

Orchestration, Automation, AnalyticsOpen source and partner eco system of orchestratorsApi and sdk for integration with OSS / BSS OSS


ROLE OF CONTRAIL IN A VIRTUALIZED ENVIRONMENTOrchestratorOpenStack, CloudStack

Contrail Controller"Logically Centralized, Physically Distributed"

Physical Network(Fabric)

Physical and

VirtualNetworkServices

VM

VM VM

VM

Server Server

Storage

Physical Network(Gateway)

Sto

rage

Com

pute

Network (Physical and Virtual)

Com

puteN

etw

ork

High Level Abstraction

Low Level Realization

Contrail vRouter


SCALE-OUT NETWORK SYSTEM

JUNOSV CONTRAIL System

Configuration Node

Configuration Node

Control Node

ControlNode

ComputeNode

(Virtual Router)

ServiceNode

(SRX, Firefly, JSP, ...)

Analytics Node

Analytics Node

GatewayNode

(MX, EX/QFX, ...)

Orchestrator(OpenStack)

REST

IBGP

IF-MAP

XMPP BGP, NETCONF

Logically Centralized(Physically Distributed)

Horizontally Scalable

Highly Available(Active-Active)

Federated


APIS FIRST

ConfigurationNodes

AnalyticsNodes

REST APIs

Contrail ControllerService Data Model

High Level of Abstraction

Generates

Contrail GUI OSS / BSS Service Orchestrator


RICH INTEGRATED ANALYTICS


OPEN CONTRAIL

Contrail is available as Open Source www.opencontrail.org. Commercial support available from Juniper.

Same features and scaling as commercial versionUses proven stable standards. Production-Ready.

Permissive license Apache 2.0

Integrated into open source virtualization stacksOpenStack, CloudStack

http://www.opencontrail.org/


Contrail Detailed Walk-Through


LOGICAL TOPOLOGY

VMG1

VMG2

VMG3

VN G

VMR1

VMR2

VMR3

VN R

PN

VMFW

BMSR4

Virtual Network

Tenant Virtual MachinesVirtual Firewall

Physical Gateway RouterNon-Virtualized (Bare Metal) Server

Physical Network (Internet, L3VPN, ...)


PHYSICAL TOPOLOGY

OpenStack ContrailController

NeutronNova

Virtualized Server

Hypervisor with Contrail vRouter

Non-Virtualized (Bare Metal) Server

Underlay Switches

Gateway Router to Internet or L3VPN


MAPPING OF LOGICAL TO VIRTUAL TOPOLOGY

VMG1

VMG2

VMG3

VN G

VMR1

VMR2

VMR3

VN R

L3VPN

VMFW


NeutronNova

PHYSICAL LOGICAL

BMSR4


STARTING POINTEMPTY LOGICAL TOPOLOGY

VMG1

VMG2

VMG3

VN G

VMR1

VMR2

VMR3

VN R

PN

VMFW


NeutronNova

PHYSICAL LOGICAL

BMSR4


CREATE GREEN TENANTCREATE VIRTUAL NETWORK "GREEN"

VMG1

VMG2

VMG3

VMR1

VMR2

VMR3

VN R

PN

VMFW


NeutronNova

PHYSICAL LOGICAL

BMSR4

VN G

Create VN G


CREATE GREEN TENANTCREATE VIRTUAL MACHINE "G1"

VMG1

VMG2

VMG3

VMR1

VMR2

VMR3

VN R

PN

VMFW


NeutronNova

PHYSICAL LOGICAL

BMSR4

VN G

Create VM G1Attach to VN G

Nova: Create VM

VMG1



VMG1

VMG2

VMG3

VMR1

VMR2

VMR3

VN R

PN

VMFW


NeutronNova

PHYSICAL LOGICAL

BMSR4

VN GVMG1

Neutron:Attach VM to VN


XMPP:Create routing-instance



VMG1

VMG2

VMG3

VMR1

VMR2

VMR3

VN R

PN

VMFW


NeutronNova

PHYSICAL LOGICAL

BMSR4

VN G


VMG1

Nova: Create VM

VMG2



VMG1

VMG3

VMR1

VMR2

VMR3

VN R

PN

VMFW


NeutronNova

PHYSICAL LOGICAL

BMSR4

VN GVMG1



VMG2


VMG2



VMG1

VMG3

VMR1

VMR2

VMR3

VN R

PN

VMFW


NeutronNova

PHYSICAL LOGICAL

BMSR4

VN GVMG1


VMG2

XMPP:Exchange routesCreate tunnels

VMG2



VMG1

VMG3

VMR1

VMR2

VMR3

VN R

PN

VMFW


NeutronNova

PHYSICAL LOGICAL

BMSR4

VN GVMG1

VMG2 VM

G2


Nova: Create VM

VMG3



VMG1

VMG3

VMR1

VMR2

VMR3

VN R

PN

VMFW


NeutronNova

PHYSICAL LOGICAL

BMSR4

VN GVMG1

VMG2 VM

G2


VMG3





VMG1

VMG3

VMR1

VMR2

VMR3

VN R

PN

VMFW


NeutronNova

PHYSICAL LOGICAL

BMSR4

VN GVMG1

VMG2 VM

G2


VMG3

XMPP:Exchange routesCreate tunnels


CREATE GREEN TENANTEND STATE

VMG1

VMG3

VMR1

VMR2

VMR3

VN R

PN

VMFW


NeutronNova

PHYSICAL LOGICAL

BMSR4

VN GVMG1

VMG2 VM

G2

VMG3


CREATE RED TENANTSAME STEPS AS GREEN TENANT

VMG1

VMG3

VMR1

VMR2

VMR3

VN R

PN

VMFW


NeutronNova

PHYSICAL LOGICAL

BMSR4

VN GVMG1

VMG2 VM

G2

VMG3

VMR1

VMR3

VMR2


CONNECT GREEN TO RED TENANT VIA FIREWALLCREATE VIRTUAL MACHINE FOR FIREWALL

VMG1

VMG3

VMR1

VMR2

VMR3

VN R

PN


NeutronNova

PHYSICAL LOGICAL

BMSR4

VN GVMG1

VMG2 VM

G2

VMG3

VMR1

VMR3

VMR2

Create VM FWAttach to VN GAttach to VN R

VMFW

Nova: Create VM

VMFW


CONNECT GREEN TO RED TENANT VIA FIREWALLATTACH FIREWALL TO RED AND GREEN VIRTUAL NETWORKS

VMG1

VMG3

VMR1

VMR2

VMR3

VN R

PN


NeutronNova

PHYSICAL LOGICAL

BMSR4

VN GVMG1

VMG2 VM

G2

VMG3

VMR1

VMR3

VMR2

Create VM FWAttach to VN GAttach to VN R

VMFW

VMFW

Neutron:Attach VM to VNs

XMPP: Create routing-instance


CONNECT GREEN TO RED TENANT VIA FIREWALLAPPLY POLICY, EXCHANGE ROUTES, AND CREATE TUNNELS

VMG1

VMG3

VMR1

VMR2

VMR3

VN R

L3VPN


NeutronNova

PHYSICAL LOGICAL

BMSR4

VN GVMG1

VMG2 VM

G2

VMG3

VMR1

VMR3

VMR2

VMFW

VMFW

Apply PolicyVN G ↔ VN R

XMPP:Exchange routes

Create tunnels


CONNECT GREEN TO RED TENANT VIA FIREWALLEND STATE

VMG1

VMG3

VMR1

VMR2

VMR3

VN R

L3VPN


NeutronNova

PHYSICAL LOGICAL

BMSR4

VN GVMG1

VMG2 VM

G2

VMG3

VMR1

VMR3

VMR2

VMFW

VMFW


CONNECT GREEN TO RED TENANT VIA FIREWALLDATA PLANE: RED ↔ GREEN TRAFFIC FORCED THROUGH THE FIREWALL

VMG1

VMG3

VMR1

VMR2

VMR3

VN R

L3VPN


NeutronNova

PHYSICAL LOGICAL

BMSR4

VN GVMG1

VMG2 VM

G2

VMG3

VMR1

VMR3

VMR2

VMFW

VMFW


CONNECT RED TENANT TO PHYSICAL L3VPNCONFIGURE L3VPN ROUTING INSTANCE

VMG1

VMG3

VMR1

VMR2

VMR3

VN R


NeutronNova

PHYSICAL LOGICAL

BMSR4

VN GVMG1

VMG2 VM

G2

VMG3

VMR1

VMR3

VMR2

VMFW

VMFW

L3VPN

Apply PolicyVN R ↔ L3VPN

Netconf:Configure

routing-instance


CONNECT RED TENANT TO PHYSICAL L3VPNEXCHANGE ROUTES WITH PHYSICAL ROUTER, CREATE TUNNELS

VMG1

VMG3

VMR1

VMR2

VMR3

VN R


NeutronNova

PHYSICAL LOGICAL

BMSR4

VN GVMG1

VMG2 VM

G2

VMG3

VMR1

VMR3

VMR2

VMFW

VMFW

L3VPN


BGP:Exchange routes

Create tunnels


CONNECT RED TENANT TO PHYSICAL L3VPNEXCHANGE ROUTES WITH VROUTERS, CREATE TUNNELS

VMG1

VMG3

VMR1

VMR2

VMR3

VN R


NeutronNova

PHYSICAL LOGICAL

BMSR4

VN GVMG1

VMG2 VM

G2

VMG3

VMR1

VMR3

VMR2

VMFW

VMFW

L3VPN



Create tunnels


CONNECT BARE METAL SERVER TO RED TENANTUSE TOP-OF-RACK SWITCH AS GATEWAY

VMG1

VMG3

VMR1

VMR2

VMR3

VN RBMSR4


NeutronNova

PHYSICAL LOGICAL

BMSR4

VN GVMG1

VMG2 VM

G2

VMG3

VMR1

VMR3

VMR2

VMFW

VMFW

L3VPN


CONNECT BARE METAL SERVER TO RED TENANTCREATE ROUTING INSTANCE

VMG1

VMG3

VMR1

VMR2

VMR3

VN RBMSR4


NeutronNova

PHYSICAL LOGICAL

BMSR4

VN GVMG1

VMG2 VM

G2

VMG3

VMR1

VMR3

VMR2

VMFW

VMFW

L3VPN

Attach BMS R4to VN R

using switch S

Netconf:Configure

routing-instance


CONNECT BARE METAL SERVER TO RED TENANTEXCHANGE ROUTES WITH PHYSICAL SWITCH, CREATE TUNNELS

VMG1

VMG3

VMR1

VMR2

VMR3

VN RBMSR4


NeutronNova

PHYSICAL LOGICAL

BMSR4

VN GVMG1

VMG2 VM

G2

VMG3

VMR1

VMR3

VMR2

VMFW

VMFW

L3VPN


using switch S

BGP:Exchange routes

Create tunnels


CONNECT BARE METAL SERVER TO RED TENANTEXCHANGE ROUTES WITH VROUTERS, CREATE TUNNELS

VMG1

VMG3

VMR1

VMR2

VMR3

VN RBMSR4


NeutronNova

PHYSICAL LOGICAL

BMSR4

VN GVMG1

VMG2 VM

G2

VMG3

VMR1

VMR3

VMR2

VMFW

VMFW

L3VPN


using switch S


Create tunnels


CONNECT BARE METAL SERVER TO RED TENANTEND STATE

VMG1

VMG3

VMR1

VMR2

VMR3

VN RBMSR4


NeutronNova

PHYSICAL LOGICAL

BMSR4

VN GVMG1

VMG2 VM

G2

VMG3

VMR1

VMR3

VMR2

VMFW

VMFW

L3VPN


CONTRAIL IS BASED ON MPLS VPN TECHNOLOGY

P PPE PE

RouteReflector

RouteReflector

CECE

UnderlaySwitchvRouter

ControlNode

ControlNode

UnderlaySwitch

VM

VM

VM

VM

vRouterVM VM

IBGP

IBGP

IBGP

XMPP

MPLS over MPLS

MPLS over GRE or VXLAN

Network Management System (NMS)

DMI ConfigNode

Orchestrator

AnalyticsNode

SDN System

MPLS L3VPN / E-VPN Contrail

Download - SDN Controller

Top Related