OpenNebula Networking Ruben S. Montero OpenNebula Chief Architect Techday Madrid 11 March 2016
OpenNebula Network Model: View Hyper. Hyper. Hyper. Hyper. Virtual Network VM VM VM VM Datacenter Network Leaf-Spine switched or routed backbone Not controlled by OpenNebula Usually just few TOR switches Virtual switches Virtual Network
OpenNebula Network Model: “built-in SDN” Provide a central point to define, consume and set up Virtual Networks for Virtual Machines XML-RPC API OpenNebula daemon Infrastructure Drivers Northbound Interface Virtual Network abstract management Lease addresses to VMs Reserve addresses for users or groups Network Stack Southbound Interface Uniform interface to interface network elements Specialized for VM Networking
Northbound Interface Logical Attributes Addresses Space (multiple, disjoint ranges) IPv4 IPv6 (Global & ULA) Ethernet - MAC addresses Security Groups Managed as a separate entity Inbound & Outbound, TCP/UDP/ICMP Custom Tags Configuration & Physical Attributes Network specific (e.g. BRIDGE , VLAN_ID ) VM Context (e.g. DNS , GATEWAY ) Virtual Network Definition
Southbound Interface Three-phase setup pre , post and clean right before, after VM boot and shutdown It considers live-migrations OpenNebula Network Drivers OpenvSwtich VMware DSwtich Linux Bridge 802.1Q Flat Security Group * iptables rules VXLAN ebtables Flat VLAN Flat Dynamic NFV Virtual Router * * [Virtual Router] New in 5.0! * [Security Group] Propagate updates to running VMs
Approach: Virtualize some network functions by packaging into an appliance Ease & flexible management of your network Hugepages * , NUMA scheduling * , PCI PF/SR-IOV co-allocation * * Supported only to some extent in 4.14 As part of a Virtual Network to include more functionality Virtual Router removed from 4.14 to re-architect it. NFV Management
Virtual Routers: NFV Demonstration Virtual Router Virtual Router Virtual Router VR cluster Virtual Network Virtual Network Alpine Linux Link any VLAN network HA configuration Support for reconfiguration First class management entity Sunstone specialized views New CLI for vrouters Can be configured per VDC * * Future plans to expose an OpenFlow interface to be controlled by SDN
Virtual Router: Cross-site Networks Virtual Router Virtual Router VM Virtual Network (VLAN) Virtual Network (VLAN) VM VM Cross-site Network VM Ethernet over IP (GRETAP) + IPSec Link multiple virtual networks (L3/L2) Support for hybrid configurations Support for L3 inter-DC
Virtual Router: SDN integration SSH OpenFlow ovswtich / Linux bridge link (to other switches) VXLAN, VLAN, Ether virtual appliance SDN for the Cross-site network Flow control (ReactiveFlow app) ARP optimizations Flow re-balancing OpenNebula drivers
OpenNebula Network Model: View Hyper. Hyper. Hyper. Hyper. Virtual Network VM VM VM VM Virtual Network Network backbone and Internet VM VM Compute Fabric SDN for vSwitches Two-level SDN Hypervisor for VLAN set up and management Interconnection and management of VLAN segments Virtual switch (or routed)