Logo TIB AV-Portal Logo TIB AV-Portal

Bring your virtualized networking stack to the next level

Video in TIB AV-Portal: Bring your virtualized networking stack to the next level

Formal Metadata

Bring your virtualized networking stack to the next level
oVirt & OpenStack Neutron integration
Title of Series
CC Attribution 2.0 Belgium:
You are free to use, adapt and copy, distribute and transmit the work or content in adapted or unchanged form for any legal purpose as long as the work is attributed to the author in the manner specified by the author or licensor.
Release Date

Content Metadata

Subject Area
As the prominent open-source data center virtualization solution, oVirt relies on a powerful and easy approach to configuring a data center's network. By leveraging the advanced network capabilities offered by OpenStack Networking, oVirt's maintainers aim to bring this field even further, allowing data center administrators to use advanced networking capabilities while maintaining the simplicity of oVirt's network management approach. Developers & Users are welcome to join us in this session, and to discover how oVirt currently leverages OpenStack Networking, and see the road-map to future network virtualization in the Data Center, all using open source enterprise-grade software. In this session Mike Kolesnik from Red Hat's Cloud Networking Group will cover the networking capabilities of both of these projects, covering Neutron's popular use cases, including: * Overlay networking * Security Groups * IP address management * Other capabilities, as well as covering the traditional data center virtualization offering. In addition we'll review the integration of these two products, and see how you can leverage the advanced networking capabilities from the cloud in your virtualized data center. The future is still ahead, as we will explore what's already there and what's yet to come in this emerging collaboration. Developers & Users are welcome to join us in this session, and to discover how oVirt currently leverages OpenStack Networking, and see the road-map to future network virtualization in the Data Center, all using open source enterprise-grade software
Area Computer animation Software Multiplication sign Energy level Online help Software maintenance Pole (complex analysis) Product (business) Number
Exterior algebra Computer animation Open source Projective plane Computer network Computer network Core dump Configuration space Right angle Sphere
Degree (graph theory) Implementation Computer animation Bridging (networking) Single-precision floating-point format Computer network Computer network Data center Public domain Event horizon Demoscene
Latent heat Computer animation Software Interface (computing) Order (biology) Computer network Parameter (computer programming)
Greatest element Touchscreen Drag (physics) State of matter Interface (computing) 1 (number) Set (mathematics) Connected space Category of being Mathematics Computer animation Vector space Computer cluster Software Different (Kate Ryan album) Logic Natural number Computer configuration Computer network Computer network Configuration space
Greatest element Group action Service (economics) State of matter INTEGRAL IP address Computer configuration Atomic number Bridging (networking) Computer network Energy level Router (computing) Electric generator Projective plane Data storage device Variance Connected space Hand fan Human migration Computer animation Software Computer network Order (biology) Configuration space Game theory Quicksort
Computer virus Point (geometry) Service (economics) Open source Connected space Component-based software engineering Computer animation Bridging (networking) Computer network Normal (geometry) Plug-in (computing) Computer architecture Form (programming)
Game controller Service (economics) Computer animation Software State of matter Client (computing) Extension (kinesiology) Plug-in (computing) Computer architecture
NP-hard Point (geometry) Dataflow Group action Game controller Service (economics) State of matter Real number Public domain Function (mathematics) Regular graph Mereology IP address Rule of inference Theory Power (physics) Different (Kate Ryan album) Computer network Information security Address space Overlay-Netz Default (computer science) Scaling (geometry) Block (periodic table) Bit Staff (military) Special unitary group Connected space Arithmetic mean Digital rights management Computer animation Software Network topology Logic Personal digital assistant Computer network Order (biology) Video game Summierbarkeit Row (database)
Group action Computer animation Software Data storage device Right angle Perspective (visual) Product (business)
Implementation Digital rights management Computer animation Software Internet service provider Computer network Quicksort Instance (computer science)
Authentication Group action Computer animation INTEGRAL Internet service provider Computer network Virtual machine Mereology Information security Metropolitan area network
Authentication Discrete group Boss Corporation Touchscreen Mapping INTEGRAL Latin square 1 (number) Line (geometry) Mereology Field (computer science) Type theory Computer animation Internet service provider Forest Computer network Configuration space Right angle Summierbarkeit
Implementation Group action Game controller Computer animation Software Mapping Bridging (networking) Internet service provider Computer network Computer network Configuration space Computer
Latent heat Touchscreen Spring (hydrology) Process (computing) Computer animation Computer network Plastikkarte Perspective (visual)
Gateway (telecommunications) Server (computing) Group action Scheduling (computing) Functional (mathematics) Game controller Service (economics) State of matter Firewall (computing) Open set Rule of inference Public key certificate Direct numerical simulation Computer configuration Computer network Encryption Energy level Router (computing) Information security God Authentication Forcing (mathematics) Electronic mailing list Virtualization Price index Computer animation Internet service provider Order (biology) Right angle Quicksort Routing
Web page Email Group action Netbook Information Open source INTEGRAL State of matter Gradient Electronic mailing list Planning Bit Representational state transfer Regular graph Event horizon Human migration Band matrix Computer animation Internet service provider Order (biology) Computer network Computer network Configuration space Extension (kinesiology)
OK so high there are my I'm from red that's often develop through uh also
maintenance of product so who here has heard about the of been 1 of the poles of itself some of you know who hasn't
been stuff like because I'm going to talk about the networking of itself so no introduction this time but hopefully you will understand if not you can check out over the log the number of areas so this example Cabell help to bingo virtually working stuck to the next level using all of the so this in no neutron show hands a perspective from OK so basically the silting up of talk about a of it at all
configuration so how do we consider networks today and over the project of it is like an open source alternative to the sphere the center and then we'll go over a neutron see what it has to offer what we look into the we did and some future work that we have right
so all of it at a configuration the basically in over at that we have this and at the core of the network itself
represents the logical entity represents a related to broadcast domain and defined within the the scope
of a single data center so you can have multiple
datacenters each with its own network and these networks so when
you want to put to the enzyme than they have like this degree in uh drawing it says it's a via network and behind the scenes the network is implemented using Linux bridge so that's a like in house solution would go over the Lynch reach for the in thing and therefore segregation will surveillance so if you've been to soft spoke you really know what the and if not the hopefully hopefully you know what events and it's very like simple implementation
so the new network In order
to just In the previous interface new button you press than about them and then you get this
dialog and basically have fulfilled their name of the network so just call it whatever you want and you have to fill out some networking parameters like if you want to use violent segregated the network traffic you put the villain that is shown to use it for the and then you can specify a specific
and the or in some other properties 1 was not going to cover how and now that we have
this network is it's logical entity but doesn't actually do anything yet and we need to apply like on the whole so In over its network their own definition is done statically and it falls and we have a whole that with some of the network interfaces and have this nice but the course at the networks which opens this lovely dialog with the drag-and-drop capabilities so on the left side the leftmost side we have the actually the faces of the holes and we can decide to belonged interfaces or break a bond so it so you can create bonds directly from the UI and on the right-hand side you have the logic and networks that you need to put in the holes so the required ones are those that have to be on the whole for it to be able to run deviance in that cluster and non require the just the non required networks if you have it on the host great if not then you don't have to with that on and in the middle you just see where these networks are drag so each network you can attach to a specific networking interface and also in the bottom I don't know if you can do that but it says like should check connectivity between host and and and so basically if you lost your connectivity then and this was checked then the whole back its natural configuration vector working state so you don't actually lose connectivity to the house and also said that a configuration is an option that you can use just to play with the networking like a set of different networks and experiments with it and then you can like again road back but not like losing connectivity will but just robbing the changes the so now that we applied all the networks we went over all the holes and set up the networks we need to actually use them inside the VM so on the neuvième screen we
have this option in the bottom still had next so it's not like we just choose which network you want I can have multiple nets there's during the generation we can
also add networks later when the game is already running orange stop state whatever it an and that's it
basically so what are what are we looking to
gain from the integration so this was very simple like not really complicated stuff that's like the basic networking just there to networking and and so on Linux Britain rely on so we want to have support for more the qualities like I don't know where Cisco routers and stuff like that which we can't use the normally have 0 more open which because we're using just minutes bridge and valence so basically neutron has all these we want to use it and also the layer 3 services sold all of it really doesn't have any the 3 capability in this regard and want to have like an IP addresses for the atoms and stuff like that and I want to enjoy both worlds because over it is really powerful in managing the let's say infrastructure networks like storage migration network and all these methods that the variance don't necessarily have to use but and and they just used for like migration trafficking like serotonin serotonin your network separating it so as you have seen it's really easy knowledge to do the middle configuration for that and for the fans neutron is way more powerful has more capabilities so that neutron for managing the via networking aspect yeah and because we want to integrate it into orbit the and so be as an Indian work in order to boost still have like permission capabilities and all sorts of uh mn the level capabilities that exist in over to also apply to neutral networks so basically it's like having the best of both worlds of it for managing the infrastructure and neutron for having the the and connectivity and segregation and so on so let's see what what these neutron what is this neutron of well so basically it's OpenStack project it's it's like the
networking component of OpenStack but it's actually a standalone component so that we can install and use in any projects such as over so basically
provides the network connectivity is a service so i is a user can go to neutron skin attenuation giving a new network that I can use from IBM and neutron takes care of all the uh gross those form is so it configures like allow norms other segregation technology and I don't mind I don't see it that all I just know my traffic is safe and all the ends on the same network talk and talk to each other so that's a this 1 point it's also has a wide support for the ligands it has like a plug-in architecture that each event or or just networking technology can implement so there's like lots of plug-ins then there's a bridge of the assignment 2 is the new 1 and Cisco and why you'll Cisco you'll other lots and lots of plug-ins some or open source summer closed source and the basically that gives us a lot of flexibility and it's it is accessible virus KPI so all the work we do is integrating with respect the i and so this that's the
top-level architecture of neutron there's the
clients they pair clients and the neutron API which is the state the I fast and so basically this the basic API and there's also extensions which are not mandatory for obligation to implement and there is that the plugin itself it implements the base API and the what the extension is to resist implant so that's the neutron service and then on the compute node on the hypervisor and the the holes that is running the deviance it is it is the configured by an agent that is running locally on the or by some controller let's say you see CSM or maybe as the and controller that also knows how to configure networking on that on that follows
so what are the key features that we're looking to integrate into it and basically the most interesting stuff in neutron at all so we have like they're
both an output ritualization using overlays so if you have been to yourself tho he explained about it I would go over it briefly and also like address management like ability to be the IP addresses to the vehemence security groups and lots and lots of as a service staff like everything is service and routing which is also wrote of service an so the 1st thing you want that is the have this better networking using overlay networks so what our overlay that books and why do we need them as I said like all reduces belongs in and is like the naive way to visualize your networking and it's the blocks up to a point like you can segregate the traffic but it's very limited like it's attendees so you have like approximately 4 thousand airlines and in real life in real scenarios you wouldn't have more than a couple hundred is because otherwise it just doesn't scare in the switches they can hold like on we well there are more Marx was expensive switches can handily book the because switches don't hold more than a couple hundred realize it's also hard to maintain like the you have a switch and you want tools set up and make you have networking topology and you want to set up a new realize you have to go to the switches in the invest in that network and below the mean and the best role you have the market this as a strong it also has no brains like benign traffic is not direct the body just whatever the switch decide so if it knows how to routed throughout it to the right destination if it doesn't then it will fly the animal whatever to logic using the and psoralen networks Goncalo alleviate these issues so basically it's mostly unlimited like 2 million no theoretical networks and because it's not the local technologies 1st about it's actually not something that the switch knows about necessarily so the regular hard work and work with overlay networks no problem and there is a domain thing because as the state's not a little technologies not realize that don't have to configure anything which is the most like a crazy thing you might do is like opened fire will pour in like open fire will for that or something but that's and it also can be smart if using is the and is then controller it will direct the traffic and make it flow like in the best flow in the best possible flow for the network so basically overlay networks looks on the paper like it's a lot better but of course it depends on the use case like the and still a bit more high performance in some cases because there's a stuff like power offloading so hard basically supports lungs and it doesn't support that yet doesn't support overlay networks so we can have a small-scale violence probably usable for and if you need the large scale of networking lots and lots of different users with different mental to the use of an and works and basically this available since over 3 . 3 when we integrate neutron so it is just using no trans just asking at finer talk it doesn't care which 1 of the technologies and it uses so it's completely transparent to it what this IP address management wanted to be able to deliver IT IS IT addresses to the answer so fairly simple like the neutron has 3 main entities the network the sum and the port so network it's just like in order some sort of IT-related to and some that is that 1 or more some this can be attached to a certain at all just some about B 3 and like less free I P V 6 or V for some that and the port can have like the on 1 some that more of that network so for it is just a connection to a network and you can define IP on it then this IPA gets delivered by in the end by this superservers that neutron is 1 so basically this was also available formed the 1st intervention but you couldn't defined the sun that's you would just define and networks in orbit and you would have to define this out the sudden it's a neutron itself and now we have added this capability in 3 . 4 that you can also define the sublists was later an example it and last of all security growth and so what the security goals is just the way tool segregated audience from the outside wall sold by default that the young will get like no traffic coming into just return traffic if you initiated a session all outbound traffic is allowed but you can't control it you can like have in the Security group like in each group does multiple rows so you can define like it I only wanted people to be able to SSH to the mn and all I want to block out going traffic from for the sport friends or whatever rules you can think of the and and each part can have 1 or more security groups attached to it so basically this is kind of new in their over 3 . 4 because before that it just didn't know about the security goals and it didn't care sold it's my phone might not work and then answer by 4 just can't specify which security gross you want to use and if the different is used it will also supported the quite well
so let's see how we integrated the 2 products so from orbit
perspective neutron and some other example by the thus the new concept example either it's a software that is running to externally Talbot and can provide provide the resources so basically we have x provided that can provide networking in an example right at that can provide holes and some provided for storage so basically
neutron is 1 of those example why those that we define and you can deploy with whatever played you want you just set it up by itself and it can be used in any 1 of the flavors like you all of lowest set it up once and then you have don't have to really touch it again but you can use Adobe centric way like you create networks in all written tell it to create them using strong so it's just some sort of implementation data that you don't really care about art and go the neutron centric way where you just just important books from neutron annual manager every every aspect of the networking in inside neutron so over it supports both layers of course you can mix and match you can have some that works managed solely through some manage from the neutron side so how do we use the neutralino over it's pretty simple just a few simple steps so 1st of all you need
to install a new from instance and the after that the the instances in some provider and then that works on the
provider in 1 of the 2 flavors installed the halls and use the networks in the BM so it's going to data into 1 of each 1 of the steps so
basically installing it from that's what you
have to the where self you go on man
on some machine and it can be orbit or some other machine and just shows whatever played you want and if you want the security authentication then you need to install keystone and also configured distant Istanbul talk with neutron so that's like the hardest part of this integration on all of the other steps are in over so 1st year
at the you providers who fill out the fields like name select the type so it's OpenStack Networking select a plague in or you can enter your uncle again if you're using some other plugin that other than its breach or obvious which are currently the ones predefined and the the yard line and if need you will need to specify the authentication that those than just and the required authentication and fill the details yeah the now apparently it's only 1 ligand per provide but you can have multiple example wider so just a new provider approach ligand by performance it's not perfectly integration right and it's evolving and and if you choose a plug-in that requires agents who have didn't configuration screen so basically 1st mappings is just about Latin the Cupid for the boss just what stand when women's installed agent later so we will see this actually later and then
what once you have the example I either than where the network so basically pretty similar to that network screen before just an important part is tool check discrete on example right a check books and select which example where they want to use so if you have several like networking providers we can create it on either 1 of them and also in in this screen we can specify the sudden and if you 1 so if you want to create a subnet immediately we can just specify the sum that doesn't get rid of forest during the middle Christians that work and good also after the network has been added on the other way the neutron
centric way we have an import button and we just see all the networks on some provide an interesting for them into orbit so that's it all of the flavors either you at the network by yourself and neutron is just an implementation that audio
editing electron and import it into all the so now that you have the networks all set up in or if it's the logical networks was the need someone to do it like that of configurations so as we said it's either an agent or some controller controlling the holes so if you have an agent when we add the new halls will have this and I external like network provider that then we can choose which provided want to create the agent for like installed then now so we need to specify the bridge mappings which is some news from configuration that doesn't uh like the which interfaces to use for the networking so that's basically installs the holes and those would be a sermon also creates they jump on it configures the agent was still so we have the to pitch the is that within that so all the configuration of the new the configuration stands and was set to go and now we just need to
add the network to agree and so basically here we can see that we can know also that makes but they are most necessarily and new on screen so it's it and thus render to the UN CNR LOA or this spring you can select the net for that you want to use for the new the 1st card and it's just like any other book you don't have any specification saying that this is non-metal could just be coded like that but basically it's because this network for the VM perspective it doesn't matter before it this that is that controlling that require neutron the VM doesn't care just and basically in the and under the
EM processing goes and everything works out especially if neutrons working
so that and the question of you can the know his less careful can specify stateless firewall rules on the subnet level so basically if you can do it in neutron you can probably do it in this integration because we're supporting most everything from that like from what you've seen but and if it has less rules then it probably would work right but I don't know if they support stateless rules and no security goes and is state any other questions up and up until now yes this the light and all the and the question is if the connection between over it and then it'll providers and prove that they're in plain text so basically from provided doesn't support encryption OK it's like demands to be connected to locally some phenomenal when and if they support encryption we will also use encryption of course like we have form and provide therefore holes so that does support encryption we actually do the certificate exchange with the formant provider right but here they don't supported and unsupported HDPs so is basically like plain text but they do have the keystone authentication that what they fact all you will have to ask opens the guys like why don't to support basically US 5 exercise this this you see is the with the so the question is if we are able to see the return the forces on the open this wage and so basically you don't see the restraint interfaces like on which hosted around sediment at the end of the so it's not really you wouldn't be able to listing order like which so what on the whole right now but it might be a good idea can our fee for the right you the history you end up yes the the world and you know you what and all that kind of drew the and the use of this is the year that OK so what is the question that so the question is is that this simply servers supporting X options like Gateway and routs and stuff so it it should work basically linear neutron is supposedly is supporting the so you can define gateway routing DNS servers to be sent from the base of the currently wouldn't integrated it's on the list of things to go but some like disappear services like an agent running in a strong enough to set it up I know nearly by yourself and if it's suppose that amounted depends on its from right it's like if they have about so what did theoretically theoretically it supports on the extra options of ideas the yellow where where working on adding a boy for all these options right so basically future work we have and so of course if something is not mentioned the work on open about God all
only so 1st of all I want to integrate more advanced services like all of the the piano the servers disaster-recovery whatever all that is a x services that the neutron provides and we also want to improve the the and scheduling because currently when we started the and we don't know which host is going to provide which network so it is possible that some holes maybe is not capable of capable of providing a network so we would want to know that and actually not start that the amount that falls and also monitor or like that of interconnectivity because even if the Vienna starting and supposedly it is connected to the network maybe it doesn't have any traffic flowing through it so we want to be able to know that that there is like a something is wrong here they can give some to some sort of indication and I also want to integrate like security groups more tightly because currently is just you want to security groups again but it just specify like what security groups ideas you want to use and that they want to be able to create security groups like we can create subnets currently from within other want to give this control to the user and also included flare 3 functionality like virtual routers floating API's how well that's working from audits and of course support marbling pipes like Cisco rival NEC all this stuff soul we went over
so in conclusion we went over already at all configuration how it works I went over then neutron uh bits and so what we stand to gain from it what's currently happening and also sold some planned future work and if you want more info you can check out these events so neutron basically there's there with you for neutron in order to have a very detailed page about the integration and what's what's currently happening what is planned next you can find a source on the mailing list and on various eternal and that's it they have an additional questions all of the so called and and the question is does neutrons appalled failover is so basically if you like my grade but I'm not sure if the the if the IP is supported by a but I and in which the do you and yeah uh and I'm not sure if it's a boy and I haven't tested it with light
migration so probably do like to like them but basically if it doesn't support it then it's for most of it you of the what about the question is do expose API calls to get the benefit from some consumption in the network the so that they don't even think we have it on regular orbit networks and the neutron is still in that that previous state it's not quite cool it so there's no official REST API support for it so basically when there will be and if we would have like bandwidth for regular netbooks them surely try to have it on the books but it kind of depends what Newton providers through the use of so I here and then it's actually what was the question and the the the the routing extension of the you so question is do we support the rotting extension the ISO basically it should work but I'm not sure we haven't tried to I couldn't integrated the rotting stuff that's something to the and and if you want that's on network with Exxon Montevideo can connect created from neutron and consume it like imported into all of it but you can still read it from over directly like that so thank you think we're out of time and and but if you want to ask questions that you're welcome to do that catch me right now ask on the mailing list thank you very much