Top Banner
© 2016 Nokia. All rights reserved. Nuage Networks is a Nokia venture. Avoiding Silos in Container Networking [email protected] @nuagenetworks
13

Avoiding Silos in Container Networking by Nuage Networks Christophe Torlinsky at Container Camp UK

Apr 16, 2017

Download

Technology

Nuage Networks
Welcome message from author
This document is posted to help you gain knowledge. Please leave a comment to let me know what you think about it! Share it to your friends and learn new things together.
Transcript
Page 1: Avoiding Silos in Container Networking by Nuage Networks Christophe Torlinsky at Container Camp UK

©2016Nokia.Allrightsreserved.NuageNetworksisaNokiaventure.

[email protected]

@nuagenetworks

Page 2: Avoiding Silos in Container Networking by Nuage Networks Christophe Torlinsky at Container Camp UK

©2016Nokia.Allrightsreserved.NuageNetworksisaNokiaventure.

Don’tBuildWalls...useBGP(asaService)....OldSchoolstyle

21/09/162

ResDulAPI

MP-BGPControlPlane

OpenVswitch/VxLAN

Page 3: Avoiding Silos in Container Networking by Nuage Networks Christophe Torlinsky at Container Camp UK

©2016Nokia.Allrightsreserved.NuageNetworksisaNokiaventure.

TIME

FrontEndMiddleWareSQLDBAppLogicIdle

1 2 3 4 5

ContainerEnvironmentsAreMoreDynamicthantheOldWorld

Containersarecreatedanddestroyedonthefly(scaLer/gather)ToadapttothedemandOverlaySDNneedstofollow,inrealTme,enforcingtheSecurity,QoS,NATorservicechainingpoliciesforeachcontainer.

Page 4: Avoiding Silos in Container Networking by Nuage Networks Christophe Torlinsky at Container Camp UK

©2016Nokia.Allrightsreserved.NuageNetworksisaNokiaventure.

MP-BGPControlPlaneScale&ConvergenceFor100KContainers–INSOFTWARE–BGPasaService….Ultrafast.

21/09/164

•  100,000Containers•  500Containersperhypervisor•  200Networksin200VRFs(routercontexts)•  200Hypervisors•  20Networksperhypervisor

•  TotalConvergenceTime:9:24!•  BGPrunstheInternet–sincethe1990s

NuageBGP

NuageSDNOverlay

NuageBGP

Page 5: Avoiding Silos in Container Networking by Nuage Networks Christophe Torlinsky at Container Camp UK

©2016Nokia.Allrightsreserved.NuageNetworksisaNokiaventure.

ChallengesWithContainerNetworking…therealworld

5

IntegraWonComplexDeploymentsSecurity Cloud

•  AppIsolaTon•  Micro-segmentaTon•  Monitoring&

Visibility

•  ConnectcontainerstoVMsandbaremetalservers

•  DCGWIntegraTon•  Publicbreakout

•  IntegraTonwithContainerOrchestraTonworkflows

•  Mesos,Docker,Kubernetes,OpenShid–CNM/CNI

VM

C BM

•  PrivateCloud•  PublicCloud•  HybridCloud

Page 6: Avoiding Silos in Container Networking by Nuage Networks Christophe Torlinsky at Container Camp UK

Copyright2013Alcatel-Lucent.Allrightsreserved.CONFIDENTIAL-SOLELYFORAUTHORIZEDPERSONSHAVINGANEEDTOKNOW

PROPRIETARY–USEPURSUANTTOCOMPANYINSTRUCTIONNuageNetworks

OVERLAYSOFTWAREDEFINEDNETWORKSFORKUBERNETESNETWORKINGANDMORE&POLICIES

Page 7: Avoiding Silos in Container Networking by Nuage Networks Christophe Torlinsky at Container Camp UK

©2016Nokia.Allrightsreserved.NuageNetworksisaNokiaventure.

Overlay-basedVirtualNetworksKubernetesDeploymentWithSDN

Master Node Node

VSDK

API

XMPP

VRS-K8S

Nuage-Kube-Mon

KubernetesCluster

MP-BGPController

VxLANVNI=100VxLANVNI=200

APIPolicyEngine

ProvidesMulT-tenancyandAppIsolaTon

ControloverIPAddressing

VRS-K8S

Page 8: Avoiding Silos in Container Networking by Nuage Networks Christophe Torlinsky at Container Camp UK

©2016Nokia.Allrightsreserved.NuageNetworksisaNokiaventure.

KUBERNETESONOPENSTACKVMS(PODTOVMCOMMUNICATION)–NOSILOS!

8

PhysicalServer

KubernetesNodeVM KubernetesNode

(PhysicalServer)

NuageMP-BGPController

VMVM

PolicyGroups

Page 9: Avoiding Silos in Container Networking by Nuage Networks Christophe Torlinsky at Container Camp UK

©2016Nokia.Allrightsreserved.NuageNetworksisaNokiaventure.

KubernetesDeploymentsOnPublicCloud

9

CloudVPC

DockerSwarm Kubernetes

CloudVM

CloudVM

NuageVSP

NetworkVirtualizaTonPolicyGroupsVisibilitySecureCloudInterconnect

Page 10: Avoiding Silos in Container Networking by Nuage Networks Christophe Torlinsky at Container Camp UK

©2016Nokia.Allrightsreserved.NuageNetworksisaNokiaventure.

10

VirtualRouTng&Switching

MP-BGPController

APIVirtualServiceDirectory

VPNConnecWon

VPC

ContainerMulW-CloudDeployments

CloudVM

SDN-WAN

SDN-WAN IPSecTunnel

Page 11: Avoiding Silos in Container Networking by Nuage Networks Christophe Torlinsky at Container Camp UK

©2016Nokia.Allrightsreserved.NuageNetworksisaNokiaventure.

KubernetesLabelsforPolicySpecificaWon

AppJSON

NuageSDN(Policyspec)

K8SLabels-KeyValuepairsamachedtoprimiTves(pods,rep.controllers,services)-Labelsareusedtoorganizeandselectgroupsofobjects

Page 12: Avoiding Silos in Container Networking by Nuage Networks Christophe Torlinsky at Container Camp UK

©2016Nokia.Allrightsreserved.NuageNetworksisaNokiaventure.

ThenewlyannouncedvspkandassociatedtoolsarenowavailableonGitHubandPIP:hmps://github.com/nuagenetworksSDKsareavailableforGoLang,Python,Java,Ruby*

NUAGENETWORKSCOMMUNITYANDSDKINGO

Page 13: Avoiding Silos in Container Networking by Nuage Networks Christophe Torlinsky at Container Camp UK

©2016Nokia.Allrightsreserved.NuageNetworksisaNokiaventure.

THANKYOU