MGT2609BE #vmworld #mgt2609BE VMware Integrated OpenStack 4.0: What's New Hari Kannan – Product Manager [email protected] Hassan Hamade – Cloud Architect [email protected] VMworld 2017 Content: Not for publication or distribution
MGT2609BE
#vmworld #mgt2609BE
VMware Integrated OpenStack 4.0: What's New
Hari Kannan – Product [email protected]
Hassan Hamade – Cloud [email protected]
VMworld 2017 Content: Not fo
r publication or distri
bution
• This presentation may contain product features that are currently under development.
• This overview of new technology represents no commitment from VMware to deliver these features in any generally available product.
• Features are subject to change, and must not be included in contracts, purchase orders, or sales agreements of any kind.
• Technical feasibility and market demand will affect final delivery.
• Pricing and packaging for any new technologies or features discussed or presented have not been determined.
Disclaimer
2
VMworld 2017 Content: Not fo
r publication or distri
bution
OpenStack is strategically important to VMware
3
New opportunities and new investment in NFV
Mutually complement and enhance
VIO + Kubernetes enables developer persona
Plugs into and strengthens VMware CMP
Enables solutions, better together
NSX
VMworld 2017 Content: Not fo
r publication or distri
bution
Analysts projections confirm OpenStack’s future is healthy
4From 451 report
VMworld 2017 Content: Not fo
r publication or distri
bution
Key use cases for VIO
5
Virtualized and containerized
Infrastructure as Code
</>
Builds on best of breed SDDC High performance network
provisioning and automation
built on a rock solid platform
Enterprise Automation Developer ready Carrier Grade enablement
VMworld 2017 Content: Not fo
r publication or distri
bution
Core projects well adopted plus “Big Tent” for value-adds
6
VMworld 2017 Content: Not fo
r publication or distri
bution
OpenStack delivers AWS Productivity with Private Cloud Control
7
VMware Integrated OpenStack (VIO)
AWS
AWS OpenStack
EC2 Nova + vSphere
VPC Neutron + NSX
EBS Cinder + vSphere
IAM Keystone + AD
S3 Swift + VMware Partners
CloudFormation Heat
RDS Trove + VMware Partners
AWS APIs only work with AWS OpenStack APIs work with any OpenStack cloud Cloud Consumption
by App/Dev teams
Cloud Deployment
(for Private Cloud) +
Operations by
“Infra/Ops” team
VMworld 2017 Content: Not fo
r publication or distri
bution
VMware Integrated OpenStack exposes standardized APIs backed by industry leading virtualization platform
8
Additional Functionality and Optimizations
DefCore Compliant OpenStack Distribution
VIO Management
Server(Deploy, configure, patch,
upgrade …OpenStack)
Horizon
Keystone
Nova CinderNeutron
Ceilometer
Heat
Glance
Simplify OpenStack
Operations
Differentiated
Features
Standard, Production Ready &
Fully Supported OpenStackVMworld 2017 Content: Not fo
r publication or distri
bution
VMware Integrated OpenStack: Key Capabilities
9
Standards
Compliant
Simplified
Installation
Advanced
Networking
Operations
ManagementEnterprise
Ready
Fe
atu
res • Simplified Installation
• Hitless Upgrades and
Patching
• Micro-Segmentation
• DLR, DFW, Security
Groups
• Guest VLAN Tagging
• vROps, vRLI, vRBC,
vRNI Integration
• KPI Export through
Ceilometer
• Live VM resize
• Live VM migration
• Kubernetes container
management
• Proven at scale
• Ocata based
• 1st Defcore compliant
distribution
Be
ne
fits • Faster deployment
• Easy migration from
vSphere environment
• Proven L3 Overlay
networking at scale
• 360o visibility across
Compute, Storage and
Networking
• Seamless Day 2
operations
• Proactive remediation
for server failures
• No vendor lock-inVMworld 2017 Content: Not fo
r publication or distri
bution
• Industry standard for security, stability, performance and reliability
• Rich Enterprise Features like, vMotion, high-availability, fault tolerance and DRS
• Lower OPEX from advanced management and operation features
• Advanced Security and Multi-Tenancy
• Advanced NW services with massive scale & throughput
• One platform for VM and Cloud
• Work with any vSphere validated storage (Largest HCL in the industry)
• Advanced Storage Policies for multiple tiers of storage.
• Leverage Commodity Hypervisor-Converged Storage Nodes
Reliability, Performance, Security, Scale, OpEx/CapEx reduction
Leverage VMware’s Best-of-Breed Components
10
vSphere Compute (Nova) NSX Network (Neutron) vSphere Storage/Virtual SAN
(Cinder/Glance)
VMworld 2017 Content: Not fo
r publication or distri
bution
• Single pane of glass for the entire infrastructure
• Root cause analysis anddependency
• Dedicated dashboards for OpenStack Services and tenants
vRealize Operations
• Consolidate and aggregate
dozens of logs across all
OpenStack services
• Out-of-box OpenStack
dashboards
• Quickly detect and troubleshoot
through advanced machine learning
• Get transparency on Cost, usage and quality of your cloud services
• Compare actual usage against planned and perform what if capacity analysis
• Provide per tenant show back/chargeback
• Cloud benchmarking
Utilize state of the art tools for Management & Operations
11
• Governance Based Approach to Tenant Onboarding
• IT policy based Governance Approach to Infrastructure Consumption
$
vRealize Log Insight vRealize Business vRealize Automation
VMworld 2017 Content: Not fo
r publication or distri
bution
VIO exposes standard OpenStack APIs backed by industry standard virtualization components
12
Horizon
(web portal)CLI Tools / SDKs
vRA / vRBCost visibility, governance, etc...
vCenter
Nova
(compute)
Neutron
(network)
Cinder
(block storage)
Glance
(images)
vCenter Datastores
VVOL / VSAN / VMFS / NFS
Keystone
(identity)
LDAP
Log Insight Log collection
NSX
vROpsOpenStack mgmt pack
Swift
(object store)
vSphere Install, Configure and Troubleshoot
3rd Party
Object
Storage
Ceilometer
(metering)
Heat
(orchestration)
OpenStack Components:
VMware Technology Integrations:
Current
SSO
vIDM
Local
DB
Basic
open
source
VMworld 2017 Content: Not fo
r publication or distri
bution
VMware’s Community Involvement By the Numbers
13
Source: Stackalytics for tc-approved OpenStack projects
(http://stackalytics.com/report/companies/vmware)
Top 15 contributor to the OpenStack releases
30-40Developers
7000Commits
1,500,00Lines-of-Code
30,000Reviews
VMworld 2017 Content: Not fo
r publication or distri
bution
VMware’s Long-Standing Commitment to OpenStack
14
VIO 1.0 VIO 2.0 VIO 2.5 VIO 3.0
Q1 2015 Q3 2015 Q2 2016 Q3 2016
➢ Icehouse Based
➢ Simplified Deploy
➢ Day 2 Operation Workflows
➢ Automated Patching
➢ Enterprise ready and Fully Supported
➢ Kilo Based
➢ Seamless / Automated Upgrade & Rollback
➢ Backup & Recovery
➢ Customizations
➢ Kilo Based
➢ Compact Architecture
➢ VM Template Import
➢ Scale, Perf & Stability Improvements
➢ Simplified Monitoring & Troubleshooting
➢ Mitaka Based
➢ Compact VIO
➢ Import existing vSphere workloads
➢ NSX-T Support
VIO 3.1
Q1 2017
➢ Mitaka based
➢ vSphere 6.5 Support
➢ NFV features➢ (import w NSX +
passthrough)
➢ NSX Policy support in Neutron
➢ Multi-vCenter, vRA integration (beta)
VMworld 2017 Content: Not fo
r publication or distri
bution
VIO 4.0 - Key Value Propositions
Upstream alignment
Performance tuning
Advanced Networking
Improved Scale
Platform and manageability
Expanded EPA Support (CPU pinning, NUMA placement, Huge
Pages)
Multiple NIC types, Guest VLAN tagging, FWaaS
Leverage the latest features and
enhancements of the Ocata Release
Multiple vCenters
What’s New in VMware Integrated OpenStack 4.0
15
VM Resize, OMS LVM,
vCenter HA, vRA integration
VMworld 2017 Content: Not fo
r publication or distri
bution
vRealize Automation integration
16
Key Benefits
Seamlessly fit OpenStack into your existing cross cloud
service catalog
Govern and control access to resources
Leverage existing investment in infrastructure tools
VMworld 2017 Content: Not fo
r publication or distri
bution
Platform enhancements
vCenter HA
17
LVM
Key Benefits
Respond to increase in resource usage without
service disruption
Simplified management and improved usability
Increased resiliency
Live Resize OpenStack Management Server
Guest Console Boot Log
VMworld 2017 Content: Not fo
r publication or distri
bution
Neutron Advanced Capabilities
18
External Network
VM VM
VM VM
VM
VM
Neutron Network
Neutron Network
Tenant1-LS1
Subnet Pool-2
VM VM
Tenant1-LR
VM VM
Tenant1-LS2
10.2.2.0/24
External Network
Subnet Pool-1
.4 .5
Address Scope: 134.28.0.0/16Subnet Pool-1: 134.28.0.0/24Subnet Pool-2: 134.28.1.0/24
NATNo-NAT
Provider Network
Self Service Network 1
Subnet Pool-1
VM VM
Tenant1-LR
VM VM
Self Service Network 2
Subnet Pool-2
BGP
NSX-Edge or
Physical
VLAN 10
VLAN 20
VLAN 30
Guest VLAN tags
Key Benefits
Increased network stability and resiliency
More adaptable tenant firewall configuration and
enforcements
Easier management of networks and address scopes
FWaaSNeutron
Address Pools BGP
User
W
e
b
1
W
e
b
2
Network A
V
M
5
Network B
Load Balancer
(NSX ESG)
W
e
b
3
V
M
4
VIP
TCP/HTTP/HTTPS
Horizon LBaaS UI
VMworld 2017 Content: Not fo
r publication or distri
bution
Distribution of compute nodes across multiple vCenters
19
Key Benefits
Increased scale Compute isolation and segmentation
Multiple vCenters
VMworld 2017 Content: Not fo
r publication or distri
bution
Enhanced Platform Awareness
20
Increased Data Plane performance
Memory
QP
I
CORE 0
NUMA 0
I/O
TH1 TH2
LI /L2 Cache
CORE n
TH1 TH2
LI /L2 Cache
L3 Cache
I/O
QPI
QPI
QP
I
CORE 0
NUMA 1
I/O
TH1 TH2
LI /L2 Cache
CORE n
TH1 TH2
LI /L2 Cache
L3 Cache
I/O
Memory
CPU Pinning
• Driving predictable characteristics for latency sensitivity workloads / VNFs
NUMA Placement
• Increased VNF performance through optimized system resource alignment
SR-IOV
• Line-rate performance through pass-through
Huge Pages
• Reduced memory access overhead through page-size up to 2MB
• Superior performance throughput
• Lowest possible latency
• Optimized system resource utilization
VMworld 2017 Content: Not fo
r publication or distri
bution
Advanced Networking
21
VNF
vSwitch
Hypervisor
Management Plane
Control Plane
DataPlane
Directpass-throughinterface
C
Multiple NIC type support
• Choice of Virtual NIC or Direct pass-through interface
• Flexible mix and match between data plane and control plane functionality
Guest VLAN tagging
• Allows VMs to define multiple VLAN tags
• Enable legacy to virtual transition
➢ VNF choice in network interface type configuration
➢ Enablement of legacy telco VNFs
➢ Optimized intra-VM communication
VMworld 2017 Content: Not fo
r publication or distri
bution
Enterprise Grade, fully supported Kubernetes with VMware Integrated OpenStack
Enterprise-ready: built-in security, HA, scale
Persistent storage, LBaaS and container networking
Multi-tenancy & user management
Kubernetes lifecycle managementSDDC vSphere, NSX, vSAN
Any Container Repo
UI
K8s
Monito
ring &
Logs
VIO
VMworld 2017 Content: Not fo
r publication or distri
bution
Upstream key highlights in 4.0 (Newton + Ocata)
• More flexible and extendable Nova scheduling placement API
• Nova cells used by default
• Resource tagging of network resources, enabling logical network mapping across OpenStack clouds
• Cascading deletes of snapshot volumes makes deleting volumes with snapshot much faster
• Publicly shared images in Glance, enabling easier sharing
• Heat Templates with conditions (if, and, not, or) simplifies Cloud formation porting and improves reusability
VMworld 2017 Content: Not fo
r publication or distri
bution
Future focus areas and investigations for VIO
24
Multiple regions
Cells
Distributed deployments
ONAP
DPDK
Barbican
vRealize and Waverfrontintegrations
Consolidated Management
Increased scale and geo distribution
Enhanced NFV platform
Manageability
Developer Experience
VMworld 2017 Content: Not fo
r publication or distri
bution
Demos
25
VMworld 2017 Content: Not fo
r publication or distri
bution
Three Different demos
1. Tenant vDC creation
2. Live Resize of a running Openstack Instance
3. Openstack Deployment Upgrade
26
VMworld 2017 Content: Not fo
r publication or distri
bution
Tenant vDC creation
27
VMworld 2017 Content: Not fo
r publication or distri
bution
Openstack Instance LiveResize
28
VMworld 2017 Content: Not fo
r publication or distri
bution
Openstack Deployment Upgrade
29
VMworld 2017 Content: Not fo
r publication or distri
bution
VMworld 2017 Content: Not fo
r publication or distri
bution
VMworld 2017 Content: Not fo
r publication or distri
bution