Avoiding Silos in Container Networking by Nuage Networks Christophe Torlinsky at Container Camp UK

©2016Nokia.Allrightsreserved.NuageNetworksisaNokiaventure.

AvoidingSilosinContainerNetworkingchristoph@nuagenetworks.net

@nuagenetworks

©2016Nokia.Allrightsreserved.NuageNetworksisaNokiaventure.

Don’tBuildWalls...useBGP(asaService)....OldSchoolstyle

21/09/162

ResDulAPI

MP-BGPControlPlane

OpenVswitch/VxLAN

©2016Nokia.Allrightsreserved.NuageNetworksisaNokiaventure.

TIME

FrontEndMiddleWareSQLDBAppLogicIdle

1 2 3 4 5

ContainerEnvironmentsAreMoreDynamicthantheOldWorld

Containersarecreatedanddestroyedonthefly(scaLer/gather)ToadapttothedemandOverlaySDNneedstofollow,inrealTme,enforcingtheSecurity,QoS,NATorservicechainingpoliciesforeachcontainer.

©2016Nokia.Allrightsreserved.NuageNetworksisaNokiaventure.

MP-BGPControlPlaneScale&ConvergenceFor100KContainers–INSOFTWARE–BGPasaService….Ultrafast.

21/09/164

•  100,000Containers•  500Containersperhypervisor•  200Networksin200VRFs(routercontexts)•  200Hypervisors•  20Networksperhypervisor

•  TotalConvergenceTime:9:24!•  BGPrunstheInternet–sincethe1990s

NuageBGP

NuageSDNOverlay

NuageBGP

©2016Nokia.Allrightsreserved.NuageNetworksisaNokiaventure.

ChallengesWithContainerNetworking…therealworld

5

IntegraWonComplexDeploymentsSecurity Cloud

•  AppIsolaTon•  Micro-segmentaTon•  Monitoring&

Visibility

•  ConnectcontainerstoVMsandbaremetalservers

•  DCGWIntegraTon•  Publicbreakout

•  IntegraTonwithContainerOrchestraTonworkflows

•  Mesos,Docker,Kubernetes,OpenShid–CNM/CNI

VM

C BM

•  PrivateCloud•  PublicCloud•  HybridCloud

Copyright2013Alcatel-Lucent.Allrightsreserved.CONFIDENTIAL-SOLELYFORAUTHORIZEDPERSONSHAVINGANEEDTOKNOW

PROPRIETARY–USEPURSUANTTOCOMPANYINSTRUCTIONNuageNetworks

OVERLAYSOFTWAREDEFINEDNETWORKSFORKUBERNETESNETWORKINGANDMORE&POLICIES

©2016Nokia.Allrightsreserved.NuageNetworksisaNokiaventure.

Overlay-basedVirtualNetworksKubernetesDeploymentWithSDN

Master Node Node

VSDK

API

XMPP

VRS-K8S

Nuage-Kube-Mon

KubernetesCluster

MP-BGPController

VxLANVNI=100VxLANVNI=200

APIPolicyEngine

ProvidesMulT-tenancyandAppIsolaTon

ControloverIPAddressing

VRS-K8S

©2016Nokia.Allrightsreserved.NuageNetworksisaNokiaventure.

KUBERNETESONOPENSTACKVMS(PODTOVMCOMMUNICATION)–NOSILOS!

8

PhysicalServer

KubernetesNodeVM KubernetesNode

(PhysicalServer)

NuageMP-BGPController

VMVM

PolicyGroups

©2016Nokia.Allrightsreserved.NuageNetworksisaNokiaventure.

KubernetesDeploymentsOnPublicCloud

9

CloudVPC

DockerSwarm Kubernetes

CloudVM

CloudVM

NuageVSP

NetworkVirtualizaTonPolicyGroupsVisibilitySecureCloudInterconnect

©2016Nokia.Allrightsreserved.NuageNetworksisaNokiaventure.

10

VirtualRouTng&Switching

MP-BGPController

APIVirtualServiceDirectory

VPNConnecWon

VPC

ContainerMulW-CloudDeployments

CloudVM

SDN-WAN

SDN-WAN IPSecTunnel

©2016Nokia.Allrightsreserved.NuageNetworksisaNokiaventure.

KubernetesLabelsforPolicySpecificaWon

AppJSON

NuageSDN(Policyspec)

K8SLabels-KeyValuepairsamachedtoprimiTves(pods,rep.controllers,services)-Labelsareusedtoorganizeandselectgroupsofobjects

©2016Nokia.Allrightsreserved.NuageNetworksisaNokiaventure.

ThenewlyannouncedvspkandassociatedtoolsarenowavailableonGitHubandPIP:hmps://github.com/nuagenetworksSDKsareavailableforGoLang,Python,Java,Ruby*

NUAGENETWORKSCOMMUNITYANDSDKINGO

©2016Nokia.Allrightsreserved.NuageNetworksisaNokiaventure.

THANKYOU