13
© 2016 Nokia. All rights reserved. Nuage Networks is a Nokia venture. Avoiding Silos in Container Networking [email protected] @nuagenetworks

Avoiding Silos in Container Networking by Nuage Networks Christophe Torlinsky at Container Camp UK

Embed Size (px)

Citation preview

Page 1: Avoiding Silos in Container Networking by Nuage Networks Christophe Torlinsky at Container Camp UK

©2016Nokia.Allrightsreserved.NuageNetworksisaNokiaventure.

[email protected]

@nuagenetworks

Page 2: Avoiding Silos in Container Networking by Nuage Networks Christophe Torlinsky at Container Camp UK

©2016Nokia.Allrightsreserved.NuageNetworksisaNokiaventure.

Don’tBuildWalls...useBGP(asaService)....OldSchoolstyle

21/09/162

ResDulAPI

MP-BGPControlPlane

OpenVswitch/VxLAN

Page 3: Avoiding Silos in Container Networking by Nuage Networks Christophe Torlinsky at Container Camp UK

©2016Nokia.Allrightsreserved.NuageNetworksisaNokiaventure.

TIME

FrontEndMiddleWareSQLDBAppLogicIdle

1 2 3 4 5

ContainerEnvironmentsAreMoreDynamicthantheOldWorld

Containersarecreatedanddestroyedonthefly(scaLer/gather)ToadapttothedemandOverlaySDNneedstofollow,inrealTme,enforcingtheSecurity,QoS,NATorservicechainingpoliciesforeachcontainer.

Page 4: Avoiding Silos in Container Networking by Nuage Networks Christophe Torlinsky at Container Camp UK

©2016Nokia.Allrightsreserved.NuageNetworksisaNokiaventure.

MP-BGPControlPlaneScale&ConvergenceFor100KContainers–INSOFTWARE–BGPasaService….Ultrafast.

21/09/164

•  100,000Containers•  500Containersperhypervisor•  200Networksin200VRFs(routercontexts)•  200Hypervisors•  20Networksperhypervisor

•  TotalConvergenceTime:9:24!•  BGPrunstheInternet–sincethe1990s

NuageBGP

NuageSDNOverlay

NuageBGP

Page 5: Avoiding Silos in Container Networking by Nuage Networks Christophe Torlinsky at Container Camp UK

©2016Nokia.Allrightsreserved.NuageNetworksisaNokiaventure.

ChallengesWithContainerNetworking…therealworld

5

IntegraWonComplexDeploymentsSecurity Cloud

•  AppIsolaTon•  Micro-segmentaTon•  Monitoring&

Visibility

•  ConnectcontainerstoVMsandbaremetalservers

•  DCGWIntegraTon•  Publicbreakout

•  IntegraTonwithContainerOrchestraTonworkflows

•  Mesos,Docker,Kubernetes,OpenShid–CNM/CNI

VM

C BM

•  PrivateCloud•  PublicCloud•  HybridCloud

Page 6: Avoiding Silos in Container Networking by Nuage Networks Christophe Torlinsky at Container Camp UK

Copyright2013Alcatel-Lucent.Allrightsreserved.CONFIDENTIAL-SOLELYFORAUTHORIZEDPERSONSHAVINGANEEDTOKNOW

PROPRIETARY–USEPURSUANTTOCOMPANYINSTRUCTIONNuageNetworks

OVERLAYSOFTWAREDEFINEDNETWORKSFORKUBERNETESNETWORKINGANDMORE&POLICIES

Page 7: Avoiding Silos in Container Networking by Nuage Networks Christophe Torlinsky at Container Camp UK

©2016Nokia.Allrightsreserved.NuageNetworksisaNokiaventure.

Overlay-basedVirtualNetworksKubernetesDeploymentWithSDN

Master Node Node

VSDK

API

XMPP

VRS-K8S

Nuage-Kube-Mon

KubernetesCluster

MP-BGPController

VxLANVNI=100VxLANVNI=200

APIPolicyEngine

ProvidesMulT-tenancyandAppIsolaTon

ControloverIPAddressing

VRS-K8S

Page 8: Avoiding Silos in Container Networking by Nuage Networks Christophe Torlinsky at Container Camp UK

©2016Nokia.Allrightsreserved.NuageNetworksisaNokiaventure.

KUBERNETESONOPENSTACKVMS(PODTOVMCOMMUNICATION)–NOSILOS!

8

PhysicalServer

KubernetesNodeVM KubernetesNode

(PhysicalServer)

NuageMP-BGPController

VMVM

PolicyGroups

Page 9: Avoiding Silos in Container Networking by Nuage Networks Christophe Torlinsky at Container Camp UK

©2016Nokia.Allrightsreserved.NuageNetworksisaNokiaventure.

KubernetesDeploymentsOnPublicCloud

9

CloudVPC

DockerSwarm Kubernetes

CloudVM

CloudVM

NuageVSP

NetworkVirtualizaTonPolicyGroupsVisibilitySecureCloudInterconnect

Page 10: Avoiding Silos in Container Networking by Nuage Networks Christophe Torlinsky at Container Camp UK

©2016Nokia.Allrightsreserved.NuageNetworksisaNokiaventure.

10

VirtualRouTng&Switching

MP-BGPController

APIVirtualServiceDirectory

VPNConnecWon

VPC

ContainerMulW-CloudDeployments

CloudVM

SDN-WAN

SDN-WAN IPSecTunnel

Page 11: Avoiding Silos in Container Networking by Nuage Networks Christophe Torlinsky at Container Camp UK

©2016Nokia.Allrightsreserved.NuageNetworksisaNokiaventure.

KubernetesLabelsforPolicySpecificaWon

AppJSON

NuageSDN(Policyspec)

K8SLabels-KeyValuepairsamachedtoprimiTves(pods,rep.controllers,services)-Labelsareusedtoorganizeandselectgroupsofobjects

Page 12: Avoiding Silos in Container Networking by Nuage Networks Christophe Torlinsky at Container Camp UK

©2016Nokia.Allrightsreserved.NuageNetworksisaNokiaventure.

ThenewlyannouncedvspkandassociatedtoolsarenowavailableonGitHubandPIP:hmps://github.com/nuagenetworksSDKsareavailableforGoLang,Python,Java,Ruby*

NUAGENETWORKSCOMMUNITYANDSDKINGO

Page 13: Avoiding Silos in Container Networking by Nuage Networks Christophe Torlinsky at Container Camp UK

©2016Nokia.Allrightsreserved.NuageNetworksisaNokiaventure.

THANKYOU