neutron update

8/18/2019 Neutron Update

1/16

Neutron

What’s new in Havana?

Arvind Somya

Software Engineer

Cisco Systems Inc.


2/16

Modular Layer 2 (ML2)

Driver BasedCombines !S and "in#$bridge

!%"A& S#''ort

"( Se'aration

") *o'#+ation

!endor Drivers Avai+ab+e


3/16

What is ,+)?

rigina+ -oa+

The Modular Layer 2 (ML2) Plugin is a framewoallowing OpenStack Networking to simultaneou

the !ariety of layer 2 networking technologies f

comple" real#world datacenters$

,") was designed to ease the b#rden of adding new ") networ/ing tec'enStac/ &etwor/ing.

,") wi++ de'recate the 'en vSwitch0 "in#$Bridge0 and Hy'er1! mono*+#gins

%t works with each of their e"isting L2 agents

simultaneously


4/16

,") 2Drivers3

,") e$'oses two different ty'es of drivers 24y'e3 and 2,echanism3

,") 4y'eDrivers

,aintain ty'e1s'ecific state

*rovide tenant networ/ a++ocation

!a+idate 'rovider networ/s

C#rrent 4y'eDriverslocal& flat& 'LN& *+& and ',LN

,") ,echanismDrivers

5es'onsib+e for ta/ing information s#''+ied by

4y'eDrivers and ens#ring it is 'ro'er+y a''+ied


5/16

,") 4y'eDrivers

,aintain ty'e1s'ecific state

*rovide tenant networ/ a++ocation

!a+idate 'rovider networ/s

C#rrent 4y'eDrivers

local& flat& 'LN& *+& and ',LN


6/16

,") ,echanismDrivers

5es'onsib+e for ta/ing information s#''+ied by 4y'eDrivers and ens#rina''+ied given the s'ecific networ/ing mechanisms which have been e

C#rrent ,echanismDrivers

rista& -isco Ne"us& .yper#'& L2 Population&

Linu"/ridge& Open !Switch& Tail#0 N-S

,echanismDrivers can wor/ with many different techno+ogies

Agent based ,echanismDrivers 6Hy'er1!0 "in#$

and !S7

Contro++er based ,echanismDrivers 64ai+18 &CS

'enDay+ight7

4o5 switch ,echanismDrivers Arista and Cisco


7/16

Modular Layer 2 Diagram

Neutron Server

ML2 Plugin

4y'e ,anager ,echanism ,anager

! " A &

4 y ' eDr i v

er

-5E

4 y ' eDr i v

er

! % " A &

4 y ' eDr i v

er

!

S 9 " i n

#$

B r i d

g e

C i s

c o

& e$

# s

A r i s

t a

" )

* o ' #+ a

t i on

4 ai + 18 &

C S

A*I E$tensions

H y ' er 1!


8/16

Load Balancing as a Service

,#+ti'+e &etwor/ &ode

Driver Based

'enSo#rce 1 HA*ro$y

!endor Drivers Avai+ab+e 6&icira Service*+#gin7

Agent based so+#tion

Hori:on Integrated


9/16

Lbaas Simple Worklo!

Create a *oo+ of !I*’sfrom a &e#tron S#bnet

Add ,ember instanc

the *oo+'tiona++y associate

monitors with *oo+s

,onitors chec/ the bac/end members of a !I*

Can #se *ing0 4C*0 H44*0 H44*S for hea+th chec/s

Can s'ecify the de+ay0 timeo#t0 retries0 #r+ and e$'ectedcodesfor each monitor

S'ecify a weight fo

added members

and a 'ort n#mber

Can +oad

ba+ance #sing; 5o#nd 5obin; "east

Connections; So#rce I*

Add !I* to the *oo+6ne 'er 'oo+7


10/16

"PN as a Service

Site1to1Site

I*Sec *re1Shared


11/16

"PN as a Service Simple Work #reate $%& Policy

; 4enant

; &ame

#reate $PSec Policy

; 4enant

; &ame

#reate a "PN Service; 4enant; S#bnet

; 5o#ter

A#th a+gorithm Sha>

Encry'tion A+gorithm ae

)@0 aes1>)7*hase > negotiation mod

6Aggressive mode7

*8S -ro#'@ 6gro#')0 g

I 6v)7

4ransform 'rotoco+ ES* 6AH0 AH1ES*7Enca's#+ation mode t#nne+ 6trans'ort7

A#th a+gorithm sha>

Encry'tion A+gorithm aes1>) 6aes (des0

aes1)@0 aes1>)7

*8S -ro#'@ 6gro#')0 gro#'@0 or gro#'>7

#reate $PSec site conn; 4enant; *eer Id; *eer CID56s7; *eer Address; *s/; I


12/16

'ire!all as a Service

State+ess 8i+tering at the Edge

!endor Drivers

*review Avai+ab+e in Havana Agent Based

Hori:on Integrated


13/16

'ire!all as a Service Simple Work

Create a 8irewa++*o+icy

Add 8irewa++5#+es

Can s'ecify

A#ditedattrib#te

So#rce0 dest I*0

'ort etc.Strict rdering

Create a 4enant8irewa++


14/16

dditional Ne! 'eatures

Im'roved Hori:on Integration

; *ane+s for "oad Ba+ancer0 8irewa++ a

!*& as a service.

DHC* *er *ort 'tions

*+#gin Im'rovements


15/16

Looking aead to $ceouse***

*arity with nova1networ/Im'roved I*v S#''ort

"( High Avai+abi+ity

*+#gins and DriversE$terna+ 4esting

&ew *+#gins and Drivers


16/16

$ceouse dvanced Services

"oad Ba+ancing as a Service,#+ti'+e 'oo+s 'er !I*

!*& as a Service

SS" !*& A*I

8irewa++ as a Service

5evised A*I

neutron update

Documents