SDN, com fer-ho realitat i quins avantatges puc treure-hi

23
SDN, com fer-ho realitat i quins avantatges puc treure-hi Julio Alba ([email protected])

Transcript of SDN, com fer-ho realitat i quins avantatges puc treure-hi

Page 1: SDN, com fer-ho realitat i quins avantatges puc treure-hi

SDN, com fer-ho realitat i quins avantatges puc treure-hi

Julio Alba ([email protected])

Page 2: SDN, com fer-ho realitat i quins avantatges puc treure-hi

SDN… pero…

Page 3: SDN, com fer-ho realitat i quins avantatges puc treure-hi

Dell - Internal Use - Confidential

3 of Y

WishList Please, share your dreams!

Page 4: SDN, com fer-ho realitat i quins avantatges puc treure-hi

Dell - Internal Use - Confidential

4 of Y

Ejem…

Page 5: SDN, com fer-ho realitat i quins avantatges puc treure-hi

Dell - Internal Use - Confidential

5 of Y

Choice of SDN & NFV approach Open Standards + Open Protocols + Open Source = Open IT with Choices

Vmware, Microsoft, Open Stack

TCL, Perl & Python scripting REST-API, XML, OMI, Puppet, Chef

Programmable Solutions

Overlay /Hypervisor Solutions

SDN Controllers Open Standards, Open Source

Software-Defined Networks

Controller Solutions

Open Networking

DevOps

Page 6: SDN, com fer-ho realitat i quins avantatges puc treure-hi

Dell - Internal Use - Confidential

6 of Y

Comp

lex pr

ocesse

s, pro

prieta

ry sys

tems

Simpli

city a

nd op

en ch

oice

Maximize open datacenter using DevOps… …for net or sys or infrastructure or cloud admin or app developer using open source, open standards, open protocols

Open Networking, Active Fabric

Active Fabric

* Any Admin

or Developer

CLI SNMP OF 1.x

NetOps

?

Network Admin

OME, GMS

OMI REST API BMP VSN

SysOps

SOAP, XML-RPC, DHCP, XML, JSON

System Admin

Web Server

Puppet & Chef* (uses Ruby)

DevOps

HTTP, HTTPS REST-RPC, REST

Scripting & Libraries

(TCL, Perl, Python, Ruby) (SQL, SNMP)

+ Smart Utilities

App Developer

Active Link

Page 7: SDN, com fer-ho realitat i quins avantatges puc treure-hi

Dell - Internal Use - Confidential

7 of Y

BIG SWITCH (Big Cloud Fabric)

Page 8: SDN, com fer-ho realitat i quins avantatges puc treure-hi

Dell - Internal Use - Confidential

8 of Y

Page 9: SDN, com fer-ho realitat i quins avantatges puc treure-hi

Dell - Internal Use - Confidential

9 of Y

Big Cloud Fabric

Page 10: SDN, com fer-ho realitat i quins avantatges puc treure-hi

Dell - Internal Use - Confidential

10 of Y

Challenges: The new “Network Edge”

Page 11: SDN, com fer-ho realitat i quins avantatges puc treure-hi

Dell - Internal Use - Confidential

11 of Y

The next-generation networking model

Switching

Routing

Firewalling/ACLs

Load Balancing

Network and Security Services now in the Hypervisor

Page 12: SDN, com fer-ho realitat i quins avantatges puc treure-hi

Dell - Internal Use - Confidential

12 of Y

Switching

Routing

Firewalling/ACLs

Load Balancing

• High throughput rates

• East-west firewalling

• Native platform capability

The next-generation networking model

Page 13: SDN, com fer-ho realitat i quins avantatges puc treure-hi

Dell - Internal Use - Confidential

13 of Y

The next-generation networking model NSX Value Proposition

Network Virtualization is at the core of an SDDC approach

Network, Storage, Compute

Virtualization Layer

“Network Hypervisor”

Virtual Networks

Page 14: SDN, com fer-ho realitat i quins avantatges puc treure-hi

Dell - Internal Use - Confidential

14 of Y

NSX Lab topology We do have one VXLAN environment with some VMs and two VTEP Gateways.

Those gateways has connected to them two physical routers completely independent that belongs to the same tenant.

DELL

S4810 – VRRP1

DELL

S6000 – VTEP2 DELL

S6000 – VTEP1

DELL

S4810 – VRRP2

VXLAN

CLOUD DELL CORE

DELL COMPUTE

TEST device

192.168.202.39/24

VTEP FEATURE

Tenant DELL-TEST

PHY IP Vlan 20

192.168.202.40/24

PHY IP Vlan 20

192.168.202.41/24

Virtual IP Vlan 20

192.168.202.42

192.168.200.x/24

192.168.253.x/30

Each link is a /30

Page 15: SDN, com fer-ho realitat i quins avantatges puc treure-hi

Dell - Internal Use - Confidential

15 of Y

Switch vxlan configuration at VTEP - 1

• At each switch we have to configure the vxlan-instance and to enable the vxlan feature

feature vxlan ! vxlan-instance 1 gateway-ip 192.168.253.2 fail-mode secure controller 1 10.204.39.161 port 6640 ssl no shutdown

• Also the configuration in each access port (to the physical devices)

interface fortyGigE 0/124 description VTEP L2 Gateway vxlan-instance 1 no ip address no shutdown

Page 16: SDN, com fer-ho realitat i quins avantatges puc treure-hi

Dell - Internal Use - Confidential

16 of Y

Let’s going to add those VTEP to the Tenant in order to permit the connectivity

• We have to start again from the Service definition in order to add the virtual switches to VTEP Hardware

• Please remember that but VLAN all fields are selectable clicking at “change” and “select”, preventing any mistake

Page 17: SDN, com fer-ho realitat i quins avantatges puc treure-hi

Qué es Open Networking

Page 18: SDN, com fer-ho realitat i quins avantatges puc treure-hi

Dell - Internal Use - Confidential

18 of Y

We hate to compare but….

• Networking Solutions • Servers Solutions

Elección del Hardware

Elección del OS

Elección del Aplicativo

Page 19: SDN, com fer-ho realitat i quins avantatges puc treure-hi

Dell - Internal Use - Confidential

19 of Y

Open Networking switch

Any OS

Optional 3rd Party SDN / NVO controller

Merchant silicon

Standard orchestration and automation tools

Dell Open Networking Approach Offers open, innovative and best of breed solutions for open data center

Page 20: SDN, com fer-ho realitat i quins avantatges puc treure-hi

Dell - Internal Use - Confidential

20 of Y

ONIE Enables the solution

Page 21: SDN, com fer-ho realitat i quins avantatges puc treure-hi

Y ahora… qué hago yo con esto?

Page 22: SDN, com fer-ho realitat i quins avantatges puc treure-hi

Dell - Internal Use - Confidential

22 of Y

CASOS de USO, preguntas abiertas

• La red es algo que no controlo, cómo puedo hacerla fácil?

• Seguridad?, realmente aporta SDN un plus de seguridad?

• Ruido en la red… broadcast y demás

• Todas las vlanes en todos los puertos?

• Y para entornos SDS? O BigDATA?

• Qué pasa en la red quién me dice algo?

• BONUS: Y para el campus qué?

Page 23: SDN, com fer-ho realitat i quins avantatges puc treure-hi