VMware NSX & OpenStack Integration

Somik Behera
Twitter: @Strikesme

Copyright 2014 EMC Corporation. All rights reserved.

Agenda
OpenStack on VMware
OpenStack on VMware philosophy

OpenStack Network (Neutron) & VMware NSX

Brief history of OpenStack Neutron project
Technical Overview: OpenStack Neutron
Technical Deep Dive: OpenStack Neutron & NSX Integration

Demo - OpenStack & VMware NSX in Action

Conclusion: Why OpenStack & VMware NSX
NSX Integrated OpenStack Partners
NSX & OpenStack in Production
Copyright 2014 EMC Corporation. All rights reserved.

VMware Philosophy on OpenStack

The Foundation for IT: Software Defined Datacenter

OpenStack

Virtual Workspace

Manage access to services, applications and data for any

device

Private
Clouds

Public
Clouds

An open framework for building clouds

Assembles a solution from underlying
Compute, Network, Storage components.
Can be managed and automated using many
solutions.

Customer Choice

Hybrid Cloud

Seamlessly extend your data center to the public cloud

Software-Defined Data Center

An Opportunity for VMware SDDC

Virtualize the entire data center

Management and Automation

Storage and
Availability

Compute

Copyright 2014 EMC Corporation. All rights reserved.

Network and
Security

VMware supports Customer choice.

Our support for OpenStack enables choice
VMware SDDC provides best-in-class
Compute, Network, Storage & management
solutions for OpenStack.
We view OpenStack as an opportunity for
VMware SDDC portfolio.

VMware Technologies and OpenStack

Tenant-Side
Horizon
( Web Portal )
Nova
(Compute)

vSphere &
vCenter

CLI Tools & Scripts

(DevOps Automation)
Neutron
(Network)

Cinder
(Block Storage)

NSX

vSAN

Cloud Operator Tools

(vCenter, vCOPs, Log Insight etc.)
OpenStack or 3rd Party Component
VMware Component
Copyright 2014 EMC Corporation. All rights reserved.

vCAC
Application Director
Glance
(Image Store)

Benefits of
OpenStack API &
Ecosystem

vCenter
(Image Catalog)

Third Party Operator tools

(Puppet/Chef, scripts, nagios...)

Choice of best-inclass virtualization

& management
technologies

Operator-Side
4

OpenStack Network (aka Neutron)

Copyright 2014 EMC Corporation. All rights reserved.

Brief History: OpenStack Neutron

1st experimental
release
accepted for
incubation

Project is
born!

4/2011

9/2011
Diablo

Nicira, Cisco,
Rackspace and
others launch
Quantum

Essex

Accepted as
OpenStack
core project

3/2012

Essex:
521
commits

Copyright 2014 EMC Corporation. All rights reserved.

Folsom

NVP plugin
release
1st

Beyond
L2:
IPAM & L3
APIs

9/2012

Grizzly

Nova-network
feature parity
Load balancing
APIs

3/2013

FW APIs
VPN APIs

9/2013

Havana
NSX Plugin

Havana:1980 commits
(and counting)

Folsom:
816
commits

Grizzly:
1414
commits

Why OpenStack Neutron?

Give tenants control over networking
Provide technology-agnostic tenant API to
manage virtual network topologies

Leverage advanced network

technologies

Traditional approach (Nova-network) provides

only basic technologies

VLANs are only option for multi-tenancy

network controller node is centralized single-point

Who needs private

networks?
Trunking all VLANs
is a great idea!
- Stone Age Man

of failure for large networks.

Copyright 2014 EMC Corporation. All rights reserved.

What is OpenStack Neutron?

An API allowing cloud tenants to:
Define advanced network topologies

in the cloud
Manage IP addressing
Monitor network status
Define security and quality-of-service
policies
Configure advanced network services

A framework for leveraging

advanced technologies

Based on a plugin mechanism

Copyright 2014 EMC Corporation. All rights reserved.

Reference OpenStack Neutron Architecture

Horizon Web UI

Neutron CLI

Core Neutron API

Heat - Orchestration

API Tools

Other tools

OpenStack Neutron API Server

Integrated AuthN/AuthZ with
OpenStack Keystone
Integrated out of the box NSX
Plugin
Advanced feature API
extensions.

API Extensions

Authentication & Authorization via OpenStack keystone

Neutron Pluggable Backend
Open vSwitch Pluginlayer

Open vSwitch

Open vSwitch

Open vSwitch

Open vSwitch Plugin Layer-2

Nova Compute

Nova Compute

Nova Compute

Agents
Interfaces from Nova plug into a
switch managed by the Neutron
plugin.

Copyright 2014 EMC Corporation. All rights reserved.

Logical topologies enabled by Neutron APIs

ExternalNetwork
Network
External

Router_A
Net_A2
Net_A2
10.0.1.0/24
10.0.1.0/24

Net_A1
10.0.0.0/24
DHCP

VM_1
10.0.0.3

Router_B

DHCP

Tenant A

Copyright 2014 EMC Corporation. All rights reserved.

VM_2
10.0.1.3

Net_B1
192.168.0.0/24
DHCP

VM_3
192.168.0.3

Tenant B

10

OpenStack Network
(aka Neutron)
&
VMware NSX

Copyright 2014 EMC Corporation. All rights reserved.

11

Brief History: VMware contributions to OpenStack

Neutron
Havana

Folsom

(in progress)

Grizzly

Copyright 2014 EMC Corporation. All rights reserved.

12

Why run OpenStack Neutron on VMware NSX

HA & Scale
What?
Scale-out architecture with
sub-second HA
Why?
Distribute workloads
without Networking
boundaries

Enterprise-class features
What?
Gateways, QoS, BUM
offload and many others
Why?
Eases cloud deployment &
integrates existing
workloads.

Copyright 2014 EMC Corporation. All rights reserved.

Performance

What?
Distributed architecture
and efficient encapsulation
Why?
Get most out of your
existing 10GE NW & NICS

Operational Agility
What?
Single pane of glass &
operational model.
Why?
Better sleep at night
knowing support has tools
to do their job.

13

VMware NSX with OpenStack Neutron

Neutron CLI
Horizon Web UI
Heat - Orchestration
Other tools
API Tools
Architecture
Core Neutron API
API Extensions
Authentication & Authorization

Any Application
Physical or Virtual Workloads

VMware NSX Plugin for OpenStack Neutron

OpenStack Neutron
API Server
Integrated
AuthN/AuthZ with
OpenStack Keystone
Integrated out of the
box NSX Plugin
Virtual
Advanced
feature API
Networks
extensions.

NSX Controller & API

Virtual
Virtual Networks
Networks
Physical to
Virtual

NSX
Gateway

Copyright 2014 EMC Corporation. All rights reserved.

NSX vSwitch
Any Hypervisor
Overlay Transport
Any Network Hardware

14

VMware NSX & OpenStack Demo!

Copyright 2014 EMC Corporation. All rights reserved.

15

OpenStack Neutron on NSX demo

Logical Topology
Public

Floating IP
my_router

Private_1

(Destination NAT to Private

IP)
Source NAT for Public Network
access

Private_2

DHCP Service
VM_1 DHCP Service
Private IP

Copyright 2014 EMC Corporation. All rights reserved.

VM_2

16

Summary

Copyright 2014 EMC Corporation. All rights reserved.

17

NSX Integrated OpenStack Partners

+
Cloud Mgt
Platforms

NSX API
NSX Controller
Partner Extensions

Network Gateway
Services

Network Security
Platform

Copyright 2014 EMC Corporation. All rights reserved.

Security
Services

Application
Delivery Services

18

Select OpenStack & VMware NSX customers

1

Public Clouds

Enterprise Private Clouds

Copyright 2014 EMC Corporation. All rights reserved.

19