HAWAII TECH TALK SDN. Paul Deakin Field Systems Engineer

Transcription

1 HAWAII TECH TALK SDN Paul Deakin Field Systems Engineer

2 SDN What Is It? SDN stand for Software Defined Networking SDN is a fancy term for: Using a controller to tell switches where to send packets

3 SDN Networking Basics

4 SDN Networking, With Services

5 SDN VLAN Segmentation VLANs are used to group similar servers together

6 SDN VLAN Segmentation VLANs are used to group similar servers together

7 SDN Virtualized Data Center

8 SDN Networking & Virtualization Manually configuring this is difficult and doesn t work in Clouds

9 SDN What It Solves? Cloud and virtualized environments need networking automation. SDN lets you: Automate Layer 2 & 3 networking for servers in a virtualized or Cloud environment

10 SDN Separate Control & Data Path Control Path (icontrol) Data Path (TMOS)

11 SDN OpenFlow Protocol A SDN controller tells a switch how to direct packets when servers are added or moved using OpenFlow You ll hear OpenFlow a lot in SDN conversations. It s a protocol that controllers use to talk to SDN switches

12 SDN What Controllers Do SDN Capable Switch OpenFlow SDN Controller Servers

13 SDN The Only Technical Slide I Promise!

14 SDN I Work For F5, Why Do I Care? SDN works at Layers 2-3 ADN works at Layers 4-7 F5 does ADN, not SDN ADN is the F5 value prop

15 SDN I Work For F5, Why Do I Care?

16 What is the point of SDN? (Why)

17 What is the point of SDN? (Why)

18 What needs to happen to achieve the software defined data center?

19 What is NSX?

20 BIG-IQ NSX INTEGRATION

21 Notes and Disclaimers Joint solution between NSX and F5 Solution became available in August 2014 Integration built uses the following releases BIG-IQ 4.4/4.5* NSX 6.1 (vsphere release train) Tested with BIG-IP 11.5 and 11.6 Other Notes: Some scenarios will work with NSX 6.0 BIG-IQ Cloud in general works with BIG-IP 11.3 and above. For pooled licenses, its mandatory to use 11.5 or above *BIG-IQ 4.5 release for NSX Software Bridge

22 Scenarios Supported in the first phase of integration Cloud Admin can deploy is from NSX manager Cloud admin can enter the customized i template fields via new vendor templates in NSX manager Cloud Admin can instantiate an instance of BIG-IP VE on demand and license it and provision it using is Monitor the health and status of s

23 The BIG-IQ Vision BIG - IQ BIG-IP BIG-IP Data Center Hybrid Cloud Public Cloud

24 Allow Teams to place lication Workloads on environment that uses a VM Hypervisor CUSTOMER NEED Customer uses VMware environment exclusively and wants to provision BIG-IP. Virtual Infrastructure admin sets up the app servers, the L2-3 network policies on vcns/nsx. The admin wants to use the same management tool to provision BIG-IP. VMware NSX Connector 1 VMware NSX Connector 3 BIG-IQ CLOUD WORKFLOW AND SOLUTION COMPONENTS VMware NSX Connector 2 Create an NSX connector BIG_IQ shows up in NSX manager portal Tenant 1 Tenant 2 Tenant 3 Configure i parameters from NSX management portal s s s Follow the remaining workflow items such as Create a connector per app team; create a tenant per app team, assign users to tenants and assign a connector to tenants BIG-IP Platform BIG-IP Platform BIG-IP Platform Network admin pre-creates BIG-IP and attaches it to VMware connector or allows the app team to create BIG-IP VE on demand F5 Networks, Inc 24

25 Customization of lication templates CUSTOMER NEED Network admins sometimes face the challenge that some of their app teams are network savvy and want to configure LTM parameters themselves and other app teams are can t tell them even the port number of the application. Given the disparity in LTM knowledge, they want some way to customize policies and only give as much control as the app team should have. BIG-IQ CLOUD WORKFLOW AND SOLUTION COMPONENTS Create an app specific i (say http i) Create multiple tenants and assign users per tenant Http i template 1 Assign VIPS, Pool Members per app Tenant 1 http i template 2 Assign VIPs, Pool Members, SSL Certs, change port numbers Tenant 2 http i template 3 Assign VIPs, Pools, SSL Cert, Port number, Monitors Tenant 3 Customize Http i with the ability to edit simple VIP and pool members configuration to tenant 1 Customize Http i with the ability to edit ssl certs, AAM policies, monitors, port numbers etc. to tenant 2 s BIG-IP Platform s BIG-IP Platform s BIG-IP Platform When tenant logs in, they simply select an application and enter the information and click deploy F5 Networks, Inc 25

26 teams manage and own their infrastructure CUSTOMER NEED teams want to manage their infrastructure and determine if app servers must be running or they can be taken out of service. TENANT PORTAL Some customers want to bring the app servers back into private cloud. So app servers can be tested internally and when they feel comfortable that they can be scaled back from public cloud Openstack Connector 1 AWS Connector 3 BIG-IQ CLOUD WORKFLOW AND SOLUTION COMPONENTS team logs into tenant Removes servers when the app config that is no longer needed team adds servers when application wants additional capacity to load balance s VMware NSX Connector 2 Tenant 1 s BIG-IP Platform s They can test a specific configuration in private cloud and once they are satisfied with configs and parity in private cloud setup, app teams can spin down resources from public cloud s s s F5 Networks, Inc 26

27 Isolation Segmentation Service Insertion Dev Web Web Test Production DB DB No Communication Path Controlled Communication Path Advanced Services Controlled Communication Path 27

28 NSX Delivers the Operational Model of a VM for the Network Abstracts, pools, automates networking for the SDDC Reproduces L2/3 networking, L4-7 services Runs on any existing networking hardware lications need no modification Provides scale out/distributed switching, routing, firewalling Enables seamless service insertion for application delivery, security and network security partners CONFIDENTIAL 28

29 VMware NSX System Architecture (Extensibilty) NSX Gateway Cloud Management Platform NSX API with Partner extensions NSX Manager NSX Controller NSX vswitch Any Hypervisor Management plane Partner Service Manager Distributed, automated framework for: Traffic steering Service insertion Service chaining Service orchestration Extensibility based on RESTful NSX API Any Network Hardware Logical service pipeline with service composition at multiple points in the virtual network HW Partner Extensions

30 Use Case and Benefits: lication ADC for the Owner owner: "I want an F5 VIP and an i template, to front-end my pool of servers Operational Simplicity Auto configuration, deployment and licensing of BIG-IP at time of application provisioning Consistent policy across physical and virtual appliances L2 L2 L2 L2 Tenant L2 L2 Deployment Agility lication-specific acceleration and service delivery for multi-tier applications Workload mobility and optimization without service re-location Ease of Consumption Integrated management plane for NSX & F5 CMP-based multi-tier application provisioning

31 Solution Details and User Personas Cloud Admin L2 L2 L2 L2 L2 L2 Provisions s Defines network Specifies desired NSX Edge to use for LB Note: (F5 i to NSX Edge pre-mapped) Logical view NSX Admin WEB APP WEB DB WEB APP DB Infrastructure view Edge Rack NSX Bridge Pre-Provisions NSX Edges for Cloud Admin Enables F5 Integration and associates F5 is to desired NSX Edges VXLAN 6000 VXLAN 5001 F5 Admin VLAN 100 F5 Big IP Big IQ Registers BIG IQ to NSX Configure and/or publish F5 is to NSX Deploy F5 Virtual or Physical editions

32 NSX / F5 Management Plane Integration 1 Configuration User vcenter Server VM NSX Manager VM BIG-IQ VM INTERNET One-time registration of BIG-IQ with NSX Manager Management BIG-IQ publishes catalog of is to NSX Manager NSX Logical Router Logical Networks F5 VE Cloud Admin specifies ADC service template and location for service instantiation VM VM VM Server Pool

33 F5 BIG-IQ & VMware NSX Admin Operational agility at the network services (lication Delivery Networking [ADN]) layer Operational agility for application-specific services for acceleration, availability, and security (a rich Layer 7 protocol) Cloud Management & Orchestration Delivering a consistent consumer experience without consuming IT resources better spent on strategic projects NSX Management NSX Manager Generic Platform is lication Services BIG-IQ Cloud and BIG-IQ Device BIG-IP Local Traffic Manager Simplified Business Models User NSX Edge BIG-IP Platform Generic Platform NSX vswitch lication Workloads Deploying L3 L7 Services

34 Elimination of issues Reduced Time to Market New applications and services to employees or customers NSX + BIG-IQ Improved Time to React Alterations to existing, deployed infrastructure Faster Time to Value

35 Cisco ACI same deal different SDN play.

36