Multi-Hypervisor Networking - Compare and Contrast



Similar documents
How To Create A Network Environment For Cisco One (Cisco 1000V)

Cisco Prime Network Services Controller. Sonali Kalje Sr. Product Manager Cloud and Virtualization, Cisco Systems

Implementing and Troubleshooting the Cisco Cloud Infrastructure **Part of CCNP Cloud Certification Track**

Cisco and Canonical: Cisco Network Virtualization Solution for Ubuntu OpenStack

Cisco Virtual Security Gateway for Nexus 1000V Series Switch

Running a VSM and VEM on the Same Host

Software Defined Network (SDN)

Cisco Nexus 1000V Switch for Microsoft Hyper-V

SDN v praxi overlay sítí pro OpenStack Daniel Prchal daniel.prchal@hpe.com

VMware Network Virtualization Design Guide. January 2013

Installing Intercloud Fabric Firewall

Configuring iscsi Multipath

Palo Alto Networks. Security Models in the Software Defined Data Center

VXLAN: Scaling Data Center Capacity. White Paper

How To Set Up A Virtual Network On Vsphere (Vsphere) On A 2Nd Generation Vmkernel (Vklan) On An Ipv5 Vklan (Vmklan)

VMware. NSX Network Virtualization Design Guide

Building Scalable, Open, Programmable and Application Centric Data Center with Cisco ACI. 林 瑝 錦 / Jerry Lin Cisco Systems 2015 July

Outline. Why Neutron? What is Neutron? API Abstractions Plugin Architecture

Datacenter Networking. Joy ABOIM Consulting System Engineer

CERN Cloud Infrastructure. Cloud Networking

Using SUSE Cloud to Orchestrate Multiple Hypervisors and Storage at ADP

The Evolving Data Center. Past, Present and Future Scott Manson CISCO SYSTEMS

Expert Reference Series of White Papers. vcloud Director 5.1 Networking Concepts

VMware

Security Services Design in the Next- Generation Data Center

Cisco Intercloud Fabric Getting Started Guide, Release 2.3.1

Defining SDN. Overview of SDN Terminology & Concepts. Presented by: Shangxin Du, Cisco TAC Panelist: Pix Xu Jan 2014

OVERLAYING VIRTUALIZED LAYER 2 NETWORKS OVER LAYER 3 NETWORKS

Virtualization, SDN and NFV

Installing the Cisco Nexus 1000V for Microsoft Hyper-V

Network Virtualization and Software-defined Networking. Chris Wright and Thomas Graf Red Hat June 14, 2013

Understanding Cisco Cloud Fundamentals CLDFND v1.0; 5 Days; Instructor-led

Analysis of Network Segmentation Techniques in Cloud Data Centers

VMware NSX Network Virtualization Design Guide. Deploying VMware NSX with Cisco UCS and Nexus 7000

Open Source Networking for Cloud Data Centers

Virtual Machine Manager Domains

Geschreven door Administrator woensdag 13 februari :37 - Laatst aangepast woensdag 13 februari :05

SDN Architecture and Service Trend

Virtualized Access Layer. Petr Grygárek

Extending Networking to Fit the Cloud

Cisco Unified Network Services: Overcome Obstacles to Cloud-Ready Deployments

VIRTUALIZED SERVICES PLATFORM Software Defined Networking for enterprises and service providers

Business Benefits. Cisco Virtual Networking solutions offer the following benefits:

Reference Design: Deploying NSX for vsphere with Cisco UCS and Nexus 9000 Switch Infrastructure TECHNICAL WHITE PAPER

Installation Guide Avi Networks Cloud Application Delivery Platform Integration with Cisco Application Policy Infrastructure

Quantum Hyper- V plugin

SDN CONTROLLER. Emil Gągała. PLNOG, , Kraków

Accelerate POC to Production: OpenStack with FlexPod

Multi Provider Cloud. Srinivasa Acharya, Engineering Manager, Hewlett-Packard

DMZ Virtualization Using VMware vsphere 4 and the Cisco Nexus 1000V Virtual Switch

Roman Hochuli - nexellent ag / Mathias Seiler - MiroNet AG

How to Deploy a Nexus 1000v lab with a single ESX host.

Demystifying Cisco ACI for HP Servers with OneView, Virtual Connect and B22 Modules

Cloud Networking Disruption with Software Defined Network Virtualization. Ali Khayam

Cross-vCenter NSX Installation Guide

Cisco Virtual Wide Area Application Services: Technical Overview

VXLAN Bridging & Routing

NSX TM for vsphere with Arista CloudVision

Introduction to OpenStack

Network Virtualization

Expert Reference Series of White Papers. VMware vsphere Distributed Switches

vshield Quick Start Guide vshield Manager 4.1 vshield Edge 1.0 vshield App 1.0 vshield Endpoint 1.0

The Advantages of Cloud Services

Cloud on TEIN Part I: OpenStack Cloud Deployment. Vasinee Siripoonya Electronic Government Agency of Thailand Kasidit Chanchio Thammasat University

Corso di Reti di Calcolatori M

White Paper. Juniper Networks. Enabling Businesses to Deploy Virtualized Data Center Environments. Copyright 2013, Juniper Networks, Inc.

Bring your virtualized networking stack to the next level

SOFTWARE-DEFINED NETWORKING AND OPENFLOW

Virtual Networking Features of the VMware vnetwork Distributed Switch and Cisco Nexus 1000V Series Switches

vshield Quick Start Guide

How To Orchestrate The Clouddusing Network With Andn

Configuring Local SPAN and ERSPAN

Ubuntu OpenStack on VMware vsphere: A reference architecture for deploying OpenStack while limiting changes to existing infrastructure

Fast Lane OpenStack Overview Red Hat Enterprise Linux OpenStack Platform

VXLAN Overlay Networks: Enabling Network Scalability for a Cloud Infrastructure

SUSE Cloud 2.0. Pete Chadwick. Douglas Jarvis. Senior Product Manager Product Marketing Manager

Data Center Network Virtualisation Standards. Matthew Bocci, Director of Technology & Standards, IP Division IETF NVO3 Co-chair

Configuring Network Load Balancing for vethernet

vshield Quick Start Guide

Research trends in abstraction of networks and orchestration of network services

vsphere 6.0 Advantages Over Hyper-V

Data Center Virtualization and Cloud QA Expertise

Ethernet-based Software Defined Network (SDN) Cloud Computing Research Center for Mobile Applications (CCMA), ITRI 雲 端 運 算 行 動 應 用 研 究 中 心

Network Virtualization

vrealize Operations Management Pack for OpenStack

DCB for Network Virtualization Overlays. Rakesh Sharma, IBM Austin IEEE 802 Plenary, Nov 2013, Dallas, TX

HAWAII TECH TALK SDN. Paul Deakin Field Systems Engineer

Architecting and Building a Secure and Compliant Virtual Infrastructure and Private Cloud

Configuring Network Load Balancing for vethernet

Oracle Virtualization Strategy and Roadmap

2013 ovh.com. All rights reserved

Active Fabric Manager (AFM) Plug-in for VMware vcenter Virtual Distributed Switch (VDS) CLI Guide

Transform Your Business and Protect Your Cisco Nexus Investment While Adopting Cisco Application Centric Infrastructure

CLOUD NETWORKING FOR ENTERPRISE CAMPUS APPLICATION NOTE

Mirantis

Simplify IT. With Cisco Application Centric Infrastructure. Barry Huang Nov 13, 2014

Utility Computing and Cloud Networking. Delivering Networking as a Service

Configuring Network Load Balancing for vethernet

Transcription:

Multi-Hypervisor Networking - Compare and Contrast Alejandra Sanchez Garcia Customer Support Engineer, CCIE DC #clmel

Agenda Evolution of the Workloads in the Data Centre Achieving Virtualisation in Multiple Hypervisor Options Various Hypervisor Networking Options at the Host Normalising the Complexity of Multi-Hypervisor Networking Summary / Q&A 3

Changing Traffic Patterns: Siloed Data Center Centre Dynamic Data Centre Tenant Elasticity Mostly North-South traffic flows Over-subscription acceptable for client-server type of applications Poor link utilisation. Spanning Tree blocks ports Mix of North-South and East-West traffic flows Virtualisation increases L2 Domains Spanning Tree blocking affects scalability 4

Physical Virtual Cloud Journey Consistency reduces operational risk and complexity PHYSICAL WORKLOAD One app per Server Static Manual provisioning VIRTUAL WORKLOAD Many apps per Server Mobile Dynamic provisioning CLOUD WORKLOAD Multi-tenant per Server Elastic Automated Scaling HYPERVISOR VDC-1 VDC-2 CONSISTENCY: Policy, Features, Security, Management, Separation of Duties Switching Routing Services 5 Nexus 7K/5K/3K/2K ASR, ISR WAAS, ASA, NAM Nexus 1000V, VM-FEX Cloud Services Router (CSR 1000V) 5 vwaas, VSG, ASA 1000V, vnam, NS 1000V

Physical Virtual Cloud Journey Consistency reduces operational risk and complexity PHYSICAL WORKLOAD One app per Server Static Manual provisioning VIRTUAL WORKLOAD HYPERVISOR Many apps per Server Mobile Dynamic provisioning Hyper-V vsphere CLOUD WORKLOAD Multi-tenant per Server Elastic Automated Scaling HYPERVISOR OpenStack(KVM) VDC-1 VDC-2 CONSISTENCY: Policy, Features, Security, Management, Separation of Duties Switching Routing Services 6 Nexus 7K/5K/3K/2K ASR, ISR WAAS, ASA, NAM Nexus 1000V, VM-FEX Cloud Services Router (CSR 1000V) 6 vwaas, VSG, ASA 1000V, vnam, NS 1000V

Virtual Workload on Physical Data Centre VM VM VM VM VM VM VM VM VM Layer 2 Layer 2 Layer 3 7

Agenda Evolution of the Workloads in the Data Centre Achieving Virtualisation in Multiple Hypervisor Options Various Hypervisor Networking Options at the Host Normalising the Complexity of Multi-Hypervisor Networking Summary / Q&A 8

Multi-Hypervisor Encapsulations Encapsulations: VLAN for Bare-Metal VLAN/VXLAN for ESXi VLAN/VXLAN for KVM Network Admin Fabric VLAN/NVGRE for Hyper-V VLAN VXLAN VLAN NVGRE VLAN VXLAN VLAN ESX Hyper-V KVM PHYSICAL SERVER Virtualisation Admin Hypervisor Management 9

Virtual Extensible Local Area Network (VXLAN) Ethernet in IP overlay network Entire L2 frame encapsulated in UDP 50 bytes of overhead Include 24 bit VXLAN Identifier 16 M logical networks Mapped into local bridge domains VXLAN can cross Layer 3 Tunnel between VEMs VMs do NOT see VXLAN ID IP multicast used for L2 broadcast/multicast, unknown unicast Technology submitted to IETF for standardisation With VMware, Citrix, Red Hat and Others Outer MAC DA Outer MAC SA Outer 802.1Q Outer IP DA Outer IP SA Outer UDP VXLAN ID (24 bits) Inner MAC DA Inner MAC SA Optional Inner 802.1Q Original Ethernet Payload CRC VXLAN Encapsulation Original Ethernet Frame 10

Network Virtualisation over GRE (NVGRE) MAC over GRE Tunnelling Entire L2 frame encapsulated in GRE 50 bytes of overhead Include 24 bit VSID Identifier 16 M logical networks NVGRE can cross Layer 3 GRE Tunnel between endpoints VMs do NOT see VSID Technology submitted to IETF for standardisation With Microsoft, Arista, Intel, Dell, HP, Broadcom and Emulex Outer Ethernet Hdr Outer IP Hdr (Provider Addr) Outer GRE Hdr Inner Eth Hdr Inner IP Packet (Customer Addr) Outer MAC DA Outer MAC SA Outer 802.1Q Outer IP SA Outer IP DA Outer GRE VSID (24 bits) Inner MAC DA Inner MAC SA Inner IP SA Inner IP DA Original IP Payload NVGRE Encapsulation Original Ethernet Frame 11

VXLAN Gateway Nexus 1000V with OpenStack OpenStack Nexus 1000V Neutron Plug-in REST API ASA 1KV VSG Nexus 1000V KVM VXLAN VLAN Gateway Physical (VLAN) Network ASA 55xx vwaas Virtual Services Tenant 1 Tenant 2 Tenant 3 Virtual Workloads Physical Workloads 12

Multi-Hypervisor Managers Each Hypervisor within the Data centre use different points of Management: Network Admin DC Fabric System Centre Virtual Machine Manager (SCVMM) for Hyper-V VLAN VXLAN VLAN NVGRE VLAN VXLAN VLAN vcenter for ESXi ESX Hyper-V KVM Horizon for OpenStack PHYSICAL SERVER Virtualisation Admin Hypervisor Management 13

System Centre Virtual Machine Manager What SCVMM Manages Hyper-V hosts Virtual Machines Logical Switches Logical Networks and Network Sites VM Networks and Subnets IP Addressing Port Profiles and Classifications 14

SCVMM Management of Switch Extensions VM VM VM SCVMM Service 15

Hyper-V Networking in SCVMM Logical Network Network Sites Hosts Vlan, Subnets 16

OpenStack Horizon Manages OpenStack Virtualisation environment Highly customisable based on different plug-in offerings/capabilities Easily Integrated based on published API s What OpenStack Controller Manages OpenStack hosts Virtual Machines Logical Switches VM Networks and Subnets Virtual Routers IP Addressing Port Profiles and Classifications 17

Networking in Horizon 18

Virtual Centre What vcenter Manages ESXi hosts Virtual Machines Standard Switches (Host-based) Distributed Virtual Switch (Multi-Host) VM Networks and Subnets Port Profiles 19

vcenter Networking for ESXi 20

Virtual Overlay Network Physical Firewall VM Gateway Data Centre Network Gateway Router WAN Gateway Overlay Bare Metal Servers 21

What Does All This Mean? Complexity in Networking Which encapsulations to use for mixed Hypervisor environment? VLAN scalability No VXLAN for Hyper-V or Bare-Metal VXLAN-VLAN Gateways Complexity in Management How do I configure networks in Hyper-V, KVM/OpenStack and ESXi? Different tools Different uplinks Who does what? 22

Hypervisor Technology Comparison VMware ESX Microsoft Hyper-V Openstack Virtual Distributed Switch (VDS) Logical Switch Open vswitch Port Group Virtual Port Profiles + VM networks Logical Networks (Internal/External) vmknic Host VNIC Virtual Adapter Folder/Data Centre Host Group Tenant vmotion Live Migration Live Migration Distributed Resource Scheduling (DRS) Dynamic Optimisation Nova Scheduler Distributed Power Mgmt (DPM) Power Management Nova Scheduler vcenter, vcloud Director SCVMM, SCO Dashboard Horizon Site Recovery Manager Hyper-V Replica Gluster Virtual Machine Disk (VMDK) Virtual Hard Disk (VHDX) 23 QuickEMUlator Copy on Write (QCOW2) or VMDK

Agenda Evolution of the Workloads in the Data Centre Achieving Virtualisation in Multiple Hypervisor Options Various Hypervisor Networking Options at the Host Hyper-V, KVM/OpenStack, ESXi Normalising the Complexity of Multi-Hypervisor Networking Summary / Q&A 24

SCVMM Networking Concepts Logical Networks Network Sites VM Networks VM Subnets Port Classifications IP Pools 25

Logical Networks and Network Sites Logical Networks Helps model different types of networks in an Enterprise. e.g. Internal, DMZ, Branch etc. Provisioned by VMM Admin during initial Fabric Provisioning Named Networks hide details from the users of the Network Server Admin, Tenant Admin, Self Service User. Is a group of one or more Network Sites Network Sites Is a collection of (IP Subnet, VLAN) pairs. Flexibility with usage - All IP Subnets in a DC can be in one Site - Each Subnet/POD/RACK can be a site Avatar Corp Madrid The Network team supports two types of Networks Internal for VMs/Hosts behind the DMZ DMZ for VMs/Hosts in the DMZ WAN 26 Barcelona

Logical Networks and Network Sites Logical Network Internal Logical Network DMZ Network Site Internal-Madrid - 10.0.0.0/8, VLAN 100 Network Site Internal-Barcelona - 30.0.0.0/8, VLAN 300 Network Site DMZ-Madrid - 20.0.0.0/8, VLAN 200 Network Site DMZ-Barcelona - 40.0.0.0/8, VLAN 400 WAN Internal Pod 10.0.0.0/8, VLAN 100 DMZ Pod 20.0.0.0/8, VLAN 200 Internal Pod 30.0.0.0/8, VLAN 300 DMZ Pod 40.0.0.0/8, VLAN 400 Madrid 27 Barcelona

Hyper-V VM Networks and VM Subnets VM Network Defines a Layer 3 domain identified by a Routing Domain ID Contains one or more VM Subnets. Tenant Admin uses provisioned Logical Networks to define VM Networks. VM Subnet Defines a Layer 2 / broadcast domain. VMs connect to a VM Subnet in a VM Network in SCVMM Logical Network Internal VM Network -1 VM Network -1 VM Network -1 VM Subnet-1-192.168.1.0/24 VM Subnet-2-192.168.8.0/24 VM Subnet ID is unique across VM Subnets 28

Hyper-V VM Network Options Network virtualisation NVGRE encapsulation VLAN-based configuration VM network for each network site and VLAN No isolation VM network is the same as the logical network External network service Nexus 1000v VXLAN encapsulation 29

VLAN based VM Networks VM Network1 VLAN100 VM Network2 VLAN 300 VM Network3 VLAN 200 VM Network4 VLAN 400 Tenant Admin Logical Network Internal Network Site Internal-Madrid - 10.0.0.0/8, VLAN 100 Network Site Internal-Barcelona - 30.0.0.0/8, VLAN 300 Logical Network DMZ Network Site DMZ-Madrid - 20.0.0.0/8, VLAN 200 Network Site DMZ-Barcelona - 40.0.0.0/8, VLAN 400 Fabric Admin WAN Internal Pod 10.0.0.0/8, VLAN 100 Madrid DMZ Pod 20.0.0.0/8, VLAN 200 Internal Pod 30.0.0.0/8, VLAN 300 Barcelona DMZ Pod 40.0.0.0/8, VLAN 400 30

NVGRE Based VM Networks Logical Network Internal 10.1.1.11 10.1.1.12 VM-1 VM-3 192.168.2.22 HyperV 192.168.5.55 HyperV VM-2 VM-4 10.1.1.11 10.1.1.12 NVGRE Encapsulation Original Ethernet Frame 192.168.2.22->192.168.5.55 GRE Key=5001 10.1.1.11->10.1.1.12 192.168.2.22->192.168.5.55 GRE Key=6001 10.1.1.11->10.1.1.12

SCVMM Logical Switch Overview SCVMM Host Switch Template created on SCVMM Allows VMM Admin to define Network Policy on Virtual Ethernet and Uplink Interfaces Allows consistent configuration on all HyperV Hosts where Logical Switch is instantiated. Ext Switch Ext Switch Ext Switch HyperV Host HyperV Host HyperV Host Limitations Not a Distributed Virtual Switch Many HyperV Switch Features can t be defined on the Switch template. (e.g. ACL, SPAN) leading to Host Level Management. 32

SCVMM Logical Switch 1 2 3 Select Switch Extensions - Capture - Monitor - Forwarding Define Uplink Profiles - Mode Team / No Team - Uplink Profile 1 - Uplink Profile n Define Port Classifications - Port Classification 1 - Port Classification n 33

Network and Policy Decoupled in HyperV VMWare ESX Port Group Network connectivity (e.g. vlan) Policy (e.g. SPAN, ACLs) Microsoft HyperV Port Classification Veth policy (e.g. QoS) VM Network and VM Subnet Determine VM isolation 35

Cisco Nexus 1000V for Hyper-V Operational Model with SCVMM VM VM VM VM Nexus 1000V VEM WS 2012 Hyper-V Server SCVMM manages the placement and live-migration of the VMs based on the constraints between VM networks and the network sites. 4 5 SCVMM 2 3 Adds hosts to N1KV Connects VMs (VNICs) to VM Networks Networks & policies synced to SCVMM Server Admin Nexus 1000V VSM 1 Create networks and policies (logical networks, network sites, VMnetworks) Network Admin 37

Agenda Evolution of the Workloads in the Data Centre Achieving Virtualisation in Multiple Hypervisor Options Various Hypervisor Networking Options at the Host Hyper-V, KVM/OpenStack, ESXi Normalising the Complexity of Multi-Hypervisor Networking 38

OpenStack Core Projects OpenStack Compute (Nova) OpenStack Image Service (Glance) OpenStack Object Storage (Swift) OpenStack Dashboard (Horizon) OpenStack Network Service (Quantum/Neutron) OpenStack Identity (Keystone) Software to provision virtual machines on commodity hardware at massive scale Services for discovering, registering, and retrieving virtual machine images Software to reliably store billions of objects distributed across commodity hardware A self-service web portal to allow administrators and users to manage OpenStack resources Provides network connectivity as a service between devices managed by other OpenStack services Provides unified authentication across all OpenStack projects and integrates with 3rd party authentication systems 39

OpenStack Element Dependencies Horizon Neutron Nova Glance Swift Cinder Keystone 40

Neutron Architecture Clients Neutron Service Backend Networks Physical and Virtual Neutron Neutron 41

Basic Neutron Abstractions & APIs Networks Create, Delete, Update List, Show Neutron Subnets Create, Delete, Update List, Show Ports Create, Delete, Update List, Show 42

A Simple OpenStack Deployment Management Network Neutron-plugin-agent Mysql Neutron-L3-agent Neutron-dhcp-agent Network Node Nova-compute Neutron-plugin-agent Compute Compute Nodes Nodes Compute Nodes RabbitMQ Nova-api Nova-scheduler Keystone Data Network Neutron Server Control Node External Network IPMI Network 43

Neutron Work Flow with Cisco Nexus1000V Create Network Profile Type VXLAN (TenantA) (Pool created and assigned to tenant) Create Network (net1) (Tenant Self Create) OpenStack Neutron Admin VXLAN 5000-5100 Project/Tenant TenantA Compute Node Create Subnet (subnet1) (Assign IP Pool) Create Port using network and policy (Created when VM is instantiated) Neutron VM-Network (PortID) VXLAN 5000 VXLAN 5000 10.5.1.0/24 for VXLAN 5000 Policy Profile (VSM) Port is created in VSM Nexus 1000V VSM VM-Network 44

Port Profile Configuration in KVM/OpenStack Configuration Templates n1000v# show port-profile name VM-Data-ClientOS port-profile VM-Data-ClientOS type: Vethernet description: status: enabled max-ports: 32 min-ports: 1 inherit: config attributes: switchport mode access switchport access vlan 110 no shutdown evaluated config attributes: switchport mode access switchport access vlan 110 no shutdown assigned interfaces: Vethernet10 Supported Commands Include: Port management VLAN PVLAN Port-Channel ACL Netflow Port security QoS 45

Cisco Nexus 1000V for KVM Integration with KVM & OpenStack VM VM VM VM OpenStack Controller Nexus 1000V VEM Nova Service Other Services Horizon 3 Create tenants, networks, subnets & VMs Cloud Mgmt Server Neutron Service 2 Policy-profiles are synced to Controller. Controller in turn uses Neutron API to create networks & subnets on VSM. Nexus 1000V VSM 1 Create policy-profiles Network Mgmt 46

Agenda Evolution of the Workloads in the Data Centre Achieving Virtualisation in Multiple Hypervisor Options Various Hypervisor Networking Options at the Host Hyper-V, KVM/OpenStack, ESXi Normalising the Complexity of Multi-Hypervisor Networking 47

Cisco Nexus 1000V Architecture for ESXi VM VM VM VM VM VM VM VM VM VM VM VM Nexus 1000V VEM Nexus 1000V VEM Nexus 1000V VEM Hypervisor Hypervisor Hypervisor Virtual Centre Nexus 1000V VSM Nexus 1000V VSM 48

The Switch Nexus 1000V on vcenter Virtual Side Physical Side 49

Nexus 1000V on vcenter 50

Cisco Nexus 1000V for ESXi Operational Model with vcenter VM VM VM VM Nexus 1000V VEM ESXi Server vcenter manages the placement and live-migration of the VMs based on the defined networks 4 5 vcenter 2 3 Server Admin Adds hosts to N1KV Connects VMs (VNICs) to VM Networks Networks & policies synced to vcenter Nexus 1000V VSM 1 Create networks and port profiles, define network services and service chains Network Admin 51

Agenda Evolution of the Workloads in the Data Centre Achieving Virtualisation in Multiple Hypervisor Options Various Hypervisor Networking Options at the Host Normalising the Complexity of Multi-Hypervisor Networking Nexus 1000V (configuration samples) Summary / Q&A 52

Unified Management Interface Across Hypervisors NTP TACACS+ RADIUS Netflow SPAN & ERSPAN NX-OS CLI SNMP Support NetConf/XML CDP Syslog Cisco Nexus 1000V vm-network-definition (id, vlan, ip-pool) for network segments logical-network-definition (name, id, connected-ports) fabric n/w virtual-port-profile (type, id, maxports, switch-id) for veth uplink-port-profile (state, type, id, maxports, switch-id) for PNIC ip-address-pool (name, dhcp-server, range etc.) for ip-pools REST-APIs for manageability 53

Why Not Configure Virtual Ports? Too many ports, and they move too fast Network admin needs sanity Server admin needs freedom To deploy and move virtual machines To deploy and move physical hosts switch # int gi1/0/35 switch # int gi1/0/47 switchport # mode int gi1/0/21 access switchport mode access access # int gi1/0/17 switchport mode vlan access 23 access vlan 23 etc switchport mode access switchport access vlan 23 etc switchport access vlan 23 etc etc Source: http://images.webmagic.com/klov.com/screens/s/wspace_invaders.png 54

Port Profiles Current Nexus 1000V Instead of configuring individual Ports, create a Port Profile Set up ahead of time: VLANs ACLs NetFlow QoS Private VLANs And all other port config! # port-profile database switchport mode access switchport access vlan 10 ip port access-group myacl in no shut state enabled Re-use it multiple times! 55

Network Segments and Port Profiles Networks and Profiles are Two Different Things Different ports need different protection on the same network Web Servers Applications DB Servers Port Profiles Application Server SSL Web Server Web Server DB Server Intranet Network Segment One network, multiple profiles for access 56

Network Segments and Port Profiles And many networks can share the same protection requirements Web App DB Tenant A Intranet Web App DB Tenant B Intranet Port Profiles Application Server SSL Web Server Web Server DB Server Network Segment Multiple networks use the same profiles Tenant C Intranet Tenant D Intranet 57

Cisco Nexus 1000V Overview Consistency across multiple hypervisors Virtual Appliance NS1000V ASA1000V vwaas VSG VSM Physical Appliance: Nexus 1100 Primary Secondary VSM NAM VSG NS1000V VSM NAM VSG NS1000V Hypervisor agnostic technologies & feature-set Hypervisor-agnostic hosting platform to simplify operations VEM vpath VXLAN ESX VEM vpath VXLAN WS2012 Hyper-V VEM vpath VXLAN OpenStack 58

Cisco Nexus 1000V for Hyper-V VM VM VM VM Advanced NX-OS feature-set VNICs Nexus 1000V VEM Nexus 1000V VSM Innovative Services architecture (vpath) Extensible vswitch Consistent operational model PNICs SCVMM Integration 59

Nexus 1000V for Hyper-V VSM Configuration 1 N1KV(config)# logical-network Intranet 2 N1KV(config)# network-segment-pool IntranetSFO Nexus1000V(config-net-seg-pool)# logical-network Intranet N1KV(config)# network-segment-pool IntranetNY Nexus1000V(config-net-seg-pool)# logical-network Intranet 3 N1KV(config)# network-segment vlan173 Nexus1000V(config-net-seg)# switchport mode access Nexus1000V(config-net-seg)# switchport access vlan 173 Nexus1000V(config-net-seg)# network-segment-pool IntranetSFO Nexus1000V(config-net-seg)# publish network-segment 4 N1KV(config)# port-profile type ethernet PortChannelProfile Nexus1000V(config-port-prof)# channel-group auto mode on mac-pinning Nexus1000V(config-port-prof)# no shutdown Nexus1000V(config-port-prof)# state enabled 60

Nexus 1000V for Hyper-V VSM Configuration 5 N1KV(config)# port-profile type vethernet WebServerProfile Nexus1000V(config-port-prof)# publish port-profile Nexus1000V(config-port-prof)# no shutdown Nexus1000V(config-port-prof)# state enabled 6 N1KV(config)# uplink-network Nexus1000VUplinkProfile Nexus1000V(config-uplink-net)# import port-profile PortChannelProfile Nexus1000V(config-uplink-net)# network-segment-pool IntranetSFO Nexus1000V(config-uplink-net)# network-segment-pool IntranetNY Nexus1000V(config-uplink-net)# publish uplink-network 61

KVM/OpenStack with Nexus 1000V Management Network novacompute nova- novacompute *-pluginagent *-plugin- *-pluginagencompute novacomputagent *-plugin-agent dhcp-agent dhcp-agent dhcp-agent *-plugin- *-plugin- *-plugin-agent l3-agent l3-agent Network l3-agent Network Node Network Node Node Data Network Compute Compute Compute Node Compute Node Node Node nova-api nova-scheduler Neutron-server keystone mysql, rabbit... Cloud Controller Node vpath Service Insertion/Chaining CSR, VPN, Firewall, etc. Consistent operational model External Network Leverage Nexus 1000V REST API Internet API Network is typically routable to enable public access 62

Nexus 1000V for KVM/OpenStack VSM Config 1 2 3 4 switch(config)# network segment manager switch Nexus1000V(config-net-seg-pool)# dvs name vsm-kvm-440 vsm-kvm-440(config)# port-profile type vethernet NSM_Template_vlan vsm-kvm-440(config-port-prof)# guid 16c55294-91a8-41e6-906a-a1b84f1db881 vsm-kvm-440(config-port-prof)# state enabled vsm-kvm-440(config)# network segment policy default_vlan_template vsm-kvm-440(config-network-segment-policy)type vlan vsm-kvm-440(config-network-segment-policy)import port-profile NSM_Template_vlan vsm-kvm-440(config)# port-profile type ethernet sys-uplink vsm-kvm-440(config-port-prof)# switchport mode trunk vsm-kvm-440(config-port-prof)# switchport trunk allowed vlan 1-700 vsm-kvm-440(config-port-prof)# mtu 1550 vsm-kvm-440(config-port-prof)# state enabled vsm-kvm-440(config-port-prof)# publish port-profile 63

ESXi with Nexus 1000V VM VM VM VM Advanced NX-OS feature-set VSM VEM vsphere Innovative Services architecture (vpath) VXLAN Overlay Networking vcenter VSUM 64

Nexus 1000V for ESXi VSM Configuration 1 switch(config)# hostname vsm-esx vsm-esx(config)# 2 3 vsm-esx(config)# port-profile type vethernet Test vsm-esx(config-port-prof)# vmware port-group vsm-esx(config-port-prof)# switchport mode access vsm-esx(config-port-prof)# switchport access vlan 351 vsm-esx(config-port-prof)# no shutdown vsm-esx(config-port-prof)# state enabled vsm-esx(config)# port-profile type ethernet uplink vsm-esx(config-port-prof)# vmware port-group vsm-esx(config-port-prof)# switchport trunk allowed vlan 1-700 vsm-esx(config-port-prof)# channel-group auto mode on mac-pinning vsm-esx(config-port-prof)# system vlan 351-353 vsm-esx(config-port-prof)# state enable 65

Consistency of Network Segments and Port Profiles Splitting the port-profile into Network Connectivity and Policy Application Servers VM VM Database Servers VM VM Database Network (VLAN 10) ESXi Version Hyper-V & KVM Version # port-profile app-server switchport mode access switchport access vlan 10 ip port access-group app_server in no shut state enabled # port-profile db-server switchport mode access switchport access vlan 10 ip port access-group dbserver in no shut state enabled 66 #nsm network segment db-network switchport mode access switchport access vlan 10 # port-profile app-server ip port access-group app_server in no shut state enabled # port-profile db-server ip port access-group dbserver in no shut state enabled

Cisco Nexus 1000V for Multi-Hypervisor Consistent Architecture across hypervisors VM VM VM VM VM VM VM VM VM VM VM VM VSM VEM vsphere VSM VEM Hyper-V VSM VEM KVM vcenter SCVMM Horizon 67

Agenda Evolution of the Workloads in the Data Centre Achieving Virtualisation in Multiple Hypervisor Options Various Hypervisor Networking Options at the Host Normalising the Complexity of Multi-Hypervisor Networking Summary / Q&A 68

Key Takeaways Understand networking in the 3 most popular Hypervisors Grasp the complexity and differences between various Hypervisor networking operations Understand how the Nexus1000V provides consistency to different Hypervisor switching mechanisms 69

Q & A

Complete Your Online Session Evaluation Give us your feedback and receive a Cisco Live 2015 T-Shirt! Complete your Overall Event Survey and 5 Session Evaluations. Directly from your mobile device on the Cisco Live Mobile App By visiting the Cisco Live Mobile Site http://showcase.genie-connect.com/clmelbourne2015 Visit any Cisco Live Internet Station located throughout the venue T-Shirts can be collected in the World of Solutions on Friday 20 March 12:00pm - 2:00pm Learn online with Cisco Live! Visit us online after the conference for full access to session videos and presentations. www.ciscoliveapac.com

Thank you.