skt | ict r&d | sangho shin 2018. 10. 17• integration with openstack –openstack neutron...

22
SOSCON 2018 SAMSUNG OPEN SOURCE CONFERENCE 2018 SONA SDN based OpenStack/Kubernetes Network Management Solution SKT | ICT R&D | Sangho Shin 2018. 10. 17

Upload: others

Post on 25-Feb-2020

14 views

Category:

Documents


0 download

TRANSCRIPT

Page 1: SKT | ICT R&D | Sangho Shin 2018. 10. 17• Integration with OpenStack –OpenStack neutron •Plugin: modular layer 2 plugin –networking-onos •ONOS L3 plugin •Drivers for LBaaS,

SOSCON 2018SAMSUNG OPEN SOURCE CONFERENCE 2018

SONASDN based OpenStack/Kubernetes Network Management Solution

SKT | ICT R&D | Sangho Shin

2018. 10. 17

Page 2: SKT | ICT R&D | Sangho Shin 2018. 10. 17• Integration with OpenStack –OpenStack neutron •Plugin: modular layer 2 plugin –networking-onos •ONOS L3 plugin •Drivers for LBaaS,

SOSCON 2018Why SONA?

Compute Node

nova-compute

neutron-plugin-agent

Compute Node

nova-compute

neutron-plugin-agent

Compute Node

nova-compute

neutron-plugin-agent

Control Node

AMQP

nova-api

keystone

nova-scheduler

neutron-server

horizon

Network Node

neutron-L3-agent

neutron-*plugin-agent

neutron-DHCP-agent

neutron-metadata-agent

Compute Node

nova-compute

neutron-plugin-agent

Management Network

Data Network

External Network

• Limitation of Neutron network

– Limited visibility of VM traffic

– Limited scalability of network node

Page 3: SKT | ICT R&D | Sangho Shin 2018. 10. 17• Integration with OpenStack –OpenStack neutron •Plugin: modular layer 2 plugin –networking-onos •ONOS L3 plugin •Drivers for LBaaS,

SOSCON 2018SONA (Simplified Overlay Networking Architecture)

• SONA: Overlay Network Management Solution for SDDC

– ONOS based Virtual Network Management solution (support VxLAN, VLAN, FLAT)

– Empowered by SDN controller, a better replacement of neutron, scalable gateway

– Fully compatible with OpenStack (ocata, pike, queens, rocky)

Highlyscalable

Better VM - VM Traffic visibility at Control Plane

Page 4: SKT | ICT R&D | Sangho Shin 2018. 10. 17• Integration with OpenStack –OpenStack neutron •Plugin: modular layer 2 plugin –networking-onos •ONOS L3 plugin •Drivers for LBaaS,

SOSCON 2018

• Integration with OpenStack– OpenStack neutron

• Plugin: modular layer 2 plugin

– networking-onos

• ONOS L3 plugin

• Drivers for LBaaS, FWaaS, etc.

– SONA

• Northbound interacts with networking-onos

– https://github.com/openstack/networking-onos

• Southbound protocol

– OpenFlow: install/uninstall flow rules

– OVSDB: configure OpenvSwitch

» Add/delete virtual port

» Create/delete bridges (e.g., br-int, etc.)

Neutron

ONOS

ML2 Plugin

ONOSMech Driver

ONOS L3/LBaaS/Plugins/Drivers

SONA Northbound

SONA Network/Rule Services

OpenFlow OVSDB

VM VM

ML2 DB

② ③

SONA (Simplified Overlay Networking Architecture)

Page 5: SKT | ICT R&D | Sangho Shin 2018. 10. 17• Integration with OpenStack –OpenStack neutron •Plugin: modular layer 2 plugin –networking-onos •ONOS L3 plugin •Drivers for LBaaS,

SOSCON 2018SONA Features

Direct communication

• Direct East-West Communication

Page 6: SKT | ICT R&D | Sangho Shin 2018. 10. 17• Integration with OpenStack –OpenStack neutron •Plugin: modular layer 2 plugin –networking-onos •ONOS L3 plugin •Drivers for LBaaS,

SOSCON 2018

Scalable Gateway

SONA Features

• Scalable Gateway

Page 7: SKT | ICT R&D | Sangho Shin 2018. 10. 17• Integration with OpenStack –OpenStack neutron •Plugin: modular layer 2 plugin –networking-onos •ONOS L3 plugin •Drivers for LBaaS,

SOSCON 2018SONA Features

• UI based flow tracer

Page 8: SKT | ICT R&D | Sangho Shin 2018. 10. 17• Integration with OpenStack –OpenStack neutron •Plugin: modular layer 2 plugin –networking-onos •ONOS L3 plugin •Drivers for LBaaS,

SOSCON 2018SONA Features

• vFlow Statistics

– Collect VM to VM real-time flow statistic

– Stats collection is realized using OpenFlowstandards protocol (no extra overhead!)

– Seamless integration with monitoring systems through various NBIs

• REST, Kafka, gRPC, influxDB, etc.

– Realized through OpenstackTelemetry app

– No additional software installations are required at OpenStack side

– No additional hardware installations are required at compute/control node

– Open source!

SDN Controller

OpenstackTelemetry …

RESTKafk

agRPC

influxDB

VM VM

OpenFlow

OVS

OVSOVS

OVS

Page 9: SKT | ICT R&D | Sangho Shin 2018. 10. 17• Integration with OpenStack –OpenStack neutron •Plugin: modular layer 2 plugin –networking-onos •ONOS L3 plugin •Drivers for LBaaS,

SOSCON 2018

• vFlow Statistics (Grafana UI)

SONA Features

Page 10: SKT | ICT R&D | Sangho Shin 2018. 10. 17• Integration with OpenStack –OpenStack neutron •Plugin: modular layer 2 plugin –networking-onos •ONOS L3 plugin •Drivers for LBaaS,

SOSCON 2018SONA Features

• vTap

– Mirror VM to VM real-time traffic

– Leverage OVS’s traffic mirroring feature

– Two traffic mirroring schemes

• Port-based: specific to OVS

• Flow-based: uses OpenFlow group table

– Realized through OpenstackTelemetry app

– No additional software installations are required at OpenStack side

– Further improve the mirroring performance by leveraging data plane acceleration technology

– Open source!

OVS

VM VM

eth0

OVS

vDPI

eth0

SDN Controller

OpenstackvTap …

Page 11: SKT | ICT R&D | Sangho Shin 2018. 10. 17• Integration with OpenStack –OpenStack neutron •Plugin: modular layer 2 plugin –networking-onos •ONOS L3 plugin •Drivers for LBaaS,

SOSCON 2018SONA Features

• Smart NIC Gateways

– Replaces network node with Smart NIC

br-int (OVS)

SmartNIC

br-int (OVS)

Page 12: SKT | ICT R&D | Sangho Shin 2018. 10. 17• Integration with OpenStack –OpenStack neutron •Plugin: modular layer 2 plugin –networking-onos •ONOS L3 plugin •Drivers for LBaaS,

SOSCON 2018SONA Features

• Smart NIC Gateways

<Liquid I/O Full Offloading Architecture>

Page 13: SKT | ICT R&D | Sangho Shin 2018. 10. 17• Integration with OpenStack –OpenStack neutron •Plugin: modular layer 2 plugin –networking-onos •ONOS L3 plugin •Drivers for LBaaS,

SOSCON 2018SONA CI/CD

• Continuous Integration (CI)

– Fetch latest SONA source

– Build against stable ONOS

– Run unit test

– Package & deploy SONA

– Run integration test

– Notify the CI result via slack

– Deliver SONA container

https://hub.docker.com/r/opensona/onos-sona-nightly-docker/

JenkinsMachine

ONOS Build &Run Machine

OpenStackControl Node

TempestMachine

OpenStackCompute Node

OpenStackCompute Node

GatewayNode

Page 14: SKT | ICT R&D | Sangho Shin 2018. 10. 17• Integration with OpenStack –OpenStack neutron •Plugin: modular layer 2 plugin –networking-onos •ONOS L3 plugin •Drivers for LBaaS,

SOSCON 2018Deployment using Kubernetes

ONOS ONOS ONOSCluster

manager

OVS switch

SONA helm Chart

OVS helm Chart

OVS DB

ONOS yaml file yaml file

yaml file yaml file

SONA Armada Chart

Page 15: SKT | ICT R&D | Sangho Shin 2018. 10. 17• Integration with OpenStack –OpenStack neutron •Plugin: modular layer 2 plugin –networking-onos •ONOS L3 plugin •Drivers for LBaaS,

SOSCON 2018

schema: armada/Chart/v1

metadata:

schema: metadata/Document/v1

name: sona-chart

data:

……

values:

onos:

node_selector:

key: nodetype

value: control

hostNetwork: true

source:

type: git

location:

https://tde.sktelecom.com/stash/scm/clo

udvim/sona-helm

subpath: sona

reference: master

dependencies: []

Helm chart

SONA images

Armada chart

Deployment using Kubernetes

Page 16: SKT | ICT R&D | Sangho Shin 2018. 10. 17• Integration with OpenStack –OpenStack neutron •Plugin: modular layer 2 plugin –networking-onos •ONOS L3 plugin •Drivers for LBaaS,

SOSCON 2018

Kuryr-kubernetesNeutron

OVS

Kuryr CNI

Pods

VMVMVMContainerContainerContainer

Kubernetes Network Management

• Present

Page 17: SKT | ICT R&D | Sangho Shin 2018. 10. 17• Integration with OpenStack –OpenStack neutron •Plugin: modular layer 2 plugin –networking-onos •ONOS L3 plugin •Drivers for LBaaS,

SOSCON 2018

Neutron

OVS

SONA CNI

Pods

VMVMVMContainerContainerContainer

Kubernetes Network Management

• Ingress• Service

SR-IOV• DPA

• Future

Page 18: SKT | ICT R&D | Sangho Shin 2018. 10. 17• Integration with OpenStack –OpenStack neutron •Plugin: modular layer 2 plugin –networking-onos •ONOS L3 plugin •Drivers for LBaaS,

SOSCON 2018Open Source Contribution

• Open Source Strategy

– 100% open source

– 136 commits were upstreamed in 2018 (2018.01 ~ now)

• https://gerrit.onosproject.org/#/q/project:onos+branch:master+topic:sona

• Helps from Community

– More tests and feedback from community

– Code contributions are always welcomed :)

• Wiki

– https://wiki.onosproject.org/display/ONOS/SONA%3A+DC+Network+Virtualization

• Slack Channel

– #sonaproject @ onosproject.slack.com

Page 19: SKT | ICT R&D | Sangho Shin 2018. 10. 17• Integration with OpenStack –OpenStack neutron •Plugin: modular layer 2 plugin –networking-onos •ONOS L3 plugin •Drivers for LBaaS,

SOSCON 2018Helion Openstack and SONA

• SONA is available on Helion/SUSE OpenStack COMMERCIALLY

Production ready Helion Openstack

Deployed to many customers

Stable HPE HardwareStable performance with hardware support

SKT driven SDN controller

Years of Telco Experience melted in to SONA

Proven Management and Life Cycle

HOS supporting all types of MNG workflow

SONA

SDN

Controller

Helion

Openstack

Triangle of Solutions

SUSE

Linux

HPE Hardware

< referenced from Helion/SONA materials from HPE >

Page 20: SKT | ICT R&D | Sangho Shin 2018. 10. 17• Integration with OpenStack –OpenStack neutron •Plugin: modular layer 2 plugin –networking-onos •ONOS L3 plugin •Drivers for LBaaS,

SOSCON 2018SKT’s Use Case

• T-MANO & SONA

Page 21: SKT | ICT R&D | Sangho Shin 2018. 10. 17• Integration with OpenStack –OpenStack neutron •Plugin: modular layer 2 plugin –networking-onos •ONOS L3 plugin •Drivers for LBaaS,

SOSCON 2018Conclusion

• SONA (Simplified Overlay Networking Architecture)

– SDN based OpenStack & Kubernetes Network Management Solution

– Direct East-West Communication

– Scalable & Smart NIC Gateways

– vStatistics

– vTap

– CI/CD pipeline

– Deployment using Armada & Helm Chart

– Now available on Helion/SUSE OpenStack commercially

– But, 100% Open Source

Page 22: SKT | ICT R&D | Sangho Shin 2018. 10. 17• Integration with OpenStack –OpenStack neutron •Plugin: modular layer 2 plugin –networking-onos •ONOS L3 plugin •Drivers for LBaaS,

SOSCON 2018SAMSUNG OPEN SOURCE CONFERENCE 2018

THANK YOU