Enterprise - Universal Cloud Network Architecture

Building an Openstack
Arista Networks and Cyso
Michael Amstelveen, Consulting Engineer (EMEA)
Tjebbe de Winter, Technical Director at Cyso
A Brief History of Network Hardware and Software
Custom
monolithic
embed
Modified
BSD, QNX or
Linux kernel
base
“The switch
is just a
Linux box”
EOS = Linux
Why Openstack and Arista
Contribute
Differentiate
Enable
We are very focused on
Neutron, specifically the
ML2 effort, where we
helped with the basic
infrastructure. One or our
developer now co-chair of
the ML2 meeting.
Provide end-to-end
tenant network visibility
and provisioning across
virtual and physical
infrastructure for the
highest performance
VLAN and VXLAN
fabrics
Automatically provisions the
physical network in
response
to tenant configuration
Our CLIs present the single
pane of glass view for the
virtual resource overlaid on
physical resources.
Who is Cyso ?
Who is Cyso ?
Hosting provider voor de zakelijke markt
ISO 27001, 1200+ servers, sinds 1997, 35 man
Kennis en support gedreven
Maatwerk IT dienstverlening
Managed Hosting diensten
Via browser of API geen virtual Desktop
• Cloud Infra
• Cloud Apps
• Security
• Performance Hosting
Waarom Openstack ?
Open framework
Grote markt adoptie
Full featured, serieuze oplossing voor public en private clouds
Kan concurrentie aan met commerciële oplossingen
Als je mee kan in de openstack trein dan profiteer je van enorme hoe
veelheid energie die in het project gestoken wordt.
Waarom Openstack ?
Waarom Openstack ?
Katalysator / inspirator voor CM & Orchestration
“Puppet Chef”
Systeembeheer 2.0 met
Puppet,
Chef,
Ansible,
Salt,
mCollective,
Rundeck
Foreman
…
Openstack IaaS uitdagingen
IaaS == self managed
IaaS == different use, different requirements
IaaS == behoefte aan controle, security en stabiliteit
Openstack IaaS uitdagingen
Controle & Security
1. Keep-up with Openstack
2. Visibility: klant, netwerk, VM/Instance
3. Automatic provisioning
Controle & Security: Keep up
Hoe spring ik op de trein en val ik er niet vanaf ?
Controle & Security: Keep up
Openstack == great
Openstack gaat snel
Openstack == kennis intensief
Openstack == lots of bugs
OTA testing
Github
Gitflow
vEOS virtual Arista
Controle & Security: Visibility & traceability
“Weet wat er leeft”
Op Openstack niveau
Op Netwerk(!) niveau
Geen SDN Black Box
Optie voor Quarantaine
bij Abuse
Controle & Security: Provisioning
Makkelijk en snel testen
Snel groeien
Slim en snel updaten
Betrouwbare setup & config
CM + Orchestration
SDN met Neutron + hardware integration
SDN heeft ook automatic provisioning nodig
Openstack IaaS uitdagingen
Stabiliteit
1.
2.
3.
4.
Snel netwerk, storage en compute
Betrouwbaar
Schaalbaar
OTA testing
Stabiliteit
Snel netwerk
Hitless in service updates
Built to tolerate failure
OTA testing
Laatste sofware versies
Waarom Arista
Waarom Arista
“The future is clouded”, Openstack is disruptive
• Flexibiliteit
• Runs on Linux (puppet!)
• Enthusiasts team
• Direct support
• Very robust and fast switching fabric
• vEOS for testing
• Traceability & visibility met Arista ML2 plugin
• Network provisioning met Arista ML2 plugin en Puppet support
• Simple en transparante setup met MLAG.
• Hitless software updates.
Openstack stack
Dell R720xd storage servers running Ubunty with CEPH
Dell R620 compute nodes running Ubuntu with KVM
Local SSD tier
SAN SSD tier
SAN SAS tier
No SATA tier
Redundant 10G network (20G per node)
Redundant Arista setup with MLAG
3 Neutron nodes with Arista ML2 driver
Vragen ?

Download Report