OpenStack Workshop:

Networking and Storage

Affan Syed
Talk outline
Neutron Architecture in depth

Storage Solutions:
Swift
Cinder

2
N is for Networking
Neutron: Managing networks
API to create virtual networks
Software defined!

Modular and multi-tenant arch (nova-network wasn’t)

API=service, implementation=vendor
Plugins make it technology agnostic

IPAM, load balancer, VPN …

Services provided by Network node
Neutron concepts
Network An isolated L2 network segment (similar to a VLAN) for a shared L2 domain

A block of IP addresses and associated configuration state, like default GW and DHCP.
Subnet This is also known as the native IPAM (IP Address Management) provided by the
networking service for both tenant and provider networks.

A port is a connection point for attaching a single device, such as the NIC of a virtual
Port server, to a virtual network. The port also describes the associated network
configuration, such as the MAC and IP addresses to be used on that port.
Provider Network OpenStack administrator creates provider networks. These networks map to existing
physical networks in the data center.
Security Groups A security group acts as a virtual firewall for your compute instances to control inbound
and outbound traffic. Security groups act at the port level, not the subnet level.
Therefore, each port in a subnet could be assigned to a different set of security groups.

http://docs.openstack.org/networking-guide/intro_os_networking_overview.htmld 5
What can users do with Neutron?

Interconnect networks
with routers

Create multi-tenant
networks with private IP
and overlapping space

Provide external
connectivity (e.g.
Internet) to workloads
Connect workloads to
each network
Networking Architecture (reference architecture)

http://docs.openstack.org/security-guide/networking/architecture.html

7
Neutron Plugin Architecture (Modularity and Complexity!)

Plugins

Core (L2) Service Plugins

Monolithic ML2 LBaaS FWaaS

Driver1 Driver2 Driver3

8
Plugin is …. Everything (and it matters!)
Feature set
Scale
Performance
High Availability
Manageability
Network topology

Source: Nir Yechiel, “OpenStack Networking with Neutron: What Plugin Should I Deploy?”
9
Physical Service Placement (generic)
Controller Node

Neutron Server

Core APIs API Extensions

Plugins

SDN Service
(e.g. PLUMgrid Directors)

Network Node
Neutron (optional)
agent
Compute Nodes

Neutron Neutron
agent agent
Nova computeNova-compute
Internet VM VM VM VM

10 10
Physical Service placement (Reference)

Each network has different

accessibility requirements!

From http://docs.openstack.org/security-guide/networking/architecture.html
…focuses on a standard architecture that includes a cloud controller host, a network host, and a set of compute hypervisors for running VMs. 11
Swift: Openstack’s Object
Storage
What is Swift?

Object Store But you can't:

Highly Scalable mount it
Durable have file hierarchies (?)
Highly Concurrent, Store objects sized > 5GiB
eventually consistent (WIP)
Open source
Runs on commodity
hardware 17
Swift API

18
Swift Processes
Proxy service (Front-end proxy)

Back End (Back end)

Account service
Container service
Object service

Consistency service (Auditors and Replicators)

19
Swift naming hierarchy
https://swift.example.com/v1/account/container/object

Source: https://swiftstack.com/openstack-swift/

20
Swift Architecture

Frontend

Backend

Source: 6th meetup VietOpenstack

Swift Architecture

Rings

Source: 6th meetup VietOpenstack

Zones

Source: 6th meetup VietOpenstack

Write

Source: 6th meetup VietOpenstack

Read

Source: 6th meetup VietOpenstack

Cinder: Block Storage
Storage services: Comparison

docs.openstack.org
27
A different storage view
Block storage = your own volume/disks

Only and API with several reference implementation

Much like a Remote File System (DFS)

implementation thus use NFS, Ceph, CIFS
Cinder
Volumes attach to VM instances
Boot from volume

Volumes have a life-cycle independent of VM

instances

29
Architectural view (HP hellion specific)

Default LVM, can be Ceph etc.

https://docs.hpcloud.com/commercial/GA1/1.1commercial.-vsa-overview.html 30
Cinder workflow (reference architecture)

http://www.slideshare.net/avishaytraeger/cinder-havana

31
 We are hiring!

Questions?
https://twitter.com/openstack_isb

http://www.pta.gov.pk/openstackweb/index.html

https://www.facebook.com/OpenStackPakistan/

32