More Related Content Similar to Fits Like Lego - 5 Ways to Deploy Guest Networking over OpenStack Neutron (20) Fits Like Lego - 5 Ways to Deploy Guest Networking over OpenStack Neutron1. ® Copyright Stratoscale www.stratoscale.com @stratoscale +1 877 420 3244
Five ways to deploy
Guest Networks over
OpenStack Neutron
Liaz Kamper, Stratoscale
June 2016
Fits like LEGO
1
2. ® Copyright Stratoscale www.stratoscale.com @stratoscale +1 877 420 3244® Copyright Stratoscale www.stratoscale.com @stratoscale +1 877 420 3244
Who are we?
3. ® Copyright Stratoscale www.stratoscale.com @stratoscale +1 877 420 3244® Copyright Stratoscale www.stratoscale.com @stratoscale +1 877 420 3244
Who should attend?
3
Architects Developers Fun Geeks
4. ® Copyright Stratoscale www.stratoscale.com @stratoscale +1 877 420 3244® Copyright Stratoscale www.stratoscale.com @stratoscale +1 877 420 3244
4
Godtfred Kirk
Christiansen
5. ® Copyright Stratoscale www.stratoscale.com @stratoscale +1 877 420 3244® Copyright Stratoscale www.stratoscale.com @stratoscale +1 877 420 3244
Neutron Building Bricks
5
Layer 2 bricks Layer 3 bricks
Network Port External Network Subnet Virtual Router
Extension
bricks
6. ® Copyright Stratoscale www.stratoscale.com @stratoscale +1 877 420 3244® Copyright Stratoscale www.stratoscale.com @stratoscale +1 877 420 3244
6Administrator / Single Tenant Multi-Tenancy
Deployment use cases
7. ® Copyright Stratoscale www.stratoscale.com @stratoscale +1 877 420 3244® Copyright Stratoscale www.stratoscale.com @stratoscale +1 877 420 3244
Single Tenant Direct Attach
Router
& DHCP
Fast &
Easy
CONSIDER
CAREFULLY
Neutron not
aware to L3
No Security
group
8. ® Copyright Stratoscale www.stratoscale.com @stratoscale +1 877 420 3244® Copyright Stratoscale www.stratoscale.com @stratoscale +1 877 420 3244
Single Tenant Isolated VLAN
8
External
Router
Simple L2
connectivity
Local Subnet
control
Security
groups
Pros
9. ® Copyright Stratoscale www.stratoscale.com @stratoscale +1 877 420 3244® Copyright Stratoscale www.stratoscale.com @stratoscale +1 877 420 3244
Single Tenant Isolated VLAN
Routable
subnet
No L3 services
by Neutron
External
Router
Cons
10. ® Copyright Stratoscale www.stratoscale.com @stratoscale +1 877 420 3244® Copyright Stratoscale www.stratoscale.com @stratoscale +1 877 420 3244
Time to wake up…
THIS IS THE IMPORTANT PART
11. ® Copyright Stratoscale www.stratoscale.com @stratoscale +1 877 420 3244® Copyright Stratoscale www.stratoscale.com @stratoscale +1 877 420 3244
Layer3 Single Tenant Isolation
Public IP Save IP
Resources
External
Router
Virtual
Router
L3 Services Net Security
Internal External
12. ® Copyright Stratoscale www.stratoscale.com @stratoscale +1 877 420 3244® Copyright Stratoscale www.stratoscale.com @stratoscale +1 877 420 3244
12
Multi-Tenancy
13. ® Copyright Stratoscale www.stratoscale.com @stratoscale +1 877 420 3244® Copyright Stratoscale www.stratoscale.com @stratoscale +1 877 420 3244
Self Service Multi-Tenant
13
Virtual
Router
Virtual
Router
External
Router
Tenant A
Tenant B
14. ® Copyright Stratoscale www.stratoscale.com @stratoscale +1 877 420 3244® Copyright Stratoscale www.stratoscale.com @stratoscale +1 877 420 3244
Self Service Multi-Tenant
14
Administrator
allocated
resources
Tenants self
service
Enforce tenants
isolation and
security
15. ® Copyright Stratoscale www.stratoscale.com @stratoscale +1 877 420 3244® Copyright Stratoscale www.stratoscale.com @stratoscale +1 877 420 3244
Administrator Control Multi-Tenant
15
Virtual
Router
External
Router
Tenant A
Tenant B
Administrator
controls
resources
16. ® Copyright Stratoscale www.stratoscale.com @stratoscale +1 877 420 3244® Copyright Stratoscale www.stratoscale.com @stratoscale +1 877 420 3244
How many ways to connect 6 LEGO bricks?…
Soren Eilers
Danish Math Professor