6. ML2 (Modular Layer 2)
• New reference plugin
• Handles numerous of L2 technologies: Flat, VLAN,
•
•
VXLAN, GRE
Works with existing drivers: Linux Bridge, Open-vSwitch,
Arista, Cisco, Hyper-V
New mechanism: L2 population (partial-mesh and
forwarding table population)
11. FWaaS (Firewall as a Service)
• Service plugin + Agent + Drivers
• Concept: IPtables rules on virtual routers
• Drivers: IPtables or vArmour
• Complements Security Groups
12. VPNaaS (virtual private network)
• Scope: Layer 3 Site-to-site (IPsec)
• Experimental in Havana
• Only preshared keys, no certificates
• OpenSwan as default driver
14. Metering
• Service plugin + Agent + Drivers
• Concept: IPtables rules on virtual routers
• Drivers: IPtables
• Collects traffic counters with labels and sends to Ceilometer
• Next steps: use metering for Layer 3 scheduling
16. L3 high availability
• Bring high availability on virtual routers
• Delete SPOF in L3 Agent
• Allow routers to be scheduled on two L3 Agents
• Master / Slave model
• VIP managed by Keepalived
• TCP sessions managed by conntrackd
• Add new L3 schedulers
18. L3 high availability
With...
Without...
VM
L2 Agent
L3 Agent
VM
VM
BR-INT
BR-INT
VROUTER
VROUTER
BR-EX
Internet
VM
VM lost
connectivity
VROUTER
BR-EX
Internet
2 L3 Agents
External
connectivity
is backuped
19.
20. L3 on edge? (proposal)
• Move floating IP on compute nodes
• Improve North-South traffic
• VMs without floating IP continue to use L3 agent to
•
reach external networks
VMs with floating IP reach external network on the
compute edge.
21.
22. Havana follow-up
• VPNaaS: SSL support with OpenVPN driver
• VPNaaS: Layer 2 private networks (L2TP, MPLS)
• LBaaS: new drivers (vendors)
• Metering: improve API to get traffic counters
23. Icehouse: new puppies
• L2 driver for OpenDaylight
• Framework for Advanced Services in Virtual Machines
• Neutron server is multi-workers
• More Tempest coverage (QA)
• L3 scheduling improvements