Author Biography
Ruben S. Montero, Ph.D, is Chief Architect of the OpenNebula Project and CTO & co-founder at C12G Labs. He has strong expertise in resource provisioning models for distributed systems and cloud computing, in particular resource management and scheduling, distributed management of virtual machines, and inter-operation of cloud infrastructures. Montero holds a Ph.D in Computer Science (UCM) and is also an Associated Professor at UCM.
2. OpenNebula Network Model: View
Hyper. Hyper. Hyper. Hyper.
Virtual Network
VM VM VM VM
Datacenter Network
● Leaf-Spine switched or routed
backbone
● Not controlled by OpenNebula
● Usually just few TOR switches
Virtual switches
Virtual Network
3. OpenNebula Network Model: “built-in SDN”
Provide a central point to define, consume and set up Virtual
Networks for Virtual Machines
XML-RPC API
OpenNebula daemon
Infrastructure Drivers
Northbound Interface
● Virtual Network abstract management
● Lease addresses to VMs
● Reserve addresses for users or groups
Network
Southbound Interface
● Uniform interface to interact with network
elements
● Specialized for VM Networking
4. Northbound Interface
Logical Attributes
Addresses Space (multiple, disjoint ranges)
● IPv4
● IPv6 (Global & ULA)
● Ethernet - MAC addresses
Security Groups
● Managed as a separate entity
● Inbound & Outbound, TCP/UDP/ICMP
Custom Tags
Configuration & Physical Attributes
● Network specific (e.g. BRIDGE, VLAN_ID)
● VM Context (e.g. DNS, GATEWAY)
VirtualNetworkDefinition
5. Southbound Interface
Hypervisor
NFV - app
Hypervisor
Network device
VM VM VM
VM Network
Overlays
Physical Networks
Network dev
Cluster Network - L2
Virtual Network Green (any)
Network - L2
DataCenter Network - L3
Virtual Network Blue (VXLAN or NFV)
OpenNebula daemon
Infrastructure Drivers
Network stack
Setup networking for VMs interfacing with network & hypervisors
Hypervisor
Network device
VM VM VM
6. Southbound Interface
Three-phase setup
● pre, post and clean right before, after VM boot and shutdown
● It considers live-migrations
OpenNebula Network Drivers
OpenvSwtich VMware DSwtich
Linux Bridge
802.1Q Flat
Security Group
iptables rules
VXLAN ebtables Flat VLAN Flat Dynamic
NFV Virtual Router*
* Work in progress
7. VirtualMachine Interface
Virtual Machine Configuration (L3 - L4 - L5)
● Context CD-ROM ISO with network information
● Stock guest packages include support for IP, GATEWAY, DNS,
NETWORK_MASK but easily extensible
● NFV not imposed nor required (e.g. DHCP server per net) but
supported.
Require as less as possible, accommodate any topology
8. ● Approach: Virtualize some network functions by packaging
into an appliance
● Ease & flexible management of your network
○ Hugepages*,
○ NUMA scheduling*,
○ PCI PF/SR-IOV co-allocation*
* Supported only to some extent in 4.14
● As part of a Virtual Network to include more functionality
○ Virtual Router removed from 4.14 to re-architect it.
NFV Management
9. Virtual Router: Cross-site Networks
Virtual RouterVirtual Router
VM
Virtual Network (VLAN)Virtual Network (VLAN)
VM VM
Cross-site
Network
VM
Ethernet over IP (GRETAP) + IPSec
● Improve Virtual Router Interface & Sunstone Integration
● Link multiple virtual networks (L3/L2)
● Support for hybrid configurations
● Support for L3 inter-DC
10. Virtual Router: SDN integration
SSH OpenFlow
ovswtich / Linux bridge
link
(to other switches)
VXLAN, VLAN, Ether
virtual
appliance
SDN for the Cross-site network
● Flow control (ReactiveFlow app)
● ARP optimizations
● Flow re-balancing
OpenNebula drivers
11. OpenNebula Network Model: View
Hyper. Hyper. Hyper. Hyper.
Virtual Network
VM VM VM VM
Virtual Network
Network backbone and Internet
VM VM
Compute Fabric
SDN for vSwitches
Two-level SDN
● Hypervisor for VLAN set up and management
● Interconnection and management of VLAN segments
Virtual switch (or routed)