This session will focus on the Network capabilities of OpenStack (Neutron). A presentation of all the current built-in network services will be offered as well as a preview of the coming ones. The strengths and limitations of Neutron will also be presented and how NSX Neutron plugin makes it perfect for large scale cloud.

1. Under the Hood: Network Virtualization with
OpenStack Neutron and VMware NSX
+
+
Dimitri Desmidt - NSX Senior Technical Product Manager (ddesmidt@vmware.com)
Gary Kotton – VMware Staff Engineer – OpenStack (gkotton@vmware.com)

2. Agenda
‣
‣
Comprehensive Demo
‣
Slide 2
VMware on OpenStack
Q&A
2

3. VMware Philosophy on OpenStack
OpenStack
The Foundation for IT: Software Defined Datacenter
•
•
Virtual Workspace
Manage access to services, applications and data for any
device
Private
Clouds
•
An open framework for building clouds
Assembles a solution from underlying
Compute, Network, Storage components.
Can be managed and automated using
many solutions.
Public Clouds
Hybrid Cloud
Seamlessly extend your data center to the public cloud
Software-Defined Data Center
Customer Choice
•
•
VMware supports Customer choice.
Our support for OpenStack enables choice
Virtualize the entire data center
Management and Automation
Storage and
Availability
Compute
Network and
Security
An Opportunity for VMware SDDC
•
•
3
VMware SDDC provides best-in-class
Compute, Network, Storage & management
solutions for OpenStack.
We view OpenStack as an opportunity for
VMware SDDC portfolio.

4. VMware Technologies and OpenStack
Tenant-Side
Horizon
( Web Portal )
Nova
(Compute)
vSphere &
vCenter
CLI Tools & Scripts
(DevOps Automation)
Neutron
(Network)
Cinder
(Block Storage)
NSX
vSAN
Cloud Operator Tools
(vCenter, vCOPs, Log Insight etc.)
OpenStack or 3rd Party Component
VMware Component
4
vCAC
Application Director
Glance
(Image Store)
vCenter
(Image Catalog)
Third Party Operator tools
(Puppet/Chef, scripts, nagios...)
Operator-Side
Benefits of
OpenStack API &
Ecosystem
Choice of best-inclass virtualization &
management
technologies

5. Agenda
‣
‣
Comprehensive Demo
‣
Slide 5
VMware on OpenStack
Q&A
5

6. Demo 1
• Demonstrate:
• 2 Tiers-Architecture on a mix of ESXi and KVM hypervisors
Physical View
.1
Any L2/L3 fabric
(no VLAN per tenant)
ESXi Cluster
KVM
NSX-L2/L3
GW Cluster
"OpenStack"
(keystone/glance/
neutron/horizon/etc)
+ NSX Plugin
Management
NSX Controller
Cluster
6

7. Demo 1
• Demonstrate:
• 2 Tiers-Architecture on a mix of ESXi and KVM hypervisors
Physical View
Logical View
.1
.1
Any L2/L3 fabric
(no VLAN per tenant)
ESXi Cluster
KVM
VM VM
VM VM
20.20.20.0/24
NSX-L2/L3
GW Cluster
"OpenStack"
(keystone/glance/
neutron/horizon/etc)
+ NSX Plugin
Logical
Space
LS-1A
VM
LS-1B
VM
VM
VM
Management
NSX Controller
Cluster
7

8. Demo 1
• Demonstrate:
• 2 Tiers-Architecture on a mix of ESXi and KVM hypervisors
• Neutron + NSX Plugin Pros:
• Multi-tier architecture
Not available via "nova-network".
8

9. Demo 1
• Demonstrate:
• 2 Tiers-Architecture on a mix of ESXi and KVM hypervisors
• Neutron + NSX Plugin Pros:
• Multi-tier architecture
• No change on the physical fabric
No pre-provisioning of VLAN on the fabric. Actually no VLAN used at all!
Not available via "nova-network".
VM
VM
Hypervisor
VM
VM
Hypervisor1-IP@ 
Hypervisor2-IP@
[STT VM1-IP@  VM2-IP@]
VM
VM
VM
VM
VM
VM
VM1-IP@ 
VM2-IP@
VM
Any L2/L3
Fabric
9

10. Demo 1
• Demonstrate:
• 2 Tiers-Architecture on a mix of ESXi and KVM hypervisors
• Neutron + NSX Plugin Pros:
• Multi-tier architecture
• No change on the physical fabric
• Distributed Routing
A world without NSX
Web
App
Hypervisor
DB
Web
Hypervisor
x86 Server
DC Fabric
Neutron Router
on Neutron
Server
10

11. Demo 1
• Demonstrate:
• 2 Tiers-Architecture on a mix of ESXi and KVM hypervisors
• Neutron + NSX Plugin Pros:
• Multi-tier architecture
• No change on the physical fabric
• Distributed Routing
Not available via "nova-network" nor "Neutron"
A world with NSX
Web
App
Hypervisor
DB
Web
Hypervisor
x86 Server
DC Fabric
NSX "North/South" Router
11

12. Demo 1
• Demonstrate:
• 2 Tiers-Architecture on a mix of ESXi and KVM hypervisors
• Neutron + NSX Plugin Pros:
•
•
•
•
Multi-tier architecture
No change on the physical fabric
Distributed Routing
Very high scale
•
In size of the cloud (thanks to the distribution "active/active" of the Control elements)
Per NSX Domain: 60k VMs, 15k tenants, 1k hypervisors (and improved in each release)
•
In throughput (thanks to the encapsulation off-loaded on the NIC)
Per hypervisor: 20Gbps (with 2x10Gbps NIC bonding)
Per NVP Gateway: 10Gbps++ (per NVP-GW and up to 10x NVP-GW are supported in a Cluster)
Not available via "nova-network" nor "Neutron".
12

13. Demo 2
• Demonstrate:
• Management / Troubleshooting
• Port Connection Tool
• VMotion / DRS
• TraceFlow
• Port-Mirroring
Physical View
Logical View
.1
.1
Any L2/L3 fabric
(no VLAN per tenant)
ESXi Cluster
KVM
VM VM
VM VM
20.20.20.0/24
NSX-L2/L3
GW Cluster
"OpenStack"
(keystone/glance/
neutron/horizon/etc)
+ NSX Plugin
Logical
Space
LS-1A
VM
LS-1B
VM
VM
VM
Management
NSX Controller
Cluster
13

14. Demo 2
• Demonstrate:
• Management / Troubleshooting
• Port Connection Tool
• VMotion
• TraceFlow
• Port-Mirroring
• Neutron + NSX Plugin Pros:
• Production tools to manage and support an OpenStack in production efficiently
Not available via "nova-network" nor "Neutron".
14

15. Demo 3
• Demonstrate:
• L2 Physical-Logical
Physical View
Logical View
.1
VLAN244
.1
Any L2/L3 fabric
(no VLAN per tenant)
ESXi Cluster
KVM
VM VM
VM VM
20.20.20.0/24
NSX-L2/L3
GW Cluster
"OpenStack"
(keystone/glance/
neutron/horizon/etc)
+ NSX Plugin
Logical
Space
LS-1A
VM
LS-1B
VM
VM
VLAN244
VM
Management
NSX Controller
Cluster
15

16. Demo 3
• Demonstrate:
• L2 Physical-Logical
• Neutron + NSX Plugin Pros:
• More Network Use Cases supported
Physical to Virtual
Remote customer on-boarding
Not available via "nova-network" nor "Neutron".
16

17. Demo 4
• Demonstrate:
• Network and Security service
• Load-Balancing
• Firewalling
• Static Routing
Physical View
• HA
• Failure of NVP elements
(Controller Node, NVP-GW Node)
• Failure of Hypervisor
Logical View
.1
.1
Any L2/L3 fabric
(no VLAN per tenant)
ESXi Cluster
KVM
VM VM
VM VM
20.20.20.0/24
NSX-L2/L3
GW Cluster
"OpenStack"
(keystone/glance/
neutron/horizon/etc)
+ NSX Plugin
Logical
Space
LS-1A
VM
LS-1B
VM
VM
VM
Management
NSX Controller
Cluster
17

18. Demo 4
• Demonstrate:
• Network and Security service
• Load-Balancing
• Firewalling
• Static Routing
• HA
• Failure of NVP elements
(Controller Node, NVP-GW Node)
• Failure of Hypervisor
• Neutron + NSX Plugin Pros:
• Rich network services
Not available via "nova-network" nor "Neutron".
• Build-in HA
18

19. Agenda
‣
Intro – VMware philosophy on OpenStack (5 minutes)
‣
What about a comprehensive demo (20 minutes)
(instead of endless slides)
‣
Slide 19
Q&A (5 minutes)
19

20. Select OpenStack & VMware NSX customers
Public Clouds
Slide 20
Enterprise Private Clouds
20

21. How to test?
‣
Hands on lab available:
http://labs.hol.vmware.com/HOL/#lab/698
Slide 21
21

22. Agenda
‣
‣
Comprehensive Demo
‣
Slide 22
VMware on OpenStack
Q&A
22