Click here to load reader

Apache CloudStack - Modelos de Redes e SDN

  • View
    313

  • Download
    0

Embed Size (px)

Text of Apache CloudStack - Modelos de Redes e SDN

CloudStack 4.0 Training - Example Content

Apache CloudStackModelos de Redes e SDNMarcelo Lima

1CloudStack Bootcamp 4.3

Sobre ...

Marcelo Lima [email protected]

Arquiteto de Cloud & Data Center da ShapeBlue BrasilEspecializado em...Design & Building de Clouds baseadas em Apache CloudStack / Citrix CloudPlatformInfraestruturas de Data CenterAutomao de InfraestruturaAmbientes de alta disponibilidade e escalabilidade

CertificaesCitrix Certified Professional Networking (CCP-N)F5 System Engineer LTM/GTM/ASMCisco Certified Internetwork Expert Data Center (CCIE-DC Written)Cisco Certified Network Professional Data Center (CCNP-DC)Cisco Certified Network Associate Data Center (CCNA-DC)Cisco Data Center Unified Computing Support SpecialistCisco Data Center Unified Computing Design SpecialistCisco Data Center Unified Fabric Support SpecialistCisco Data Center Unified Fabric Design Specialist

Copyright ShapeBlue 2015. All rights reserved

Copyright ShapeBlue 2012. All rights reserved

2CloudStack Bootcamp 4.3

Sobre a ShapeBlue

Somos um time de arquitetos e engenheiros especialistas em construo de infraestruturas para nuvens IaaS tanto pblicas quanto privadas.Somos lderes globais em consultoria e integrao independente de Apache CloudStack e Citrix CloudPlatformCopyright ShapeBlue 2015. All rights reserved

Copyright ShapeBlue 2012. All rights reserved

3CloudStack Bootcamp 4.3

Sobre a ShapeBlueCopyright ShapeBlue 2015. All rights reserved

Copyright ShapeBlue 2012. All rights reserved

4CloudStack Bootcamp 4.3

Ementa da apresentao

O que o Apache CloudStack?Tipos de redesBsicaAvanada com Grupos de SeguranaAvanada (Compartilhada, Isolada e VPC)SDN no Apache CloudStack

Copyright ShapeBlue 2015. All rights reserved

Copyright ShapeBlue 2012. All rights reserved

5CloudStack Bootcamp 4.3

O que o Apache CloudStack?

Copyright ShapeBlue 2015. All rights reserved

Copyright ShapeBlue 2012. All rights reserved

Plataforma de orquestrao de infraestrutura, multiusurio e segura (multi-tenant)Plataforma confivel para entrega de Nuvem IaaSAgnstico quanto ao hypervisor, ou seja, independente do software de virtualizao utilizadoEscalvel, flexvel, seguro e abertoCdigo aberto, padres abertosImplementao privada (no prprio Data Center) ou como uma soluo hospedadaO que o CloudStackCopyright ShapeBlue 2015. All rights reserved

Copyright ShapeBlue 2012. All rights reserved

7CloudStack Bootcamp 4.3

Plataforma aberta flexvel

Compute

Tipo de redeIsolamentoFirewallSLB/GSLBSDNRede

Disco localiSCSIFC / FCoENFSSwiftStorageStorage PrimrioStorage SecundrioVPNS3XenServerVmware(vCenter)KVMLXCXen ProjectBare metal(IPMI)Hyper-VCopyright ShapeBlue 2015. All rights reservedCIFS/SMB(Hyper-V)NFSCIFS/SMB(Hyper-V)CEPH(KVM)

Copyright ShapeBlue 2012. All rights reserved

8CloudStack Bootcamp 4.3

Um appliance fsico ou virtual que fornea servios de rede para o CloudStack, como por exemplo:Provedor de Servios de RedeVirtual RouterVPC Virtual RouterInternal LBVMCitrix NetScalerF5 BigIP - LTMJuniper SRX FirewallPalo AltoCisco VNMC/ASA 1000vMidoNetBigSwitch VnsNuage VSPVMware NSXJuniper ContrailOvs VXLANOpenDaylight (experimental)Copyright ShapeBlue 2015. All rights reserved

Copyright ShapeBlue 2012. All rights reserved

Virtual RouterVPC Virtual RouterInternal Load Balancer VMCitrix NetScalerF5 Load BalancerJuniper SRX FirewallNicira Network Virtualization PlatformMidokura MidonetBigSwitch Virtual Network SegmentsCisco Virtual Network Management Center

9CloudStack Bootcamp 4.3

Tipos de rede no CloudStack

Copyright ShapeBlue 2015. All rights reserved

Copyright ShapeBlue 2012. All rights reserved

ZonasZona Bsica Compartilhada com Grupos de SeguranaZona Avanada Grupos de SeguranaZona Avanada Compartilhada, Isolada, VPCTipos de rede no CloudStack

Copyright ShapeBlue 2015. All rights reserved

Copyright ShapeBlue 2012. All rights reserved

A Zone can be either Basic OR Advanced

11CloudStack Bootcamp 4.3

Zona Bsica Compartilhada com Grupos de SeguranaFornece uma nica rede onde o isolamento dos hspedes pode ser fornecido atravs da camada 3 (IP) utilizando grupos de segurana (filtragem por IP de origem)Uma nica rede FlatZona Bsica

Copyright ShapeBlue 2015. All rights reserved

Copyright ShapeBlue 2012. All rights reserved

A Zone can be either Basic OR Advanced

12CloudStack Bootcamp 4.3

Rede Compartilhada Zona BsicaVMVMwww

Copyright ShapeBlue 2015. All rights reserved

VMVMVM

VR

Copyright ShapeBlue 2012. All rights reserved

Traffic between VMs within an Account, and their Virtual Router, Physical Load Balancer or Physical Firewall

13CloudStack Bootcamp 4.3

Zona Avanada Compartilhada com Grupo de SeguranaSemelhante a zona Bsica porm fornece mais de rede onde o isolamento dos hspedes pode ser fornecido atravs da camada 3 (IP) utilizando grupos de segurana (filtragem por IP de origem)Mais de uma rede FlatZona Avanada com SG

Copyright ShapeBlue 2015. All rights reserved

Copyright ShapeBlue 2012. All rights reserved

A Zone can be either Basic OR Advanced

14CloudStack Bootcamp 4.3

Zona Avanada com SGVRVMVMwwwVRVMVMVRVMVM

Copyright ShapeBlue 2015. All rights reserved

Copyright ShapeBlue 2012. All rights reserved

Traffic between VMs within an Account, and their Virtual Router, Physical Load Balancer or Physical Firewall

15CloudStack Bootcamp 4.3

Zona Avanada Compartilhada, Isolada ou VPCEsse modelo de rede fornece maior flexibilidade na definio de redes Guest e fornece ofertas/servios de rede personalizadas, tais como firewall, VPN, Load Balancer e recursos de VPC. O isolamento dos Guests realizado atravs da camada-2 (Ethernet) usando VLANs, por exemplo, VLANs ou SDN.

Zona Avanada

Copyright ShapeBlue 2015. All rights reserved

Copyright ShapeBlue 2012. All rights reserved

A Zone can be either Basic OR Advanced

16CloudStack Bootcamp 4.3

Rede Guest Compartilhada Zona AvanadawwwVRVMVMLayer3VRVMVMVRVMVMShared 01Shared 02Shared 03

Copyright ShapeBlue 2015. All rights reserved

Copyright ShapeBlue 2012. All rights reserved

Traffic between VMs within an Account, and their Virtual Router, Physical Load Balancer or Physical Firewall

17CloudStack Bootcamp 4.3

Rede Guest Isolada Zona AvanadaVirtual RouterVMVMVMVirtual RouterVMVMVMwwwVirtual RouterVMVMVMIsolated 01Isolated 02Isolated 03

Copyright ShapeBlue 2015. All rights reserved

Copyright ShapeBlue 2012. All rights reserved

Traffic between VMs within an Account, and their Virtual Router, Physical Load Balancer or Physical Firewall

18CloudStack Bootcamp 4.3

Rede VPC Virtual Private Cloud Zona AvanadaVirtual RouterwwwLBVMVMVMVMVMVMVMVMCamada WebCamada AppCamada DB

Copyright ShapeBlue 2015. All rights reservedLBVM

Copyright ShapeBlue 2012. All rights reserved

Traffic between VMs within an Account, and their Virtual Router, Physical Load Balancer or Physical Firewall

19CloudStack Bootcamp 4.3

SDN no CloudStack

Copyright ShapeBlue 2015. All rights reserved

Copyright ShapeBlue 2012. All rights reserved

SDN em Cloud ComputingNo podemos limitar SDN apenas em gerenciamento de fluxos. SDN em cloud no se limita apenas em OpenFlow.Servios gerenciados via software, entre eles Firewall (filtros e nat), Load Balancing (slb e gslb), VPN (c2s, s2s), AutoScaling, OpenFlow, VXLAN, NVGRE, STT, GRE, ODL, etc.SDN no CloudStack

Copyright ShapeBlue 2015. All rights reserved

Copyright ShapeBlue 2012. All rights reserved

A Zone can be either Basic OR Advanced

21CloudStack Bootcamp 4.3

O limitador 802.1q (Vlan)Limita o isolamento entre clientes/usurios ao nmero de vlans suportado pelos switches L2 utilizados na infraestrutura. No melhor dos casos 4094 redes.Extenso de vlans entre Data Centers pode ser um problema.

SDN no CloudStack

Copyright ShapeBlue 2015. All rights reserved

Copyright ShapeBlue 2012. All rights reserved

A Zone can be either Basic OR Advanced

22CloudStack Bootcamp 4.3

As alternativasVXLAN Virtual eXtensible Local Area NetworkGRE Ovs Generic Routing Encapulation over Open vSwitchSTT Stateless Transport Tunnel

SDN no CloudStack

Copyright ShapeBlue 2015. All rights reserved

Copyright ShapeBlue 2012. All rights reserved

A Zone can be either Basic OR Advanced

23CloudStack Bootcamp 4.3

VXLAN - Virtual eXtensible Local Area NetworkO frame L2 original encapsulado dentro de pacote UDP.O switch no precisa aprender o mac de cada VM, consequentemente reduz o tamanho da tabela mac dos switches.Necessita roteamento multicast caso haja equipamentos L3 entre VTEPs.No necessita Gateway VXLAN pois somente para trfego Guest.Altamente escalvel, 2^24 (16M).VXLANs podem ser extendidas entre Data Centers via L3.+ 54 bytes por pacote.

SDN no CloudStack

Copyright ShapeBlue 2015. All rights reserved

Copyright ShapeBlue 2012. All rights reserved

A Zone can be either Basic OR Advanced

24CloudStack Bootcamp 4.3

SDN no CloudStack

Copyright ShapeBlue 2015. All rights reserved

Copyright ShapeBlue 2012. All rights reserved

A Zone can be either Basic OR Advanced

25CloudStack Bootcamp 4.3

SDN no CloudStack

Copyright ShapeBlue 2015. All rights reserved

Copyright ShapeBlue 2012. All rights reserved