® Copyright Stratoscale www.stratoscale.com @stratoscale +1 877 420 3244

Five ways to deploy Guest Networks over OpenStack Neutron

Liaz Kamper, StratoscaleJune 2016

Fits like LEGO

1

® Copyright Stratoscale www.stratoscale.com @stratoscale +1 877 420 3244 ® Copyright Stratoscale www.stratoscale.com @stratoscale +1 877 420 3244

Who are we?

® Copyright Stratoscale www.stratoscale.com @stratoscale +1 877 420 3244 ® Copyright Stratoscale www.stratoscale.com @stratoscale +1 877 420 3244

Who should attend?

3

Architects Developers Fun Geeks

® Copyright Stratoscale www.stratoscale.com @stratoscale +1 877 420 3244 ® Copyright Stratoscale www.stratoscale.com @stratoscale +1 877 420 3244

4

Godtfred Kirk Christiansen

® Copyright Stratoscale www.stratoscale.com @stratoscale +1 877 420 3244 ® Copyright Stratoscale www.stratoscale.com @stratoscale +1 877 420 3244

Neutron Building Bricks

5

Layer 2 bricks Layer 3 bricks

Network

Port External Network

Subnet

Virtual Router

Extensionbricks

® Copyright Stratoscale www.stratoscale.com @stratoscale +1 877 420 3244 ® Copyright Stratoscale www.stratoscale.com @stratoscale +1 877 420 3244

6Administrator / Single Tenant Multi-Tenancy

Deployment use cases

® Copyright Stratoscale www.stratoscale.com @stratoscale +1 877 420 3244 ® Copyright Stratoscale www.stratoscale.com @stratoscale +1 877 420 3244

Single Tenant Direct Attach

Router& DHCP

Fast &Easy

CONSIDER CAREFULLY

Neutron not aware to L3

No Securitygroup

® Copyright Stratoscale www.stratoscale.com @stratoscale +1 877 420 3244 ® Copyright Stratoscale www.stratoscale.com @stratoscale +1 877 420 3244

Single Tenant Isolated VLAN

8

ExternalRouter

Simple L2 connectivity

Local Subnet control

Securitygroups

Pros

® Copyright Stratoscale www.stratoscale.com @stratoscale +1 877 420 3244 ® Copyright Stratoscale www.stratoscale.com @stratoscale +1 877 420 3244

Single Tenant Isolated VLAN

Routable subnet

No L3 services

by Neutron

ExternalRouter

Cons

® Copyright Stratoscale www.stratoscale.com @stratoscale +1 877 420 3244 ® Copyright Stratoscale www.stratoscale.com @stratoscale +1 877 420 3244

Time to wake up…THIS IS THE IMPORTANT

PART

® Copyright Stratoscale www.stratoscale.com @stratoscale +1 877 420 3244 ® Copyright Stratoscale www.stratoscale.com @stratoscale +1 877 420 3244

Layer3 Single Tenant Isolation

Public IP Save IP Resources

ExternalRouter

VirtualRouter

L3 Services Net Security

Internal External

® Copyright Stratoscale www.stratoscale.com @stratoscale +1 877 420 3244 ® Copyright Stratoscale www.stratoscale.com @stratoscale +1 877 420 3244

12

Multi-Tenancy

® Copyright Stratoscale www.stratoscale.com @stratoscale +1 877 420 3244 ® Copyright Stratoscale www.stratoscale.com @stratoscale +1 877 420 3244

Self Service Multi-Tenant

13

VirtualRouter

VirtualRouter

ExternalRouter

Tenant A

Tenant B

® Copyright Stratoscale www.stratoscale.com @stratoscale +1 877 420 3244 ® Copyright Stratoscale www.stratoscale.com @stratoscale +1 877 420 3244

Self Service Multi-Tenant

14

Administrator allocated resources

Tenants self service

Enforce tenants

isolation and security

® Copyright Stratoscale www.stratoscale.com @stratoscale +1 877 420 3244 ® Copyright Stratoscale www.stratoscale.com @stratoscale +1 877 420 3244

Administrator Control Multi-Tenant

15

VirtualRouter

ExternalRouter

Tenant A

Tenant B

Administrator controls

resources

® Copyright Stratoscale www.stratoscale.com @stratoscale +1 877 420 3244 ® Copyright Stratoscale www.stratoscale.com @stratoscale +1 877 420 3244

How many ways to connect 6 LEGO bricks?…

Soren EilersDanish Math Professor

® Copyright Stratoscale www.stratoscale.com @stratoscale +1 877 420 3244 ® Copyright Stratoscale www.stratoscale.com @stratoscale +1 877 420 3244

This talk is based on Stratoscale’s blog

http://www.stratoscale.com/blog/networking/deploying-guest-networks-over-openstack-neutron-fits-like-lego/

® Copyright Stratoscale www.stratoscale.com @stratoscale +1 877 420 3244 18

THANK YOULearn more about OpenStack networking at:

www.stratoscale.com