View
357
Download
1
Category
Preview:
Citation preview
® Copyright Stratoscale www.stratoscale.com @stratoscale +1 877 420 3244
Five ways to deploy Guest Networks over OpenStack Neutron
Liaz Kamper, StratoscaleJune 2016
Fits like LEGO
1
® Copyright Stratoscale www.stratoscale.com @stratoscale +1 877 420 3244 ® Copyright Stratoscale www.stratoscale.com @stratoscale +1 877 420 3244
Who are we?
® Copyright Stratoscale www.stratoscale.com @stratoscale +1 877 420 3244 ® Copyright Stratoscale www.stratoscale.com @stratoscale +1 877 420 3244
Who should attend?
3
Architects Developers Fun Geeks
® Copyright Stratoscale www.stratoscale.com @stratoscale +1 877 420 3244 ® Copyright Stratoscale www.stratoscale.com @stratoscale +1 877 420 3244
4
Godtfred Kirk Christiansen
® Copyright Stratoscale www.stratoscale.com @stratoscale +1 877 420 3244 ® Copyright Stratoscale www.stratoscale.com @stratoscale +1 877 420 3244
Neutron Building Bricks
5
Layer 2 bricks Layer 3 bricks
Network
Port External Network
Subnet
Virtual Router
Extensionbricks
® Copyright Stratoscale www.stratoscale.com @stratoscale +1 877 420 3244 ® Copyright Stratoscale www.stratoscale.com @stratoscale +1 877 420 3244
6Administrator / Single Tenant Multi-Tenancy
Deployment use cases
® Copyright Stratoscale www.stratoscale.com @stratoscale +1 877 420 3244 ® Copyright Stratoscale www.stratoscale.com @stratoscale +1 877 420 3244
Single Tenant Direct Attach
Router& DHCP
Fast &Easy
CONSIDER CAREFULLY
Neutron not aware to L3
No Securitygroup
® Copyright Stratoscale www.stratoscale.com @stratoscale +1 877 420 3244 ® Copyright Stratoscale www.stratoscale.com @stratoscale +1 877 420 3244
Single Tenant Isolated VLAN
8
ExternalRouter
Simple L2 connectivity
Local Subnet control
Securitygroups
Pros
® Copyright Stratoscale www.stratoscale.com @stratoscale +1 877 420 3244 ® Copyright Stratoscale www.stratoscale.com @stratoscale +1 877 420 3244
Single Tenant Isolated VLAN
Routable subnet
No L3 services
by Neutron
ExternalRouter
Cons
® Copyright Stratoscale www.stratoscale.com @stratoscale +1 877 420 3244 ® Copyright Stratoscale www.stratoscale.com @stratoscale +1 877 420 3244
Time to wake up…THIS IS THE IMPORTANT
PART
® Copyright Stratoscale www.stratoscale.com @stratoscale +1 877 420 3244 ® Copyright Stratoscale www.stratoscale.com @stratoscale +1 877 420 3244
Layer3 Single Tenant Isolation
Public IP Save IP Resources
ExternalRouter
VirtualRouter
L3 Services Net Security
Internal External
® Copyright Stratoscale www.stratoscale.com @stratoscale +1 877 420 3244 ® Copyright Stratoscale www.stratoscale.com @stratoscale +1 877 420 3244
12
Multi-Tenancy
® Copyright Stratoscale www.stratoscale.com @stratoscale +1 877 420 3244 ® Copyright Stratoscale www.stratoscale.com @stratoscale +1 877 420 3244
Self Service Multi-Tenant
13
VirtualRouter
VirtualRouter
ExternalRouter
Tenant A
Tenant B
® Copyright Stratoscale www.stratoscale.com @stratoscale +1 877 420 3244 ® Copyright Stratoscale www.stratoscale.com @stratoscale +1 877 420 3244
Self Service Multi-Tenant
14
Administrator allocated resources
Tenants self service
Enforce tenants
isolation and security
® Copyright Stratoscale www.stratoscale.com @stratoscale +1 877 420 3244 ® Copyright Stratoscale www.stratoscale.com @stratoscale +1 877 420 3244
Administrator Control Multi-Tenant
15
VirtualRouter
ExternalRouter
Tenant A
Tenant B
Administrator controls
resources
® Copyright Stratoscale www.stratoscale.com @stratoscale +1 877 420 3244 ® Copyright Stratoscale www.stratoscale.com @stratoscale +1 877 420 3244
How many ways to connect 6 LEGO bricks?…
Soren EilersDanish Math Professor
Recommended