Kernel Recipes 2013 - Virtual Network over TRILL (VNT) : Design, implementation in Linux kernel and...

Preview:

DESCRIPTION

IaaS Providers need next-generation virtualized networks, providing large-scale multi-tenancy services and meeting new requirements in terms of efficiency and availability. The main limitation of current network architectures mainly comes from inadequate design standards. In this presentation, we present a TRILL based multi-tenant network architecture for virtualized data center networks. This architecture allows the best of both layers (bridging and routing), thus building a large-scale layer-2 network while ensuring scalability, efficiency, fault-tolerance and simplified management. This enables also the creation of large numbers of logical networks within a virtualized data center. The kernel part of our solution is currently developped in the Linux kernel.

Citation preview

VIRTUAL NETWORK OVERTRILL

DESIGN, IMPLEMENTATION AND DEMONSTRATION - Gandi.netWilliam Dauchy

Kernel Recipes 2013

CONVENTIONAL DATA CENTER

MAIN GOALprovide large scale multi-tenancy

LARGE SCALE MULTI-TENANCYMultiples users using same resources

REQUIREMENTSSeamless VM mobilityEasy managementLayer 2 core scalingFault resilianceVLAN scalability

LAYER 2 - SWITCHING BENEFITSManagement simplified + Plug & playSeamless Virtual Machine mobilityAuto learning + determistic failover

LAYER 2 - SWITCHING LIMITATIONA large number of tenants implies

a huge number of MAC address in switch table (TCAMoverflow)ARP storm at nodes

STP to ensure a loop free topologyblocking redundant pathsCore-computes required, recomputes when topologychanges

Number of VLANs is limited to 4096

TRILL BASED DATA CENTER

WHAT IS TRILLNew device: RBridge

Control planeData plane

Encapsulate native frames in a transport headerProviding a hop count and nicknameRoute the encapsulated frames using IS-ISDecapsulate native frames before delivery

IETF STANDARDRFC 5556 Transparent Interconnection of Lots of Links (TRILL): Problem and Applicability Statement

RFC 6325 Routing Bridges (RBridges): Base Protocol Specification

RFC 6326 Transparent Interconnection of Lots of Links (TRILL) Use of IS-IS

RFC 6327 Routing Bridges (RBridges): Adjacency

RFC 6439 Routing Bridges (RBridges): Appointed Forwarders

RFC 6361 PPP Transparent Interconnection of Lots of Links (TRILL) Protocol Control Protocol

DESIGN AND IMPLEMENTATION

CONTROL PLANEunicast building

CONTROL PLANEunicast building - first iteration

CONTROL PLANEunicast building - second iteration

CONTROL PLANEunicast building - third iteration

CONTROL PLANEunicast building - final result

CONTROL PLANE

CONTROL PLANEmulticast building - first iteration

CONTROL PLANEmulticast building - final iteration

DATA PLANE

DATA PLANE

DATA PLANE

DATA PLANE

DATA PLANE

IMPLEMENTATION - SENDING

IMPLEMENTATION - RECEIVING

LAYER 2 - SWITCHING LIMITATIONA large number of tenants implies

a huge number of MAC address in switch tableARP storm at nodes

STP to ensure a loop free topologyblocking redundant pathsCore-computes required, recomputes when topologychanges

Number of VLANs is limited to 4096

TRILL + VNI = VNTVirtual Network over TRILL

VNT FRAME FORMAT

VNI LIFE

VNI TOPOLOGY BUILDING

VNI TOPOLOGY BUILDING

VNI TOPOLOGY BUILDING

IMPLEMENTATION WITH VNI - SENDING

IMPLEMENTATION WITH VNI - RECEIVING

LINUX BIG PICTURE

DEMONSTRATION

SCREENCASTscreencast

(live explanation to understand what's going on)

PH.D. STUDYAhmed Amamou - ahmed@gandi.net

"Network isolation for Virtualized Datacenters"

University Pierre & Marie Curie - GANDI SAS

project still in development and cleaning

TRILL sources: github.com/Gandi/ktrill

VNT: still two research projects working on it - drafts

GANDI.NETGandi Hosting - gandi.net/hosting

William Dauchy - william@gandi.net

slides pres.gandi.net/kr2013