Dragonflow Project Update OpenStack Summit Vancouver Pino de - - PowerPoint PPT Presentation
May 23, 2018 Dragonflow Project Update OpenStack Summit Vancouver Pino de Candia, @pino_deca What does Dragonflow do? Distributed SDN-based Neutron Implementation Our mission is to implement advanced networking services in a manner
May 23, 2018
Implementation
advanced networking services in a manner that is efficient, elegant and
large scale deployments with a focus
➔IPv6 ➔Trunk ports (VLAN aware VMs) ➔SFC ➔Service Health Report ➔BGP ➔Distributed SNAT ➔Complete DB-Model Refactor
➔Skydive integration ➔Application Decoupling ➔Vagrant fixes and more options
➡Visualize how Dragonflow sees the topology ➡For operations and debugging ➡With real-time updates ➡And graphical tracing of simulated packets
More information on Skydive:
➡Slides: https://www.slideshare.net/SylvainAfchain/skydive-realtime-network-analyzer ➡Austin talk: https://www.youtube.com/watch?v=nQSdGKV8ceM
Previously: ➡ Config defined datapath as a list of apps: apps_list=l2,l3_proactive,dhcp,dnat,sg,portsec,... ➡Each app:
Now: ➡Apps define a contract of entrypoints, exitpoints and registers ➡Config specifies datapath as a graph ➡Controller allocates all required table IDs and registers
Provider VM egress Port Sec SecGroups L2 L3 Port Filter Egress FW Ingress FW L3
vertices: input: type: input provider: type: provider l2: type: l2 portsec: type: portsec secgroup: type: sg l3: type: l3-proactive firewall: type: firewall
edges: provider.out.default: l2.in.default input.out.vm-egress: portsec.in.default portsec.out.accept: secgroup.in.egress secgroup.out.egress-accept: l2.in.default l2.out.unicast: l3.in.ingress-filter l3.out.ingress-match: firewall.in.egress firewall.out.egress-accept: l3.in.route l3.out.post-route: firewall.in.ingress firewall.out.ingress-accept: l2.in.default
➔Bug fixes ➔Rocky compatibility ➔Maintenance Only one full-time dev on Dragonflow Users should do their own tagging/release management
Auto upgrade Similar to alembic for sqlalchemy Advanced patch in progress CNI driver For Kubernetes integration, via OpenStack Kuryr Patch in progress OpenStack Ansible deployment Patch in progress RPMs Required by OSA deployment Patch in progress LBaaS Native L4LB (as opposed to Octavia, already supported) Designed, not implemented DNS For local name lookup (as opposed to Designate, already supported) Designed, not implemented
➔IRC: #openstack-dragonflow ◆ Cores: oanson, lihi, dimak, irenab ◆ Welcome new core: snapiri ➔We’re listening on the mailing list ➔launchpad: https://bugs.launchpad.net/dragonflow ➔Trello: https://trello.com/b/PM7nah4Z/project-dragonflow ➔Blog: http://dragonflow.net/
➔Try it out! ◆ Send feedback! ◆ Let us know you’re out there! ➔Open a bug ➔Send a question ➔Submit a patch ➔Review other patches
@OpenStack
OpenStackFoundation