Enabling Federated Cloud Networking Giovanni Merlino - University - - PowerPoint PPT Presentation

▶
enabling federated cloud networking
SMART_READER_LITE
LIVE PREVIEW

Enabling Federated Cloud Networking Giovanni Merlino - University - - PowerPoint PPT Presentation

Jan 29, 2023 259 likes •638 views

Enabling Federated Cloud Networking Giovanni Merlino - University of Messina (Italy) Sbastien Dupont - CETIC (Belgium) Giuseppe Tricomi - University of Messina (Italy) OpenStack Summit 11/05/2017 Boston, USA Outline Intro

slide-1
SLIDE 1

Enabling Federated Cloud Networking

Giovanni Merlino - University of Messina (Italy) Sébastien Dupont - CETIC (Belgium) Giuseppe Tricomi - University of Messina (Italy)

OpenStack Summit 11/05/2017 Boston, USA

slide-2
SLIDE 2

Outline

  • Intro
  • Framework overview
  • Networking federation
  • Broker (demo)
  • Security considerations
  • SFC/NFV (Tacker, demo)
  • Network visualization (Skydive)
  • Wrap up

2

slide-3
SLIDE 3

Problem Definition

Globally operating companies may need to:

  • deploy tiers of their applications across different time zones
  • diversify their choice of cloud providers, for a number of reasons

3

slide-4
SLIDE 4

Approach: Federated Cloud Networking

OpenStack Summit 11/05/2017 Boston, USA

Service Manifest

Internet

With advanced features such as:

  • automated high availability
  • location aware elasticity
  • automated service function chaining

OVN

slide-5
SLIDE 5

Federating Virtual Cloud Networks: benefits

  • Virtual Networks

– Flexibility – Security

  • Network Federations

– Managed as an entity, via API and tools

OpenStack Summit 11/05/2017 Boston, USA

slide-6
SLIDE 6

Cloud Federation: types

OpenStack Summit 11/05/2017 Boston, USA

slide-7
SLIDE 7

Loosely Coupled Scenarios

OpenStack Summit 11/05/2017 Boston, USA

AWS-EU AWS-US

slide-8
SLIDE 8

Interop

OpenStack Summit 11/05/2017 Boston, USA

AWS-EU AWS-US

slide-9
SLIDE 9

Federated Networking: BEACON Architecture

OpenStack Summit 11/05/2017 Boston, USA

slide-10
SLIDE 10

Networking: federation

OpenStack Summit 11/05/2017 Boston, USA

slide-11
SLIDE 11

BEACON Broker: Scenario

OpenStack Summit 11/05/2017 Boston, USA

  • A Federation Tenant (we

may also call it “borrower”) has to be already available, to enable a fully “federated” user experience (e.g.,

  • rchestration)
  • Customers of the federation

tenant prefer to deploy their application(s) just by selecting the area(s) where components should be deployed

slide-12
SLIDE 12

Beacon Service Manifest

Custom extensions to the HOT standard: ➢ Geographical Placement ➢ Component grouping ➢ Elasticity management

12 geoshape_2: type: OS::Beacon::Georeferenced_deploy properties: label: shape label description: descripition shapes: [{"type":"Feature","id":"BEL","properties":{"nam e":"Belgium"},"geometry":{"type":"Polygon","coo rdinates":[[[3.314971,51.345781],[4.047071,51. 267259],,...............,[3.314971,51.345781]]]}}

federation: type: OS::Beacon::ServiceGroupManagement properties: name: GroupName geo_deploy: { get_resource: geoshape_2} resource: groups: {get_resource: [B,A] } B: type: OS::Nova::Server properties: name: test key_name: {get_param: key_name } image: {get_param: cirros } networks: [{"fixed_ip": 80.0.0.62, "network": { get_param: private_network } }] flavor: m1.tiny A: type: OS::Nova::Server properties: name: VM-A key_name: { get_param: key_name } image: { get_param: image-A } flavor: { get_param: flavor } networks: [{"fixed_ip": 80.0.0.61, "network": { get_param: private_network } }] security_groups: [{ get_resource: server_security_group }] user_data: | #!/bin/bash echo root:vagrant | chpasswd sudo apt-get update

elasticity_location_policy: type: OS::Beacon::ScalingPolicy properties: policy_type: SunLight geo_deploy: {get_resource: geoshape_2} groupmonitored: {get_resource: federation} min_gap: "-8"

slide-13
SLIDE 13

BEACON Broker

  • Sets the federation process in motion for the networks

(invoking the FedSDN services)

  • Instantiates resources
  • Activates the elasticity manager for instantiated

resources

  • Manages the geographical placement and

deployment

13

slide-14
SLIDE 14

Broker: Geographical Deployment

OpenStack Summit 11/05/2017 Boston, USA

geoshape_2: type: OS::Beacon::Georeferenced_deploy properties: description: descripition shapes: [{"type":"Feature","id":"BEL","properties":{"name":"Belgium"},"geo metry":{"type":"Polygon","coordinates":[[[3.314971,51.345781],[4.0 47071,51.267259],,...............,[3.314971,51.345781]]]}}

Starting from a GeoShape, as described in the service manifest:

  • a set of clouds identified
  • clouds’ endpoints retrieved
  • borrower’s credential retrieved
slide-15
SLIDE 15

Broker: demo time

OpenStack Summit 11/05/2017 Boston, USA

slide-16
SLIDE 16

Security considerations

OpenStack Summit 11/05/2017 Boston, USA

At the local level: limited trust between clouds inside a federation e.g. Cloud A trusts cloud B but not cloud C. At the global level: ensure global security policies for the federation e.g. Intrusion detection and remediation on traffic between the federated clouds and the Internet

slide-17
SLIDE 17

Network security tools

OpenStack Summit 11/05/2017 Boston, USA

Network Function Virtualisation (NFV) - Virtualise all the things! Service Function Chaining (SFC) - design complex security workflows with VNF’s

Firewall IDS monitoring

slide-18
SLIDE 18

SFC/NFV - Anomaly detection

OpenStack Summit 11/05/2017 Boston, USA

VM1 NF - DPI NF - FWL7 Cloud The internet Add FW rule: drop traffic from/to VM1 Remove VM1 Security Groups & apply quarantine SG Anomaly (ftp)

slide-19
SLIDE 19

Federation

SFC/NFV - Encryption

OpenStack Summit 11/05/2017 Boston, USA

VM1 VM3 NF - En/Decryption NF - En/Decryption Cloud 1 (trusted) Cloud 3 (untrusted) VM2 NF - En/Decryption Cloud 2 (trusted) VMX VMY

slide-20
SLIDE 20

NFV in Openstack: Tacker project

OpenStack Summit 11/05/2017 Boston, USA

OpenStack service addressing NFV Orchestration and VNF Manager use-cases using standards (TOSCA) based architecture

slide-21
SLIDE 21

21

/ nDPI

NFV/Tacker: demo time

slide-22
SLIDE 22

NFV/Tacker: demo time (1)

OpenStack Summit 11/05/2017 Boston, USA

slide-23
SLIDE 23

NFV/Tacker: demo time (2)

23

slide-24
SLIDE 24

24

NFV/Tacker: demo time (3)

slide-25
SLIDE 25

25

NFV/Tacker: demo time (4)

slide-26
SLIDE 26

OpenStack Summit 11/05/2017 Boston, USA

Internet

Cloud Manager Network Manager Cloud Manager Network Manager Federation tunnel Federated datapath BEACON Net Agent Federated datapath BEACON Net Agent

Overlay network

Physical network

Global federated network policy

Federated Network Manager Application admin Service Manifest

Network visualization: Skydive

slide-27
SLIDE 27

Skydive Architecture

OpenStack Summit 11/05/2017 Boston, USA

slide-28
SLIDE 28

OpenStack Summit 11/05/2017 Boston, USA

Skydive WebUI: bird’s-eye view

  • f a BEACON environment
slide-29
SLIDE 29

OpenStack Summit 11/05/2017 Boston, USA

Skydive: single-Cloud view

slide-30
SLIDE 30

OpenStack Summit 11/05/2017 Boston, USA

Skydive: single-node view

slide-31
SLIDE 31

OpenStack Summit 11/05/2017 Boston, USA

BEACON Contributions to Skydive

Real-time traffic stats visualization (overlaid on top of the topology)

  • Calculating aggregated traffic (over fed tunnel) and showing bandwidth

consumption on the tunnel

  • Visualizing network load
  • Showing L2 bandwidth on the topology
  • Highlighting (color) network links, based on thresholds
  • Determining bottlenecks in each cloud and on the cloud interconnect

Multi-region network topology visualization

  • Enabling definition of multiple separated clouds and their network interfaces
  • Grouping each cloud network with all its components in a specific area (for

enhanced usability)

slide-32
SLIDE 32

Wrapping up: Impact and benefits

  • Integration of Network virtualisation and Software defined

networking with Cloud Middleware

  • Code originating from research is being published under

Open Source licenses

  • Some results are being fed back upstream (OVN, OpenStack

and Open Nebula) already

OpenStack Summit 11/05/2017 Boston, USA

slide-33
SLIDE 33

BEACON Website

OpenStack Summit 11/05/2017 Boston, USA

slide-34
SLIDE 34

Consortium

34

6 countries 4 companies 2 universities 1 research institute

Duration: 30 months 02/2015-07/2017

slide-35
SLIDE 35

Please help us

by answering to our brief survey http://bit.ly/2q3IAqt

35

slide-36
SLIDE 36

This work has been supported by the BEACON project, grant agreement number 644048, funded by the European Union’s Horizon 2020 Programme under topic ICT-07-2014.

OpenStack Summit 11/05/2017 Boston, USA

Giovanni Merlino - gmerlino@unime.it Sébastien Dupont - sebastien.dupont@cetic.be Giuseppe Tricomi - gtricomi@unime.it

Survey: http://bit.ly/2q3IAqt