N F V l a V D E wa y R e n z o D a v o l i F - PowerPoint PPT Presentation

N F V à l a V D E wa y R e n z o D a v o l i F O S D E M 2 0 1 8 This work is licensed under a Creative Commons Attribution-ShareAlike 4.0 International License.(unless otherwise specified)

V i r t u a l D i s t r i b u t e d E t h e r n e t ● A v i r t u a l n e t wo r k i n g s t a n d a r d s i n c e 2 0 0 4 ● S u p p o r t e d b y Q e mu / K V M, V i r t u a l B O X , ( u s e r - mo d e - l i n u x ) , P i c o T C P , L WI P v 6 ● V D E 4 f e a t u r e s : – Mo d u l a r d e s i g n – N e t wo r k i n g i mp l e me n t a t i o n p l u g i n s – N e t wo r k s o f N a me s p a c e s This work is licensed under a Creative Commons Attribution-ShareAlike 4.0 International License.(unless otherwise specified)

V D E P L U G 4 Mo d u l a r D e s i g n This work is licensed under a Creative Commons Attribution-ShareAlike 4.0 International License.(unless otherwise specified)

I t i s l i k e a v i r t u a l S F P p o r t ● S ma l l f o r m- f a c t o r p l u g g a b l e ( S F P ) s o c k e t ● V D E p l u g i n s = S F P v i r t u a l t r a n c e i v e r s Christophe.Finot [CC BY-SA 3.0], Wikimedia Commons Aurélien Rinaldi [CC BY-SA 4.0], Wikimedia Commons This work is licensed under a Creative Commons Attribution-ShareAlike 4.0 International License.(unless otherwise specified)

L i b v d e p l u g 4 ● B a c k wa r d s c o mp a t i b l e wi t h l i b v d e p l u g 2 ( f o r a p p l i c a t i o n s : v i r t u a l ma c h i n e s , u s e r - mo d e s t a c k s ) ● I t p r o v i d e s a n u n i fi e d A P I f o r v i r t u a l n e t wo r k i n g s p e c i fi c a t i o n ● e . g . k v m: kvm ... -netdev vde,id=vde0,sock=tap://tap0 kvm ... -netdev vde,id=vde0,sock=vxvde:// kvm ... -netdev vde,id=vde0,sock=slirp:// This work is licensed under a Creative Commons Attribution-ShareAlike 4.0 International License.(unless otherwise specified)

U V D E L : n e w U R L - l i k e n e t wo r k l o c a t o r s ● U V D E L = U n i fi e d V D E L o c a t o r ● P l u g i n s a r e s h a r e d l i b s . T h e l i b r a r y libvdeplug_foo.so d e fi n e s a n e w t y p e o f U V D E L s foo://… ● E x a mp l e s : null:// vde:///var/run/myswitch tap://tap0 vxvde://234.0.0.1 slirp:// This work is licensed under a Creative Commons Attribution-ShareAlike 4.0 International License.(unless otherwise specified)

S o me v d e p l u g i n s : This work is licensed under a Creative Commons Attribution-ShareAlike 4.0 International License.(unless otherwise specified)

v d e _ p l u g : t h e v d e c a b l e b u i l d e r ● v d e _ p l u g c o mma n d s y n t a x s u p p o r t s e i t h e r o n e o r t wo U V D E L s . – I n c a s e o f o n e U V D E L a v d e _ p l u g t r a n s l a t e s t h e n e t wo r k t r a f fi c i n a s t r e a m o n s t d i n / s t d o u t This work is licensed under a Creative Commons Attribution-ShareAlike 4.0 International License.(unless otherwise specified)

v d e _ p l u g vde_plug foo:// bar:// dpipe vde_plug foo:// = vde_plug bar:// This work is licensed under a Creative Commons Attribution-ShareAlike 4.0 International License.(unless otherwise specified)

E x a mp l e : t a p + s wi t c h + 2 * k v m sudo ip tuntap add tapx mode tap user renzo vde_plug tap://tapx switch:///tmp/swx kvm … -netdev vde,id=vde0,sock=vde:///tmp/swx kvm … -netdev vde,id=vde0,sock=vde:///tmp/swx This work is licensed under a Creative Commons Attribution-ShareAlike 4.0 International License.(unless otherwise specified)

Mo r e v d e p l u g i n s This work is licensed under a Creative Commons Attribution-ShareAlike 4.0 International License.(unless otherwise specified)

E x a mp l e : k v m + c md + r e mo t e s l i r p kvm … -netdev vde,id=vde0,\ sock=cmd://’ssh remote.host vde_plug slirp://’ This work is licensed under a Creative Commons Attribution-ShareAlike 4.0 International License.(unless otherwise specified)

V X V D E & L o c a l A r e a C l o u d s ● J u s t u s e v x v d e : / / mc a s t a d d r . A p p s o f t h e s a me mc a s t a d d r fl o c k t o g e t h e r This work is licensed under a Creative Commons Attribution-ShareAlike 4.0 International License.(unless otherwise specified)

V X V D E X ● V D E p l u g p l u g i n l i b r a r y + K e r n e l mo d u l e ● V X V D E X i n h e r i t s a l l t h e p r o s o f V X V D E b u t : ● V X V D E X p r o v i d e s a c c e s s c o n t r o l a n d “ n e t wo r k p r i v a c y ” . A s y s a d m c a n d e fi n e wh i c h v i r t u a l n e t wo r k s a u s e r c a n j o i n o r n o t . – T h e c u r r e n t i mp l e me n t a t i o n u s e s t h e e f f e c t i v e g r o u p i d a s t h e V X V D E X n e t i d e n t i fi e r . ( s e e g e t e g i d ( 2 ) ) – A u s e r c a n j o i n a v i r t u a l n e t wo r k o n l y i f s h e i s a me mb e r o f t h e c o r r e s p o n d i n g g r o u p . ● U s e r s c a n h a v e f u l l s h e l l a c c e s s . This work is licensed under a Creative Commons Attribution-ShareAlike 4.0 International License.(unless otherwise specified)

N e s t e d V D E P L U G ( t o b e r e l e a s e d s o o n ) ● S o me p l u g - i n s a r e d e s i g n e d a s wr a p p e r s f o r o t h e r mo d u l e s – a g n o : a g n o s t i c e n c r y p t i o n – v l a n : a d d / d e l / c h a n g e 8 0 2 . 1 Q t a g s ● e . g . a g n o : / / { v d e : / / / t mp / my s wi t c h } v l a n : / / 2 { t a p : / / my t a p } This work is licensed under a Creative Commons Attribution-ShareAlike 4.0 International License.(unless otherwise specified)

S e c u r i t y T a b l e V i r t u a l Ma c h i n e S h e l l a c c e s s A c c e s s t o t h e n e t u s e r c a b l e    V X V D E    V X V D E X    E n c r y p t i o n + V X V D E This work is licensed under a Creative Commons Attribution-ShareAlike 4.0 International License.(unless otherwise specified)

V D E N S : l i f e i n a n e t wo r k i n g n a me s p a c e ● V D E N S c r e a t e s a n e t wo r k i n g n a me s p a c e a n d c o n n e c t s i t t o a V D E n e t wo r k . This work is licensed under a Creative Commons Attribution-ShareAlike 4.0 International License.(unless otherwise specified)

E x a mp l e : v d e n s + p t p + k v m kvm … -netdev vde,id=vde0,sock=ptp:///tmp/xxx vdens ptp:///tmp/xxx This work is licensed under a Creative Commons Attribution-ShareAlike 4.0 International License.(unless otherwise specified)

V D E N S u s a g e c a s e s ● S e r v e r s i d e : – I o T h V i r t u a l h o s t i n g ● C l i e n t s i d e – D i f f e r e n t s e c u r i t y r e q u i r e me n t s ● V P N a n d l o c a l s e r v i c e s ● I o T h i n a b a c k wa r d s c o mp a t i b l e wa y This work is licensed under a Creative Commons Attribution-ShareAlike 4.0 International License.(unless otherwise specified)

N e t wo r k s o f N a me s p a c e s V D E n a me s p a c e s c a n b e s c a t t e r e d a r o u n d t h e L o c a l A r e a C l o u d ( z e r o c o n fi g u r a t i o n ! ) This work is licensed under a Creative Commons Attribution-ShareAlike 4.0 International License.(unless otherwise specified)