VMwareNSX网络虚拟化完整版

GCRReviewSessionforVMWorldBriefingRickChenVMWareNSBU颠覆老式技术,打造软件定义数据中心#NET7388SAgenda NSXMessageQuickUpdateVMWareMessageforOpenstackMediaFeedbackandResponseNSXMessageQuickUpdateWhatisVMwareNSX?InternetExistingPhysicalNetworkInternetWhatisVMwareNSX?ExistingPhysicalNetworkInternetWhatisVMwareNSX?ExistingPhysicalNetworkInternetWhatisVMwareNSX?NetworkHypervisorExistingPhysicalNetworkInternetWhatisVMwareNSX?NetworkHypervisorVirtualNetworksExistingPhysicalNetworkTheVirtualNetworkVirtualServerAccessPorts32%CAGRPhysicalServerAccessPorts15%CAGRTheTimeisNowSource:CrehanResearchInc.40%ofvirtualizationadminsalsomanagevirtualswitching77%ofVMwarecustomersarepreparingfornetworkvirtualizationVisibilityandDebuggingVisibilityandDebuggingNSXvSwitchHypervisorVMVMVMVMVMVMVirtualizationmadenetwork

visibilitydifficultNetworkvirtualization

providesvisibilityBasicIdeaOneComplexNetworkMultipleSimpleNetworksVLANsStaticRoutesVRFSACLSVLANsVLANsACLSVRFSVisibility

&TroubleshootingHypervisorPhysicalHostNSXvSwitchVMHypervisorPhysicalHostNSXvSwitchVMVMVMVMVMVMVMVirtualNetworkVisibility&TroubleshootingHypervisorPhysicalHostNSXvSwitchVMHypervisorPhysicalHostNSXvSwitchVMVMVMVMVMVMVMVirtualNetworkDisconnectedDisconnectedDisconnectedDisconnectedDisconnectedDisconnectedDisconnectedDisconnectedDisconnectedOngoingWork:VCOPSIntegrationTopologyMetricvaluesResourceDynamicthresholdsAnomalyscoreAlertsPossiblerootcauseCalculatedmetricsAnomalyscoreEventsCollectedmetricsEventsVirtualNetworkHealthMonitoring&TroubleshootingPhysicalComponentsHealthMonitoringandTroubleshootingRuntimeNetworkOptimizationNetworkvirtualizationdecouplescorrectness

fromperformancenetworkwide.Traditionally,thesearecoupled.Forexample,adding

anewboxoftenmeansdowntimeandconfigurationchanges.

Providesabilitytochangeperformancecharacteristicsonthefly.Example:RuntimeDeploymentofDistributedRoutingVMVMVMVMVMVMVMVMVMVMVMVMVMVMVMVMLatencyImpactonProductionNetworkAndMuch,MuchMore…MPLSintegrationControlplanefederationPolicyframeworksFlow-leveltrackingforfabricoptimization…NSXEcoSystemVMwareNSXEcosystemSeeingBroadAdoptionEcoSysemIntegrationandPositioningTodayNSXforMH

OvsdbforL2-L3capabilityintegrationNSXOptimizedForvSphereServiceComposerforL4-L7integrationUnifiedNSXPlatformFromL2–L7Integration

VLANL2L3VirtualNetworkL2NSXGatewayNSX–TheNetworkVirtualizationPlatformPhysicalNetworkvSphereHostvSphereHostKVMXenServerNSXvSwitchNSXvSwitchOpenvSwitchOpenvSwitchHardwareSoftwareControllerClusterVLANVTEPAPIHWPartnerVMVM“NSXAPI”CMPTunnelsarelikecablesPhysicalSTTHypervisorHypervisorWORLDVXLANVXLANVirtualNetworkCableCableCableCopperCableControllerThirdpartyhardwareWhyNotaSingleTunnelFormat?STTwasdesignedtooptimizeperformanceforhypervisor-hypervisortrafficLeveragingcommodityNICbehaviorsothattunnelinghasnegligibleperformanceimpactUnfortunately,it’shardforswitchestoimplement&canraiseissues

withfirewallsVXLANisthedefactoindustrystandardfornetworkvirtualizationIdealformulti-vendorsituations(e.g.vswitch-physicalswitchcommunication)WillstarttoseeNICsupportforhighperformanceinthenextyearExtensibilityoftheheaderlikelyneededSTThas64-bit“context”vs24-bitVNITunnelformatdecoupledfromcontrolplaneTunnelformat!=virtualizationarchitectureHardwareVTEPsBenefits:Fine-grainedaccess:canpullasinglephysicalportintothevirtualworldConnectbaremetalworkloadswithhigherperformance/throughputSameoperationalmodel(provisioning,monitoring)as

virtualnetworksConsistentprovisioningandoperationsforentireDataCenter,regardlessofworkloads,overasimpleIPfabricAPI(OVSDB)Tunnels(VXLAN)PhysicalWorkloadsVMControllerClusterHypervisorvSwitchHypervisorvSwitchHypervisorvSwitchHypervisorvSwitchVMVMLogicalnetwork(VNI)ConnectingthePhysicaltotheVirtualDBVMMACSPHYMACSIPUnderlay

(nomulitcastrequired)VMwareMessageforOpenstackCloudManagementPlatforms(CMPs)HardwareInfrastructureSoftwareInfrastructureCloudManagementPlatformEnabledBy:Self-serviceprovisioningAutomationviaAPIsBusinessGoals:Reduce

costsIncrease

agilityApplicationsAnatomyofaCloudManagementPlatformHardwareInfrastructureSoftwareInfrastructureAPILayerCMPLogic(governance,workflow,placement)DriverLayerWebGUICLISDKApplicationsCloudManagementPlatformToolsforself-service+automation,builtontopofAPIModelsavailableresources.Handlesrequeststocreate/

destroy/updateandviewcurrentstatusVariesgreatlybyCMP:determineswhetherarequestisallowed,updatesexternalsystems,decideswhatpartofunderlyinginfrastructurewillhosttheworkloadCommunicatestosoftwareinfrastructuretocreate/destroy/updatetherealresourcesbackingtherequestIdentityAnatomyofOpenStackHardwareInfrastructureSoftwareInfrastructureWebGUILinuxCLIsPython

SDKsApplicationsCompute&ImagesAPIComputeLogic(quotas,scheduling)ComputeDrivers(vSphere,KVM)NetworkAPINetworkLogic(quotas,scheduling)ComputeDrivers(NSX,Cisco)BlockStorageAPIBlockStorageLogic(quotas,scheduling)BlockStorageDrivers(vSAN,EMC)Userauthentication,authorizationNova/GlanceNeutron(Quantum)CinderKeystoneHorizonOpenStackCMPButWhatAbout…..Free/opensourceCMPsarenothingnew:Eucalyptus,OpenNebula,CloudStackareolder,withsimilarcapabilitiesItisneverfreetoensuresmoothoperationofcomplexsoftwareinfrastructureComesdownto:Builduplargeinternalteamabletotroubleshoot/fixOpenStackissues.Butstillneedtofindawaytosupportlowerlayersofsoftwareinfrastructure(e.g.,hypervisor,storage)Buysupportfromavendor(e.g.,useofenterprisedistroswith“free”Linux).Free!!!Free!!!Free!!!Free!!!Free!!!Free!!!Free!!!Free!!!Free!!!Misconception:OpenStackisaProductNo,itisanopensourcecodebase,managedbyOpenStackFoundationManagesprocessaroundchangestotheopensourcecodebaseProvidesmarketing/promotionofOpenStack,managestrademark.OpenStackis/willbeavailableinmanydifferentforms,including:“Rollyourown”:Downloadframeworksourcecode,buildinternalteamtodoalmosteverything.“Distro”:Packagedframeworkcodewithinstall/configmgmtbundledwithOS.Payforsupport.“Core+”:Commercialproduct,usesOpenStackcodeandAPIs,butoftenalsoincludeproprietaryaddons.“APICompat”:ExistingproductaddsOpenStackAPIcompatibility.TradeoffsFlexible/CustomizableVendorAgnosticComplex+resource

intensivetooperate.Missingmgmttools.LessFlexibleVendorSpecificEasiertoadopt+operateIncludesmgmt.toolsMisconception:WithOpenStackAPI,lowerlayersdon’tmatter.OpenStackisaframework.Alwaystalkabout"OpenStackonX".Yourunderlyinginfrastructurematters:Compute:issueswithnoisy-neighborslikeAWS?Network:limitedbyVLANs?Storage:provideSLAstoguaranteeIOPS?Management:proactivelyidentify&quicklyfixissues?CloudArchitects&CloudAdminsWhatinfrastructuretechnologiesmeetsmyneedsforadvancedfeatures,price,scale,reliability,monitoring,performance,SLAs,troubleshooting,etc?Misconception:OpenStackReleasesarelikeProductReleasesTime-basedreleases,every6months.InclusioninOpenStackisprimarilybasedoncodereview+unittests.Notfunctionaltesting,muchlessscale/performance/stresstesting.Time-basedrelease.Morelikean“earlybeta”.Usersordistrosdoadditionaltestingonwhattheycareabout,report/fixbugs,anddecidewhenitis“goodenough’Significantvariationsintheamountoftesting,rangingfrom:“wellwornpath”ofbasicfunctionalitywithcommondrivers/configurations“testedonce”byvendorwhowanted“checkbox”ofOpenStackcompatibilityExtendstothingslikedocumentation,upgrades,etc.EssexFolsomGrizzlyHavanaIcehouse2023.12023.22023.12023.22023.1Misconception:TheOpenStackAPIisa“Standard”No.Today“OpenStack”isanycloudbasedonsome

variantoftheOpenStacksoftware.Thisprovides:AvendorneutralAPISharedknowledge/conceptsandsimilartoolsButisnota“standard”intermsofinteroperabilityRelyingon“similarcode”allowsforsignificantvariation:APIextensionsleadtofragmentation(e.g.,criticismofRAX+HP

bythefoundation)RunningdifferentOpenStackversionsorservices(nova-networkvs.Neutron)RunningwithdifferentconfigurationoptionsDriversmayhavesubtledifferencesinimplementation

(e.g.L2broadcastinNeutron)Howtogetclosertorealinteroperability?Someincommunityalreadypushingconformancetesting,

realAPIspecificationsExpecttoseeVMwaregetinvolvedintheseeffortsmovingforwardThe“standardkilogram”Misconception:ChoosingbetweenOpenStackandVMwareReality:OpenStackcanrunontopofcompute/network/storage/mgmt:entirelyfromVMwareecosystementirelyfromothersourcesamixofVMwareecosystem+othersourcesOpenStackcanco-existwithotherCMPsinthesameVMwarestack.Ex:UseOpenStacktogivedevelopersprogrammaticself-serviceaccesstoasliceofyourvSpherecapacityUsevCenter

orvCACtomanageITworkloadsthatrequiresignificantgovernanceMisconception:OpenStackisonlyforServiceProvidersHas“roots”inSPs,butsomelargeenterprisesactlikeSPs:Viewtheircloudplatformitselfasakeypointofcompetitivedifferentiation.Havetheirownlargeinternaldevelopmentteamsbuildingcloudsoftware.SeeOpenStackasaflexibleplatformtheycancustomize+use.SProots&frameworkcomplexitycanbestumblingblocksformajorityofenterprises:focuson“newcloudapps”weakenterprisefeatures(e.g.,SLAs).Limitedadmintoolstoconfigure,monitor,troubleshootetc.Standalonedesign:nointegrationintoexistingenterpriseworkflowsVeryLinux-centric,withlotsofdifferentservicestoinstall/manage.WiderenterpriseadoptionwilldependsonintegrationOpenStackbeingintegrated+soldaspartofanenterprise-gradeproduct.OpenStackonVMware:Devops+EnterpriseITonasingleplatformBest-of-BreedVMwareTechnologiesandOpenStackTenant-SideAdmin/Operator-SideBenefitsofOpenStackAPI&FrameworkChoiceofbest-in-classvirtualization&managementtechnologiesHorizon(WebPortal)vSphere&vCenterCLITools&Scripts(DevOpsAutomation)vCACApplicationDirectorNovaNeutronCinderGlanceNSXDatastores3rd-party/vSANvCentertemplatesCloudOperatorTools(vCenter,vCOPs,LogInsightetc.)ThirdPartyOperatortools(Puppet/Chef,scripts,nagios...)OpenStackor3rdPartyComponentVMwareComponent

LiveDemoofOpenStack