O slideshow foi denunciado.
Utilizamos seu perfil e dados de atividades no LinkedIn para personalizar e exibir anúncios mais relevantes. Altere suas preferências de anúncios quando desejar.

Ifupdown2: Network Interface Manager

962 visualizações

Publicada em

Learn all about ifupdown2

Publicada em: Tecnologia
  • Seja o primeiro a comentar

Ifupdown2: Network Interface Manager

  1. 1. v ifupdown2 : The ultimate Network Interface Manager Progress and Status Julien Fortin - Cumulus Networks July 5th, DebConf2016 - Cape Town, South Africa 1cumulusnetworks.comJulien Fortin - ifupdown2 - DebConf2016
  2. 2. Outline 2 ! Background & context ! What’s wrong with ifupdown? ! Ifupdown2 overview ! What’s new since October 2015 ? ! What’s next ? ! How to get started ! Questions cumulusnetworks.comJulien Fortin - ifupdown2 - DebConf2016
  3. 3. From intern to Member of Technical Staff 3 ! Background as a Software Engineer ! EPITECH, class of 2016. ! Undergrand Internship at Cumulus in 2014 ! Hired in March 2016, joining the ifupdown2 team cumulusnetworks.comJulien Fortin - ifupdown2 - DebConf2016
  4. 4. The Mother of Dragons 4 ! Roopa Prabhu ! First commit Nov 2013, ~2k lines of Python cumulusnetworks.comJulien Fortin - ifupdown2 - DebConf2016
  5. 5. The Mother of Dragons 5 • 618 commits • 18243 lines of python ! Roopa Prabhu ! First commit Nov 2013, ~2k lines of Python cumulusnetworks.comJulien Fortin - ifupdown2 - DebConf2016
  6. 6. Cumulus Networks, an Operating System company 6 !Cumulus Linux ! Debian (jessie) based distribution for Network Switches !Our Philosophy ! Manage your network switch as a server ! Use existing Linux tools to configure your network switches !Contributing back to the community ! Cumulus is upstreaming a lot of networking kernel patches (e.g. netlink, stp etc..) cumulusnetworks.comJulien Fortin - ifupdown2 - DebConf2016
  7. 7. Debian’s ifupdown ! Default Network Interface Manager for Debian ! Configuration file : /etc/network/interfaces ! Network interfaces represented by “iface” sections 7 iface br100 bridge-ports swp1 swp2 bridge-stp on cumulusnetworks.comJulien Fortin - ifupdown2 - DebConf2016
  8. 8. What’s wrong with ifupdown? 8 ! Code written in C (hard to maintain/extend) ! Does not understand interface dependency ! Problems with provisioning interfaces at scale ! No support for incremental changes to interface config ! No support to query/validate running configuration cumulusnetworks.comJulien Fortin - ifupdown2 - DebConf2016
  9. 9. Our solution: ifupdown2 9 ! New implementation in Python ! Backward compatibility with debian ifupdown ! Pluggable architecture with python add-on modules ! Ordered Network Interface dependency relationship handling ! Incremental changes and query live configuration cumulusnetworks.comJulien Fortin - ifupdown2 - DebConf2016
  10. 10. ifupdown2 archi 10cumulusnetworks.comJulien Fortin - ifupdown2 - DebConf2016
  11. 11. ifupdown2 interface configuration graph dependency 11cumulusnetworks.comJulien Fortin - ifupdown2 - DebConf2016 ! Dependency graph of all interfaces ! Uses topological sort to order network interface configurations ! Execute interface configuration in dependency order
  12. 12. ifupdown2 interface configuration graph dependency 12 Sorted interface list:
 swp1, swp1.100, swp2, swp2.100, swp3, swp4, bond, bond.100, bridge100 cumulusnetworks.comJulien Fortin - ifupdown2 - DebConf2016 ! Dependency graph of all interfaces ! Uses topological sort to order network interface configurations ! Execute interface configuration in dependency order
  13. 13. ifquery: Troubleshooting network interface dependencies 13 ▪$ ifquery br0 --print-dependency=list ▪br0 : ['bond1', 'bond2'] ▪bond1 : ['swp32', 'swp33'] ▪bond2 : ['swp30', 'swp31'] ▪swp32 : None ▪swp33 : None ▪swp30 : None ▪swp31 : None $ ifquery br0 --print-dependency=dot /* Generated by GvGen v.0.9 (http://software.inl.fr/trac/wiki/ GvGen) */ digraph G { compound=true; node1 [label="br0"]; node2 [label="bond1"]; node3 [label="bond2"]; node4 [label="swp32"]; node5 [label="swp33"]; node6 [label="swp30"]; node7 [label="swp31"]; node1->node2; node1->node3; node2->node4; node2->node5; node3->node6; node3->node7; } cumulusnetworks.comJulien Fortin - ifupdown2 - DebConf2016
  14. 14. 14 ifquery - - check ! We extended ifquery to query and validate applied state of a network interface Julien Fortin - ifupdown2 - DebConf2016
  15. 15. 15 ifquery to persist running configuration cumulusnetworks.comJulien Fortin - ifupdown2 - DebConf2016
  16. 16. Incremental changes on live configuration 16 ! ifup/down work on already UP or DOWN interfaces ! Only applies the new changes without disturbing the existing config on interface cumulusnetworks.comJulien Fortin - ifupdown2 - DebConf2016
  17. 17. Example 17cumulusnetworks.comJulien Fortin - ifupdown2 - DebConf2016
  18. 18. ifreload 18 !Reloads the network interface configuration ! By running `ifdown` on interfaces that were removed from /etc/network/ interfaces (or the provided file) ! And running `ifup` on all interfaces currently present in the config file. ! Pretty convenient rather than using `service networking restart` cumulusnetworks.comJulien Fortin - ifupdown2 - DebConf2016
  19. 19. JSON API 19 ! Supports interfaces imports and queries in JSON format ! Enables easier integration with automation/orchestration tools $ ifquery br0 auto br0 iface br0 inet static bridge-ports swp1.42 swp2.42 bridge-stp on $ ifquery br0 —format=json [ { "auto": true, "config": { "bridge-ports": “swp1.42 swp2.42", "bridge-stp": "on" }, "addr_method": "static", "name": "br0", "addr_family": "inet" } ] $ ifup -a -t json -i /etc/network/interfaces.json cumulusnetworks.comJulien Fortin - ifupdown2 - DebConf2016
  20. 20. Template support 20 Example: interfaces template to create bridges for vlan 1000 to 1100: ! Simplify cookie-cutter interface configurations with mako style templates http://www.makotemplates.org/ ! Provides option to plug-in alternate python template engines cumulusnetworks.comJulien Fortin - ifupdown2 - DebConf2016
  21. 21. Python add-on modules for interface configuration 21 ! address ! address virtual ! bond ! bridge ! bridgevlan ! dhcp ! ethtool ! link ! mstpctl ! usercmd ! vlan ! vrrpd cumulusnetworks.comJulien Fortin - ifupdown2 - DebConf2016
  22. 22. !Support for vlan filtering mode in the bridge driver !New add-ons ! VXLAN ! VRF !Performances ! Netlink !Policy manager ! To set or override system defaults What’s new since October 2015 ? cumulusnetworks.comJulien Fortin - ifupdown2 - DebConf2016
  23. 23. New bridge driver 23 !VLAN-aware Bridges ! New 802.1Q Linux kernel bridge driver enable vlan aware mode !Helps with scale ! Avoids creating 802.1Q vlan netdevs. Bypass netdevs and assign vlan ids to bridge ports !ifupdown2 ! Now supports vlan-aware or vlan-filtering bridges ! Continues to support traditional bridge configuration cumulusnetworks.comJulien Fortin - ifupdown2 - DebConf2016
  24. 24. Example cumulusnetworks.comJulien Fortin - ifupdown2 - DebConf2016
  25. 25. Virtual eXtensible LAN - VLANs 25 !The VXLAN protocol is a tunneling protocol designed to solve the problem of limited VLAN IDs (4096) ! 24 bits VXLAN ID max value: 16,777,216 !Network overlay ! Encapsulation of layer 2 frames using layer 3 UDP packets. cumulusnetworks.comJulien Fortin - ifupdown2 - DebConf2016
  26. 26. VXLAN example 26cumulusnetworks.comJulien Fortin - ifupdown2 - DebConf2016
  27. 27. Virtual Routing and Forwarding - VRF 27 !Linux Implementation ! Kernel v4.3 and forward !Developed by Cumulus Networks for Linux ! Consistent API across all Linux Devices - switches and hosts !IP technology that provides traffic isolation at layer 3 for routing ! Similar to how VLANs provide isolation at layer 2 cumulusnetworks.comJulien Fortin - ifupdown2 - DebConf2016
  28. 28. VRF example 28 red FIB table 1001 swp1 swp2 OR auto all iface red address 127.0.0.1/8 vrf-table auto iface swp1 vrf red iface swp2 vrf red auto all iface red address 127.0.0.1/8 vrf-table auto %for i in range(1,4): iface swp${i} vrf red %endfor cumulusnetworks.comJulien Fortin - ifupdown2 - DebConf2016
  29. 29. New policy infrastructure 29 !Defining default value for add-ons ● There is the expectation that removing configuration parameters from the networking config file (and doing an ifreload -a) will restore a default parameter (if one exists) ! The JSON configuration will dictate default setting and behavior for each modules implementing this policy configuration Default location ! /var/lib/ifupdown2/policy.d/*.json User location ! /etc/network/ifupdown2/policy.d/*.json ! By Sam Tannous from Cumulus cumulusnetworks.comJulien Fortin - ifupdown2 - DebConf2016
  30. 30. Policy Manager example cumulusnetworks.comJulien Fortin - ifupdown2 - DebConf2016
  31. 31. The Netlink transition 31 !Ifupdown2 scale but we can do better ! We are using standard Linux tools, such as iproute2, for many operations ! Execution of external commands slow things down !Netlink is the answer ! Netlink is a IPC mechanism primarily between the kernel and user space processes. ! Moving from iproute2 to direct netlink drastically improve performances. !Next : pure Netlink backend ! We plan on having a pure netlink backend with possibility to fall back on iproute2 when netlink capabilities are not available. cumulusnetworks.comJulien Fortin - ifupdown2 - DebConf2016
  32. 32. Python-nlmanager 32 !In-house python netlink library for networking ops ! By Daniel Walton from Cumulus. !Soon available on Debian ! Right now the code is shipped within ifupdown2 package http://repo3.cumulusnetworks.com/repo/pool/cumulus/p/python-nlmanager/ cumulusnetworks.com
  33. 33. Config size 33cumulusnetworks.comJulien Fortin - ifupdown2 - DebConf2016
  34. 34. Debian upstreaming 34 !Ifupdown2 on debian sid and jessie-backports ! Since october 2015 thanks to our sponsor (Piotr) : https://packages.debian.org/sid/ifupdown2 ! Available on apt or download the deb file echo “deb http://ftp.de.debian.org/debian sid main” >> /etc/apt/sources.list cumulusnetworks.comJulien Fortin - ifupdown2 - DebConf2016
  35. 35. What’s new? !Next ! Ifupdown2 version 2.0 before code freeze in December ! Increase performances (netlink and other stuff) ! Fix bugs reported by the community and Cumulus clients.
  36. 36. Getting started 36 ! Ifupdown2 on github : https://github.com/CumulusNetworks/ifupdown2 ! Ifupdown2 documentation : https://cumulusnetworks.github.io/ifupdown2 ! Cumulus Linux ships with ifupdown2 in releases 2.1 or greater : https://cumulusnetworks.com ! Article comparing ifupdown and ifupdown2 : https:// support.cumulusnetworks.com/hc/en-us/articles/202933638-Comparing- ifupdown2-Commands-with-ifupdown-Commands ! Get in touch with us : julien@cumulusnetworks.com roopa@cumulusnetworks.com cumulusnetworks.comJulien Fortin - ifupdown2 - DebConf2016
  37. 37. Example of contribution 37cumulusnetworks.comJulien Fortin - ifupdown2 - DebConf2016
  38. 38. 38 >1.5M Ports powered by Cumulus Networks technology 465+companies across for 
 main industry verticals 145Telecom /
 Service Provider 139 Public / Private
 Cloud 101Government / Education / R & D 81 SaaS / Web 2.0 ifupdown2 user base cumulusnetworks.comJulien Fortin - ifupdown2 - DebConf2016
  39. 39. © 2014 Cumulus Networks. Cumulus Networks, the Cumulus Networks Logo, and Cumulus Linux are trademarks or registered trademarks of Cumulus Networks, Inc. or its affiliates in the U.S. and other countries. Other names may be trademarks of their respective owners. The registered trademark Linux® is used pursuant to a sublicense from LMI, the exclusive licensee of Linus Torvalds, owner of the mark on a world-wide basis. Thank You! 39 Bringing the Linux Revolution to Networking julien@cumulusnetworks.com cumulusnetworks.comJulien Fortin - ifupdown2 - DebConf2016

×