1.
Neutron Advanced Services

2.
About Me
• Sean Roberts
• VP Development at
Akanda Inc
• Former OpenStack
Board Director
• Past Yahoo,
VMware, Stanford,
and Genentech

3.
Where Are We Headed Today?
OpenStack Neutron Networking Basics
Advanced Services:
LBaaS, VPNaaS, FWaaS
Neutron: Liberty and Beyond

4.
OpenStack Neutron
Networking Basics

5.
OSI Model
Physical Layer
Data Link Layer
Network Layer
Transport Layer
Session Layer
Presentation Layer
Application Layer
1
2
3
4
5
6
7
TCP, UDP
IPv4,IPv6, ICMP
HTTP, DNS, etc
ARP, Ethernet,
VLAN

6.
Akanda Project
Architecture
Akanda
Management/
Orchestration Physical Network (L2)
Nova
Neutron
Open:OVS/LinuxBridge Proprietary
Akanda L2 Agnostic Overlay Support
Akanda Adv Services: Routing/LB/FW
OpenStack APIs

7.
OpenStack

8.
Neutron

9.
Reference Neutron
neutron-server
Database
L3 Agent
L3 Agent
L3 Agent
Advanced
Service
Advanced
Service
Advanced
Services
Message
Queue
DHCP Agent
DHCP Agent
DHCP Agent
L2 Agent
L2 Agent
L2 Agent
L2 Agent
L2 Agents

10.
neutron-server
REST API
SERVICE
RPC
SERVICE
PLUGIN

11.
Plugin Extensions
● Add logical resources to the REST API
● Discovered by server at startup
○ REST: /v2.0/extensions
● Common Extensions
○ Port binding extended attributes,
DHCP, L3, Provider, Quota, Security
Group

12.
2 Types of Plugins
Monolithic
Plugin
Mech Mgr
Modular Plugin
Type Mgr

13.
Monolithic Plugin
Typical among SDN
vendors
They come in two varieties:
● Proxy
● Direct control
PLUGIN

14.
Modular Plugin
Delegates calls to proper
drivers
Two kinds of drivers
● Type Driver
● Mechanism Driver
Mech Mgr
PLUGIN
Type Mgr

15.
Why Not Flat?

16.
IsolationVLAN
• 802.1Q
• limited
• underlay must
support
GRE/VXLAN
• L2 encapsulated in
L3
• routable
• overlay independence

17.
Tunneling
A
D
CB

18.
Neutron Advanced
Services

19.
Reference
Implementation
Load Balancing as a Service
HAProxy
Octavia Project
http://octavia.io

20.
VPN as a Service
OpenSwan
Router
Metadata Proxy
VPN Driver
● Reference implementation
uses OpenSwan
● Site-to-Site
● Multiple connections per
tenant
● IKE, IPSec

21.
Firewall as a Service
• Reference Implementation is
Currently Experimental and
not production ready
• Whats next?
L3 Agent
Router
Metadata Proxy
Firewall Driver

22.
Akanda

23.
What is Akanda
● Akanda is a multi-process, multi-
threaded Neutron advanced
services orchestration service
● It currently supports routers and
in the near future, load
balancers, VPNs and firewalls

24.
Core Akanda Principles
● Simple
● Compatible
● Open Development (Apache v2)

25.
The Rug really tied the room
together

26.
Reference Neutron
neutron-server
Database
L3 Agent
L3 Agent
L3 Agent
Advanced
Service
Advanced
Service
Advanced
Services
Message
Queue
DHCP Agent
DHCP Agent
DHCP Agent
L2 Agent
L2 Agent
L2 Agent
L2 Agent
L2 Agents

27.
Neutron + the Rug
L2 Agent
L2 Agent
L2 Agent
L2 Agent
L2 Agent
Message
Queue
L3 Agent
L3 AgentService
Instance
neutron-server
Database
Akanda
(the rug)

28.
Router Instance Lifecycle
● Router per tenant distributed throughout
the cluster
● The router controls the data flow at layer
3 level of the TCP/IP network stack

29.
Akanda Project Details
● Get the source: https://github.
com/stackforge/akanda
● Project status and tarballs: https:
//launchpad.net/akanda
● Documentation: http://docs.akanda.io
● IRC - #akanda on freenode.net

30.
Neutron: Liberty and
Beyond

31.
OpenStack’s Big Tent
● Open Design
● Open Development
● Open Community
● Open Source

32.
The Neutron Stadium
● Common Forum
● Improved
Consistency
● Shared
Governance

33.
Neutron: Liberty
● IPAM
● BGP Speaker
● NFV
Enhancements
● Service Function
Chaining
● Enhanced
Security Groups
● Paying Down
Technical Debt Canadian2006 - Liberty, Saskatchewan (CC-by-sa-3.0)
commons.wikimedia.org/w/index.php?title=User:Canadian2006&action=edit&redlink=1

34.
Questions