fits like lego - 5 ways to deploy guest networking over openstack neutron

® Copyright Stratoscale www.stratoscale.com @stratoscale +1 877 420 3244

Five ways to deploy Guest Networks over OpenStack Neutron

Liaz Kamper, StratoscaleJune 2016

Fits like LEGO

1

® Copyright Stratoscale www.stratoscale.com @stratoscale +1 877 420 3244 ® Copyright Stratoscale www.stratoscale.com @stratoscale +1 877 420 3244

Who are we?


Who should attend?

3

Architects Developers Fun Geeks


4

Godtfred Kirk Christiansen


Neutron Building Bricks

5

Layer 2 bricks Layer 3 bricks

Network

Port External Network

Subnet

Virtual Router

Extensionbricks


6Administrator / Single Tenant Multi-Tenancy

Deployment use cases


Single Tenant Direct Attach

Router& DHCP

Fast &Easy

CONSIDER CAREFULLY

Neutron not aware to L3

No Securitygroup


Single Tenant Isolated VLAN

8

ExternalRouter

Simple L2 connectivity

Local Subnet control

Securitygroups

Pros


Single Tenant Isolated VLAN

Routable subnet

No L3 services

by Neutron

ExternalRouter

Cons


Time to wake up…THIS IS THE IMPORTANT

PART


Layer3 Single Tenant Isolation

Public IP Save IP Resources

ExternalRouter

VirtualRouter

L3 Services Net Security

Internal External


12

Multi-Tenancy


Self Service Multi-Tenant

13

VirtualRouter

VirtualRouter

ExternalRouter

Tenant A

Tenant B


Self Service Multi-Tenant

14

Administrator allocated resources

Tenants self service

Enforce tenants

isolation and security


Administrator Control Multi-Tenant

15

VirtualRouter

ExternalRouter

Tenant A

Tenant B

Administrator controls

resources


How many ways to connect 6 LEGO bricks?…

Soren EilersDanish Math Professor

fits like lego - 5 ways to deploy guest networking over openstack neutron

Technology