Revision as of 22:08, 12 July 2010

Networking Overview

Live notes may be taken for this topic at: http://etherpad.openstack.org/Networking

Rackspace Implementation

Current implementation

• Flat Network Design
• Networking configurations injected into instances, or pulled via a Guest Agent
• Instances protected by various IPTables, Ebtables, Arptables rules
  • Protects instances from IP/MAC Address Spoofing
  • Protects instances from ARP Poisoning Attacks
• Host machines connect three Datacenter Networks: public, service-net, management-net
  • Management-net is used for communication from controllers to host.
• Instances connected to single bridge for each network, public, service-net
• Bandwidth throttling.

Future implementation

• Addition of host-net bridge for internal communication from Instances to all host network for storage.
  • Is this an additional network interface or does this piggy back existing.
  • Need Hypervisor agnostic communication for Guest Communication.
• Open vSwitch
  • Instance protection rules could be pushed into the vSwitch.

Nova Implementation

Current implementation

• Private networking and VPNs
  • Instances attached to separated VLAN tagged bridges
• IP Address allocation handled by API
• DHCP Server assigns addresses

Future implementation

• Pluggable Network Implementation
  • Support for flat networking model
  • Support for IP injection
• Network is its own worker process and uses queue
• Support for dedicated network hardware

IPv6

IPv6 should have first-class support, we can derive IPv4 address binding with the IPv6 to IPv6 mapping space and configuration options.

IPv4 Countdown Clock