Jump to: navigation, search

Difference between revisions of "Obsolete:Networking"

Line 3: Line 3:
  
 
Live notes may be taken for this topic at: http://etherpad.openstack.org/Networking
 
Live notes may be taken for this topic at: http://etherpad.openstack.org/Networking
 +
 +
== Nova Implementation ==
 +
 +
Current implementation
 +
* Private networking and VPNs
 +
** Instances attached to separated VLAN tagged bridges
 +
* IP Address allocation handled by API
 +
* DHCP Server assigns addresses
 +
 +
Future implementation
 +
* Pluggable Network Implementation
 +
** Support for flat networking model
 +
** Support for IP injection
 +
* Network is its own worker process and uses queue
 +
* Support for dedicated network hardware
  
 
== Rackspace Implementation ==
 
== Rackspace Implementation ==
Line 24: Line 39:
 
* [http://openvswitch.org/ Open vSwitch]
 
* [http://openvswitch.org/ Open vSwitch]
 
** Instance protection rules could be pushed into the vSwitch.  
 
** Instance protection rules could be pushed into the vSwitch.  
 
== Nova Implementation ==
 
 
Current implementation
 
* Private networking and VPNs
 
** Instances attached to separated VLAN tagged bridges
 
* IP Address allocation handled by API
 
* DHCP Server assigns addresses
 
 
Future implementation
 
* Pluggable Network Implementation
 
** Support for flat networking model
 
** Support for IP injection
 
* Network is its own worker process and uses queue
 
* Support for dedicated network hardware
 
  
 
== IPv6 ==
 
== IPv6 ==

Revision as of 02:43, 13 July 2010

Networking Overview

Live notes may be taken for this topic at: http://etherpad.openstack.org/Networking

Nova Implementation

Current implementation

  • Private networking and VPNs
    • Instances attached to separated VLAN tagged bridges
  • IP Address allocation handled by API
  • DHCP Server assigns addresses

Future implementation

  • Pluggable Network Implementation
    • Support for flat networking model
    • Support for IP injection
  • Network is its own worker process and uses queue
  • Support for dedicated network hardware

Rackspace Implementation

Current implementation

  • Flat Network Design
  • Networking configurations injected into instances, or pulled via a Guest Agent
  • Instances protected by various IPTables, Ebtables, Arptables rules
    • Protects instances from IP/MAC Address Spoofing
    • Protects instances from ARP Poisoning Attacks
  • Host machines connect three Datacenter Networks: public, service-net, management-net
    • Management-net is used for communication from controllers to host.
  • Instances connected to single bridge for each network, public, service-net
  • Bandwidth throttling.

Future implementation

  • Addition of host-net bridge for internal communication from Instances to all host network for storage.
    • Is this an additional network interface or does this piggy back existing.
    • Need Hypervisor agnostic communication for Guest Communication.
  • Open vSwitch
    • Instance protection rules could be pushed into the vSwitch.

IPv6

IPv6 should have first-class support, we can derive IPv4 address binding with the IPv6 to IPv6 mapping space and configuration options.

IPv4 Countdown Clock