Difference between revisions of "Obsolete:Networking"
Line 3: | Line 3: | ||
Live notes may be taken for this topic at: http://etherpad.openstack.org/Networking | Live notes may be taken for this topic at: http://etherpad.openstack.org/Networking | ||
+ | |||
+ | == Nova Implementation == | ||
+ | |||
+ | Current implementation | ||
+ | * Private networking and VPNs | ||
+ | ** Instances attached to separated VLAN tagged bridges | ||
+ | * IP Address allocation handled by API | ||
+ | * DHCP Server assigns addresses | ||
+ | |||
+ | Future implementation | ||
+ | * Pluggable Network Implementation | ||
+ | ** Support for flat networking model | ||
+ | ** Support for IP injection | ||
+ | * Network is its own worker process and uses queue | ||
+ | * Support for dedicated network hardware | ||
== Rackspace Implementation == | == Rackspace Implementation == | ||
Line 24: | Line 39: | ||
* [http://openvswitch.org/ Open vSwitch] | * [http://openvswitch.org/ Open vSwitch] | ||
** Instance protection rules could be pushed into the vSwitch. | ** Instance protection rules could be pushed into the vSwitch. | ||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
== IPv6 == | == IPv6 == |
Revision as of 02:43, 13 July 2010
Networking Overview
Live notes may be taken for this topic at: http://etherpad.openstack.org/Networking
Nova Implementation
Current implementation
- Private networking and VPNs
- Instances attached to separated VLAN tagged bridges
- IP Address allocation handled by API
- DHCP Server assigns addresses
Future implementation
- Pluggable Network Implementation
- Support for flat networking model
- Support for IP injection
- Network is its own worker process and uses queue
- Support for dedicated network hardware
Rackspace Implementation
Current implementation
- Flat Network Design
- Networking configurations injected into instances, or pulled via a Guest Agent
- Instances protected by various IPTables, Ebtables, Arptables rules
- Protects instances from IP/MAC Address Spoofing
- Protects instances from ARP Poisoning Attacks
- Host machines connect three Datacenter Networks: public, service-net, management-net
- Management-net is used for communication from controllers to host.
- Instances connected to single bridge for each network, public, service-net
- Bandwidth throttling.
Future implementation
- Addition of host-net bridge for internal communication from Instances to all host network for storage.
- Is this an additional network interface or does this piggy back existing.
- Need Hypervisor agnostic communication for Guest Communication.
- Open vSwitch
- Instance protection rules could be pushed into the vSwitch.
IPv6
IPv6 should have first-class support, we can derive IPv4 address binding with the IPv6 to IPv6 mapping space and configuration options.