Revision as of 02:44, 13 July 2010

Networking Overview

Live notes may be taken for this topic at: http://etherpad.openstack.org/Networking

Nova Implementation

Current implementation

• Private networking and VPNs
  • Instances attached to separated VLAN tagged bridges
• IP Address allocation handled by API
• DHCP Server assigns addresses

Future implementation

• Pluggable Network Implementation
  • Support for flat networking model
  • Support for IP injection
• Network is its own worker process and uses queue
• Support for dedicated network hardware

Rackspace Implementation

Current implementation

• Flat Network Design
• Networking configurations injected into instances, or pulled via a Guest Agent
• Instances protected by various IPTables, Ebtables, Arptables rules
  • Protects instances from IP/MAC Address Spoofing
  • Protects instances from ARP Poisoning Attacks
• Host machines connect three Datacenter Networks: public, service-net, management-net
  • Management-net is used for communication from controllers to host.
• Instances connected to single bridge for each network, public, service-net
• Bandwidth throttling.

Future implementation

• Addition of host-net bridge for internal communication from Instances.
  • Needed for Hypervisor agnostic communication for Guest Communication. (we can't rely only on XenStore)
  • IPs assigned via DHCP over local host network.
  • Is this an additional guest network interface or does this piggy back existing?
• Open vSwitch
  • Instance networking protection rules could be pushed into the vSwitch.

IPv6

IPv6 should have first-class support, we can derive IPv4 address binding with the IPv6 to IPv6 mapping space and configuration options.

IPv4 Countdown Clock