10/04/12 Under the Hood: Network Virtualization with OpenStack Neutron and VMware NSX Somik Behera – NSX Product Manager Dimitri Desmidt - NSX Senior Technical Product Manager

Agenda Intro – VMware philosophy on OpenStack (2 minutes) 10/04/12 Agenda Intro – VMware philosophy on OpenStack (2 minutes) Why Neutron + NSX VMware Plugin (20minutes) Demo of OpenStack + "vCenter/KVM" + "Neutron/NSX VMware Plugin" (10 minutes) Q&A (10 minutes) 2

Agenda Intro – VMware philosophy on OpenStack (2 minutes) 10/04/12 Agenda Intro – VMware philosophy on OpenStack (2 minutes) Why Neutron + NSX VMware Plugin (20 minutes) Demo of OpenStack + "vCenter/KVM" + "Neutron/NSX VMware Plugin" (10 minutes) Q&A (10 minutes) 3

VMware Philosophy on OpenStack An open framework for building clouds Assembles a solution from underlying Compute, Network, Storage components. Can be managed and automated using many solutions. Public Clouds Private Clouds Hybrid Cloud Seamlessly extend your data center to the public cloud Virtual Workspace Manage access to services, applications and data for any device The Foundation for IT: Software Defined Datacenter Software-Defined Data Center Virtualize the entire data center Management and Automation Storage and Availability Compute Network and Security VMware develops the best-in-class components that make up the Software-defined-Datacenter. The starting point or the fundamental building block of SDDC was the Compute Hypervisor or rather the Virtual Machines running on Hypervisors. VMware’s vision for SDDC is aiming at bringing the benefits of virtualization to the rest of the datacenter, including Networking & Storage subsystems. We believe, Openstack is an open framework for building clouds, that helps one assemble a cloud using a combination of underlying compute, network & storage components. VMware supports customer choice in how they consume and build their cloud environments and our support for OpenStack provides customers with that choice. We also believe that OpenStack is a significant opportunity for VMware’s portfolio of best-in-class SDDC components covering Compute, Network, Storage & Management. Customer Choice VMware supports Customer choice. Our support for OpenStack enables choice An Opportunity for VMware SDDC VMware SDDC provides best-in-class Compute, Network, Storage & management solutions for OpenStack. We view OpenStack as an opportunity for VMware SDDC portfolio.

VMware Technologies and OpenStack Tenant-Side Benefits of OpenStack API & Ecosystem Horizon ( Web Portal ) CLI Tools & Scripts (DevOps Automation) vCAC Application Director Nova (Compute) Neutron (Network) Cinder (Block Storage) Glance (Image Store) Now taking a quick look at OpenStack project components and Vmware’s products, we can quickly see that a cloud requires elements that are Tenant-facing as well as Operator facing. End-users love consuming Nova, Quanutm, Cinder & Glance APIs that provide them a vendor independent, DevOps friendly API for building Cloud Applications. Vmware is enabling our portfolio of products to be compatible with OpenStack’s vendor independent APIs and ecosystem of tooling. We will also ensure that Vmware’s award winning management tools support OpenStack Clouds end-to-end to enable operators to operationalize and manage their cloud infrastructure in an uniform way. Choice of best-in-class virtualization & management technologies vSphere & vCenter NSX vSAN vCenter (Image Catalog) Cloud Operator Tools (vCenter, vCOPs, Log Insight etc.) Third Party Operator tools (Puppet/Chef, scripts, nagios...) OpenStack or 3rd Party Component Operator-Side VMware Component

Agenda Intro – VMware philosophy on OpenStack (2 minutes) 10/04/12 Agenda Intro – VMware philosophy on OpenStack (2 minutes) Why Neutron + NSX VMware Plugin (20 minutes) Demo of OpenStack + "vCenter/KVM" + "Neutron/NSX VMware Plugin" (10 minutes) Q&A (10 minutes) 6

OpenStack main projects Dashboard (horizon) Network (Neutron) Provides UI for other projects Provides network connectivity Image repo (glance) Object Storage (Swift) Compute (nova) Stores Images as Objects Provides Images Provides volumes Block Storage (cinder) Provides Authentication and Service Catalog for other Projects Identity (keystone)

Why Neutron + NSX VMware Plugin 10/04/12 Why Neutron + NSX VMware Plugin OpenStack Networking before Neutron Why people use OpenStack with Neutron? Why people use OpenStack with Neutron + NSX VMware Plugin? 8

OpenStack Networking before Neutron Nova offers "networking as a service" in OpenStack (nova-network) Note: It was the only offer before Quantum (old Neutron project name) Nova-network is still present today, and can be used instead of Neutron Points to keep in mind: Limited Network Topologies supported Only Flat, Flat DHCP and VLAN DHCP

OpenStack Networking before Neutron Nova offers "networking as a service" in OpenStack (nova-network) Note: It was the only offer before Quantum (old Neutron project name) Nova-network is still present today, and can be used instead of Neutron Points to keep in mind: Limited Network Topologies supported Only Flat, Flat DHCP and VLAN DHCP No 3-tier Network topology supported

OpenStack Networking before Neutron Nova offers "networking as a service" in OpenStack (nova-network) Note: It was the only offer before Quantum (old Neutron project name) Nova-network is still present today, and can be used instead of Neutron Points to keep in mind: Limited Network Topologies supported Limited Scale and Network Services supported Scale L2 (using VLAN), DHCP&DNS (using dnsmask), Security (using IPtables on hypervisors) IP address management (using SQL DB table) Limited Network Services No self-tenant L3, no Load Balancer, no VPN.

OpenStack Networking before Neutron Nova offers "networking as a service" in OpenStack (nova-network) Note: It was the only offer before Quantum (old Neutron project name) Nova-network is still present today, and can be used instead of Neutron Points to keep in mind: Limited Network Topologies supported Limited Network Services supported No integration with 3rd party Network solutions No ability to use 3rd parties to overcome the limitations of nova-network

OpenStack Networking before Neutron Nova offers "networking as a service" in OpenStack (nova-network) Note: It was the only offer before Quantum (old Neutron project name) Nova-network is still present today, and can be used instead of Neutron Points to keep in mind: Limited Network Topologies supported Limited Network Services supported No integration with 3rd party Network solutions Complex/Limited HA and management/monitoring

Why Neutron + NSX VMware Plugin 10/04/12 Why Neutron + NSX VMware Plugin OpenStack Networking before Neutron Why people use OpenStack with Neutron? Why people use OpenStack with Neutron + NSX VMware Plugin? 14

Why people use OpenStack with Neutron? Neutron improves nova-network in multiple areas Larger number of Network Topologies and services supported L3: Self-Tenant provisioning Security (ingress + egress rules support) LBaSS VPNaSS (coming)

Why people use OpenStack with Neutron? 10/04/12 Why people use OpenStack with Neutron? Neutron improves nova-network in multiple areas Larger number of Network Topologies and services supported L3: Self-Tenant provisioning Security (ingress + egress rules support) LBaSS VPNaSS (coming) Supports overlay Remove the VLAN limitation (using overlay with GRE) VM Hypervisor Any L2/L3 Fabric Hypervisor1-IP@  Hypervisor2-IP@ [GRE VM1-IP@  VM2-IP@] VM VM1-IP@  VM2-IP@

Why people use OpenStack with Neutron? Neutron improves over nova-network in multiple areas Larger number of Network Topologies and services supported L3: Self-Tenant provisioning Security (ingress + egress rules support) LBaSS VPNaSS (coming) Supports overlay Remove the VLAN limitation (using overlay with GRE) Open Solution Open to 3rd party solution: VMware NSX Plugin (Nicira Plugin) LinuxBridge Plugin OVS Plugin Cisco UCS / Nexus 5000 Plugin NEC Ryu Plugin etc

Why Neutron + NSX VMware Plugin 10/04/12 Why Neutron + NSX VMware Plugin OpenStack Networking before Neutron Why people use OpenStack with Neutron? Why people use OpenStack with Neutron + NSX VMware Plugin? 18

Why people use OpenStack with Neutron + NSX VMware Plugin? NSX VMware Plugin improves Neutron in multiple areas Scale Very high scale (thanks to the distribution "active/active" of the Control elements) Per NSX Domain: 60k VMs, 15k tenants, 1k hypervisors (and improved in each release) Active/ Active VM Hypervisor Any L2/L3 Fabric NSX Controller Cluster

Why people use OpenStack with Neutron + NSX VMware Plugin? NSX VMware Plugin improves Neutron in multiple areas Scale Very high scale (thanks to the distribution "active/active" of the Control elements) Today per NSX Domain: 60k VMs, 15k tenants, 1k hypervisors (and improved in each release) Very high throughput (thanks to the encapsulation off-loaded on the NIC) Per hypervisor: 20Gbps (with 2x10Gbps NIC bonding) NSX Controller Cluster VM Hypervisor Any L2/L3 Fabric 20Gbps bi-directional

Why people use OpenStack with Neutron + NSX VMware Plugin? NSX VMware Plugin improves Neutron in multiple areas Scale Very high scale (thanks to the distribution "active/active" of the Control elements) Today per NSX Domain: 60k VMs, 15k tenants, 1k hypervisors (and improved in each release) Very high throughput (thanks to the distribution "active/active" of the NVP Network Elements) Per NVP Gateway: 10Gbps++ Hypervisor Any L2/L3 Fabric NSX Controller Cluster Physical Layer Active/ Active NSX L2/L3Gateway VM VM VM VM VM VM 10Gbps++ bi-directional per NVP-GW

Why people use OpenStack with Neutron + NSX VMware Plugin? NSX VMware Plugin improves Neutron in multiple areas Scale Very high scale (thanks to the distribution "active/active" of the Control elements) Today per NSX Domain: 60k VMs, 15k tenants, 1k hypervisors (and improved in each release) Very high throughput (thanks to the encapsulation off-loaded on the NIC) Today per hypervisor: 20Gbps (with 2x10Gbps NIC bonding) Optimized traffic (thanks to the distribution of L3 and Security) Hypervisor x86 Server DC Fabric Neutron Router on Neutron Server A world without NSX Choke Point

Why people use OpenStack with Neutron + NSX VMware Plugin? NSX VMware Plugin improves Neutron in multiple areas Scale Very high scale (thanks to the distribution "active/active" of the Control elements) Today per NSX Domain: 60k VMs, 15k tenants, 1k hypervisors (and improved in each release) Very high throughput (thanks to the encapsulation off-loaded on the NIC) Today per hypervisor: 20Gbps (with 2x10Gbps NIC bonding) Optimized traffic (thanks to the distribution of L3 and Security) Hypervisor x86 Server DC Fabric NSX "North/South" Router A world with NSX

Why people use OpenStack with Neutron + NSX VMware Plugin? NSX VMware Plugin improves Neutron in multiple areas Scale (scale/throughput/optimization) HA and management/monitoring High-Availability of the Network Services is offered by design "for the management" Management Layer Active/ Active NSX Controller Cluster VM Hypervisor Any L2/L3 Fabric

Why people use OpenStack with Neutron + NSX VMware Plugin? 10/04/12 Why people use OpenStack with Neutron + NSX VMware Plugin? NSX VMware Plugin improves Neutron in multiple areas Scale (scale/throughput/optimization) HA and management/monitoring High-Availability of the Network Services is offered by design "for the transport" with stateful failover for L3 and NAT Hypervisor Any L2/L3 Fabric NSX Controller Cluster Physical Layer Active/ Active NSX L2/L3Gateway VM VM VM VM VM VM VM VM VM 802.1q

Why people use OpenStack with Neutron + NSX VMware Plugin? NSX VMware Plugin improves Neutron in multiple areas Scale (scale/throughput/optimization) HA and management/monitoring High-Availability of the Network Services is offered by design on both management + transport Management and Monitoring tools (statistics, port monitoring, port mirroring, connection tool, seamless upgrade, etc)

Why people use OpenStack with Neutron + NSX VMware Plugin? NSX VMware Plugin improves Neutron in multiple areas Scale (scale/throughput/optimization) HA and management/monitoring Advanced popular network services L3 with static routing 172.16.1.0/24 192.168.10.0/24 .2 Default GW: 10.20.2.1 192.168.1.0/24 next-hop 10.20.2.2 Default GW: 10.20.2.1 192.168.1.0/24 next-hop 10.20.2.2 172.16.1.0/24 action blackhole .1 Default GW: 10.20.2.1 10.20.2.0/24 Logical Networks .11 .12 LS-1A LS-1B LS-2A VM VM VM VM VM VM

Why people use OpenStack with Neutron + NSX VMware Plugin? NSX VMware Plugin improves Neutron in multiple areas Scale (scale/throughput/optimization) HA and management/monitoring Advanced popular network services L3 with static routing L2 "logical-physical" Hypervisor Any L2/L3 Fabric NSX Controller Cluster Physical Layer NSX L2/L3Gateway VM VM VM VM VM VM VM VM VM 802.1q

Why people use OpenStack with Neutron + NSX VMware Plugin? NSX VMware Plugin improves Neutron in multiple areas Scale (scale/throughput/optimization) HA and management/monitoring Advanced popular network services L3 with static routing L2 "logical-physical" ACL Security Groups applied here .1 ACL applied here 10.20.2.0/24 Logical Networks .11 .12 VLAN 10 LS-1A LS-1B LS-2A VM VM VM VM VM VM

Why people use OpenStack with Neutron + NSX VMware Plugin? NSX VMware Plugin improves Neutron in multiple areas Scale (scale/throughput/optimization) HA and management/monitoring Advanced popular network services L3 with static routing L2 "logical-physical" ACL QoS Tenant A Logical Switch A Tenant B Logical Switch B TA VM1 TA VM2 TB VM1 TB VM2 VM Hypervisor Any L2/L3 Fabric VM GOLD traffic DSCP marking for QoS on the physical fabric

Why people use OpenStack with Neutron + NSX VMware Plugin? NSX VMware Plugin improves Neutron in multiple areas Scale (scale/throughput/optimization) HA and management/monitoring Advanced popular network services L3 with static routing L2 "logical-physical" ACL QoS Optimization of Broadcast/Multicast traffic VM Hypervisor Any L2/L3 Fabric

Agenda Intro – VMware philosophy on OpenStack (2 minutes) 10/04/12 Agenda Intro – VMware philosophy on OpenStack (2 minutes) Why Neutron + NSX VMware Plugin (20 minutes) Demo of OpenStack + "vCenter/KVM" + "Neutron/NSX VMware Plugin" (10 minutes) Q&A (10 minutes) 32

Demo1 Demonstrate: 2 Tiers-Architecture with "logical/physical" communication L3 and L2 Mix of KVM and ESXi hypervisors

Demo2 Demonstrate: VMotion Port-Mirroring Failure of NVP-L3-GW

Demo3 Demonstrate: How to build a 2-tier architecture

Agenda Intro – VMware philosophy on OpenStack (2 minutes) 10/04/12 Agenda Intro – VMware philosophy on OpenStack (2 minutes) Why Neutron + NSX VMware Plugin (20 minutes) Demo of OpenStack + "vCenter/KVM" + "Neutron/NSX VMware Plugin" (10 minutes) Q&A (10 minutes) 36

Recap: Why OpenStack on VMware NSX VMware believes in enabling customer choice. Nicira/VMware was among the founders of Neutron project. VMware NSX with OpenStack is used by leading Enterprises & Service Providers. VMware NSX with OpenStack is supported by many OpenStack ecosystem companies. NSX

Select OpenStack & VMware NSX customers Public Clouds Enterprise Private Clouds