1. Quantum: What it is and Where it’s going
Lew Tucker
VP/CTO Cloud Computing
Cisco Systems, Inc.
@lewtucker

2. + Quantum
OpenStack: open source software for building highly scalable public and private clouds
Designed as a set of services forming the basis of a cloud platform
Evolving through community process in which all members may contribute
Quantum is a community project to build a “Network Service” for advanced networking capabilities

3. Open Source Is Where “Standard” Cloud Infrastructure Will Be Defined
Open standards [require] multiple providers, access to code and data, and interoperability of services.
The obvious solution is an open source reference model as the standard.
Potential examples of such would be the OpenStack effort.
Simon Wardley, CSC
From “A Question of Standards”

4. Cloud Computing Paradox
Current Cloud Computing model is great for application development, self-service, and automation, but is missing the potential programmability of the infrastructure
But I can help (sigh)
I’m a Cloud.
I don’t need you!
Applications and infrastructure could interact with each other to provide the best performance, experience and reliability
What is missing is the right mechanism to expose networking infrastructure capabilities without bringing all the complexity into the application layer

5. Network Technologies in the Data Center and Internet
Partners
CRS-1
7600
6500
Nexus 7000
(w/ Cat 6500
as Services
Chassis)
Nexus 5000
w/ Nexus 2000
Fabric Extender
UCS, MCS (or Generic Rack or Blade Servers)
Nexus 1000v
MDS
Consolidated Storage Arrays (EMC, etc.)
Application
Software
Virtual
Machine
VSwitch
Access
Aggregation
Core
Peering
IP NGN Backbone
VMWare Xen Hyper-V
ASR 9000
ASR 1000
Storage and SAN
Compute
Applications
IP NGN
Application Control (SLB+)
Service Control
Global Site Selection
Intrusion Detection
Firewall Services
Virtual Device Contexts
Fibre Channel Forwarding
Fabric Extension
Fabric-Hosted Storage Virtualization
Virtual Contexts for FW and SLB
Port Profiles and VN-Link
Line-Rate NetFlow
Secure Domain Routing
Service Profiles
Virtual Machine Optimization
10G Ethernet
10G FCoE
4G FC
1G Ethernet
VM to vSwitch
vSwitch to HW
App to HW / VM
Storage Media Encryption
Let’s abstract all this

6. OpenStack Design Summit April 2011
Compute service (EC2): virtual machines
Specify vCPU, Memory, Disk
Launch instance (image, mem_size, disk)
Suspend, clone, migrate
Storage service (S3, EBS): virtual disks
Specify storage amount, access rights
Store object
Create/attach block
What to do about networks?
App Svr OS VM ??
Networking

7. OpenStack Today: Nova Compute – Swift Storage
Service
Virtual Machines
Swift
Storage
Object Store
Basic Network Connectivity
Nova and Swift API
Servers
Disks
Networking is embedded inside of Nova compute, and un-accessible to application developers
Details and differences associated with network provisioning complicates a simple compute service
Difficult to track changes in networking as Software-defined Networking (SDN) comes into play

8. With Quantum - Networking becomes a Service
Nova Compute
Service
Virtual Machines
Swift
Storage
Object Store
Basic Network Connectivity
Nova, Swift, and Quantum API
Servers
Disks
Nova becomes simpler, easier to maintain and extend
Developers have ability to create multiple networks for their own purposes (multi-tier apps)
May support provisioning of both virtual and physical networks – differences captured through plugin’s
Quantum
Service
Virtual Networks
Networks

9. Virtualization in a multi-tenant environment
Servers are virtualized through partitioning
Storage through aggregation
Networks through slicing/tunnels/tagging…
Networks are a shared resource carrying traffic for all tenants across shared links
Network overlays and virtualization create private networks through tagging, routing, encapsulation (tunneling), and separation of control (openflow, etc.)
VLANS, NVGRE, VXLAN, STT, LISP
Quantum is designed to support private networks

10. But wait….. Don’t security groups, and firewalls provide isolation?

11. Yes But that’s a topic for another time…
Yes But that’s a topic for another time….. Rest assured, Nova with Quantum supports both

12. 2011 Design Summit - community-driven merger of proposals
… and others
NetworkService
Citrix/Rackspace/Nicira
NetworkServicePOC
NTT/Midokura
NetworkContainers
Cisco
NaaS Core Design
Intel
Quantum

13. Abstractions and APIs Compute service (EC2): virtual machines
Launch instance (image, mem_size, disk)
Suspend, clone, migrate
Storage service (S3, EBS): virtual storage
Store object
Create/attach block
Network service (Quantum): virtual networks
Create/delete private network
Create “ports” and attach VM’s
Assign IP address blocks (DHCP)
App Svr OS VM
App Svr OS VM

14. With a simple RESTful API
POST /v1.1/tenants/abc/networks.json
Request: {
“network”:
“name”:”my_db_network” }
Response:
“id”: “98bd f d-8659e ”

15. Quantum in Horizon GUI
My Private Network

16. What you can do with Quantum service
Create multiple, virtual, isolated networks per tenant (FE-Net, DB-Net)
Multiple network interfaces per VM (in-line services)
Create ports on networks (QoS, profiles) and attach VM’s
Have control over your own “private” IP addresses
Access through a user-friendly CLI and GUI (Horizon)
Invoke additional capabilities through extensions
Support different underlying networking implementations (VLANS, L2/L3 tunnels, etc.)

17. For controlled innovation and experimentation
Quantum is built using a plug-in architecture to support different networking technologies
Quantum API
API Extensions:
For controlled innovation and experimentation
Quantum Service
Network abstraction definition and management
Does NOT do any actual implementation of abstraction
Vendor/User Plug-In
Maps abstraction to implementation on physical network
Can provide additional features through API extensions
Quantum Plug-in API

18. Quantum API interactions
User Application – CLI - Horizon Dashboard - Tools
Tenant API
Tenant API
Network Service (Quantum)
Compute Service
(Nova)
System
Admin
Internal API
Admin API
Plug-In
Compute Node
Hypervisor vSwitch
Physical
Network Router/Switch
Clustered Network Controller

19. Plug-in’s available today
Open vSwitch
Linux bridge
Nicira NVP
Cisco (Nexus switches and UCS VM-FEX)
WIP: VXLAN
NTT Labs Ryu OpenFlow controller
NEC OpenFlow
Big Switch Floodlight

20. What application developers want
Keep it simple - hide complexity while exposing capabilities
Provision their own, abstracted networking resources and topologies
Potential to create their own networking services
Isolation and non-interference
Ability to experiment while leveraging all that is provided by lower-level protocols

21. Application Architecture on a Whiteboard

22. Architecture grows as you scale-out, some components move to be closer to the internet, others move to the back-end

23. Different tenants and applications have different needs
Tenant “B”
Tenant “A”
App OS VM
DataBase
Web Svr OS VM
/24
/24
App Svr OS VM
App Svr OS VM
MemCach OS VM
MemCach OS VM
Tenant “C”
DataBase OS VM
DataBase OS VM
DataBase OS VM
App
Internet Access, Management Network
and Multi-tenant Services
Internet
Gateway
VPN
Service
Service Provider Network

24. Quantum today and in the near future
Quantum 1.0 is available today for Essex as an incubation project
Supports isolated L2 networks
Multiple plug-in’s available
Folsom release – moving into Core
Quantum V2 API (in development)
Support tenant-created subnets
Integrated with Horizon (dashboard) and Keystone (identity/token/policy)
Includes “Melange” IPAM for IP address management
Includes DHCP/Dnsmasq functionality

25. Quantum V2: Introduces Subnets, IP addr mgmt, Gateways, DNS
POST /v2.0/subnets
Request: {
"network_id": "98bd8391-…",
"cidr": " /24", }
Response
"id": "e76a23fe-…",
"network_id": "98bd ",
"gateway_ip": " ",
"dns_nameservers": [" "],
"reserved_ranges": [ { "start" : " ", "end": " "},
{ "start": " ", "end" : " "}],
"additional_host_routes": [],

26. Create and attach ports to VM interfaces3

27. Where we will take Quantum in the future?
Purposely started simple with basic abstraction, but with many blueprints expect to see rapid innovation, while maintaining backward compatibility
More plug-in’s for other networking paradigms
Extensions for QoS, port profiles, etc.
Used in the development of new network services
Applied to create virtual data centers spanning multiple sites
New uses in network service provider networks, mobile networks, sensor networks, HPC networks

28. Lew Tucker, Cisco Systems
Quantum
Network Service
For more information…
Quantum API
Quantum Admin Guide (Essex):
Code on Github:
Quantum V2:
Lew Tucker, Cisco Systems
@lewtucker