Page History

...

Glossary

...

1. Advanced Isolated network mode:

• DHCP

• Static NAT

• Source NAT

• FirewallNetwork ACL

• Virtual Networking

2. VPC network mode:

• DHCP

• Static NAT

• Source NAT

• Network ACL

• Virtual Networking

  Note: If User needs Password Reset funtionality, then they can choose UserData Service and select VirtualRouter for isolated networks or VPCVirtualRouter for VPC as the ServiceProvider.

...

•  The initial implementation targets the Xen Server and ESXI hypervisor. Additional services will be supported in subsequent releases

Advantages

All the network isolation and routing is handled by the Nuage SDN solution. Routing of the packets happen at hypervisor itself. Virtual Router is not used for routing the packets thus the current issue of the Virtual Router being the bottleneck is avoided. The Virtual Router VM is spawned used only for Password reset functionality. The Nuage solution also helps significantly improve the agility and scale of a CS deployment as compared to a Virtual Router based deployment

...

All the above components needs to be provisioned for the plugin to function properly. Also, Nuage VSP plugin directly talks with Nuage VSD using Rest API. So, all the components needs to be running to test the plugin functionality. NuageVsp plugin depends on the plugin client library. This needs to be installed on the management server as part of CloudStack management server installation.

The following tests should be verified before declaring the feature complete:

...

a) Create a network offering for VPC with default deny all rule and select services supported by Nuage VSP plugin for VPC. Choose NuageVsp as the service provider for DHCP, SourceNAT, StaticNAT, NetworkACL and Virtual Networking services. Choose NuageVspVpc for NerworkACL service 

    Choose VPCVirtualRouter as the service provider for UserData service.

b) Create a VPC offering with the same services that were selected to create the network offering. 

bc) Create an a VPC and select with NuageVspVpc(No Load Balancer) option for the Load Balalcer combo boxthe VPC offering created above.

dc) Create a tier and select the network offering created above

ce) Spawn a 2 VMs. VMs should each get an IP address. They should ping each other. SSH to a box on the external network should fail

df) Create a Static NAT and associate it one of the VM

eg) Add an Network ACL Egress rule for the network with source CIDR as 0.0.0.0/0, protocol as TCP and ssh port number

fh) SSH to box that is in the external network should work

g) Password reset for the VM should work

Use Cases

Advanced Isolated Network

There is no change in the existing Cloudstack work flow to create an advanced isolated network

VPC

When creating a VPC, NuageVspVpc(No Load Balancer) option needs to selected to specify the Public Load Balancer. This provider does support load balancer functionality but it identifies NuageVspVpc as the provider for VPC. There is no other There is not change in the existing Cloudstack work flow to create VPC, tier, Network ACL etca VPC.

When the first VM is spawned either in Isolated network or in a tier of VPC, NuageVSP plugin creates logical network topology in VSD and information is pushed down in VSC. Nuage SDN solution then takes care of providing network isolation, connectivity, routing, Static NAT.

Architecture and Design description

A Nuage VSP pluign plugin will be developed to add Nuage network virtualization into CloudStack

...

NuageVspElement

a) Create/Delete NetworkACL, Firewall and Egress rule in VSP

b) Create/Delete Static NAT

NuageVspVpcElement

a) Create/Delete NetworkACL

b) Spawn/Delete VR

NuageVspManager

a) Create a default VPC offeringb) Handle sync to clean up the stale entities in VSP

...

A new Service provider called NuageVsp will be added. This needs to be enabled for the physical network that has the Guest Network with VSP isolation. Nuage VSD information need to be configured for NuageVsp Service provider

Note: NuageVsp network plugin depends on a NuageVsp plugin client library. So, this client library needs to installed on management server as part of CloudStack management server installation. When a NuageVsp provider information is added for the guest network,

plugin loads the client library and then uses the library to make REST API calls to Nuage VSD to create logical topology, VMs etc..

Web Services APIs

None

UI Flow

...