Networking Component - Neutron (Cisco) | January -> Zero to current knowledge
Cisco Nexus driver FireWall as a Service … waa?? FWaaS demo
VPN as a Service VPNaaS VPNaaS demo
ML2 plugin - Modular layer 2 plugin for OpenStack neutron by Cisco
Before ML2 you had to pick either Open cSwitch or Linux bridge Plugin
With the Previous Cisco Plugin you had to control the open vSwitch Agent and the Cisco Nexys switch
with the LM2 Plugin, within ML2 you choose with type of driver, GRE/VLAN / VXLAN then select one or more mechanism managers (Open vSwitch / Linux Bridge ) which allows mix and matching
— Q Open Daylight? http://www.opendaylight.org/
two physical switch drivers
Cisco Nexus Arista http://www.aristanetworks.com/
ML2 replaces the open vSwitch and Linux bridge plugins
The Cisco Nexus ML2 Driver manages clan creation on the 3k/5k/7k switches as instances are launged, migrated or terminated works with Open vSwitch mechanism driver, and Nexus physical switching
Currently there’s no API to configure the plugin, just .ini files.
ported from the original cisco nexus openstack plugin - currently available in Havana release
Dane LeBlanc gave a demo that showed how the ML2 plugin actually added and removed VLAN’s to the Nexus switch as instances were created! (Pretty spiff! )
VPN as a Service Presentation by Cisco
Experimental in Havana and is targeting the site2site vpn use case
Cloud1 <----> VPN TUNNEL <---> Cloud2
Only support for PSK , no certificates currently Uses configuration files to control operations “/opt/stack/data/neutron/ipsec/<router-UUID/…”
Reference implementation has been released and visible in the horizon dashboard CLI and REST API’s are available
Great Demo of point2point VPN between two openstack implementations! very cool!
FWaaS - FireWall as a Service - new Feature in OpenStack Havana by Cisco Contributors - BugSwitch, Dell, PayPal and Cisco
Initial reference implementations - iptables rules on routers
How - Service Plugin + Agent + Driver Where - Layer 3 Only Currently implemented with 1 firewall / tenant
Horizon Addition to allow Vender panels in Havana - By Cisco This allows for N1k Configuration through the Horizon web console in OpenStack (w00t)
The N1K doesn’t currently work on KVM (boo) but when is does we’ll be able to use it in OpenStack (yay) Demo showed creating network profile with either VLAN of overlay network types.