Marcio Pilotto

Gerente de Engenharia de Sistemas

Juniper Networks
Network Virtualization

VM VM VM VM

Blue
VM VM Virtual Network VM VM

Red Green
VM VM Virtual Network Virtual Network

Bare Metal Servers

Virtualized Servers

Switches

Dynamic Network Virtualization at Scale

Without the complexity, scaling limitations, and stability issues of VLANs
Virtual Network Policies

Policy
only HTTP
NAT

Green Red
Virtual Network Virtual Network

VM VM VM VM VM VM

Virtual Network Policies

At a high level of abstraction, applied at the boundaries of virtual networks.
Service Chaining

Policy
only HTTP
NAT + DPI + Cache + Firewall

Green Red
Virtual Network Virtual Network
Virtual Virtual Physical
VM VM VM Service Service Service VM VM VM
DPI Cache Firewall

Service Chaining
Policy based application of virtual and physical services with scale-out.
Firewall, Intrusion Prevention, Load balancer, Cache, WAN optimizer, proxy, ...
Network Virtualization
Logical Abstraction Physical Realization

CloudStack
OpenStack
Red
Virtual Network REST APIs

Virtualized Contrail
Contrail Controller
VM VM VM VM Controller
Server
XMPP

Green
VM VM VM VM
Virtual Network
G1 R1 G2 R2

VM VM VM VM

Routing Instance Overlay Tunnel

Contrail vRouter MPLS/GRE, MPLS/UDP, VXLAN

Hypervisor Underlay Switch

Gateway to Bare Metal Server
Logical Abstraction Physical Realization

CloudStack
OpenStack

Red Contrail
Virtual Network Controller

BGP + Netconf
L3VPN or E-VPN
VM VM

VM VM
R1 R2

Overlay Tunnel
VXLAN

Gateway Switch

Bare Metal Server

(Non-Virtualized Server)
 BMS INTEGRATION
Phy + Virt
Interconnect

PHYSICAL LOGICAL
Contrail allows inter-VN traffic
Control using BGP (L3VPN / EVPN)
L3 GW in the overlay without having
Config using XMPP / Netconf to go through the L3 GW
VM
1 Intra-VN traffic from VM to
BMS goes through the TOR.
Control using EVPN (BGP) for QFX
Config using OVS-DB/XMPP / Netconf VM Green
2
VXLAN
Top of Rack Switch
Tunnels For traffic from VM in overlay
to non-overlay VMs or BMS,
traffic needs to go through the
Virtual §  Contrail enables Legacy VLAN based L3 GW
Network
architecture interconnecting with a Cloud
Virtual architecture
Network VM3
§  Does not need a gateway when going from
WAN /
VLAN one VN to another on the Contrail overlay Internet
VM1 Green L3 GW

VM2 VM4
Virtual Machines on VM
any Hypervisor 3
VM5
VM Blue
VLAN 4

Bare Metal
… Blue
VM
Server 5
SDN as a Compiler
North-Bound REST APIs
Contrail SDN Controller
Service Data Model
(Logical Abstraction)

Transformation Engine Analytics

Technology Data Model

(Physical Realization)

South-Bound Protocols
 Highly Available Scale-Out
REST REST

Logically Centralized
(Physically Distributed)
Configuration Analytics
Nodes Nodes Horizontally Scalable
IF-MAP
Highly Available
BGP (Active-Active)
BGP Control
Nodes Federated

XMPP BGP, Netconf

vRouters Gateways
•  Internet Scale Technology Applied to the Cloud
•  Massively Scalable
•  Standard Proven Technologies, Multi-Vendor
•  Network Virtualization
•  Virtual Network Policies
•  Service Chaining
•  Cloud Interconnect
•  Seamless Integration with Physical Network
•  Integrated Rich Analytics

opencontrail.org