When Network Meets Apps!
Putting networking and application
together
Nati Shalom
Samuel Bercovici
GigaSpaces
@natishalom
Radware
@samuelbercovici
Agenda
• Overview of Networking and Apps
• What’s Changed?
• Putting Networking and Apps by
Example
• Future Work
Let’s Start
With Some
Basic
Definitions..
Application & Tiers
Web
Tier
Middle
Tier
Application
DB
Tier
Zoom into a Tier
Server (Physical/VM)
Operating System (RHEL 6.5 64bits)
IP
Address
IP
Address
TCP Port
Database System (MySQL)
Schema (Word-press)
Logical Connectivity
Web
Tier
Internet
Middle
Tier
DB
Tier
Where is the
network?
Multicast/Broadcast, Isolation
Web
Tier
DMZ
Middle
Tier
Backend Zone
DB
Tier
Multicast/Broadcast, Isolation
Web
Tier
DMZ
Middle
Tier
DB
Tier
Business center
Personal Data
Layer 3 Services
•
•
•
•
•
•
•
•
Subnet
GW
IPAM – DHCP
DNS
Web
Tier
Subnet
GW
IPAM – DHCP
DNS
Middle
Tier
•
•
•
•
Subnet
GW
IPAM – DHCP
DNS
DB
Tier
SLB
Availability
Web
Tier
Middle
Tier
DB
Tier
SLB
SLB
SLB
Availability & Scalability
Web
Tier
Middle
Tier
DB
Tier
SLB
SLB
SLB
FW
Security, Availability & Scalability
Web
Tier
Middle
Tier
DB
Tier
SLB
SLB
SLB
FW
Management
Web
Tier
VPN
Middle
Tier
Monitoring, CI
DB
Tier
Expertise & Responsibilities
• Network / Security Manager
– Network (L2, L3)
– Network Services (Router, NAT, DHCP, DNS, LB)
– Network Security (FW, VPN)
• IT / Application Manager
–
–
–
–
–
Server
Operating System
Software Stack
Application Artifacts
Server’s Security
Load Balancer - Management
• Network based
– L2 and L3
– L4 Load balancing
Network Manager
• Application based
– Cookie based, L7 Content
Switching, L7 Content
Modifications, etc.
Network Manager ?
Application Manager ?
What’s Changed?
Everything is Software Defined
We Can Automate Everything..
Networking
Orchestration
Compute
Neutron/Nova APIs
• Layer 2 networks
• Layer 3 subnets
– IP address management – DHCP based
– Router / gateway / NAT
• Port
• Security groups
• Floating IP
• Layer 4-7 Services
– Load balancing
– VPN
– Firewall
Putting Network and Apps Together
by Example
HEAT
• OpenStack
Orchestration
TOSCA
• Topology
• Orchestration
• Specification of
• Cloud
• Application
WordPress Simple Example
•
•
•
•
•
•
App Network
App Subnet
App Port
Security Group
Apache Floating IP
Router Gateway
Apache Server
•
•
•
•
Data Network
Data Subnet
Data Port
Security Group
DB Server
Apache
MySQL
Router
Wordpress
Network Topology View
Heat Topology View
Heat Template
TOSCA (Like) Example
•
•
•
•
•
•
App Network
App Subnet
App Port
Security Group
Apache Floating IP
Router Gateway
•
•
•
•
Data Network
Data Subnet
Data Port
Security Group
Apache Server
DB Server
NodeJS
MongoDB
Router
NodeCeller
Monitoring, Logging CI
Network View
Topology View
TOSCA (Like) Blueprint
Adding AutoScaling
& Avaliability..
Scalability & Availability
Router
Tenant1 Project
L3
VIP1
Management Network
Tenant1 Network
Web
Alteon VA Project
VM
3
VM
4
VM
5
AutoScaling - Heat Template
• web_server_group - OS::Heat::AutoScalingGroup
• web_server_scaleup_policy - OS::Heat::ScalingPolicy
• web_server_scaledown_policy - OS::Heat::ScalingPolicy
• cpu_alarm_high - OS::Ceilometer::Alarm
•
•
•
•
cpu_alarm_low - OS::Ceilometer::Alarm
monitor - OS::Neutron::HealthMonitor
pool - OS::Neutron::Pool
lb - OS::Neutron::LoadBalancer
So far so good, but...
Considering Real Life Scenarios
Continuous Availability
Across AZ’s and Regions
– Adding Affinity Rules for Compute,
Storage
– Auto-Scaling, etc.
Continuous Deployment
– Updating policies and workflow
– Creating new deployments every
day
Real Life
Example
(HP Print)
•
•
•
•
30 HP Helion Public Cloud accounts
500+ compute instances
1400 Peak deployments per day
100+ compute instances per
management cluster
• 100x developers doing
deployments in a consistent fashion
• <2H Move from HP Helion Public
Cloud tenant to a fully provisioned and
deployed service
Networking and Apps in Real Life...
Future
work..
• TOSCA HEAT
Translator Project
Putting
TOSCA and
HEAT Closer..
(IBM, GigaSpaces, Huawei,
Vnomic ..)
• TOSCA
enablement in
Heat Juno
• Integrating
Cloudify and Heat
Group Based
Policies
• Addressing
Network
Requirements
from the
application
perspective
• Delegation of
Responsibilities
References
• Examples (Step by Step Guide)
– Heat Example
– TOSCA (like) Example
• TOSCA Translator Project
– Git Project
•
•
•
•
•
OpenStack Heat Project
Cloudify – getcloudify.org
Radware Load Balancing as a Service
Group Based Policies – GPB
AutoScaling Policies – Heat Template