Virtualized Services Directory on Hyper-V for Windows Server 2012 R2 – part 2

In the previous article of this serie, we deployed an empty VM to host our VSD server, in this second part, we are getting serious and deploy the Linux OS and the VSD server role!

Proceed to CentOS 6.7 Installation

We will proceed to default minimal install of Centos 6.7:

1. Double click on the Contoso – VSD VM and click the Power Button to start it.
2. Start the setup of CentOS:centos2_thumb[2]
3. Proceed to setup choosing the desired keyboard, then select “Basic Storage Device” and “Yes, Discard Any Data”

Type the hostname for this machine “vsd.contoso.local” and the desired timezone.

Select the root password and Use All Space, Write Changes to Disk.

Click Done and Begin Installation.

4. Once the setup is finished, restart the virtual machine and log in to do basic networking setup:

dhclient eth0

In order to edit my configuration files, I don’t like vi and I prefer nano, so I get it online.

sudo yum install nano –y

Edit the file Ethernet NIC settings to match your network:

nano /etc/sysconfig/network-scripts/ifcfg-eth0

DEVICE=”eth0″

NM_CONTROLLED=”no”

ONBOOT=”yes”

TYPE=”Ethernet”

BOOTPROTO=”static”

IPADDR=192.168.0.95

GATEWAY=192.168.0.1

NETMASK=255.255.255.0

Then verify the network name:

nano /etc/sysconfig/network

NETWORKING=yes

HOSTNAME=vsd.contoso.local

Add the server IP address to the host file:

nano /etc/hosts

192.168.0.95 vsd.contoso.local

Restart networking:

nano service network restart

Check your hostname settings with the following command:

hostname -f

5. Install and configure NTP service:

sudo yum install ntp -y

sudo nano /etc/ntp.conf

Modify the ntp.conf to have the internal server:

nano /etc/ntp.conf

server 192.168.0.211

We choose to use a local NTP server in our environment with IP address 192.168.0.211. Please note that Microsoft Active Directory provides a NTP server feature, however, we are not able to use it as a time source for VSD, so we use an alternate NTP Server.

Save the file and restart the NTP client:

sudo service ntpd restart

Set the ntpd service to start automatically:

sudo chkconfig ntpd on

Verify that host is synchronized by using the following command:

ntpstat

centos3_thumb[2]

6. We will pin our distribution to CentOS 6.7 repository in order to avoid it to be upgraded to later builds.

We create a new file with repo information:

sudo nano /etc/yum.repos.d/c67.repo

[c67]

name=CentOS67

enabled=1

gpgcheck=0

baseurl=http://vault.centos.org/6.7/os/x86_64/

7. Install dependencies

sudo yum install openssh-clients libedit bind-utils -y

Linux Integration Services Update

Microsoft regularly updates Kernel driver and user mode components in order to make Linux work best and add new supported features. We need to install Linux Integrated Services (LIS) in order to ensure best behavior.

1. Open a SSH session to the newly configured machine, in this guide, we use MobaXTerm:

lis1_thumb[3]

2. Download LIS 4.1.2 components from Microsoft Website with the following command:

sudo yum install wget -y

wget https://download.microsoft.com/download/7/6/B/76BE7A6E-E39F-436C-9353-F4B44EF966E9/lis-rpms-4.1.2-1.tar.gz

3. Extract the files using the following command:

tar -xvzf lis-rpms-4.1.2-1.tar.gz

4. Update the components using:

cd LISISO/

sudo ./upgrade.sh

lis2_thumb[2]

5. Once the setup is finished, restart the virtual machine and log back in.

Deploying the VSD Components on the VM

In this section, we will copy the VSD installation binaries to the VSD VM and proceed to setup.

1. Extract the “Nuage-VSD-*-ISO.tar.gz” file that you have downloaded. Get the .ISO file and go to Hyper-V manager and mount it to the “CONTOSO-VSD” VM.
2. Mount the ISO file on your system:

sudo mkdir /media/cdrom

sudo mount /dev/sr0 /media/cdrom

3. Launch VSD Setup process:

cd /media/cdrom

sudo ./install.sh

vsd3_thumb[3]

Select standalone option by hitting s and confirm with yes.

vsd4_thumb[1]

4. Wait for the install to finish, note that it can take several minutes.

Once the setup is finished, you can check that all the components are active using the following command:

monit summary

This should display you the following output for a fully ready environment:

vsd5_thumb[2]

Verify that VSD is operational

Once the setup has completed, you can verify the configuration and log in the portal for the first time. After reviewing operations, you will be able to install a product key to start using licensed features of your VSD.

1. Open your favorite browser and enter the URL:

https://192.168.0.95:8443

Add exception to your browser as this is expected for a first configuration running with self-signed certificate

vsd6_thumb[2]

2. Login with the default credentials:

vsd7_thumb[2]

3. Welcome to the world of VSD!

vsdui.png

So that you have VSD installed, you can start playing and creating organizations, networks, network policies.

But in order to have it enforced somewhere, you need a network controller. Monitor this blog and we will review the steps to make Nuage Networks controller run on Hyper-V!

For more information:

You can also reach me at my email if you need more info and trial: [first].[last]@nuagenetworks.net!

Arnaud

Got Software Defined Networking?

So you probably have been hearing about Software Defined Networking for now quite a while but are wondering how it is exactly, how does it work and how you implement that in your organization. In a serie of posts here, I will give you some overview of the various components it takes to deploy SDN in the real world.

But first let’s start with the basics in this post!

Why doing SDN?

With the utilization of clouds, we seen datacenters becoming very much bigger and way denser so we had the address the following problems:

  • we reached the technical limits of IP networks for multi-tenancy (VLAN can host only 4 thousands different networks, Private VLAN not suitable for all situations)
  • networking processes being manual and error-prone: while compute virtualization allowed us to gain more flexibility and programmability, not much has evolved for a long time in the networking field, hence networking becoming a bottleneck for growth and innovation.
  •  vendor-specific extensibility: how to go beyond some hardware specific limitations and pricing?

While they embrace cloud models, companies adopt at the same time new paradigms for developing and hosting their applications:

  • From endpoints VM that are relatively long-lived, we host applications in containers that average lifetime is in minutes.
  • Micro-services architectures makes endpoint instantiated on-demand, so the slowness of network processes and procedures is no longer bearable and we must automate everything.

For many organizations it has become crazily complex to understand network flows, so we need to adopt a new paradigm for managing hybrid clouds. With SDN we want to achieve:

  • fully automated network operations: from a complex architecture to deploy, we want a high level of abstraction environment that will deploy transparently to networks the policies we define.
  • decreasing operational costs: because you better administer the network, you can better use the compute, densifying your virtualization platform and getting more ROI and savings on energy.
  • improving security and compliance: you program once your network and its rules, and it gets applied everywhere.
  • accelerating time to market: network is programmed, is integrated into companies development strategies and tooling for DevOps.
  • openness and easiness of integration: easy to deploy third parties components to enable new features and functions on the network.

Now you might think that SDN is only for cloud providers or huge organizations. Actually it’s not only the case. Take 10 hypervisors that you have in your current environment: can you describe precisely the networking operations that occurs on them? Can you tell for sure if a VM moves from one host to the other if its going to survive? How do you manage integration with other networks: non-virtualized or in cloud services?

Nuage Networks Solution Overview

Nuage Networks has been doing SDN for more than 5 years with field-proven cases and big deployments for mission-critical workloads with a suite of solutions. Here’s what we have for you:

Virtualized Services Platform

VSP Is a suite of solutions that solves today’s IT datacenter and hybrid-cloud challenges:

vspfamily

  • VCS: for the datacenter needs, network virtualization, distributed routing and switching, micro-segmentation, enterprise distributed firewall and many more.
  • VSS: allows you to define filtering services and micro-segmentation. (It’s a brand new product to be released soon.)
  • VSAP: extends SDN with an additional level of control and management: it enables administrators to understand all the routing topology, correlates the IP layers, routing layers and the virtualization layers to offer you quicker problem resolution and preventive guidance.
  • VNS: is our solution for SD-WAN. It allows you extend the SDN to branch offices and cloud services easily.

In this specific post, I will start introducing the datacenter solution building blocks:

Virtualized Cloud Services

logovsp VCS is the foundation for an open and dynamically controlled datacenter network fabric. It allows you to program your datacenter, and leverage SDN features:

  • deploy and configure networking as you do for compute (and storage).
  • automate the network.
  • simplify the network and network policy definition.
  • connect any datacenter elements extending layer-2 domains including both virtualized and non-virtualized environments.
  • growing cloud-scale: supporting thousands of tenants with highly redundant infrastructure.

VSD

logovsd Virtualized Services Directory contains all intelligence and logic for your network and SDN environment. VSD is where you define your networks, their traffic templates and policies, filtering and micro-segmentation and network analytics.
Configuration can be achieved on a HTM5-based GUI, via CLI, or directly via REST API if you want to program your SDN environments (if you do DevOps for instance and want to automate operations).This is how VSD UI looks like for the logical networks definition: you can see a layer-3 domain with the different networks defined on it and the different VM and interfaces participating into this. You can then define all common networks operations via this interface: vsdui

VSC

logovsc Virtualized Services Controller: this is the SDN engine. It get instructions from the VSD configuration and translates that into language that network devices will understand. Those devices can be hypervisors, routers, switches or network gateways.

Into the SDN World we commonly refer this guys to have two interfaces:

  • Northbound interface: takes instruction from the logical management place, it usually takes the form of REST API calls.
  • Southbound interface: sends instruction to devices that are responsible to enforce the network rules, it usually takes the form of OpenFlow messages.

VSC is based on the very robust and field-proven SR-OS (Service Router OS from Nokia, this is the router that equips a quite significant part of the core internet routers).

VRS

logovrs Virtualized Routing & Switching is a component that serves as virtual endpoints for network services. It monitors the compute-related events and notifies the SDN controller that will send the appropriate rules (as defined in the cloud management solution and in VSD). It is installed on the hypervisors in your environment, we now support: VMware, KVM, Docker and more to be announced (very) soon!

VSG or VRGS

7850vsg Virtualized Services Gateway enables non-SDN enabled devices to be integrated into the SDN model. You just plug your grand-pa server to the regular RJ45 port, and it will belong to SDN world, applying policies and network settings as you defined them. It’s a pretty nice piece of hardware operating L2/L4 with performance up to 1 Terabit/s capacity in a single rack unit.

We also have a virtual appliance of this component called VRS-G for VRS-Gateway, that allows you include baremetal assets into SDN world.

Putting it together

So for a logical view of a basic SDN solution in an organization, it would look something like that:

simplehierarchy

  • Management Plane: VSD allows you to define the network configuration, you can also use various cloud management solutions of the market: OpenStack, VMware, CloudStack and more.
  • Control Plane: SDN controller work is done by VSC. For high availability of this role, you can deploy multiples VSC, they will exchange route information with other controllers and it will also allow you to scale-out linearly for the biggest environments. You can also very easily integrate it with your edge routing devices (from your service providers), as they talk BGP too.
  • Data Plane: You deploy VRS on the hypervisors in your environment, non-virtualized workloads can be connected to gateways (VRS-G, VSG, or third parties hardware).

Conclusion

Now that we have the basics, we will further study in later post how the components talk together to make a complete and comprehensive enterprise SDN solution. In the meantime, you can review:

You can also reach out to me directly if you need help with SDN!

Arnaud