Network automation CERN Stefan Stancu ITCSCE Stefan Stancu
- Slides: 7
Network automation @ CERN Stefan Stancu (IT-CS-CE) Stefan Stancu / 2017 -12 -06 Network automation @ CERN 1
Bare-metal provisioning 4’ 500 network equipment devices • Heterogeneous configurations • 4000 switches 400 routers Stefan Stancu / 2017 -12 -06 Network automation @ CERN 2
Bare-metal prov. (current solution) In house development (~200 k LOC, mainly Perl) Ensure consistent (verifiable) configuration based on Lan. DB (database with network model) custom Device Driver CLI smart diff templates Lan. Db Current config (device syntax) / Router • Switch • Configuration generation Generated config (device syntax) Stefan Stancu / 2017 -12 -06 Config patch + command x - command y Network automation @ CERN 3
Bare-metal prov. (new gen) custom NAPALM Config translation templates Lan. Db Generated config (device syntax) / Router In house development (Python) Use available platform with multi-vendor support (NAPALM) Switch • • Configuration generation Generated config (abstract syntax) Stefan Stancu / 2017 -12 -06 Config diff/patch + command x - command y Network automation @ CERN 4
Network automation platform (new gen) Orchestration Lan. Db Model generation APIs Other orchestration platforms Model Driver Device Interface (CLI, NETCONF, etc. ) Multivendor Network devices Stefan Stancu / 2017 -12 -06 Network automation @ CERN 5
Models Orchestration Model generation Model: vendor-independent representation of the network configuration • Model • Driver • Device Interface (CLI, NETCONF, ) Network devices Some modules available but, rather thin coverage • Open. Config (network operators initiative to build vendor neutral data models) IETF – RFCs (e. g. interfaces model) Dream of more vendor neutral models • For standardized features Stefan Stancu / 2017 -12 -06 Network automation @ CERN 6
Orchestration Model generation Orchestration: provisioning of overlay networks • Device Interface (CLI, NETCONF, ) VXLAN for tunnels BGP-EVPN for control plane • • Model Driver Current de-facto standardization seems to be: • New architecture for the Data Centre Open. Stack for VMs management We need a Neutron plugins for: • • SDN controller: e. g. (Open)Contrail • Network devices Hypervisors (KVM based) Bare-metal devices • gateways to non-virtualized infrastructure (e. g. internet or tapes) • Avoid conflicts with bare-metal provisioning Stefan Stancu / 2017 -12 -06 Network automation @ CERN 7