Open Hybrid Cloud Powered by Openstack Dennis Gu

Open Hybrid Cloud Powered by Openstack Dennis Gu, Leo Li Huawei Technology Co. Ltd.

Agenda 1 Trend of Hybrid Cloud & Key Challenges 2 Architecture of Openstack powered Hybrid Cloud 3 Live Demo 4 Summary

Hybrid Cloud is the next hop of Infrastructure Consolidation Stage 1: Server Virtualization Stage 2: Single DC Cloud Virtualization Cluster VM VM VM Host … Stage 4: Hybrid Cloud Multi DC Openstack Cloud over. Cloud Single DC Openstack Cloud VM Host VM Cluster Resource utilization improvement l CAPEX saving l Stage 3: Multi-DC Cloud … VM Cluster Flexibility and Speed l via automation l Openstack Cloud Multi-site service l offering l Self-bulit cloud 3 rd party cloud Optimized Cost efficiency l and Business agility l

Hybrid Cloud Benefits for Enterprise Private Cloud Public Cloud Backup / Recovery Private Cloud App Instances Public Cloud Migrating / Scaling App Instances Backup the cold data into Public Cloud to reduce Private Cloud CAPEX. Private Cloud Auto Scaling the application into Public Cloud to solve the “Cloud Burst” challenge & enable Dev&Test in public Cloud instead of private cloud. Easy migrating between Private Cloud and Public Cloud without changing any configuration, which give end-user the freedom to choose suitable cloud in different life cycle. Public Cloud App backend &Web Front Access Distribution Deploy non-critical Application (Web Front) in Public Cloud to improve end-user experience.

Hybrid Cloud Benefits for Public Cloud Marketplace Germany T-System Cloud GW China Remote Resource Allocation CTC Public Cloud 3 rd party Public Cloud /Private Cloud Openstack Public Cloud GW Germany Enterprises (e. g. BMW ) in China App Instances Migrating App Instances Offering better user experiences of interactive Cloud Seamless moving workloads from non-Openstack services (Video, Workspace, Cloud Storage) to remote public Cloud or private Cloud to Openstack public Cloud tenants without local DC presence. Cloud Public Cloud App Instances 3 rd party Public Cloud Provision/ Scaling App Instances Satisfy temporary burst traffic requirement in case self-owned physical resource is temporarily not enough

However, Challenges still ahead Deploy mode A A Hybrid cloud Deploy mode B Challenge 1: Hard to provide real unified management … Image Meta data Data Vol Security Rule API Difference AWS AMI Yes Subnet + VM 90% across heterogeneous Clouds v. Cloud VMDK No No Tenant 60% Azure VHD No Yes Tenant + VM 70% Openstack q. Cow 2 Yes Tenant + VM 100% (base)

However, Challenges still ahead v. Switc h v. Switch Challenge 2: Hybrid Brings More Complicated Manual Work in Network management Private Cloud Public Cloud Address is not managed across clouds ACL and communication matrix need to be setup manually Manually VPN connection is complex

However, Challenges still ahead A Hybrid cloud Challenge 3: Hard to move across clouds Is your hybrid cloud a continent or … Image can not shared across clouds SG/FW/LB is not managed across clouds many islands? Move workloads across clouds? It is a big task! Automatically scale across clouds? No!

However, Challenges still ahead Challenge 4: Hybrid Cloud v. Switch A P A P P W A P I P W N P I N W I N A P A LP P i A LP n P i u LP n x u i n x u x v. Switch A P P W A P I P W N P I N W I N A P A LP P i A LP n P i u LP n x u i n x u x A P A P W P A P I LP P W N ! i P I L n i u W N I n x N u x v. S wi tc h A P LP i n u x A P P W A P I P W N P I W N I N v. S wi tc h A P A LP P i A LP n P i u LP n x i u n x u x A P P W A P I P W N ! P I L i W N I n N u x v. S wi tc h ! L ! i L n i u n x u x ! !W !WI I WN I N N ! ! Li n Lnu i u x n x u x v. S wi tc h A P A LP P i A LP n P i u LP n x i u n x u x Security Risks Hided in Hybrid Cloud Inter cloud Data inspection Attack from public network Attack from other tenant 01011011001 Private cloud A P P W A P I P W N P I W N I N Public cloud

Agenda 1 Trend of Hybrid Cloud & Key Challenges 2 Architecture of Openstack powered Hybrid Cloud 3 Live Demo 4 Summary

Open Hybrid Cloud driven by unified Openstack API Unified Cloud Service & Orchestration ERP/CRM service Cloud Marketplace /CRM/Billing Desktop Service Virtual Server service Dev. Ops service Big Data service DB service Auto Scaling service Object Storage service • Open cloud ecosystem PBX service … • Unified & flexible deployments across all clouds Cloud Broker (Cascading Open. Stack) Heat Nova Cinder Neutron 3 rd party public cloud Cloud GW movements between clouds • Simple scaling across clouds Private Cloud GW • Seamless workload Open. Stack Clouds Cloud GW • Secured network across clouds KVM/XEN WANaa. S

Cloud Broker in “Openstack Hybrid Cloud” Standard cascading Cloud Broker (Cascading Openstack) Heat Keystone Glance Nova Cinder Openstack project Neutron (Tricircle) is used to orchestrate & connect multiple Proxy 01 Proxy 02 Cloud Gateway Proxy 03 clouds. Cloud Gateway https: //github. com/open stack/tricircle

Cloud Gateway in “Openstack Hybrid Cloud” Cloud Broker (Cascading Openstack) A Standard Openstack VM is deployed on top of heterogeneous back-end clouds corresponding to Cloud Gateway Nova Cinder Cloud Driver V 2 V GW specific Openstack AZs, Neutron Hyper Switch in order to take over the BGW Storage GW control of the infra. resources

Unified networks across clouds Cloud Broker (Cascading Openstack) Cascaded Openstack IGW VGW IGW Tenant 1 WANV BGW VM VM Cascaded Openstack Tenant 1 WANV VGW BGW VM Security Agent Fusion. Network VM Security Agent IGW Tenant 1 WANV Hyper Switch VGW BGW v. Cloud Network Tenant 1. Net 1(DTLS) Internet-VPN or Dedicated-Line One network across clouds Unified IP address Management Layer 2/3 connection across clouds ACL configure across clouds DTLS secure tunnel across clouds Multi-tenant vx. LAN networks VM VM Security Agent VPC Network Hyper Switch

Smoothly migrate App across Cloud Broker (Cascading Openstack) Cascaded Openstack V 2 V Gateway IGW VGW IGW Tenant 1 WANV BGW VM VM Cascaded Openstack Tenant 1 WANV VGW Fusion. Network BGW VM VM Security Agent IGW Tenant 1 WANV Hyper Switch VGW BGW v. Cloud Network Tenant 1. Net 1(DTLS) Internet-VPN or Dedicated-Line Auto V 2 V across clouds One image for all clouds One touch migration across clouds Auto scaling across cloud VM VM Security Agent VPC Network Tenant 1. Net 1(DTLS) Hyper Switch

DR across Cloud Broker (Cascading Openstack) Cascaded Openstack Tenant 1 VM Tenant 1 VGW VM VM VGW Fusion. Storage VM v. Cloud Storage Vol 2 Internet-VPN or Dedicated-Line DR from any cloud to any other cloud RPO: 15 min ~ 24 hours RTO: 1 hours VM VGW Storage Vol 1 Gateway Provider store Tenant 1. Net 1 Tenant 1 VM Storage Vol 1 Gateway 1 AWS Storage Provider store Vol 2

Docker over Open. Stack Hybrid Clouds APP’ APP Key Benefits: …. - Unified networking policy& security Local Docker image registry Container Orchestration and Scheduler (Tenant 2) Container Orchestration and Scheduler (Tenant 1) governance for Docker deployments across clouds Cloud Broker (Cascading Open. Stack) - No need for VM image transformation between different hypervisors C C VM Openstack Cloud C VM C C VM Heterogeneous 3 rd party Cloud VM - “Hyperswitch driver”(in Hypervisor) not visible to end user

Agenda 1 Trend of Hybrid Cloud & Key Challenges 2 Architecture of Openstack powered Hybrid Cloud 3 Live Demo 4 Summary

Demo environment Hybrid Cloud Powered by Openstack Located in Shenzhen, China (Private Cloud based on Openstack) Located in Shenzhen, China (Private Cloud based on Vmware v. Cloud) Located in Singapore, AP (Region of Amazon Public Cloud)

Demo 1: Unified Management of multiple clouds

Example App for Scaling across Clouds http: //www. emall. com Load Balancer Cloud Burst WEB Front Use case introduce: App Backend & DB • Emall is an online shopping mall. • Main site is deployed in Private Cloud. • It would use public cloud resource to scale out the Web Front in case any promotion activity. *This demo is using Magento open source e-commerce platform

Demo 2: App Scaling across Clouds

Example App for Migration & DR across Clouds http: //www. epad. com DNS Load Balancer App App Migrate Load Balancer Fail Over App Use case introduce: • Epad is an online editor. • Main site is deployed in Private Cloud. • It would use public cloud resource as DR point. *This demo is using etherpad open source platform

Demo 3: App Migrate across Clouds

Demo 4: App Disaster Recovery across Clouds

Demo 5: Deploy Container App across clouds Container Orchestration C C VM VM

Agenda 1 Trend of Hybrid Cloud & Key Challenges 2 Architecture of Openstack powered Hybrid Cloud 3 Live Demo 4 Summary

Openstack based Hybrid Cloud solution summary üUnified Openstack API & Ecosystem covering heterogeneous Public/Private Cloud: p. Once you can manage Openstack based cloud, you can manage other clouds. üConsistent experience & capabilities across multiple clouds : p. Unified tenant oriented L 2 /L 3 networking automation across multiple clouds p. Unified app configuration template to easy scale across clouds p. One click backup/disaster recovery from one cloud to another cloud p. One click V 2 V migration from one cloud to another p. Docker container over multiple Cloud

Related Topics & Sessions for Openstack Hybrid Cloud Related existing projects: Tricircle (Openstack Cascading for multi-site Openstack): Used by hybrid solution to consolidate multiple clouds / regions. Proposed incubate projects for Openstack powered Hybrid Cloud: AWS/Azure/v. Cloud Adapter: Translate underlay clouds API to Openstack API. V 2 V Service: Migrate VM/Volumes from one cloud to another cloud. Hyper network: Virtual network across different clouds.

Welcome to Huawei booths to see more demos & deep dive discussions! www. huawei. com Copyright© 2015 Huawei Technologies Co. , Ltd. All Rights Reserved. The information in this document may contain predictive statements including, without limitation, statements regarding the future financial and operating results, future product portfolio, new technology, etc. There a number of factors that could cause actual results and developments to differ materially from those expressed or implied in the predictive statements. Therefore, such information is provided for reference purpose only and constitutes neither an offer nor an acceptance. Huawei may change the information at any time without notice.