TELCO CLOUD NEXT GENERATION STACK UPDATE Whats Changed

TELCO CLOUD NEXT GENERATION STACK UPDATE What’s Changed with Open. Stack-Helm and Tungsten Fabric. Helm ENTER THE TITLE O F YOUR OPENSTACK P RAlan E SMeadows E N T A– TAT&T ION Pete Birley – AT&T Vinay Rao - Juniper

AGENDA Introduction To Helm 2 Security Containerizati on Quality Tungsten Fabric-Helm AT&T Open. Stack-Helm Usage Update Project Update © 2018 AT&T Intellectual Property. All Rights Reserved. AT&T, the Globe logo, Mobilizing Your World and Direc. TV are registered trademarks and service marks of AT&T Intellectual Property and/or AT&T affiliated companies. All other marks are the property of their respective owners.

INTRODUCTION TO HELM Security Containerizati on Quality WHAT IS HELM? m helps you manage Kubernetes applications with Charts. Helm Charts help you define, inst and upgrade even the most complex Kubernetes applications. WHAT IS OPENSTACK-HELM? Helm provides a collection of Helm charts that deploy Open. Stack and its related infrastructu es. It has an acute focus on the production quality as well as the life cycle management fo WHO CONTRIBUTES TO OPENSTACK-HELM? AT&T 3 SKTelecom 99 Cloud Nokia © 2018 AT&T Intellectual Property. All Rights Reserved. AT&T, the Globe logo, Mobilizing Your World and Direc. TV are registered trademarks and service marks of AT&T Intellectual Property and/or AT&T affiliated companies. All other marks are the property of their respective owners.

OPENSTACK-HELM RECAP Security Containerizati on Quality WHERE WE IN SYDNEY? • All core Open. Stack services working, and upgradable • All ancillary services to support Open. Stack installable • Demonstrated hitless upgrades via Armada for all core services • Running services with Openv. Switch and Open. Contrail • Running Newton 4 © 2018 AT&T Intellectual Property. All Rights Reserved. AT&T, the Globe logo, Mobilizing Your World and Direc. TV are registered trademarks and service marks of AT&T Intellectual Property and/or AT&T affiliated companies. All other marks are the property of their respective owners.

PROGRESS SINCE LAST SUMMIT Security Containerizati on Quality WHAT HASCHANGED? CHANG • • • 5 Dynamic Configuration & Dependencies Consistent Patterns Across Charts Cron. Jobs for Maintenance Incorporation of Operator Feedback Network Enhancements: Linux Bridge, SRIOV support Production Ready Ancillary Services Using New Kubernetes Features Gate on multiple versions of Open. Stack and Images Logging, Monitoring, and Alerting © 2018 AT&T Intellectual Property. All Rights Reserved. AT&T, the Globe logo, Mobilizing Your World and Direc. TV are registered trademarks and service marks of AT&T Intellectual Property and/or AT&T affiliated companies. All other marks are the property of their respective owners.

PROGRESS SINCE LAST SUMMIT Security Containerizati on Quality Combined Helm-Toolkit Documentati on, Documentati on Well Upgradability of All Open. Stack-Helm Charts, not just Open. Stack itself! 6 Goals of 1. 0 Formalization of Standardization Defined Release Process © 2018 AT&T Intellectual Property. All Rights Reserved. AT&T, the Globe logo, Mobilizing Your World and Direc. TV are registered trademarks and service marks of AT&T Intellectual Property and/or AT&T affiliated companies. All other marks are the property of their respective owners.

AT&T USAGE Security NETWORK CLOUD 1. 0 • How is AT&T changing the way we deploy and manage Open. Stack in our Network Cloud? • Containers are now our new unit of software delivery across the stack • Sites defined declaratively in YAML – everything from Baremetal and Network assets (Hardare) to Helm Charts (Software) 7 • Open. Stack-Helm helps us deliver seamless updates, upgrades, and configuration changes to Open. Stack based sites Containerizati on Quality PROGRESS SO FAR • Network Cloud deployed by Airship is the foundation to our 5 G core platform supporting our 5 G launch in 12 Cities this year. • We have already successfully deployed 5 G PODs for system validation and are in the process of deploying several more to enable 5 G delivery using Airship. © 2018 AT&T Intellectual Property. All Rights Reserved. AT&T, the Globe logo, Mobilizing Your World and Direc. TV are registered trademarks and service marks of AT&T Intellectual Property and/or AT&T affiliated companies. All other marks are the property of their respective owners.

AT&T USAGE Security Containerizati on Quality CP 8 © 2018 AT&T Intellectual Property. All Rights Reserved. AT&T, the Globe logo, Mobilizing Your World and Direc. TV are registered trademarks and service marks of AT&T Intellectual Property and/or AT&T affiliated companies. All other marks are the property of their respective owners.

AT&T USAGE Security Containerizati on Quality CP Host OS 8 Baremetal Operating System (Ubuntu 16. 04) © 2018 AT&T Intellectual Property. All Rights Reserved. AT&T, the Globe logo, Mobilizing Your World and Direc. TV are registered trademarks and service marks of AT&T Intellectual Property and/or AT&T affiliated companies. All other marks are the property of their respective owners.

AT&T USAGE Security Containerizati on Quality CP Docker Host OS 8 Container Runtime Engine Baremetal Operating System (Ubuntu 16. 04) © 2018 AT&T Intellectual Property. All Rights Reserved. AT&T, the Globe logo, Mobilizing Your World and Direc. TV are registered trademarks and service marks of AT&T Intellectual Property and/or AT&T affiliated companies. All other marks are the property of their respective owners.

AT&T USAGE CP Security Kubernetes Docker Host OS 8 Containerizati on Quality Container Runtime Orchestration Container Runtime Engine Baremetal Operating System (Ubuntu 16. 04) © 2018 AT&T Intellectual Property. All Rights Reserved. AT&T, the Globe logo, Mobilizing Your World and Direc. TV are registered trademarks and service marks of AT&T Intellectual Property and/or AT&T affiliated companies. All other marks are the property of their respective owners.

AT&T USAGE CP Security Helm Kubernetes Release Management Kubernetes Container Runtime Orchestration Docker Host OS 8 Containerizati on Quality Container Runtime Engine Baremetal Operating System (Ubuntu 16. 04) © 2018 AT&T Intellectual Property. All Rights Reserved. AT&T, the Globe logo, Mobilizing Your World and Direc. TV are registered trademarks and service marks of AT&T Intellectual Property and/or AT&T affiliated companies. All other marks are the property of their respective owners.

AT&T USAGE Ceph(SDS CNI (SDN) ) CP Promena de Shipyard Drydock Armada Kubernetes Release Management Kubernetes Container Runtime Orchestration Host OS Quality Deckhand Helm Docker 8 Containerizati on Security Container Runtime Engine Baremetal Operating System (Ubuntu 16. 04) © 2018 AT&T Intellectual Property. All Rights Reserved. AT&T, the Globe logo, Mobilizing Your World and Direc. TV are registered trademarks and service marks of AT&T Intellectual Property and/or AT&T affiliated companies. All other marks are the property of their respective owners.

AT&T USAGE Ops Promena de Shipyard Alerting Drydock Armada Deckhand Kubernetes Release Management Kubernetes Container Runtime Orchestration Host OS Quality Security Helm Docker 8 Monitori ng Logging Ceph(SDS CNI (SDN) ) CP Containerizati on Security Container Runtime Engine Baremetal Operating System (Ubuntu 16. 04) © 2018 AT&T Intellectual Property. All Rights Reserved. AT&T, the Globe logo, Mobilizing Your World and Direc. TV are registered trademarks and service marks of AT&T Intellectual Property and/or AT&T affiliated companies. All other marks are the property of their respective owners.

AT&T USAGE Service Ops SDN Promena de Shipyard Alerting Drydock Security Armada Deckhand Kubernetes Release Management Kubernetes Container Runtime Orchestration Host OS 8 Monitori ng Helm Docker Quality Open. Stack Logging Ceph(SDS CNI (SDN) ) CP Containerizati on Security Container Runtime Engine Baremetal Operating System (Ubuntu 16. 04) © 2018 AT&T Intellectual Property. All Rights Reserved. AT&T, the Globe logo, Mobilizing Your World and Direc. TV are registered trademarks and service marks of AT&T Intellectual Property and/or AT&T affiliated companies. All other marks are the property of their respective owners.

CI / CD Drives Life-cycle Mgmt. AT&T USAGE Service Ops SDN Promena de Shipyard Alerting Drydock Security Armada Deckhand Kubernetes Release Management Kubernetes Container Runtime Orchestration Host OS 8 Monitori ng Helm Docker Quality Open. Stack Logging Ceph(SDS CNI (SDN) ) CP Containerizati on Security Container Runtime Engine Baremetal Operating System (Ubuntu 16. 04) © 2018 AT&T Intellectual Property. All Rights Reserved. AT&T, the Globe logo, Mobilizing Your World and Direc. TV are registered trademarks and service marks of AT&T Intellectual Property and/or AT&T affiliated companies. All other marks are the property of their respective owners.

CI / CD Drives Life-cycle Mgmt. AT&T USAGE Service Ops SDN Promena de Shipyard Alerting Drydock Security Armada Open. Stack HELM Deckhand Kubernetes Release Management Kubernetes Container Runtime Orchestration Host OS 8 Monitori ng Helm Docker Quality Open. Stack Logging Ceph(SDS CNI (SDN) ) CP Containerizati on Security Container Runtime Engine Baremetal Operating System (Ubuntu 16. 04) © 2018 AT&T Intellectual Property. All Rights Reserved. AT&T, the Globe logo, Mobilizing Your World and Direc. TV are registered trademarks and service marks of AT&T Intellectual Property and/or AT&T affiliated companies. All other marks are the property of their respective owners.

OPENSTACK-HELM UPDATE Calico Helm Other Community Impacts Airship 9 Tungsten Fabric Kubernete s Entry Point LOCI Containerizati on Quality What’s Next? Ceph. Helm Akraino Security • Stickers • Project Approachability • Core Team Expansion • Cross Community Collaboration © 2018 AT&T Intellectual Property. All Rights Reserved. AT&T, the Globe logo, Mobilizing Your World and Direc. TV are registered trademarks and service marks of AT&T Intellectual Property and/or AT&T affiliated companies. All other marks are the property of their respective owners.

TUNGSTEN FABRIC-HELM © 2017 AT&T Intellectual Property. All rights reserved. AT&T, Globe logo, Mobilizing Your World and DIRECTV are registered trademarks and service marks of AT&T Intellectual Property and/or AT&T affiliated companies. All other marks are the property of their respective owners. AT&T Proprietary (Internal Use Only). Not for use or disclosure outside the AT&T companies except under written agreement. 19

TUNGSTEN FABRIC-HELM RECAP WHERE WE IN SYDNEY? • • • Introduced Open. Contrail Helm charts All Opencontrail components were containerized working and upgradable Demonstrated hitless upgrades Dynamic VNF Service Chaining DEMO Running Newton © 2017 AT&T Intellectual Property. All rights reserved. AT&T, Globe logo, Mobilizing Your World and DIRECTV are registered trademarks and service marks of AT&T Intellectual Property and/or AT&T affiliated companies. All other marks are the property of their respective owners. AT&T Proprietary (Internal Use Only). Not for use or disclosure outside the AT&T companies except under written agreement. 20

TUNGSTEN FABRIC-HELM WHAT’S CHANGED ? Project Evolved https: //opencontrail. org/ https: //tungstenfabric. io © 2018 AT&T Intellectual Property. All Rights Reserved. AT&T, the Globe logo, Mobilizing Your World and Direc. TV are registered trademarks and service marks of AT&T Intellectual Property and/or AT&T affiliated companies. All other marks are the property of their respective owners.

SINGLE SDN ACROSS PLATFORMS Web UI Operator FW Mgmt Platform Config Tags, Address Groups & FW Policies through API’s Apps Open. Stack Other Orch. Analytics CONTROLLER HA enabled, logically centralized On-prem / Public Cloud Connectivity, Security Policies & Analytics / Monitoring Network & Policy Definition L 4 policy configurations Multiple Policy Enforcement points Host Based L 7 Firewall FIREWALL Bare Metal Server Compute with v. Router (Kernel / DPDK, v. Center) Smart NIC v. Router Public Cloud Instance v. Router enforcing L 4 policies and sending traffic to L 7 FW for advanced security services © 2018 AT&T Intellectual Property. All Rights Reserved. AT&T, the Globe logo, Mobilizing Your World and Direc. TV are registered trademarks and service marks of AT&T Intellectual Property and/or AT&T affiliated companies. All other marks are the property of their respective owners.

TUNGSTEN FABRIC EVOLUTION TO MICRO SERVICES Contrail-Control (5 daemons) Contrail-Config ( 8 daemons) Contrail-Analytics (5 daemons) Contrail-Web. UI ( 4 daemons) Contrail-DB (3 daemons) Contrail-v. Router (3 D) + Kernel/DPDK (FP) ● ● ● Multiple Process running in one Container (FAT Containers) Contrail Controller: 2 n+1 VM VM OR BMS 27 -30 Containers Images VM Contrail 1. X/2. X/3. X BMS or VMs base (SDN Controller) Analytics DB Kube MGR Config + Control HA Proxy Analytics v. Router Agent Contrail 4. X (Containers) BMS or VMs base (SDN Controller) Contrail 5. X (Containers) Microservices (SDN Controller) © 2018 AT&T Intellectual Property. All Rights Reserved. AT&T, the Globe logo, Mobilizing Your World and Direc. TV are registered trademarks and service marks of AT&T Intellectual Property and/or AT&T affiliated companies. All other marks are the property of their respective owners.

HELM CHART EVOLUTION Open. Contrail Vrouter Open. Contrail Controller SYDNEY VANCOUVER Controller Analytics 3 rd Party VRouter DPDK BASED VROUTER © 2018 AT&T Intellectual Property. All Rights Reserved. AT&T, the Globe logo, Mobilizing Your World and Direc. TV are registered trademarks and service marks of AT&T Intellectual Property and/or AT&T affiliated companies. All other marks are the property of their respective owners.

FEATURES ENHANCHED • REMOTE COMPUTE • VROUTER TO VROUTER ENCRYPTION • FAT FLOW ENCHANCHMENTS • SUPPORT FOR HYBRID CLOUD ARCHITECTURES • INTENT DRIVEN POLICY FRAMEWORK • OCATA SUPPORT • GATEWAYLESS FORWARDING • UPSTREAM GATE ENABLED 25 © 2018 AT&T Intellectual Property. All Rights Reserved. AT&T, the Globe logo, Mobilizing Your World and Direc. TV are registered trademarks and service marks of AT&T Intellectual Property and/or AT&T affiliated companies. All other marks are the property of their respective owners.

NEXT STEPS FOR TF HELM Ø OPENSTACK HELM NAMESPACE Ø TF for OS-HELM-INFRA TF Helm Ø DPDK/VROUTER & SRIOV COEXISTENCE Ø Neutron ML 2 PLUGIN Ø COMMUNITY COLLABORATIONS © 2018 AT&T Intellectual Property. All Rights Reserved. AT&T, the Globe logo, Mobilizing Your World and Direc. TV are registered trademarks and service marks of AT&T Intellectual Property and/or AT&T affiliated companies. All other marks are the property of their respective owners.

WHERE TO START Openstack Helm: https: //wiki. openstack. org/wiki/Openstack-helm Tungsten Fabric Helm: https: //tungsten. io/

CREDITS Madhukar Nayakbomman -Juniper Networks Qasim Araham - Juniper Networks

HELM SESSIONS AT VANCOUVER

Questions? Alan Meadows (alan. meadows@att. com) Rodolfo Pacheco (rodolfo. pacheco@att. com) LEARN MORE Vinay Rao (vinayrao@juniper. net) Three Ways to Learn More About Airship Three Ways to Learn More About OSH - https: //airshipit. org - https: //github. com/openstackhelm - IRC: #airshipit - IRC: #openstack-helm - Mailing List: lists. airshipit. org - Mailing List: Open. Stack Dev Mailing List © 2017 AT&T Intellectual Property. All rights reserved. AT&T, Globe logo, Mobilizing Your World and DIRECTV are registered trademarks and service marks of AT&T Intellectual Property and/or AT&T affiliated 30 companies. All other marks are the property of their respective owners. AT&T Proprietary © 2018 AT&T Intellectual Property. All Rights Reserved. AT&T, the Globe logo, Mobilizing Your World and Direc. TV are registered trademarks and service marks of AT&T Intellectual Property and/or AT&T affiliated companies. All other marks are the property of their respective owners.