Skydive slides of the Openstack Summit 2016, Austin

1. TRUSTED CLOUD SOLUTIONS
OpenStack Summit Austin

2. Nicolas PLANEL
Principal Software Engineer
27/04/2016
Skydive
A real-time network analyzer
Sylvain AFCHAIN
Principal Software Engineer

4. WHY ?

5. SDN IS COMPLEX
Troubleshooting/monitoring is even more
complex

8. Implementations
Management
Control plane
● OpenFlow
● XMPP
● BGP
● AMQP
● Etc...
Data plane
● VLAN
● VXLAN
● GRE
● MPLS
● OVS, Linuxbridge, other

9. Troubleshooting
Where...
packets are dropped ?
packets are fragmented ?
choke point occurs ?
What…
packet layers path ?
kind of traffic for this virtual network ?
number of flows on this link ?
number of TCP Sessions ?
bandwidth for this tenant ?

10. Current toolbox
● iproute2
● ovs-vsctl, ovs-ofctl, ovs-dpctl...
● ethtool
● brctl
● tcpdump
● SDN CLI/API
● ...

11. What we need
● Flow centric
● Easy to deploy
● SDN Agnostic solution
● Non-intrusive / Lightweight
● Open, API
● Connectors to SDN

12. What we need
● Topology probes
a. interfaces, bond, mtu, vlan
b. bridges
c. Network namespaces
d. etc..
● Flow probes
a. on-demand traffic capture
b. on-demand counter capture
c. filtering
d. underlay/overlay informations
● Topology/flow aggregation
a. mapping topology/flow
b. analysis

13. Agent : Topology/Flow
Topology:
● Graph engine
● Populated from: netlink, netns, ovsdb,
ethtool probes, Docker, Neutron, ...
Flow:
● Flow table centric
● Local mapping flow/topology
● Packet data from sFlow, Pcap probes ...

14. Skydive Analyzer
● Aggregation of all the agents
● Analysis pipeline
● Store in Database
Storage

15. Skydive Use-cases
● Detection of common configuration errors
● Detection of live network issues
○ bad performances, helping to find the root cause
○ DDOS and any unattended traffic
● Possibility to capture traffic at any point
○ Historic of all the metrics captured
○ Post mortem analysis
● Detection of bad application performance, bad RTT, bad security groups

16. Let’s Jump !

17. Skydive Roadmap
● Topology capture
○ More connectors
● Live distributed capture
○ Filtering
● Analysis
○ More protocols
○ Alerting
● Security
○ RBAC
○ SSL
○ Anonymize IP

18. Open source
Apache License
Written in Go
Contributions are welcome

19. Questions ?
https://github.com/redhat-cip/skydive
IRC: #skydive-project @freenode.net
nplanel@redhat.com
safchain@redhat.com

20. Thank you
Pictures from
FFP http://www.ffp.asso.fr/
ASPU http://www.aspu.org/
Laurent Cormier
Martin Handford
https://github.com/redhat-cip/skydive
IRC: #skydive-project @freenode.net
nplanel@redhat.com
safchain@redhat.com

21. BREAKOUT SESSIONS - Monday April 25th
Panel: Pros and cons of various
OpenStack consumption models
Contributing to the
Success of OpenStack
Deploying OpenStack for
Telecommunications (Panel)
Expanding DBaaS Workloads with
OpenStack Trove and Manila
Elephant in the Room: What’s the TCO
for an OpenStack Cloud?
Performance Measuring
Tools for the Cloud
Going Beyond OpenStack – The
Integrated Cloud Solution Stack
Jonathan Gershater (Red Hat), Cody Hill
(Platform9 Systems, Inc), VS Joshi
(EMC), Ashish Nadkarni (IDC)
Mark McLoughlin & Alexis Monville
Darrell Jordan-Smith (Red Hat),
panelists from Verizon, ATT, Telus
Sean Cohen, Amrith Kumar (Tesora),
Andrew Kutner (NetApp)
Massimo Ferrari & Erich Morisse
D Shakshober (Red Hat), Nicholas
Wakou (Dell), Arek Chylinski, Wang
Xiaofei (AWCloud), Yuting Wu
Jacob Liberman
11:15am – 11:55am
11:15am – 11:55am
11:15am – 11:55am
12:05pm – 12:45pm
12:05pm – 12:45pm
12:05pm – 12:45pm
12:05pm – 12:45pm

22. BREAKOUT SESSIONS - Monday April 25th
What science knows about happiness
that could transform OpenStack
How to quickly and efficiently migrate
legacy workloads to the cloud
OpenStack Infrastructure
for Beginners
Workshop: Hands on to configure your
cloud to be able to charge your users
using official OpenStack components!
OpenStack Stable: What it actually
means to maintain stable branches
Making Ceph the powerhouse you
know it can be!
The omniscient cloud: Bare
metal inspection status update
Alexis Monville
Vijay Chebolu
Paul Belanger (Red Hat), Elizabeth K.
Joseph (HPE), Christopher Aedo (IBM)
Julien Danjou, Christophe Sauthier,
Stéphane Albert, Gauvain Pocentek
& Maximiliano Venesio
Ihar Hrachyshka (Red Hat),
Matt Riedemann (IBM),
Matthew Treinish (HPE)
Neil Levine
Dmitry Tantsur
12:05pm – 12:45pm
2:00pm – 2:40pm
2:00pm – 2:40pm
2:00pm – 3:30pm
2:50pm – 3:30pm
2:50pm – 3:30pm
3:40pm – 4:20pm

23. BREAKOUT SESSIONS - Monday April 25th
Co-engineering an enterprise grade
OpenStack by Rackspace and Red
Hat
OpenShift and OpenStack:
Delivering Applications Together
Deep dive into Neutron upgrade story
Swisscom in Production with
OpenStack and CloudFoundry
Take advantage of key OpenStack
services for NFV and the
Telecommunications industry
Red Hat & Cisco – Providing
OpenStack choice
Nick Gerasimatos (Red Hat), Jeff
Ekstrom (Red Hat), John Fulton (Red
Hat), Kent Wolfe (Rackspace)
Scott McCarty
Artur Korzeniewski (Intel),
Ihar Hrachyshka (Red Hat),
Rossella Sblendido (SuSE)
Chris Wright (Red Hat),
Chip Childers, Marcel Haerry,
Pere Monclus & Ros Roseboro
Sanjay Aiyagari (Red Hat)
Drew Schulke (Dell)
Karthik Prabhaker (Red Hat)
Vishwanath Jakka (Cisco)
3:40pm – 4:20pm
4:40pm – 5:20pm
4:40pm – 5:20pm
4:40pm – 5:20pm
4:40pm – 5:20pm
5:30pm – 6:10pm

24. BREAKOUT SESSIONS - Tuesday April 26th
Integrate Active Directory
with OpenStack Keystone
How to troubleshoot OpenStack
without losing sleep
Introduction to Container Security
Manila: Experience it Through Demos!
Advances in Keystone’s Role
Based Access Control
RDO Community Meetup
Using open source security
architecture to defend against targeted
attacks
CephFS as a service with
OpenStack Manila
Martin Lopes
Sadique Puthen & Dustin Black
Thomas Cameron
Dustin Schoenbrun, Akshai
Parthasarathy (Netapp)
Adam Young (Red Hat)
and Henry Nash (IBM)
Rich Bowen & RDO Community
Dan Lambright (Red Hat),
Alexander Adamov (Mirantis)
John Spray
12:05pm – 12:45pm
12:05pm – 12:45pm
2:50pm – 3:30pm
2:50pm – 3:30pm
3:40pm – 4:20pm
4:40pm – 5:50pm
5:30pm – 6:10pm
5:30pm – 6:10pm

25. BREAKOUT SESSIONS - Wednesday April 27th
Zaqar Messaging for
Microservices and IoT
Service Function Chaining –
Technology Analysis and Perspective
Debugging OpenStack failure
scenarios with Ansible and
Oslogmerger
Is that a Cloud in your Pocket?
Tired of iptables based security
groups? Here’s how to gain
tremendous speed
with Open vSwitch instead!
Achieving Five-Nines of VNF Reliability
in Telco-Grade OpenStack Cloud
Skydive, Real-Time Network Topology
and Protocol Analyzer
Designing for NFV: Lessons Learned
from Deploying at Verizon
Protecting the Galaxy – Multi-Region
Fei Long Wang (Catalyst), Ryan Brown
(Red Hat), Victoria Martinez de la Cruz
(Red Hat)
Tim Rozet(Red Hat), Bin Hu (AT&T)
Miguel Angel Ajo (Red Hat), Gorka
Eguileor (Red Hat)
Steven Ellis
Jakub Libosvar (Red Hat), Rodolfo
Alonso (Intel)
Rimma Iontel (Red Hat), Eoin Walsh
(Intel)
Nicolas Planel (Red Hat), Sylvain Afchain
(Red Hat)
Radhesh Balakrishnan (Red Hat), Kyle
Forrester (Big Switch), Chris Emmons
(Dell)
Sean Cohen, Federico Lucifredi,
9:00am – 9:40am
9:50am – 10:30am
11:50am – 12:30pm
11:50am – 12:30pm
1:50pm – 2:30pm
1:50pm – 2:30pm
2:40pm – 3:20pm
3:30pm – 4:10pm
4:30pm – 5:10pm

26. BREAKOUT SESSIONS - Thursday April 28th
Lab: Deploy Microservices Architecture
on OpenStack using Kubernetes,
Docker, Flannel and etcd
Orchestrated Containerization
with OpenStack
The Notorious M.T.U.
CephFS in Jewel: Stable at last
Using a Service VM as an
IPv6 vRouter
Neutron Quality of Service, new
features and future roadmap.
Al Kari
Lars Herrmann
Kevin Benton (Mirantis), Sean Collins
(Mirantis), Matthew Kassawara (IBM),
Ihar Hrachyshka (Red Hat)
Greg Farnum
Bin Hu (AT&T), Sridhar Gaddam
(Red Hat), Prakash (Huawei)
Miguel Ángel Ajo (Red Hat), Victor
Howard (Comcast), Sławek Kapłoński
(OVH Group)
9:00am – 10:30am
9:00am – 9:40am
9:00am – 9:40am
11:00am – 11:40am
11:00am – 11:40am
1:30pm – 2:10pm

27. THANK YOU
plus.google.com/+RedHat
youtube.com/user/RedHatVideos
facebook.com/redhatinc
twitter.com/RedHatNewslinkedin.com/company/red-hat