2. About ShapeBlue
“ShapeBlue are expert builders of public & private
clouds. They are the leading global CloudStack /
CloudPlatform integrator & consultancy”
www.shapeblue.com CloudStack Collaboration Conference 2012
12. System VMs & Their Networks
Virtual Router
www.shapeblue.com CloudStack Collaboration Conference 2012
13. System VMs & Their Networks
Virtual Router (Adv Zone)
www.shapeblue.com CloudStack Collaboration Conference 2012
14. System VMs & Their Networks
Secondary Storage VM
www.shapeblue.com CloudStack Collaboration Conference 2012
15. System VMs & Their Networks
SSVM – VM Image / ISO Upload Workflow
www.shapeblue.com CloudStack Collaboration Conference 2012
16. System VMs & Their Networks
Console Proxy VM
www.shapeblue.com CloudStack Collaboration Conference 2012
17. System VMs & Their Networks
CPVM – Remote Connection
www.shapeblue.com CloudStack Collaboration Conference 2012
18. Communication Ports
www.shapeblue.com CloudStack Collaboration Conference 2012
19. Real World Problems / Requirements
Management VLANs – Up to 7 Layers
Strict control of traffic flow between Management Layers
Bypassing Virtual Router
Hosts and Guests VMs on Different VLANs (Basic Networking)
Isolated Networks for Guest Management by Service Provider
Shared Networks for Guest Backups
Connecting VMs to Physical Servers via Assigned VLAN IDs
VLAN Limitations
www.shapeblue.com CloudStack Collaboration Conference 2012
20. The Future
Software Defined Networking
Remove VLAN Limitations
Bring full control of Network into CloudStack GUI
Massive Scalability
Reduce Costs
www.shapeblue.com CloudStack Collaboration Conference 2012
VPS – Single VM, or multiples but with no control over connectivityCloud – NaaS giving end user control of the network layer, and provides virtual networks which can then be used by multiple VMs, these could be isolated networks, accessible to only VMs within a particular account, or Shared Networks, which are available to multiple Accounts5 min
New features in CloudStack 4 allow the end user to configure vastly more complicated networks with multiple tiers, inter-VLAN routing, and full control over what traffic passes between Tiers and the public internet.7 min
There are two networking models, Basic and Advanced and a Zone can only one typeBasic – AWS style L3 isolation – Massive ScaleReal-World Tip - Guest VMs and Hosts can be on different VLANs even though Admin Guide states they cannotSegmentation achieved via Security GroupsIngress and Egress rules control the flow of traffic into and out of Security Groups. 10 min
Lets take a look at the typical configuration of a Basic ZoneStart with an IP Allocation for the Zone big enough to cover all Guest VMs in the ZoneIn Basic Networking each POD will be assigned a Unique IP Range for Guest VMs, which is a subnet of the Zones IP SchemaWe typically see in the region of 24-36 Hosts within a POD due limits of mx Hosts in a Cluster, and the size of Physical RacksReserved IP Range is allocated for the System VMsVirtual Router – Handles DHCP, DNS, UserData and Security Groups for the PODGuest VMs – IP Schema – each VM allocated an IP from the PODConcept is repeated over each PODGuest VMs can reside in different PODs so with Basic Networking VMs within a particular account do not have contiguous IP addresses15 min
