SlideShare ist ein Scribd-Unternehmen logo
1 von 10
05 Apr, 2013

     SAKURA Internet Research Center
Senior Researcher / Naoto MATSUMOTO
1) L3DSR with Policy Based Routing

                                                                                                                             SERVER
                                                                                                                            eth0:10.0.0.1/32
                                                                                                                              lo:A.A.A.A/32


 Internet



                                                              Policy Table
                                     SRC PORT              DST ADDR                  NEXTHOP-TABLE
                                  1-10,000                    A.A.A.A             0.0.0.0/0 -> 10.0.0.1
                                  10,001-20,000               A.A.A.A             0.0.0.0/0 -> 10.0.0.2
                                  20,001-30,000               A.A.A.A             0.0.0.0/0 -> 10.0.0.3
                                            :                      :                             :


                                             VyattaCore 6.5R1 VM


       *Reference: L3DSR – Overcoming Layer 2 Limitations of Direct Server Return Load Balancing. Jan Schaumann, Systems Architect (NANOG51),
                   VYATTA, INC. Policy Based Routing REFERENCE GUIDE. (6.5R1 v01)
                                                                                                SOURCE: SAKURA Internet Research Center. 02/2013 Project THORN.
1) PBR-LB Configuration.

           SRC PORT                                 DST ADDR                   NEXTHOP-TABLE
  1-10,000                                               A.A.A.A              0.0.0.0/0 -> 10.0.0.1

                                                      VyattaCore 6.5R1 VM


 vyatta$ configuration
 # set policy route SRC-PORT-SLB rule 11 destination address A.A.A.A
 # set policy route SRC-PORT-SLB rule 11 protocol tcp_udp
 # set policy route SRC-PORT-SLB rule 11 set table 11
 # set policy route SRC-PORT-SLB rule 11 source port 1-10000
 # set protocols static table 10 route 0.0.0.0/0 next-hop 10.0.0.1
 :
 # set interfaces ethernet eth0 policy route SRC-PORT-SLB
 # commit
 # save
 *Reference: VYATTA, INC. Policy Based Routing REFERENCE GUIDE. (6.5R1 v01)
2) InfiniBand-Ethernet Connect

                                                                     Peak (RX) 8.23 Gbit/s 709,288 pps (MTU1500)
                                                                     Peak (RX) 308.99 Mbit/s 791,004 pps (MTU64)




 Packet Generator                                                VyattaCore 6.5R1[VM]                                                                 SERVER
       CLIENT                                                            VMware ESXi 5.1                                                              SERVER
                                       Ethernet                                                                                InfiniBand
                                                                                                                                                      SERVER
                                10Gbit/s                                                                                   40/56Gbit/s
                        IP over Ethernet Network                                                                    IP over Infiniband Network

Corei7-3930K CPU @ 3.20GHz / 32GB DDR3-DIMM / PCI Express 3.0 / Mellanox Connect-X3 VPI Card (10/40/56Gbit/s)   SOURCE: SAKURA Internet Research Center. 02/2013 Project THORN.
using linux standard pktgen.
3) IB Fabric Example


                    VyattaVM        VyattaVM
                     VMware          VMware

  Windows                                                 Linux

  Windows                                                 Linux

  Windows                                                 Linux
                            40/56Gbit/s
  Windows                                                 Linux
                     IP over Infiniband Network


High Speed Server Interconnect Fabric for Mixed PHYSICAL and VIRTUAL.
Install OFED for VMware ESXi 5.1

1) Enable ESXi Shell & SSH
Troubleshooting Options > Enable ESXi Shell, Enable SSH and SSH login.
# vmware -v
VMware ESXi 5.1.0 build-799733

2) Download/Install MLNX_OFED
#   cd /opt
#   wget http://mellanox.com/downloads/Drivers/MLNX-OFED-ESX-1.8.0.0.zip
#   esxcli software vib install -d /opt/MLNX-OFED-ESX-1.8.0.0.zip
#   sync; sync; sync; reboot –f

# esxcfg-nics –l
vmnic_ib0 0000:01:00.00 ib_ipoib  Up 56252Mbps Full
00:02:c9:34:1c:f1 1500 Mellanox Technologies MT27500 Family [ConnectX-3]
4) 40GbE-NIC


1) Using Pre-installed kernel modeuls for Mellanox 40GbE-NIC(mlx4_core,en)
2) Load 40GbE-NIC kernel module on /etc/modules


  $ show version
  Version:      VC6.5R1
  Description: Vyatta Core 6.5 R1

  $ sudo vi /etc/modules
  mlx4_en

  $ sync; sync; sync; reboot

                                                    © 2013 Mellanox Technologies. All Rights Reserved.
4) 40GbE-NIC Status Check

 $ show interfaces ethernet eth1 physical
 Settings for eth1:
         Supported ports: [ TP ]
         :
         Speed: 40000Mb/s
         Duplex: Full
         Port: Twisted Pair
         :
 Link detected: yes
 driver: mlx4_en
 version: 2.0 (Dec 2011)
 firmware-version: 2.10.800
 bus-info: 0000:01:00.0
4) 40GbE-NIC Option Check

 $ sudo ethtool -k eth1
 Offload parameters for eth1:
 rx-checksumming: on
 tx-checksumming: on
 scatter-gather: on
 tcp-segmentation-offload: on
 udp-fragmentation-offload: off
 generic-segmentation-offload: on
 generic-receive-offload: on
 large-receive-offload: off
 ntuple-filters: off
 receive-hashing: on
Thanks for your interest.




SAKURA Internet Research Center.

Weitere ähnliche Inhalte

Was ist angesagt?

American Fibertek Mx 49-sx-sc-poe
American Fibertek Mx 49-sx-sc-poeAmerican Fibertek Mx 49-sx-sc-poe
American Fibertek Mx 49-sx-sc-poe
JMAC Supply
 
Juniper round table switching and product overview
Juniper round table   switching and product overviewJuniper round table   switching and product overview
Juniper round table switching and product overview
Kappa Data
 

Was ist angesagt? (19)

ComNet CWGE26FX2TX24MSPOE Data Sheet
ComNet CWGE26FX2TX24MSPOE Data SheetComNet CWGE26FX2TX24MSPOE Data Sheet
ComNet CWGE26FX2TX24MSPOE Data Sheet
 
End to End Convergence
End to End ConvergenceEnd to End Convergence
End to End Convergence
 
Icnd210 s02l06
Icnd210 s02l06Icnd210 s02l06
Icnd210 s02l06
 
Sca n instructorppt_chapter2_final
Sca n instructorppt_chapter2_finalSca n instructorppt_chapter2_final
Sca n instructorppt_chapter2_final
 
SR-IOV, KVM and Intel X520 10Gbps cards on Debian/Stable
SR-IOV, KVM and Intel X520 10Gbps cards on Debian/StableSR-IOV, KVM and Intel X520 10Gbps cards on Debian/Stable
SR-IOV, KVM and Intel X520 10Gbps cards on Debian/Stable
 
Новые коммутаторы QFX10000. Технология JunOS Fusion
Новые коммутаторы QFX10000. Технология JunOS FusionНовые коммутаторы QFX10000. Технология JunOS Fusion
Новые коммутаторы QFX10000. Технология JunOS Fusion
 
American Fibertek Mx 49-sx-sc-poe
American Fibertek Mx 49-sx-sc-poeAmerican Fibertek Mx 49-sx-sc-poe
American Fibertek Mx 49-sx-sc-poe
 
Icnd210 s03l01
Icnd210 s03l01Icnd210 s03l01
Icnd210 s03l01
 
Icnd210 s08l02
Icnd210 s08l02Icnd210 s08l02
Icnd210 s08l02
 
Enabling 40GbE-NIC on VyattaCore
Enabling 40GbE-NIC on VyattaCoreEnabling 40GbE-NIC on VyattaCore
Enabling 40GbE-NIC on VyattaCore
 
Junos routing overview from Juniper
Junos routing overview from JuniperJunos routing overview from Juniper
Junos routing overview from Juniper
 
Tiny Server Clustering using Vyatta/VyOS (MEMO)
Tiny Server Clustering using Vyatta/VyOS (MEMO)Tiny Server Clustering using Vyatta/VyOS (MEMO)
Tiny Server Clustering using Vyatta/VyOS (MEMO)
 
Linkmeup v23-compass-eos
Linkmeup v23-compass-eosLinkmeup v23-compass-eos
Linkmeup v23-compass-eos
 
Вопросы балансировки трафика
Вопросы балансировки трафикаВопросы балансировки трафика
Вопросы балансировки трафика
 
6.) switch quick config (fixed summits)
6.) switch quick config (fixed summits)6.) switch quick config (fixed summits)
6.) switch quick config (fixed summits)
 
CCNA Icnd110 s05l03
CCNA Icnd110 s05l03CCNA Icnd110 s05l03
CCNA Icnd110 s05l03
 
Juniper Networks: Virtual Chassis High Availability
Juniper Networks: Virtual Chassis High AvailabilityJuniper Networks: Virtual Chassis High Availability
Juniper Networks: Virtual Chassis High Availability
 
SR-IOV+KVM on Debian/Stable
SR-IOV+KVM on Debian/StableSR-IOV+KVM on Debian/Stable
SR-IOV+KVM on Debian/Stable
 
Juniper round table switching and product overview
Juniper round table   switching and product overviewJuniper round table   switching and product overview
Juniper round table switching and product overview
 

Ähnlich wie VyattaCore TIPS2013

Ähnlich wie VyattaCore TIPS2013 (20)

PBR-LB - Direct Server Return Load Balancing using Policy Based Routing (MEMO)
PBR-LB - Direct Server Return Load Balancing using Policy Based Routing (MEMO)PBR-LB - Direct Server Return Load Balancing using Policy Based Routing (MEMO)
PBR-LB - Direct Server Return Load Balancing using Policy Based Routing (MEMO)
 
Mutating IP Network Model Ethernet-InfiniBand Interconnect
Mutating IP Network Model Ethernet-InfiniBand InterconnectMutating IP Network Model Ethernet-InfiniBand Interconnect
Mutating IP Network Model Ethernet-InfiniBand Interconnect
 
How To Install OFED Linux/VMware/Windows
How To Install OFED Linux/VMware/WindowsHow To Install OFED Linux/VMware/Windows
How To Install OFED Linux/VMware/Windows
 
BRKRST-3068 Troubleshooting Catalyst 2K and 3K.pdf
BRKRST-3068  Troubleshooting Catalyst 2K and 3K.pdfBRKRST-3068  Troubleshooting Catalyst 2K and 3K.pdf
BRKRST-3068 Troubleshooting Catalyst 2K and 3K.pdf
 
huawei-ce6851-48s6q-hi-b-brochure-datasheet.pdf
huawei-ce6851-48s6q-hi-b-brochure-datasheet.pdfhuawei-ce6851-48s6q-hi-b-brochure-datasheet.pdf
huawei-ce6851-48s6q-hi-b-brochure-datasheet.pdf
 
huawei-ce7850-32q-ei-b-brochure-datasheet.pdf
huawei-ce7850-32q-ei-b-brochure-datasheet.pdfhuawei-ce7850-32q-ei-b-brochure-datasheet.pdf
huawei-ce7850-32q-ei-b-brochure-datasheet.pdf
 
huawei-ce7850-32q-ei-f-brochure-datasheet.pdf
huawei-ce7850-32q-ei-f-brochure-datasheet.pdfhuawei-ce7850-32q-ei-f-brochure-datasheet.pdf
huawei-ce7850-32q-ei-f-brochure-datasheet.pdf
 
huawei-ce6850-48s4q-ei-b-brochure-datasheet.pdf
huawei-ce6850-48s4q-ei-b-brochure-datasheet.pdfhuawei-ce6850-48s4q-ei-b-brochure-datasheet.pdf
huawei-ce6850-48s4q-ei-b-brochure-datasheet.pdf
 
Wan networks
Wan networksWan networks
Wan networks
 
huawei-ce6851-48s6q-hi-f-brochure-datasheet.pdf
huawei-ce6851-48s6q-hi-f-brochure-datasheet.pdfhuawei-ce6851-48s6q-hi-f-brochure-datasheet.pdf
huawei-ce6851-48s6q-hi-f-brochure-datasheet.pdf
 
huawei-ce6850-ei-b-b0a-brochure-datasheet.pdf
huawei-ce6850-ei-b-b0a-brochure-datasheet.pdfhuawei-ce6850-ei-b-b0a-brochure-datasheet.pdf
huawei-ce6850-ei-b-b0a-brochure-datasheet.pdf
 
huawei-ce6851-hi-f-b0a-brochure-datasheet.pdf
huawei-ce6851-hi-f-b0a-brochure-datasheet.pdfhuawei-ce6851-hi-f-b0a-brochure-datasheet.pdf
huawei-ce6851-hi-f-b0a-brochure-datasheet.pdf
 
huawei-ce6850-ei-b00-brochure-datasheet.pdf
huawei-ce6850-ei-b00-brochure-datasheet.pdfhuawei-ce6850-ei-b00-brochure-datasheet.pdf
huawei-ce6850-ei-b00-brochure-datasheet.pdf
 
huawei-ce7850-32q-ei-brochure-datasheet.pdf
huawei-ce7850-32q-ei-brochure-datasheet.pdfhuawei-ce7850-32q-ei-brochure-datasheet.pdf
huawei-ce7850-32q-ei-brochure-datasheet.pdf
 
Server-side Intelligent Switching using Windows Azure
Server-side Intelligent Switching using Windows AzureServer-side Intelligent Switching using Windows Azure
Server-side Intelligent Switching using Windows Azure
 
huawei-ce6850-48s4q-ei-f-brochure-datasheet.pdf
huawei-ce6850-48s4q-ei-f-brochure-datasheet.pdfhuawei-ce6850-48s4q-ei-f-brochure-datasheet.pdf
huawei-ce6850-48s4q-ei-f-brochure-datasheet.pdf
 
huawei-ce6850-48s4q-ei-brochure-datasheet.pdf
huawei-ce6850-48s4q-ei-brochure-datasheet.pdfhuawei-ce6850-48s4q-ei-brochure-datasheet.pdf
huawei-ce6850-48s4q-ei-brochure-datasheet.pdf
 
Veryx Product Catalog - ATTEST
Veryx Product Catalog - ATTESTVeryx Product Catalog - ATTEST
Veryx Product Catalog - ATTEST
 
huawei-ce6850u-48s6q-hi-brochure-datasheet.pdf
huawei-ce6850u-48s6q-hi-brochure-datasheet.pdfhuawei-ce6850u-48s6q-hi-brochure-datasheet.pdf
huawei-ce6850u-48s6q-hi-brochure-datasheet.pdf
 
In-Network Acceleration with FPGA (MEMO)
In-Network Acceleration with FPGA (MEMO)In-Network Acceleration with FPGA (MEMO)
In-Network Acceleration with FPGA (MEMO)
 

Mehr von Naoto MATSUMOTO

Mehr von Naoto MATSUMOTO (20)

Alder Lake-S CPU Temperature Monitoring
Alder Lake-S CPU Temperature MonitoringAlder Lake-S CPU Temperature Monitoring
Alder Lake-S CPU Temperature Monitoring
 
CPU製品出荷状況と消費電力の見える化
CPU製品出荷状況と消費電力の見える化CPU製品出荷状況と消費電力の見える化
CPU製品出荷状況と消費電力の見える化
 
5Gの見える化
5Gの見える化5Gの見える化
5Gの見える化
 
2023年以降のサーバークラスタリング設計(メモ)
2023年以降のサーバークラスタリング設計(メモ)2023年以降のサーバークラスタリング設計(メモ)
2023年以降のサーバークラスタリング設計(メモ)
 
防災を考慮した水中調査の一考察
防災を考慮した水中調査の一考察防災を考慮した水中調査の一考察
防災を考慮した水中調査の一考察
 
旅するパケットの見える化
旅するパケットの見える化旅するパケットの見える化
旅するパケットの見える化
 
LTE-M/NB IoTを試してみる nRF9160/Thingy:91
LTE-M/NB IoTを試してみる nRF9160/Thingy:91LTE-M/NB IoTを試してみる nRF9160/Thingy:91
LTE-M/NB IoTを試してみる nRF9160/Thingy:91
 
災害時における無線モニタリングによる社会インフラの見える化
災害時における無線モニタリングによる社会インフラの見える化災害時における無線モニタリングによる社会インフラの見える化
災害時における無線モニタリングによる社会インフラの見える化
 
BeautifulSoup / selenium Deep dive
BeautifulSoup / selenium Deep diveBeautifulSoup / selenium Deep dive
BeautifulSoup / selenium Deep dive
 
AMDGPU ROCm Deep dive
AMDGPU ROCm Deep diveAMDGPU ROCm Deep dive
AMDGPU ROCm Deep dive
 
Network Adapter Deep dive
Network Adapter Deep diveNetwork Adapter Deep dive
Network Adapter Deep dive
 
RTL2838 DVB-T Deep dive
RTL2838 DVB-T Deep diveRTL2838 DVB-T Deep dive
RTL2838 DVB-T Deep dive
 
x86_64 Hardware Deep dive
x86_64 Hardware Deep divex86_64 Hardware Deep dive
x86_64 Hardware Deep dive
 
ADS-B, AIS, APRS cheatsheet
ADS-B, AIS, APRS cheatsheetADS-B, AIS, APRS cheatsheet
ADS-B, AIS, APRS cheatsheet
 
curl --http3 cheatsheet
curl --http3 cheatsheetcurl --http3 cheatsheet
curl --http3 cheatsheet
 
3/4G USB modem Cheat Sheet
3/4G USB modem Cheat Sheet3/4G USB modem Cheat Sheet
3/4G USB modem Cheat Sheet
 
How To Train Your ARM(SBC)
How To  Train Your ARM(SBC)How To  Train Your ARM(SBC)
How To Train Your ARM(SBC)
 
全国におけるCOVID-19対策の見える化 ~宿泊業の場合~
全国におけるCOVID-19対策の見える化 ~宿泊業の場合~全国におけるCOVID-19対策の見える化 ~宿泊業の場合~
全国におけるCOVID-19対策の見える化 ~宿泊業の場合~
 
我が国の電波の使用状況/携帯電話向け割当 (2019年3月1日現在)
我が国の電波の使用状況/携帯電話向け割当 (2019年3月1日現在)我が国の電波の使用状況/携帯電話向け割当 (2019年3月1日現在)
我が国の電波の使用状況/携帯電話向け割当 (2019年3月1日現在)
 
私たちに訪れる(かもしれない)未来と計算機によるモノコトの見える化
私たちに訪れる(かもしれない)未来と計算機によるモノコトの見える化私たちに訪れる(かもしれない)未来と計算機によるモノコトの見える化
私たちに訪れる(かもしれない)未来と計算機によるモノコトの見える化
 

Kürzlich hochgeladen

Modular Monolith - a Practical Alternative to Microservices @ Devoxx UK 2024
Modular Monolith - a Practical Alternative to Microservices @ Devoxx UK 2024Modular Monolith - a Practical Alternative to Microservices @ Devoxx UK 2024
Modular Monolith - a Practical Alternative to Microservices @ Devoxx UK 2024
Victor Rentea
 
Why Teams call analytics are critical to your entire business
Why Teams call analytics are critical to your entire businessWhy Teams call analytics are critical to your entire business
Why Teams call analytics are critical to your entire business
panagenda
 
+971581248768>> SAFE AND ORIGINAL ABORTION PILLS FOR SALE IN DUBAI AND ABUDHA...
+971581248768>> SAFE AND ORIGINAL ABORTION PILLS FOR SALE IN DUBAI AND ABUDHA...+971581248768>> SAFE AND ORIGINAL ABORTION PILLS FOR SALE IN DUBAI AND ABUDHA...
+971581248768>> SAFE AND ORIGINAL ABORTION PILLS FOR SALE IN DUBAI AND ABUDHA...
?#DUbAI#??##{{(☎️+971_581248768%)**%*]'#abortion pills for sale in dubai@
 

Kürzlich hochgeladen (20)

Introduction to Multilingual Retrieval Augmented Generation (RAG)
Introduction to Multilingual Retrieval Augmented Generation (RAG)Introduction to Multilingual Retrieval Augmented Generation (RAG)
Introduction to Multilingual Retrieval Augmented Generation (RAG)
 
Modular Monolith - a Practical Alternative to Microservices @ Devoxx UK 2024
Modular Monolith - a Practical Alternative to Microservices @ Devoxx UK 2024Modular Monolith - a Practical Alternative to Microservices @ Devoxx UK 2024
Modular Monolith - a Practical Alternative to Microservices @ Devoxx UK 2024
 
Elevate Developer Efficiency & build GenAI Application with Amazon Q​
Elevate Developer Efficiency & build GenAI Application with Amazon Q​Elevate Developer Efficiency & build GenAI Application with Amazon Q​
Elevate Developer Efficiency & build GenAI Application with Amazon Q​
 
DEV meet-up UiPath Document Understanding May 7 2024 Amsterdam
DEV meet-up UiPath Document Understanding May 7 2024 AmsterdamDEV meet-up UiPath Document Understanding May 7 2024 Amsterdam
DEV meet-up UiPath Document Understanding May 7 2024 Amsterdam
 
ICT role in 21st century education and its challenges
ICT role in 21st century education and its challengesICT role in 21st century education and its challenges
ICT role in 21st century education and its challenges
 
ProductAnonymous-April2024-WinProductDiscovery-MelissaKlemke
ProductAnonymous-April2024-WinProductDiscovery-MelissaKlemkeProductAnonymous-April2024-WinProductDiscovery-MelissaKlemke
ProductAnonymous-April2024-WinProductDiscovery-MelissaKlemke
 
Strategize a Smooth Tenant-to-tenant Migration and Copilot Takeoff
Strategize a Smooth Tenant-to-tenant Migration and Copilot TakeoffStrategize a Smooth Tenant-to-tenant Migration and Copilot Takeoff
Strategize a Smooth Tenant-to-tenant Migration and Copilot Takeoff
 
FWD Group - Insurer Innovation Award 2024
FWD Group - Insurer Innovation Award 2024FWD Group - Insurer Innovation Award 2024
FWD Group - Insurer Innovation Award 2024
 
Apidays New York 2024 - The value of a flexible API Management solution for O...
Apidays New York 2024 - The value of a flexible API Management solution for O...Apidays New York 2024 - The value of a flexible API Management solution for O...
Apidays New York 2024 - The value of a flexible API Management solution for O...
 
Why Teams call analytics are critical to your entire business
Why Teams call analytics are critical to your entire businessWhy Teams call analytics are critical to your entire business
Why Teams call analytics are critical to your entire business
 
Exploring Multimodal Embeddings with Milvus
Exploring Multimodal Embeddings with MilvusExploring Multimodal Embeddings with Milvus
Exploring Multimodal Embeddings with Milvus
 
Repurposing LNG terminals for Hydrogen Ammonia: Feasibility and Cost Saving
Repurposing LNG terminals for Hydrogen Ammonia: Feasibility and Cost SavingRepurposing LNG terminals for Hydrogen Ammonia: Feasibility and Cost Saving
Repurposing LNG terminals for Hydrogen Ammonia: Feasibility and Cost Saving
 
Apidays New York 2024 - APIs in 2030: The Risk of Technological Sleepwalk by ...
Apidays New York 2024 - APIs in 2030: The Risk of Technological Sleepwalk by ...Apidays New York 2024 - APIs in 2030: The Risk of Technological Sleepwalk by ...
Apidays New York 2024 - APIs in 2030: The Risk of Technological Sleepwalk by ...
 
+971581248768>> SAFE AND ORIGINAL ABORTION PILLS FOR SALE IN DUBAI AND ABUDHA...
+971581248768>> SAFE AND ORIGINAL ABORTION PILLS FOR SALE IN DUBAI AND ABUDHA...+971581248768>> SAFE AND ORIGINAL ABORTION PILLS FOR SALE IN DUBAI AND ABUDHA...
+971581248768>> SAFE AND ORIGINAL ABORTION PILLS FOR SALE IN DUBAI AND ABUDHA...
 
Navigating the Deluge_ Dubai Floods and the Resilience of Dubai International...
Navigating the Deluge_ Dubai Floods and the Resilience of Dubai International...Navigating the Deluge_ Dubai Floods and the Resilience of Dubai International...
Navigating the Deluge_ Dubai Floods and the Resilience of Dubai International...
 
Apidays New York 2024 - Accelerating FinTech Innovation by Vasa Krishnan, Fin...
Apidays New York 2024 - Accelerating FinTech Innovation by Vasa Krishnan, Fin...Apidays New York 2024 - Accelerating FinTech Innovation by Vasa Krishnan, Fin...
Apidays New York 2024 - Accelerating FinTech Innovation by Vasa Krishnan, Fin...
 
DBX First Quarter 2024 Investor Presentation
DBX First Quarter 2024 Investor PresentationDBX First Quarter 2024 Investor Presentation
DBX First Quarter 2024 Investor Presentation
 
AWS Community Day CPH - Three problems of Terraform
AWS Community Day CPH - Three problems of TerraformAWS Community Day CPH - Three problems of Terraform
AWS Community Day CPH - Three problems of Terraform
 
Vector Search -An Introduction in Oracle Database 23ai.pptx
Vector Search -An Introduction in Oracle Database 23ai.pptxVector Search -An Introduction in Oracle Database 23ai.pptx
Vector Search -An Introduction in Oracle Database 23ai.pptx
 
Six Myths about Ontologies: The Basics of Formal Ontology
Six Myths about Ontologies: The Basics of Formal OntologySix Myths about Ontologies: The Basics of Formal Ontology
Six Myths about Ontologies: The Basics of Formal Ontology
 

VyattaCore TIPS2013

  • 1. 05 Apr, 2013 SAKURA Internet Research Center Senior Researcher / Naoto MATSUMOTO
  • 2. 1) L3DSR with Policy Based Routing SERVER eth0:10.0.0.1/32 lo:A.A.A.A/32 Internet Policy Table SRC PORT DST ADDR NEXTHOP-TABLE 1-10,000 A.A.A.A 0.0.0.0/0 -> 10.0.0.1 10,001-20,000 A.A.A.A 0.0.0.0/0 -> 10.0.0.2 20,001-30,000 A.A.A.A 0.0.0.0/0 -> 10.0.0.3 : : : VyattaCore 6.5R1 VM *Reference: L3DSR – Overcoming Layer 2 Limitations of Direct Server Return Load Balancing. Jan Schaumann, Systems Architect (NANOG51), VYATTA, INC. Policy Based Routing REFERENCE GUIDE. (6.5R1 v01) SOURCE: SAKURA Internet Research Center. 02/2013 Project THORN.
  • 3. 1) PBR-LB Configuration. SRC PORT DST ADDR NEXTHOP-TABLE 1-10,000 A.A.A.A 0.0.0.0/0 -> 10.0.0.1 VyattaCore 6.5R1 VM vyatta$ configuration # set policy route SRC-PORT-SLB rule 11 destination address A.A.A.A # set policy route SRC-PORT-SLB rule 11 protocol tcp_udp # set policy route SRC-PORT-SLB rule 11 set table 11 # set policy route SRC-PORT-SLB rule 11 source port 1-10000 # set protocols static table 10 route 0.0.0.0/0 next-hop 10.0.0.1 : # set interfaces ethernet eth0 policy route SRC-PORT-SLB # commit # save *Reference: VYATTA, INC. Policy Based Routing REFERENCE GUIDE. (6.5R1 v01)
  • 4. 2) InfiniBand-Ethernet Connect Peak (RX) 8.23 Gbit/s 709,288 pps (MTU1500) Peak (RX) 308.99 Mbit/s 791,004 pps (MTU64) Packet Generator VyattaCore 6.5R1[VM] SERVER CLIENT VMware ESXi 5.1 SERVER Ethernet InfiniBand SERVER 10Gbit/s 40/56Gbit/s IP over Ethernet Network IP over Infiniband Network Corei7-3930K CPU @ 3.20GHz / 32GB DDR3-DIMM / PCI Express 3.0 / Mellanox Connect-X3 VPI Card (10/40/56Gbit/s) SOURCE: SAKURA Internet Research Center. 02/2013 Project THORN. using linux standard pktgen.
  • 5. 3) IB Fabric Example VyattaVM VyattaVM VMware VMware Windows Linux Windows Linux Windows Linux 40/56Gbit/s Windows Linux IP over Infiniband Network High Speed Server Interconnect Fabric for Mixed PHYSICAL and VIRTUAL.
  • 6. Install OFED for VMware ESXi 5.1 1) Enable ESXi Shell & SSH Troubleshooting Options > Enable ESXi Shell, Enable SSH and SSH login. # vmware -v VMware ESXi 5.1.0 build-799733 2) Download/Install MLNX_OFED # cd /opt # wget http://mellanox.com/downloads/Drivers/MLNX-OFED-ESX-1.8.0.0.zip # esxcli software vib install -d /opt/MLNX-OFED-ESX-1.8.0.0.zip # sync; sync; sync; reboot –f # esxcfg-nics –l vmnic_ib0 0000:01:00.00 ib_ipoib Up 56252Mbps Full 00:02:c9:34:1c:f1 1500 Mellanox Technologies MT27500 Family [ConnectX-3]
  • 7. 4) 40GbE-NIC 1) Using Pre-installed kernel modeuls for Mellanox 40GbE-NIC(mlx4_core,en) 2) Load 40GbE-NIC kernel module on /etc/modules $ show version Version: VC6.5R1 Description: Vyatta Core 6.5 R1 $ sudo vi /etc/modules mlx4_en $ sync; sync; sync; reboot © 2013 Mellanox Technologies. All Rights Reserved.
  • 8. 4) 40GbE-NIC Status Check $ show interfaces ethernet eth1 physical Settings for eth1: Supported ports: [ TP ] : Speed: 40000Mb/s Duplex: Full Port: Twisted Pair : Link detected: yes driver: mlx4_en version: 2.0 (Dec 2011) firmware-version: 2.10.800 bus-info: 0000:01:00.0
  • 9. 4) 40GbE-NIC Option Check $ sudo ethtool -k eth1 Offload parameters for eth1: rx-checksumming: on tx-checksumming: on scatter-gather: on tcp-segmentation-offload: on udp-fragmentation-offload: off generic-segmentation-offload: on generic-receive-offload: on large-receive-offload: off ntuple-filters: off receive-hashing: on
  • 10. Thanks for your interest. SAKURA Internet Research Center.