Hi Murali,

There are many unknows w.r.t ‘Service-VM’ and how it should from NFV 
perspective.
In my opinion it was not decided how the Service-VM framework should be.
Depending on this we at OpenStack also will have impact for ‘Service Chaining’.
Please find the mail attached w.r.t that discussion with NFV for ‘Service-VM + 
Openstack OVS related discussion”.


Regards,
keshava

From: Stephen Wong [mailto:stephen.kf.w...@gmail.com]
Sent: Wednesday, December 10, 2014 10:03 PM
To: OpenStack Development Mailing List (not for usage questions)
Subject: Re: [openstack-dev] [NFV][Telco] Service VM v/s its basic framework

Hi Murali,

    There is already a ServiceVM project (Tacker), currently under development 
on stackforge:

https://wiki.openstack.org/wiki/ServiceVM

    If you are interested in this topic, please take a look at the wiki page 
above and see if the project's goals align with yours. If so, you are certainly 
welcome to join the IRC meeting and start to contribute to the project's 
direction and design.

Thanks,
- Stephen


On Wed, Dec 10, 2014 at 7:01 AM, Murali B 
<mbi...@gmail.com<mailto:mbi...@gmail.com>> wrote:
Hi keshava,

We would like contribute towards service chain and NFV

Could you please share the document if you have any related to service VM

The service chain can be achieved if we able to redirect the traffic to service 
VM using ovs-flows

in this case we no need to have routing enable on the service VM(traffic is 
redirected at L2).

All the tenant VM's in cloud could use this service VM services  by adding the 
ovs-rules in OVS


Thanks
-Murali




_______________________________________________
OpenStack-dev mailing list
OpenStack-dev@lists.openstack.org<mailto:OpenStack-dev@lists.openstack.org>
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev

--- Begin Message ---
Some of my perspective with [RP]

From: "A, Keshava" <keshav...@hp.com<mailto:keshav...@hp.com>>
Date: Wednesday, December 10, 2014 at 8:59 AM
To: Christopher Price 
<christopher.pr...@ericsson.com<mailto:christopher.pr...@ericsson.com>>, 
"opnfv-tech-disc...@lists.opnfv.org<mailto:opnfv-tech-disc...@lists.opnfv.org>" 
<opnfv-tech-disc...@lists.opnfv.org<mailto:opnfv-tech-disc...@lists.opnfv.org>>,
 "opnfv-...@lists.opnfv.org<mailto:opnfv-...@lists.opnfv.org>" 
<opnfv-...@lists.opnfv.org<mailto:opnfv-...@lists.opnfv.org>>
Subject: Re: [opnfv-tech-discuss] Service VM v/s its basic framework

Hi Chris,

Thanks for your reply.
In my opinion it is very important to have common understanding how the 
Service-VM should look .


1.       There are many question coming-in like ‘OVS can be also part of the 
Service-VM”?

[RP] It can, but the only advantage is if it can process NSH headers.


If multiple features(services)  are running with-in one Service-VM, use ‘local 
OVS  to do service-chaining’.

(Of course it can be handled by internal routing table by setting  Next-hop as 
Next Service running with in that local-VM also, if routing is running in that 
VM)

[RP] Then local OVS becomes a SFF. This is fine, I see no issues with it. Your 
Service Path topology would include each (SFF, SF) tuple inside your service-VM 
as a service hop.



2.       OVS running in compute node:

a.       Can be used to do ‘service chaining across Service-VM’ running with in 
same compute Node ?

b.      Service-VM running in different compute-nodes needs can be chained by 
Service Layer.

[RP] As soon as a OVS (irrespective where it is) sends packets to Service 
Functions it becomes a SFF. If you think like that everything becomes simpler.

       With both 1 + 2 and ‘Service Layer running in NFV orchestration’ +  
‘Service topology’ .
This ‘Service Layer’ will configures

a.       ‘OpenStack Controller’ to configure OVS which it manages for Service 
Chaining.

b.      Service-VM , to chain the service within that VM itself.

[RP] I think Openstanck’s  current layer 2  hop-by-hop Service Path diverges 
considerably a departure from IETF’s proposal and consequently ODL 
implementation. I think this is a good opportunity to align everything.


3.       HA framework :

a.       Service VMs will run in Active-Active mode or Active-Standby mode ?

b.      How the incoming packet should be  delivered ?

c.       OpenStack should deliver the packet only to Active-VM ?

                                                               i.      or to 
both Active and Standby-VM together ?

                                                             ii.      or first 
to Standby-VM, from there to Standby-VM to deliver to Active-VM ?

d.      Active-VM should control Standby-VM ?

[RP] Let’s think about SFF and SF. SFF controls where the packet are sent, 
period. SFs has no saying in it.


e.      Active-VM will control the network ?

f.        Active-VM will be ahead of Standby-VM as for ‘live network 
information is concerned ‘ ?


4.       Can  the Service-VM can run routing/Forwarding  information to 
OpenStack infrastructure ? Or it should be within that Service-VM itself ?

So it very important , what and how the Service-VM should look for from NFV 
perspective.
Based on this NFV and OpenStack community should work together to address some 
of these issues.

[cid:image003.png@01D014C8.9BA6F7D0]


Thanks & regards,
keshava

From: Christopher Price [mailto:christopher.pr...@ericsson.com]
Sent: Wednesday, December 10, 2014 3:17 PM
To: A, Keshava; 
opnfv-tech-disc...@lists.opnfv.org<mailto:opnfv-tech-disc...@lists.opnfv.org>; 
opnfv-...@lists.opnfv.org<mailto:opnfv-...@lists.opnfv.org>
Subject: Re: [opnfv-tech-discuss] Service VM v/s its basic framework

Hi Keshava,

Good questions and you are right, some discussion is required to answer them.

As a first pass over your questions each service entity needs to be addressable 
on the network for sure, if it requires to be routable is a question of the 
service itself and the associated network design.  I expect we will see a 
number of common models surface as we build out our testing and infrastructure 
pieces and methodologies for deploying and addressing the service VM’s 
depending on the role and design of the services/functions themselves in the 
network.  I also expect to see common features emerge that will be deployed as 
common frameworks as you have described in your e-mail.

At this time OPNFV has not arrived at or published any conclusions on these 
although work is ongoing to establish founding principals.  The tools and 
components available in the platform will be introduced through the requirement 
and collaborative development projects, the utilisation and proof of the tools 
will be done in our test and performance projects.

/ Chris

From: "A, Keshava" <keshav...@hp.com<mailto:keshav...@hp.com>>
Date: Wednesday 10 December 2014 05:18
To: 
"opnfv-tech-disc...@lists.opnfv.org<mailto:opnfv-tech-disc...@lists.opnfv.org>" 
<opnfv-tech-disc...@lists.opnfv.org<mailto:opnfv-tech-disc...@lists.opnfv.org>>,
 "opnfv-...@lists.opnfv.org<mailto:opnfv-...@lists.opnfv.org>" 
<opnfv-...@lists.opnfv.org<mailto:opnfv-...@lists.opnfv.org>>
Subject: [opnfv-tech-discuss] Service VM v/s its basic framework

[cid:image001.png@01D014C1.A152DBB0]

I have some of the basic question w.r.t Service-VM running  the NFV. (These 
Service-VMs can be vNAT, vFW, vDPI, vRouting , vCPE etc ),


1.       When these service-VM runs over  the cloud (over OpenStack CN) each 
will be treated as Routable entity in the network ?

i.e, Each Service-VM will run its own routing protocol so that it is a 
reachable entity in the network ?



2.       Will there be any basic framework / basic elements that needs to run 
in these VM ?

a.       Each Service-VM should also its routing instance + L3 Forwarding ..

If so are they optional or mandatory



3.       When these Service-VM runs (which may be part vCPE) then each service 
packet will be carried till Service-VM or it will be handled in the OVS of the 
compute node it self ?

Then how this will be handled for routing packet ?


4.       If there are multiple ‘features running with in a Service-VM’ (example 
NAT,FW,IPSEC),

a.       Then depending on the prefix(tenant/user traffic) may need to chain 
them differently .

                                                               i.      Example 
for tenant-1 packet prefix P1: Service execution may be NAT --> FW --> IPSEC

                                                             ii.      Tennant-2 
p2 : it may NAT->IPSEC->AAA



5.       How the Service chain Execution, which may be running across multiple 
Service-VM  is controlled.

a.       Is it controlled by configuring the OVS (Open V Switch ) running in 
the compute node ?

b.      When the Service-VMs are running across different Compute nodes  they 
need to be chained across OVS .

This needs to controlled by NFV Service Layer + OpenStack Controller ?


In my opinion there should be a some basic discussion on how these Service-VM’s 
framework and how they needs to be chained ,which entity are mandatory in such 
service to run over the cloud.

Please let me know if such discussion already happened ? Let me know others 
opinion for the same.
Let me know my basic understanding is not correct ?

Thanks & regards,
keshava


_______________________________________________ opnfv-tech-discuss mailing list 
opnfv-tech-disc...@lists.opnfv.org<mailto:opnfv-tech-disc...@lists.opnfv.org> 
https://lists.opnfv.org/mailman/listinfo/opnfv-tech-discuss

--- End Message ---
_______________________________________________
OpenStack-dev mailing list
OpenStack-dev@lists.openstack.org
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev

Reply via email to