The Nuage VSP Plugin¶

Supported Features¶

The following table lists the supported Network services in a CloudStack deployment with NuageVsp being the Connectivity/Virtual Networking provider, with their providers and supported CloudStack versions.

Table: Supported Network Services

Supported Hypervisors¶

The following hypervisors are supported by the Nuage VSP Plugin, with their supported CloudStack versions.

Table: Supported Hypervisors

Supported Nuage VSP SDN Platform Versions¶

The following Nuage VSP SDN Platform versions are supported by the Nuage VSP Plugin, with their supported CloudStack versions.

Table: Supported Nuage VSP SDN Platform Versions

Prerequisites¶

Before enabling and using the Nuage VSP Plugin with CloudStack.

1. Verify that the CloudStack deployment (hypervisors) and Nuage VSP SDN Platform version you intend to use is being supported.

2. Prepare and configure the hypervisors for CloudStack integration with Nuage VSP SDN Platform.

Required Nuage VSD Configuration¶

When configuring Nuage VSP as the network service provider in a CloudStack Zone, a CSP user must be added in Nuage VSD, and this user must be added to the CMS group. See Enable Nuage VSP Network Service Provider.

Zone Configuration¶

Select VSP Isolation Method¶

The Nuage VSP solution is NOT supported in Basic zone provisioning mode.

1. When adding a zone, the CloudStack administrator should select Advanced mode in the zone wizard.
2. When laying out the physical network configuration during zone provisioning, the Guest network traffic should be put in a separate physical network of its own.
3. This physical network carrying the Guest traffic should have VSP as the Isolation Method.

Setting Isolation Method to VSP

Update Traffic Labels¶

Guest Traffic Type

Select Edit on the Guest traffic type panel and update the Traffic Label:

• For KVM, use alubr0 as the KVM Traffic Label.

Specifying the Traffic Type in KVM

• For VMware ESXi, use the switch name used by dVRS for guest networking as the vSwitch Name, leave the VLAN ID field blank, and select VMware vNetwork Distributed Switch in the vSwitch Type drop down field.

Specifying the Traffic Type in VMware ESXi

Enable Nuage VSP Network Service Provider¶

Nuage VSP must be added and enabled as a Network Service Provider in the CloudStack Zone before it can be used.

Adding Nuage VSD as the Network Service Provider

Enabling Nuage VSP Network Service Provider

Viewing Network Service Providers Status

Network Offerings¶

There are three types of Network Offerings that can be created:

• If Isolated Networks are required, then create a Isolated guest type network offering for use with Isolated Networks.
• If VPC deployments are required, then create a new Isolated guest type network offering for such deployments.
• If Shared Networks are required, then create a new Shared guest type network offering for use with Shared Networks.

Create and Enable Isolated Network Offering¶

1. Select Service Offerings > Select Offering: Network Offerings > Add network offering, which brings up the Add network offering.
2. In the Add network offering panel, add a Name and a Description to the network offering. Select Isolated as the Guest Type. In the Supported Services field select services and providers that are supported by the Nuage VSP Plugin for Isolated Networks, see Supported Features at the beginning of this document.

Creating Isolated Network Offering

3. Click the OK button to create the network offering.
4. After the network offering has been successfully created, enable it from the Service Offerings - Network Offerings list.

Create and Enable VPC Network Offering¶

1. Select Service Offerings > Select Offering: Network Offerings > Add network offering, which brings up the Add network offering.
2. In the Add network offering panel, add a Name and a Description to the network offering. Select Isolated as the Guest Type. Select the VPC field. In the Supported Services field select services and providers that are supported by the Nuage VSP Plugin for VPCs, see Supported Features at the beginning of this document.

Creating VPC Network Offering

3. Click the OK button to create the network offering.
4. After the network offering has been successfully created, enable it from the Service Offerings - Network Offerings list.

Create and Enable Shared Network Offering¶

1. Select Service Offerings > Select Offering: Network Offerings > Add network offering, which brings up the Add network offering.
2. In the Add network offering panel, add a Name and a Description to the network offering. Select Shared as the Guest Type. In the Supported Services field select services and providers that are supported by the Nuage VSP Plugin for Shared Networks, see Supported Features at the beginning of this document.

Creating Shared Network Offering

3. Click the OK button to create the network offering.
4. After the network offering has been successfully created, enable it from the Service Offerings - Network Offerings list.

VPC Offerings¶

Pre-created and Enabled Nuage VSP VPC Offering¶

A VPC offering by the name Nuage VSP VPC Offering is pre-created and enabled in the list of Service Offerings - VPC Offerings (Select Service Offerings > Select Offering: VPC Offerings) which contains all the services and providers that are supported by the Nuage VSP Plugin for VPCs.

Pre-created and Enabled Nuage VSP VPC Offering

(Optional) Create and Enable VPC Offering¶

1. Select Service Offerings > Select Offering: VPC Offerings > Add VPC Offering, which brings up the Add VPC Offering.
2. In the Add VPC Offering panel, add a Name and a Description to the network offering. In the Supported Services field select services and providers that are supported by the Nuage VSP Plugin for VPCs, see Supported Features at the beginning of this document.

Creating VPC Offering

3. Click the OK button to create the VPC Offering.
4. After the VPC Offering has been successfully created, enable it from the Service Offerings - VPC Offerings list.

Nuage VSP Domain Template Feature Support for CloudStack¶

All the constructs (parameters and abstractions) defined in a Nuage VSD domain template can be made available to domain instances (i.e. networks) created in CloudStack. To do this, configure the Nuage VSP Plugin to use a pre-created Nuage VSD domain template when instantiating domains (i.e. creating networks). Networks created in CloudStack will then use domain instances created from the domain template.

Typical use-cases are:

• The basic ACLs on the top and bottom that bracket or “contain” the end-user’s ACLs.
• Leakable domains/GRT Leaking (Nuage VSP feature).

To configure a Nuage VSP domain template for use by CloudStack, use the Nuage VSD Architect (VSP’s GUI) to create a domain template and configure it in the following CloudStack global settings.

Table: CloudStack Global Settings For Configuring Nuage VSP Domain Template Feature

Nuage VSP Source NAT via the Underlay Feature Support For CloudStack¶

Supported CloudStack versions: >= 4.10

CloudStack provides Source NAT service to enable guest VMs to send traffic out to the Internet without requiring a Static NAT IP (public IP) assigned to the VM. The Source NAT service must be enabled as part of the network offering used for creating the guest network. When a network is created using this network offering, the first public IP from the assigned public IP range is automatically acquired as the Source NAT IP for the network. All VMs attached to this network then use that Source NAT IP to send traffic to the Internet.

The Nuage VSP Plugin for CloudStack supports CloudStack’s native Source NAT service and enhances it by restricting to a minimum the number of public IP addresses assigned to any given tenant. This is achieved by not allocating a Source NAT IP for every network that is created.

The Source NAT service that Nuage VSP calls the Port Address Translation (PAT) feature uses the hypervisor IP as the Source NAT IP address for all VMs in the hypervisor that need to send traffic out to the Internet. Configure this during Nuage VSP installation using the instructions given in the Nuage VSP Install Guide.

This feature is supported for both VPCs and Isolated Networks. In the case of VPCs, Source NAT is applied at the Nuage VSP domain level, therefore there is no customization on the individual VPC network (tier) level.

All VPCs and Isolated networks that are created from a Nuage VSP Source NAT-enabled network offering have this feature enabled automatically. An example Nuage VSP Source NAT-enabled network offering is shown in the figure « Nuage VSP Source NAT-enabled Network Offering » below.

Nuage VSP Source NAT-enabled Network Offering

Nuage VSP Static NAT via the Underlay Feature Support For CloudStack¶

Supported CloudStack versions: >= 4.10

Static NAT is supported in Nuage VSP as FIP (Floating IP). Prior to Nuage VSP v3.2, FIP in Nuage VSP required a VXLAN GW/PE to be present in the data center. In Nuage VSP v3.2 and above FIP is supported via the underlay, which removes the requirement for a GW/PE in the DC.

For the Static NAT without GW/PE feature to be operational in the CloudStack plugin, FIP in Nuage VSP must be configured to use the underlay. This operation takes place during Nuage VSP installation; instructions can be found in the Nuage VSP Install Guide.

A new API called nuageunderlayvlaniprange has been introduced to enable/disable Static NAT via the Underlay feature support for CloudStack public IP ranges being used for Static NAT service. This API specifies whether the FIP to underlay support is required for the corresponding FIP subnet in Nuage VSD since there is no GW/PE in the data center. When the nuageunderlayvlaniprange API has been enabled/disabled for a public IP range and Static NAT is enabled on at-least one of its Public IPs, the plugin creates the corresponding shared FIP subnet in Nuage VSD using the sharednetworkresources API with the underlay flag set accordingly. The nuageunderlayvlaniprange API usage is shown in the figure « nuageunderlayvlaniprange API Usage » below.

nuageunderlayvlaniprange API Usage

By default, the Nuage VSP Plugin creates the corresponding shared FIP subnet in Nuage VSD with the underlay flag set to false (disabled). There is no support for the nuageunderlayvlaniprange API from the CloudStack UI.

Configure Nuage VSP API¶

To configure Nuage VSP as a Network Service Provider in the CloudStack Zone.

1. Add Nuage VSP as a Network Service Provider in the Physical Network 2:

cloudmonkey add networkserviceprovider name=NuageVsp physicalnetworkid=<physicalNetwork2Id>

2. Add the Nuage VSD as a Nuage VSP Device in the Physical Network 2:

cloudmonkey add nuagevspdevice physicalnetworkid=<physicalNetwork2Id> hostname=<hostnameOfNuageVsp> username=<usernameOfNuageVspUser> password=<passwordOfNuageVspUser> port=<portUsedByNuageVsp> apiversion=<apiVersionOfNuageVsp> retrycount=<nrOfRetriesOnFailure> retryinterval=<intervalBetweenRetries>

Nuage VSP Marvin Config File Format¶

Format for the Marvin config file required to run The Nuage VSP Plugin specific Marvin tests.

{
 "zones": [
     {
         "name": "ZONE1NAME",
         "physical_networks": [
             {
                 "name": "Physical Network 1",
                 "isolationmethods": [
                     "VLAN"
                 ]
             },
             {
                 "name": "Physical Network 2",
                 "isolationmethods": [
                     "VSP"
                 ],
                 "providers": [
                     {
                         "name": "NuageVsp",
                         "devices": [
                             {
                                 "username": "VSDUSERNAME",
                                 "retryinterval": "60",
                                 "hostname": "VSDSERVER",
                                 "apiversion": "VSDVERSION",
                                 "retrycount": "4",
                                 "password": "VSDUSERPASSWORD",
                                 "port": VSDPORT
                             }
                         ]
                     }
                 ]
             }
         ],
         "dcInternetConnectivityInfo" : {
             "available": "INTERNETAVAILABLE",
             "httpProxy": "HTTPPROXY",
             "httpsProxy": "HTTPSPROXY"
         }
     },
     {
         "name": "ZONE2NAME",
         "physical_networks": [
             {
                 "name": "Physical Network 1",
                 "isolationmethods": [
                     "VLAN"
                 ]
             },
             {
                 "name": "Physical Network 2",
                 "isolationmethods": [
                     "VSP"
                 ],
                 "providers": [
                     {
                         "name": "NuageVsp",
                         "devices": [
                             {
                                 "username": "VSDUSERNAME",
                                 "retryinterval": "60",
                                 "hostname": "VSDSERVER",
                                 "apiversion": "VSDVERSION",
                                 "retrycount": "4",
                                 "password": "VSDUSERPASSWORD",
                                 "port": VSDPORT
                             }
                         ]
                     }
                 ]
             }
         ],
         "dcInternetConnectivityInfo" : {
             "available": "INTERNETAVAILABLE",
             "httpProxy": "HTTPPROXY",
             "httpsProxy": "HTTPSPROXY"
         }
     }
 ],
 "dbSvr": {
     "dbSvr": "DBSERVER",
     "passwd": "DBPASSWORD",
     "db": "cloud",
     "port": 3306,
     "user": "DBUSERNAME"
 },
 "logger":
     {
         "LogFolderPath": "/tmp/LOGFOLDERNAME"
     },
 "mgtSvr": [
     {
         "mgtSvrIp": "MGNTSERVERIP",
         "port": 8096,
         "user": "MGNTUSERNAME",
         "passwd": "MGNTPASSWORD"
     }
 ]
 }