際際滷

際際滷Share a Scribd company logo
OpenStack Neutron Service
Insertion and Chaining
Icehouse Summit Nov 2013
Sumit Naiksatam, Kanzhe Jiang
Resource Model
Service Insertion Context and
different insertion modes
Service Insertion Context
L3 insertion
L3 Insertion
L3 Insertion
L3 Insertion
L2 Insertion
Bump in the Wire
Tap
Service Chain Resource
Create and insert individual
service
Chooses Service Provider Name from
list of available service providers.
$ neutron service-provider-list
----------------------------------------------------| Service Type
|
Name
| Default |
|---------------------------------------------------| FIREWALL
|
IPTables
| True
|
| FIREWALL
|
VendorA
| False
|
| VPN
|
OpenSwan
| True
|
| VPN
|
VendorB
| False
|
-----------------------------------------------------
Create service instance (firewall in this
case)
$ neutron firewall-create <firewall_policy_id>
OR
$ neutron firewall-create <firewall_policy_id> 
--provider VendorA
OR
$ neutron firewall-create <firewall_policy_id> 
--provider VendorA 
--insertion-context router_id=<router_id>
Create a Service Chain
Chooses Service Provider Name from
list of available service providers.
$ neutron service-provider-list
----------------------------------------------------| Service Type
|
Name
| Default |
|---------------------------------------------------| FIREWALL
|
IPTables
| True
|
| FIREWALL
|
VendorA
| False
|
| VPN
|
OpenSwan
| True
|
| VPN
|
VendorB
| False
|
----------------------------------------------------$ neutron service-chain-provider-list
----------------------------------------------| Chain Name
|
Services
|
|---------------------------------------------|Firewall-VPN-Ref-Chain| [IPTables,OpenSwan] |
-----------------------------------------------
Create each service in the eventual
chain
$ neutron firewall-create <firewall_policy_id> 
--provider IPTables 
-in-chain True

  
$ neutron vpn-service-create 
--provider OpenSwan 
-in-chain True
Create chain
$ neutron service-chain-create 
--provider Firewall-VPN-Ref-Chain 
--services <firewall_instance_id, vpn_instance_id> 
--name my_fw_vpn_chain 
--source-insertion-context --router_id=<router_id>

More Related Content

Similar to OpenStack Neutron Service Chaining and Insertion (20)

C#. NET ONLINE TRAINING
C#. NET ONLINE TRAININGC#. NET ONLINE TRAINING
C#. NET ONLINE TRAINING
TRAINING ICON
C#.net online training
C#.net online trainingC#.net online training
C#.net online training
TRAINING ICON
Randolf Geist IT-Tage 2015 Oracle Parallel Execution Analyse und Troubl...
Randolf Geist  IT-Tage 2015  Oracle Parallel Execution  Analyse und Troubl...Randolf Geist  IT-Tage 2015  Oracle Parallel Execution  Analyse und Troubl...
Randolf Geist IT-Tage 2015 Oracle Parallel Execution Analyse und Troubl...
Informatik Aktuell
(NET301) New Capabilities for Amazon Virtual Private Cloud
(NET301) New Capabilities for Amazon Virtual Private Cloud(NET301) New Capabilities for Amazon Virtual Private Cloud
(NET301) New Capabilities for Amazon Virtual Private Cloud
Amazon Web Services
SAP XI PI ONLINE TRAINING
SAP XI PI ONLINE TRAININGSAP XI PI ONLINE TRAINING
SAP XI PI ONLINE TRAINING
TRAINING ICON
Ruby on rails online training
Ruby on rails online trainingRuby on rails online training
Ruby on rails online training
TRAINING ICON
RUBY ON RAILS ONLINE TRAINING
 RUBY ON RAILS ONLINE TRAINING RUBY ON RAILS ONLINE TRAINING
RUBY ON RAILS ONLINE TRAINING
TRAINING ICON
SAS ONLINE TRAINING
SAS ONLINE TRAININGSAS ONLINE TRAINING
SAS ONLINE TRAINING
TRAINING ICON
Sas online training
Sas online trainingSas online training
Sas online training
TRAINING ICON
NTC 409 RANK Become Exceptional--ntc409rank.com
NTC 409 RANK Become Exceptional--ntc409rank.comNTC 409 RANK Become Exceptional--ntc409rank.com
NTC 409 RANK Become Exceptional--ntc409rank.com
shanaabe69
ャ<潟若帥若鴻 MySQL篏帥!? 鐔MySQL JSON UDF鐔
ャ<潟若帥若鴻 MySQL篏帥!? 鐔MySQL JSON UDF鐔ャ<潟若帥若鴻 MySQL篏帥!? 鐔MySQL JSON UDF鐔
ャ<潟若帥若鴻 MySQL篏帥!? 鐔MySQL JSON UDF鐔
yoyamasaki
NTC 409 RANK Introduction Education--ntc409rank.com
NTC 409 RANK Introduction Education--ntc409rank.comNTC 409 RANK Introduction Education--ntc409rank.com
NTC 409 RANK Introduction Education--ntc409rank.com
GVlaxmi16
Compute 101 - OpenStack Summit Vancouver 2015
Compute 101 - OpenStack Summit Vancouver 2015Compute 101 - OpenStack Summit Vancouver 2015
Compute 101 - OpenStack Summit Vancouver 2015
Stephen Gordon
Spring MVC - The Basics
Spring MVC -  The BasicsSpring MVC -  The Basics
Spring MVC - The Basics
Ilio Catallo
Shared networks to support VNF high availability across OpenStack multi-regio...
Shared networks to support VNF high availability across OpenStack multi-regio...Shared networks to support VNF high availability across OpenStack multi-regio...
Shared networks to support VNF high availability across OpenStack multi-regio...
Joe Huang
CCNP Switching Chapter 7
CCNP Switching Chapter 7CCNP Switching Chapter 7
CCNP Switching Chapter 7
Chaing Ravuth
Training 際際滷s: Advanced 304: Upgrading From Native MySQL Replication To Tun...
Training 際際滷s: Advanced 304: Upgrading From Native MySQL Replication To Tun...Training 際際滷s: Advanced 304: Upgrading From Native MySQL Replication To Tun...
Training 際際滷s: Advanced 304: Upgrading From Native MySQL Replication To Tun...
Continuent
Sydney Oracle Meetup - access paths
Sydney Oracle Meetup - access pathsSydney Oracle Meetup - access paths
Sydney Oracle Meetup - access paths
paulguerin
What is new in neutron QoS?
What is new in neutron QoS?What is new in neutron QoS?
What is new in neutron QoS?
Sawomir Kaposki
Writing efficient sql
Writing efficient sqlWriting efficient sql
Writing efficient sql
j9soto
C#. NET ONLINE TRAINING
C#. NET ONLINE TRAININGC#. NET ONLINE TRAINING
C#. NET ONLINE TRAINING
TRAINING ICON
C#.net online training
C#.net online trainingC#.net online training
C#.net online training
TRAINING ICON
Randolf Geist IT-Tage 2015 Oracle Parallel Execution Analyse und Troubl...
Randolf Geist  IT-Tage 2015  Oracle Parallel Execution  Analyse und Troubl...Randolf Geist  IT-Tage 2015  Oracle Parallel Execution  Analyse und Troubl...
Randolf Geist IT-Tage 2015 Oracle Parallel Execution Analyse und Troubl...
Informatik Aktuell
(NET301) New Capabilities for Amazon Virtual Private Cloud
(NET301) New Capabilities for Amazon Virtual Private Cloud(NET301) New Capabilities for Amazon Virtual Private Cloud
(NET301) New Capabilities for Amazon Virtual Private Cloud
Amazon Web Services
SAP XI PI ONLINE TRAINING
SAP XI PI ONLINE TRAININGSAP XI PI ONLINE TRAINING
SAP XI PI ONLINE TRAINING
TRAINING ICON
Ruby on rails online training
Ruby on rails online trainingRuby on rails online training
Ruby on rails online training
TRAINING ICON
RUBY ON RAILS ONLINE TRAINING
 RUBY ON RAILS ONLINE TRAINING RUBY ON RAILS ONLINE TRAINING
RUBY ON RAILS ONLINE TRAINING
TRAINING ICON
SAS ONLINE TRAINING
SAS ONLINE TRAININGSAS ONLINE TRAINING
SAS ONLINE TRAINING
TRAINING ICON
Sas online training
Sas online trainingSas online training
Sas online training
TRAINING ICON
NTC 409 RANK Become Exceptional--ntc409rank.com
NTC 409 RANK Become Exceptional--ntc409rank.comNTC 409 RANK Become Exceptional--ntc409rank.com
NTC 409 RANK Become Exceptional--ntc409rank.com
shanaabe69
ャ<潟若帥若鴻 MySQL篏帥!? 鐔MySQL JSON UDF鐔
ャ<潟若帥若鴻 MySQL篏帥!? 鐔MySQL JSON UDF鐔ャ<潟若帥若鴻 MySQL篏帥!? 鐔MySQL JSON UDF鐔
ャ<潟若帥若鴻 MySQL篏帥!? 鐔MySQL JSON UDF鐔
yoyamasaki
NTC 409 RANK Introduction Education--ntc409rank.com
NTC 409 RANK Introduction Education--ntc409rank.comNTC 409 RANK Introduction Education--ntc409rank.com
NTC 409 RANK Introduction Education--ntc409rank.com
GVlaxmi16
Compute 101 - OpenStack Summit Vancouver 2015
Compute 101 - OpenStack Summit Vancouver 2015Compute 101 - OpenStack Summit Vancouver 2015
Compute 101 - OpenStack Summit Vancouver 2015
Stephen Gordon
Spring MVC - The Basics
Spring MVC -  The BasicsSpring MVC -  The Basics
Spring MVC - The Basics
Ilio Catallo
Shared networks to support VNF high availability across OpenStack multi-regio...
Shared networks to support VNF high availability across OpenStack multi-regio...Shared networks to support VNF high availability across OpenStack multi-regio...
Shared networks to support VNF high availability across OpenStack multi-regio...
Joe Huang
CCNP Switching Chapter 7
CCNP Switching Chapter 7CCNP Switching Chapter 7
CCNP Switching Chapter 7
Chaing Ravuth
Training 際際滷s: Advanced 304: Upgrading From Native MySQL Replication To Tun...
Training 際際滷s: Advanced 304: Upgrading From Native MySQL Replication To Tun...Training 際際滷s: Advanced 304: Upgrading From Native MySQL Replication To Tun...
Training 際際滷s: Advanced 304: Upgrading From Native MySQL Replication To Tun...
Continuent
Sydney Oracle Meetup - access paths
Sydney Oracle Meetup - access pathsSydney Oracle Meetup - access paths
Sydney Oracle Meetup - access paths
paulguerin
What is new in neutron QoS?
What is new in neutron QoS?What is new in neutron QoS?
What is new in neutron QoS?
Sawomir Kaposki
Writing efficient sql
Writing efficient sqlWriting efficient sql
Writing efficient sql
j9soto

More from Sumit Naiksatam (8)

Open stack gbp final sn-4-slideshare
Open stack gbp final sn-4-slideshareOpen stack gbp final sn-4-slideshare
Open stack gbp final sn-4-slideshare
Sumit Naiksatam
Group-based Policy for Networking
Group-based Policy for NetworkingGroup-based Policy for Networking
Group-based Policy for Networking
Sumit Naiksatam
Group-based Policy For OpenStack Networking
Group-based Policy For OpenStack NetworkingGroup-based Policy For OpenStack Networking
Group-based Policy For OpenStack Networking
Sumit Naiksatam
Network Policy Abstractions in OpenStack Neutron
Network Policy Abstractions in OpenStack NeutronNetwork Policy Abstractions in OpenStack Neutron
Network Policy Abstractions in OpenStack Neutron
Sumit Naiksatam
Quantum services' chaining open stack havana design summit, portland 2013
Quantum services' chaining   open stack havana design summit, portland 2013Quantum services' chaining   open stack havana design summit, portland 2013
Quantum services' chaining open stack havana design summit, portland 2013
Sumit Naiksatam
Quantum firewall as a service open stack havana design summit, portland 2013
Quantum firewall as a service   open stack havana design summit, portland 2013Quantum firewall as a service   open stack havana design summit, portland 2013
Quantum firewall as a service open stack havana design summit, portland 2013
Sumit Naiksatam
Quantum L3 (forwarding) model - OpenStack Folsom Design Summit
Quantum L3 (forwarding) model - OpenStack Folsom Design SummitQuantum L3 (forwarding) model - OpenStack Folsom Design Summit
Quantum L3 (forwarding) model - OpenStack Folsom Design Summit
Sumit Naiksatam
OpenStack Quantum
OpenStack QuantumOpenStack Quantum
OpenStack Quantum
Sumit Naiksatam
Open stack gbp final sn-4-slideshare
Open stack gbp final sn-4-slideshareOpen stack gbp final sn-4-slideshare
Open stack gbp final sn-4-slideshare
Sumit Naiksatam
Group-based Policy for Networking
Group-based Policy for NetworkingGroup-based Policy for Networking
Group-based Policy for Networking
Sumit Naiksatam
Group-based Policy For OpenStack Networking
Group-based Policy For OpenStack NetworkingGroup-based Policy For OpenStack Networking
Group-based Policy For OpenStack Networking
Sumit Naiksatam
Network Policy Abstractions in OpenStack Neutron
Network Policy Abstractions in OpenStack NeutronNetwork Policy Abstractions in OpenStack Neutron
Network Policy Abstractions in OpenStack Neutron
Sumit Naiksatam
Quantum services' chaining open stack havana design summit, portland 2013
Quantum services' chaining   open stack havana design summit, portland 2013Quantum services' chaining   open stack havana design summit, portland 2013
Quantum services' chaining open stack havana design summit, portland 2013
Sumit Naiksatam
Quantum firewall as a service open stack havana design summit, portland 2013
Quantum firewall as a service   open stack havana design summit, portland 2013Quantum firewall as a service   open stack havana design summit, portland 2013
Quantum firewall as a service open stack havana design summit, portland 2013
Sumit Naiksatam
Quantum L3 (forwarding) model - OpenStack Folsom Design Summit
Quantum L3 (forwarding) model - OpenStack Folsom Design SummitQuantum L3 (forwarding) model - OpenStack Folsom Design Summit
Quantum L3 (forwarding) model - OpenStack Folsom Design Summit
Sumit Naiksatam

Recently uploaded (20)

MIND Revenue Release Quarter 4 2024 - Finacial Presentation
MIND Revenue Release Quarter 4 2024 - Finacial PresentationMIND Revenue Release Quarter 4 2024 - Finacial Presentation
MIND Revenue Release Quarter 4 2024 - Finacial Presentation
MIND CTI
Bedrock Data Automation (Preview): Simplifying Unstructured Data Processing
Bedrock Data Automation (Preview): Simplifying Unstructured Data ProcessingBedrock Data Automation (Preview): Simplifying Unstructured Data Processing
Bedrock Data Automation (Preview): Simplifying Unstructured Data Processing
Zilliz
Not a Kubernetes fan? The state of PaaS in 2025
Not a Kubernetes fan? The state of PaaS in 2025Not a Kubernetes fan? The state of PaaS in 2025
Not a Kubernetes fan? The state of PaaS in 2025
Anthony Dahanne
Predictive vs. Preventive Maintenance Which One is Right for Your Factory
Predictive vs. Preventive Maintenance  Which One is Right for Your FactoryPredictive vs. Preventive Maintenance  Which One is Right for Your Factory
Predictive vs. Preventive Maintenance Which One is Right for Your Factory
Diagsense ltd
Caching for Performance Masterclass: Caching at Scale
Caching for Performance Masterclass: Caching at ScaleCaching for Performance Masterclass: Caching at Scale
Caching for Performance Masterclass: Caching at Scale
ScyllaDB
AMER Introduction to ThousandEyes Webinar
AMER Introduction to ThousandEyes WebinarAMER Introduction to ThousandEyes Webinar
AMER Introduction to ThousandEyes Webinar
ThousandEyes
SECURE BLOCKCHAIN FOR ADMISSION PROCESSING IN EDUCATIONAL INSTITUTIONS.pdf
SECURE BLOCKCHAIN FOR ADMISSION PROCESSING IN EDUCATIONAL INSTITUTIONS.pdfSECURE BLOCKCHAIN FOR ADMISSION PROCESSING IN EDUCATIONAL INSTITUTIONS.pdf
SECURE BLOCKCHAIN FOR ADMISSION PROCESSING IN EDUCATIONAL INSTITUTIONS.pdf
spub1985
L01 Introduction to Nanoindentation - What is hardness
L01 Introduction to Nanoindentation - What is hardnessL01 Introduction to Nanoindentation - What is hardness
L01 Introduction to Nanoindentation - What is hardness
RostislavDaniel
Transcript: AI in publishing: Your questions answered - Tech Forum 2025
Transcript: AI in publishing: Your questions answered - Tech Forum 2025Transcript: AI in publishing: Your questions answered - Tech Forum 2025
Transcript: AI in publishing: Your questions answered - Tech Forum 2025
BookNet Canada
Dev Dives: Unlock the future of automation with UiPath Agent Builder
Dev Dives: Unlock the future of automation with UiPath Agent BuilderDev Dives: Unlock the future of automation with UiPath Agent Builder
Dev Dives: Unlock the future of automation with UiPath Agent Builder
UiPathCommunity
DealBook of Ukraine: 2025 edition | AVentures Capital
DealBook of Ukraine: 2025 edition | AVentures CapitalDealBook of Ukraine: 2025 edition | AVentures Capital
DealBook of Ukraine: 2025 edition | AVentures Capital
Yevgen Sysoyev
Unlocking DevOps Secuirty :Vault & Keylock
Unlocking DevOps Secuirty :Vault & KeylockUnlocking DevOps Secuirty :Vault & Keylock
Unlocking DevOps Secuirty :Vault & Keylock
HusseinMalikMammadli
DevNexus - Building 10x Development Organizations.pdf
DevNexus - Building 10x Development Organizations.pdfDevNexus - Building 10x Development Organizations.pdf
DevNexus - Building 10x Development Organizations.pdf
Justin Reock
William Maclyn Murphy McRae - A Seasoned Professional Renowned
William Maclyn Murphy McRae - A Seasoned Professional RenownedWilliam Maclyn Murphy McRae - A Seasoned Professional Renowned
William Maclyn Murphy McRae - A Seasoned Professional Renowned
William Maclyn Murphy McRae
Getting Started with AWS - Enterprise Landing Zone for Terraform Learning & D...
Getting Started with AWS - Enterprise Landing Zone for Terraform Learning & D...Getting Started with AWS - Enterprise Landing Zone for Terraform Learning & D...
Getting Started with AWS - Enterprise Landing Zone for Terraform Learning & D...
Chris Wahl
UiPath Automation Developer Associate Training Series 2025 - Session 1
UiPath Automation Developer Associate Training Series 2025 - Session 1UiPath Automation Developer Associate Training Series 2025 - Session 1
UiPath Automation Developer Associate Training Series 2025 - Session 1
DianaGray10
UiPath Document Understanding - Generative AI and Active learning capabilities
UiPath Document Understanding - Generative AI and Active learning capabilitiesUiPath Document Understanding - Generative AI and Active learning capabilities
UiPath Document Understanding - Generative AI and Active learning capabilities
DianaGray10
AI Trends and Fun Demos Sothebys Rehoboth Presentation
AI Trends and Fun Demos  Sothebys Rehoboth PresentationAI Trends and Fun Demos  Sothebys Rehoboth Presentation
AI Trends and Fun Demos Sothebys Rehoboth Presentation
Ethan Holland
Mastering ChatGPT & LLMs for Practical Applications: Tips, Tricks, and Use Cases
Mastering ChatGPT & LLMs for Practical Applications: Tips, Tricks, and Use CasesMastering ChatGPT & LLMs for Practical Applications: Tips, Tricks, and Use Cases
Mastering ChatGPT & LLMs for Practical Applications: Tips, Tricks, and Use Cases
Sanjay Willie
Caching for Performance Masterclass: The In-Memory Datastore
Caching for Performance Masterclass: The In-Memory DatastoreCaching for Performance Masterclass: The In-Memory Datastore
Caching for Performance Masterclass: The In-Memory Datastore
ScyllaDB
MIND Revenue Release Quarter 4 2024 - Finacial Presentation
MIND Revenue Release Quarter 4 2024 - Finacial PresentationMIND Revenue Release Quarter 4 2024 - Finacial Presentation
MIND Revenue Release Quarter 4 2024 - Finacial Presentation
MIND CTI
Bedrock Data Automation (Preview): Simplifying Unstructured Data Processing
Bedrock Data Automation (Preview): Simplifying Unstructured Data ProcessingBedrock Data Automation (Preview): Simplifying Unstructured Data Processing
Bedrock Data Automation (Preview): Simplifying Unstructured Data Processing
Zilliz
Not a Kubernetes fan? The state of PaaS in 2025
Not a Kubernetes fan? The state of PaaS in 2025Not a Kubernetes fan? The state of PaaS in 2025
Not a Kubernetes fan? The state of PaaS in 2025
Anthony Dahanne
Predictive vs. Preventive Maintenance Which One is Right for Your Factory
Predictive vs. Preventive Maintenance  Which One is Right for Your FactoryPredictive vs. Preventive Maintenance  Which One is Right for Your Factory
Predictive vs. Preventive Maintenance Which One is Right for Your Factory
Diagsense ltd
Caching for Performance Masterclass: Caching at Scale
Caching for Performance Masterclass: Caching at ScaleCaching for Performance Masterclass: Caching at Scale
Caching for Performance Masterclass: Caching at Scale
ScyllaDB
AMER Introduction to ThousandEyes Webinar
AMER Introduction to ThousandEyes WebinarAMER Introduction to ThousandEyes Webinar
AMER Introduction to ThousandEyes Webinar
ThousandEyes
SECURE BLOCKCHAIN FOR ADMISSION PROCESSING IN EDUCATIONAL INSTITUTIONS.pdf
SECURE BLOCKCHAIN FOR ADMISSION PROCESSING IN EDUCATIONAL INSTITUTIONS.pdfSECURE BLOCKCHAIN FOR ADMISSION PROCESSING IN EDUCATIONAL INSTITUTIONS.pdf
SECURE BLOCKCHAIN FOR ADMISSION PROCESSING IN EDUCATIONAL INSTITUTIONS.pdf
spub1985
L01 Introduction to Nanoindentation - What is hardness
L01 Introduction to Nanoindentation - What is hardnessL01 Introduction to Nanoindentation - What is hardness
L01 Introduction to Nanoindentation - What is hardness
RostislavDaniel
Transcript: AI in publishing: Your questions answered - Tech Forum 2025
Transcript: AI in publishing: Your questions answered - Tech Forum 2025Transcript: AI in publishing: Your questions answered - Tech Forum 2025
Transcript: AI in publishing: Your questions answered - Tech Forum 2025
BookNet Canada
Dev Dives: Unlock the future of automation with UiPath Agent Builder
Dev Dives: Unlock the future of automation with UiPath Agent BuilderDev Dives: Unlock the future of automation with UiPath Agent Builder
Dev Dives: Unlock the future of automation with UiPath Agent Builder
UiPathCommunity
DealBook of Ukraine: 2025 edition | AVentures Capital
DealBook of Ukraine: 2025 edition | AVentures CapitalDealBook of Ukraine: 2025 edition | AVentures Capital
DealBook of Ukraine: 2025 edition | AVentures Capital
Yevgen Sysoyev
Unlocking DevOps Secuirty :Vault & Keylock
Unlocking DevOps Secuirty :Vault & KeylockUnlocking DevOps Secuirty :Vault & Keylock
Unlocking DevOps Secuirty :Vault & Keylock
HusseinMalikMammadli
DevNexus - Building 10x Development Organizations.pdf
DevNexus - Building 10x Development Organizations.pdfDevNexus - Building 10x Development Organizations.pdf
DevNexus - Building 10x Development Organizations.pdf
Justin Reock
William Maclyn Murphy McRae - A Seasoned Professional Renowned
William Maclyn Murphy McRae - A Seasoned Professional RenownedWilliam Maclyn Murphy McRae - A Seasoned Professional Renowned
William Maclyn Murphy McRae - A Seasoned Professional Renowned
William Maclyn Murphy McRae
Getting Started with AWS - Enterprise Landing Zone for Terraform Learning & D...
Getting Started with AWS - Enterprise Landing Zone for Terraform Learning & D...Getting Started with AWS - Enterprise Landing Zone for Terraform Learning & D...
Getting Started with AWS - Enterprise Landing Zone for Terraform Learning & D...
Chris Wahl
UiPath Automation Developer Associate Training Series 2025 - Session 1
UiPath Automation Developer Associate Training Series 2025 - Session 1UiPath Automation Developer Associate Training Series 2025 - Session 1
UiPath Automation Developer Associate Training Series 2025 - Session 1
DianaGray10
UiPath Document Understanding - Generative AI and Active learning capabilities
UiPath Document Understanding - Generative AI and Active learning capabilitiesUiPath Document Understanding - Generative AI and Active learning capabilities
UiPath Document Understanding - Generative AI and Active learning capabilities
DianaGray10
AI Trends and Fun Demos Sothebys Rehoboth Presentation
AI Trends and Fun Demos  Sothebys Rehoboth PresentationAI Trends and Fun Demos  Sothebys Rehoboth Presentation
AI Trends and Fun Demos Sothebys Rehoboth Presentation
Ethan Holland
Mastering ChatGPT & LLMs for Practical Applications: Tips, Tricks, and Use Cases
Mastering ChatGPT & LLMs for Practical Applications: Tips, Tricks, and Use CasesMastering ChatGPT & LLMs for Practical Applications: Tips, Tricks, and Use Cases
Mastering ChatGPT & LLMs for Practical Applications: Tips, Tricks, and Use Cases
Sanjay Willie
Caching for Performance Masterclass: The In-Memory Datastore
Caching for Performance Masterclass: The In-Memory DatastoreCaching for Performance Masterclass: The In-Memory Datastore
Caching for Performance Masterclass: The In-Memory Datastore
ScyllaDB

OpenStack Neutron Service Chaining and Insertion

  • 1. OpenStack Neutron Service Insertion and Chaining Icehouse Summit Nov 2013 Sumit Naiksatam, Kanzhe Jiang
  • 3. Service Insertion Context and different insertion modes
  • 10. Bump in the Wire
  • 11. Tap
  • 13. Create and insert individual service
  • 14. Chooses Service Provider Name from list of available service providers. $ neutron service-provider-list ----------------------------------------------------| Service Type | Name | Default | |---------------------------------------------------| FIREWALL | IPTables | True | | FIREWALL | VendorA | False | | VPN | OpenSwan | True | | VPN | VendorB | False | -----------------------------------------------------
  • 15. Create service instance (firewall in this case) $ neutron firewall-create <firewall_policy_id> OR $ neutron firewall-create <firewall_policy_id> --provider VendorA OR $ neutron firewall-create <firewall_policy_id> --provider VendorA --insertion-context router_id=<router_id>
  • 17. Chooses Service Provider Name from list of available service providers. $ neutron service-provider-list ----------------------------------------------------| Service Type | Name | Default | |---------------------------------------------------| FIREWALL | IPTables | True | | FIREWALL | VendorA | False | | VPN | OpenSwan | True | | VPN | VendorB | False | ----------------------------------------------------$ neutron service-chain-provider-list ----------------------------------------------| Chain Name | Services | |---------------------------------------------|Firewall-VPN-Ref-Chain| [IPTables,OpenSwan] | -----------------------------------------------
  • 18. Create each service in the eventual chain $ neutron firewall-create <firewall_policy_id> --provider IPTables -in-chain True $ neutron vpn-service-create --provider OpenSwan -in-chain True
  • 19. Create chain $ neutron service-chain-create --provider Firewall-VPN-Ref-Chain --services <firewall_instance_id, vpn_instance_id> --name my_fw_vpn_chain --source-insertion-context --router_id=<router_id>