You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@cloudstack.apache.org by Hean Seng <he...@gmail.com> on 2020/09/04 05:25:16 UTC

Cloudstack Isolated Network - VLAN

Hi

Cloudstack Reserve VLAN for isolated network,  However VLAN in network have
limitation of 4096 vlan,

If one user one isolated network, it means we can only create 4096 users .


Anybody have any suggestion for work around ?


-- 
Regards,
Hean Seng

Re: Cloudstack Isolated Network - VLAN

Posted by Tom Black <to...@gmail.com>.
You can setup VxLAN.

Thanks.

Hean Seng wrote:
> Cloudstack Reserve VLAN for isolated network,  However VLAN in network have
> limitation of 4096 vlan,
> 
> If one user one isolated network, it means we can only create 4096 users .

Re: Cloudstack Isolated Network - VLAN

Posted by Hean Seng <he...@gmail.com>.
Hi

Yes, I saw that also,  Thanks for advice.







On Fri, Sep 11, 2020 at 9:13 PM Andrija Panic <an...@gmail.com>
wrote:

> Hi hean,
>
> yes, that is correct, VXLAN is supported (as an isolation method) for only
> GUEST traffic/networks.
> Make sure to read the manually fully - pay attention to MTU size and the
> max number of multicast groups (defaults to 20 on a Linux hosts) -
> otherwise, you will experience a serious pain of packet loss or zero
> traffic (that I have experiences 3-4y ago).
>
> Best,
>
> On Mon, 7 Sep 2020 at 19:59, Hean Seng <he...@gmail.com> wrote:
>
> > I read the document ,  for VXLAN, you only  need normally LInux Bridge ,
> > and do not need OpenVSwitch .  And you need to have 2  phy network card
> at
> > least , one NIC for Management network and Public network , which
> isolation
> > method is VLAN,  and second NIC is GuestNetwork with isolation method
> VXLAN
> >
> > After that need to define VNI range  for VXLAN ,  this shld be able to
> > defne big range and vxlan support 16mil VNI.
> >
> > I not yet try it up ,  Am I right above what I understand ?
> >
> >
> >
> >
> > On Mon, Sep 7, 2020 at 11:43 PM Kaushik Bora <kaushik@indiqus.com.invalid
> >
> > wrote:
> >
> > > Hi Hean,
> > >
> > >  I don't think we have any readymade solution for this issue !!!
> > >
> > >  The world has already moved towards VXLAN and IPv6 framework to
> overcome
> > > the existing challenges. Appreciate if someone can provide information
> on
> > > the Cloudstack Roadmap for the VXLAN and IPv6 adoption.
> > >
> > > Rgds,
> > > Kaushik
> > >
> > >
> > >
> > > -----Original Message-----
> > > From: Hean Seng [mailto:heanseng@gmail.com]
> > > Sent: 04 September 2020 10:55
> > > To: users@cloudstack.apache.org
> > > Subject: Cloudstack Isolated Network - VLAN
> > >
> > > Hi
> > >
> > > Cloudstack Reserve VLAN for isolated network,  However VLAN in network
> > > have limitation of 4096 vlan,
> > >
> > > If one user one isolated network, it means we can only create 4096
> users
> > .
> > >
> > >
> > > Anybody have any suggestion for work around ?
> > >
> > >
> > > --
> > > Regards,
> > > Hean Seng
> > >
> > >
> >
> > --
> > Regards,
> > Hean Seng
> >
>
>
> --
>
> Andrija Panić
>


-- 
Regards,
Hean Seng

Re: Cloudstack Isolated Network - VLAN

Posted by Andrija Panic <an...@gmail.com>.
Hi hean,

yes, that is correct, VXLAN is supported (as an isolation method) for only
GUEST traffic/networks.
Make sure to read the manually fully - pay attention to MTU size and the
max number of multicast groups (defaults to 20 on a Linux hosts) -
otherwise, you will experience a serious pain of packet loss or zero
traffic (that I have experiences 3-4y ago).

Best,

On Mon, 7 Sep 2020 at 19:59, Hean Seng <he...@gmail.com> wrote:

> I read the document ,  for VXLAN, you only  need normally LInux Bridge ,
> and do not need OpenVSwitch .  And you need to have 2  phy network card at
> least , one NIC for Management network and Public network , which isolation
> method is VLAN,  and second NIC is GuestNetwork with isolation method VXLAN
>
> After that need to define VNI range  for VXLAN ,  this shld be able to
> defne big range and vxlan support 16mil VNI.
>
> I not yet try it up ,  Am I right above what I understand ?
>
>
>
>
> On Mon, Sep 7, 2020 at 11:43 PM Kaushik Bora <ka...@indiqus.com.invalid>
> wrote:
>
> > Hi Hean,
> >
> >  I don't think we have any readymade solution for this issue !!!
> >
> >  The world has already moved towards VXLAN and IPv6 framework to overcome
> > the existing challenges. Appreciate if someone can provide information on
> > the Cloudstack Roadmap for the VXLAN and IPv6 adoption.
> >
> > Rgds,
> > Kaushik
> >
> >
> >
> > -----Original Message-----
> > From: Hean Seng [mailto:heanseng@gmail.com]
> > Sent: 04 September 2020 10:55
> > To: users@cloudstack.apache.org
> > Subject: Cloudstack Isolated Network - VLAN
> >
> > Hi
> >
> > Cloudstack Reserve VLAN for isolated network,  However VLAN in network
> > have limitation of 4096 vlan,
> >
> > If one user one isolated network, it means we can only create 4096 users
> .
> >
> >
> > Anybody have any suggestion for work around ?
> >
> >
> > --
> > Regards,
> > Hean Seng
> >
> >
>
> --
> Regards,
> Hean Seng
>


-- 

Andrija Panić

Re: Cloudstack Isolated Network - VLAN

Posted by Hean Seng <he...@gmail.com>.
I read the document ,  for VXLAN, you only  need normally LInux Bridge ,
and do not need OpenVSwitch .  And you need to have 2  phy network card at
least , one NIC for Management network and Public network , which isolation
method is VLAN,  and second NIC is GuestNetwork with isolation method VXLAN

After that need to define VNI range  for VXLAN ,  this shld be able to
defne big range and vxlan support 16mil VNI.

I not yet try it up ,  Am I right above what I understand ?




On Mon, Sep 7, 2020 at 11:43 PM Kaushik Bora <ka...@indiqus.com.invalid>
wrote:

> Hi Hean,
>
>  I don't think we have any readymade solution for this issue !!!
>
>  The world has already moved towards VXLAN and IPv6 framework to overcome
> the existing challenges. Appreciate if someone can provide information on
> the Cloudstack Roadmap for the VXLAN and IPv6 adoption.
>
> Rgds,
> Kaushik
>
>
>
> -----Original Message-----
> From: Hean Seng [mailto:heanseng@gmail.com]
> Sent: 04 September 2020 10:55
> To: users@cloudstack.apache.org
> Subject: Cloudstack Isolated Network - VLAN
>
> Hi
>
> Cloudstack Reserve VLAN for isolated network,  However VLAN in network
> have limitation of 4096 vlan,
>
> If one user one isolated network, it means we can only create 4096 users .
>
>
> Anybody have any suggestion for work around ?
>
>
> --
> Regards,
> Hean Seng
>
>

-- 
Regards,
Hean Seng

RE: Cloudstack Isolated Network - VLAN

Posted by Kaushik Bora <ka...@indiqus.com.INVALID>.
Hi Hean,

 I don't think we have any readymade solution for this issue !!!

 The world has already moved towards VXLAN and IPv6 framework to overcome the existing challenges. Appreciate if someone can provide information on the Cloudstack Roadmap for the VXLAN and IPv6 adoption. 

Rgds,
Kaushik



-----Original Message-----
From: Hean Seng [mailto:heanseng@gmail.com] 
Sent: 04 September 2020 10:55
To: users@cloudstack.apache.org
Subject: Cloudstack Isolated Network - VLAN

Hi

Cloudstack Reserve VLAN for isolated network,  However VLAN in network have limitation of 4096 vlan,

If one user one isolated network, it means we can only create 4096 users .


Anybody have any suggestion for work around ?


--
Regards,
Hean Seng


RE: Cloudstack Isolated Network - VLAN

Posted by Kaushik Bora <ka...@indiqus.com.INVALID>.
Hi,

 I understand the requirement is for isolated network and not for the shared network. PVLANs are supported only on the shared network. 

Rgds,
Kaushik

-----Original Message-----
From: David Jumani [mailto:David.Jumani@shapeblue.com] 
Sent: 04 September 2020 11:15
To: users@cloudstack.apache.org
Subject: Re: Cloudstack Isolated Network - VLAN

Hi,

You can also try to use PVLANs

Thanks,
David
________________________________
From: Hean Seng <he...@gmail.com>
Sent: Friday, September 4, 2020 10:55 AM
To: users@cloudstack.apache.org <us...@cloudstack.apache.org>
Subject: Cloudstack Isolated Network - VLAN

Hi

Cloudstack Reserve VLAN for isolated network,  However VLAN in network have limitation of 4096 vlan,

If one user one isolated network, it means we can only create 4096 users .


Anybody have any suggestion for work around ?


--
Regards,
Hean Seng

David.Jumani@shapeblue.com
www.shapeblue.com
3 London Bridge Street,  3rd floor, News Building, London  SE1 9SGUK @shapeblue
  
 



Re: Cloudstack Isolated Network - VLAN

Posted by Tom Black <to...@gmail.com>.
On switch side, they were hardware.
We have wrote a book about the full stack after we finished the 
deployment. The SDN is entirely implemented by hardware switches.

The book here (sorry it's with Chinese):

https://www.amazon.com/%E8%87%AA%E4%B8%BB%E5%AE%9E%E7%8E%B0SDN%E8%99%9A%E6%8B%9F%E7%BD%91%E7%BB%9C%E4%B8%8E%E4%BC%81%E4%B8%9A%E7%A7%81%E6%9C%89%E4%BA%91-YY%E6%B8%B8%E6%88%8F%E4%BA%91%E5%B9%B3%E5%8F%B0%E7%BB%84/dp/B06XQ6L449

Regards.

Hisham Ismail wrote:
> Hi Tom,
> 
> Did you use hardware or software VTEP?
> 
> 
> Sent with ProtonMail Secure Email.
> 
> ‐‐‐‐‐‐‐ Original Message ‐‐‐‐‐‐‐
> On Friday, 4 September 2020 17:04, Tom Black <to...@gmail.com> wrote:
> 
>> We have done that with H3C physical switches which support VxLAN
>> features. But IIRC it still need some customized development from
>> outside to manage the networks. H3C does have good API support for
>> accessing its network management interface.
>>
>> regards.
>>
>> Hean Seng wrote:
>>
>>> Thanks for reply, shall try to configure on VXLAN in cloudstack,
>>> Hope can work on Physical Switch instead of OpenVswitch
> 
> 

Re: Cloudstack Isolated Network - VLAN

Posted by Hisham Ismail <hi...@protonmail.ch.INVALID>.
Hi Tom,

Did you use hardware or software VTEP?


Sent with ProtonMail Secure Email.

‐‐‐‐‐‐‐ Original Message ‐‐‐‐‐‐‐
On Friday, 4 September 2020 17:04, Tom Black <to...@gmail.com> wrote:

> We have done that with H3C physical switches which support VxLAN
> features. But IIRC it still need some customized development from
> outside to manage the networks. H3C does have good API support for
> accessing its network management interface.
>
> regards.
>
> Hean Seng wrote:
>
> > Thanks for reply, shall try to configure on VXLAN in cloudstack,
> > Hope can work on Physical Switch instead of OpenVswitch



Re: Cloudstack Isolated Network - VLAN

Posted by Tom Black <to...@gmail.com>.
We have done that with H3C physical switches which support VxLAN 
features. But IIRC it still need some customized development from 
outside to manage the networks. H3C does have good API support for 
accessing its network management interface.

regards.

Hean Seng wrote:
> Thanks for reply, shall try to configure on VXLAN in cloudstack,
> 
> Hope can work on Physical Switch instead of OpenVswitch

Re: Cloudstack Isolated Network - VLAN

Posted by Hean Seng <he...@gmail.com>.
Thanks for reply, shall try to configure on VXLAN in cloudstack,

Hope can work on Physical Switch instead of OpenVswitch

On Fri, Sep 4, 2020 at 3:34 PM Andrija Panic <an...@gmail.com>
wrote:

> Not on KVM, you can use normal bridges.
>
> On Fri, 4 Sep 2020 at 08:55, Tom Black <to...@gmail.com> wrote:
>
> > yes, I think so.
> >
> > Hean Seng wrote:
> > > VXlan require OpenVswitch right ?
> >
>
>
> --
>
> Andrija Panić
>


-- 
Regards,
Hean Seng

Re: Cloudstack Isolated Network - VLAN

Posted by Andrija Panic <an...@gmail.com>.
Not on KVM, you can use normal bridges.

On Fri, 4 Sep 2020 at 08:55, Tom Black <to...@gmail.com> wrote:

> yes, I think so.
>
> Hean Seng wrote:
> > VXlan require OpenVswitch right ?
>


-- 

Andrija Panić

Re: Cloudstack Isolated Network - VLAN

Posted by Tom Black <to...@gmail.com>.
yes, I think so.

Hean Seng wrote:
> VXlan require OpenVswitch right ?

Re: Cloudstack Isolated Network - VLAN

Posted by Hean Seng <he...@gmail.com>.
VXlan require OpenVswitch right ?

On Fri, Sep 4, 2020 at 1:45 PM David Jumani <Da...@shapeblue.com>
wrote:

> Hi,
>
> You can also try to use PVLANs
>
> Thanks,
> David
> ________________________________
> From: Hean Seng <he...@gmail.com>
> Sent: Friday, September 4, 2020 10:55 AM
> To: users@cloudstack.apache.org <us...@cloudstack.apache.org>
> Subject: Cloudstack Isolated Network - VLAN
>
> Hi
>
> Cloudstack Reserve VLAN for isolated network,  However VLAN in network have
> limitation of 4096 vlan,
>
> If one user one isolated network, it means we can only create 4096 users .
>
>
> Anybody have any suggestion for work around ?
>
>
> --
> Regards,
> Hean Seng
>
> David.Jumani@shapeblue.com
> www.shapeblue.com
> 3 London Bridge Street,  3rd floor, News Building, London  SE1 9SGUK
> @shapeblue
>
>
>
>

-- 
Regards,
Hean Seng

Re: Cloudstack Isolated Network - VLAN

Posted by David Jumani <Da...@shapeblue.com>.
Hi,

You can also try to use PVLANs

Thanks,
David
________________________________
From: Hean Seng <he...@gmail.com>
Sent: Friday, September 4, 2020 10:55 AM
To: users@cloudstack.apache.org <us...@cloudstack.apache.org>
Subject: Cloudstack Isolated Network - VLAN

Hi

Cloudstack Reserve VLAN for isolated network,  However VLAN in network have
limitation of 4096 vlan,

If one user one isolated network, it means we can only create 4096 users .


Anybody have any suggestion for work around ?


--
Regards,
Hean Seng

David.Jumani@shapeblue.com 
www.shapeblue.com
3 London Bridge Street,  3rd floor, News Building, London  SE1 9SGUK
@shapeblue