Giles Heron

Media Streaming Mesh enables real-time media applications as first-class citizens in cloud-native Kubernetes environments. It aims to bring the operability, observability and security features enabled by service meshes for web applications based on HTTP to real-time media applications based on RTP. In this presentation we will give an update on Media Streaming Mesh and will show a live demo.

The cloud-native approach based on containerized micro-services has transformed the software landscape but is largely focused on non-real time web-based applications, especially in the case of service meshes which use web proxies to interconnect workloads. Media Streaming Mesh uses real-time media proxies to observe, route, encrypt and protect north-south and east-west media traffic.

This talk introduces the Media Streaming Mesh architecture and its use-cases, gives an update on implementation status, and acts as a call to arms to recruit more contributors.

In this talk, we will introduce FD.io VPP and the Ligato cloud-native networking framework and demonstrate how these are used to address two use cases - a CNI plugin for Kubernetes (Contiv/VPP) and an IPSEC VPN gateway.

FD.io VPP is a high-performance packet forwarder that runs on commodity CPUs. Ligato provides a platform for developing Cloud-Native Network Functions (CNFs) using VPP running in Linux user-space and leveraging Intel's DPDK to grab packets directly from the NIC.

Contiv/VPP is a CNI (Container Network Interface) plugin that uses VPP to provide network connectivity for Kubernetes pods. Its aim is to bypass the kernel for packet handling in a Kubernetes cluster wherever possible. To achieve this, it replaces the kube-proxy load-balancer by leveraging VPP's advanced NAT functionality, and implements native Kubernetes policy (to avoid the requirement for a kernel-based policy plugin). As well as providing fast packet processing, Contiv/VPP can be used as the foundation for CNF deployments running in Kubernetes - since it is based on the Ligato VPP Agent its functionality can be easily extended to interconnect CNFs, e.g. using the Ligato SFC Controller.

StrongSwan is probably the most common IPSEC VPN concentrator in use today. It provides an IKE daemon but leverages the Linux kernel for IPSEC forwarding. Using Ligato we can interface StrongSwan's IKE implementation to VPP's IPSEC forwarding plane to create a high-performance IPSEC VPN CNF.

In general we will look at the benefits of forwarding traffic using VPP rather than the Linux Kernel in terms of: 1) performance 2) flexibility 3) manageability

In this talk I will give a short overview of how OpenDaylight can be used to enable a range of advanced BGP use-cases - such as traffic optimisation and DDoS mitigation. The approaches presented are broadly applicable to other open-source BGP speakers but I will also show the benefit of a platform supporting multiple southbound protocols in addition to BGP.

Heard about OpenDaylight and SDN? Ready to get your feet wet and start kicking the tires with an OpenDaylight installation? This session provides a brief intro to Software Defined Networking (SDN) in general, and more specifically to OpenDaylight, an open source platform for programmable SDN. After providing a high level overview of the architecture, the session goes on to show you how to deploy OpenDaylight and interact with it through the CLI and graphical tools. You will learn how to configure various options and enable/disable various features, and how to check the logs to verify things are working as planned and trouble shoot things when they are not. Lastly we show you how to interact with OpenDaylight through its northbound APIs for network aware applications and southbound plugins to physical and virtual network elements.