Download to read offline
Uploaded byEdgar Magana
OpenContrail at Workday - Security Policies Use Case
The document outlines a presentation by Mick McCarthy and Edgar Magana regarding their networking model in Workday's private cloud, detailing their process for creating virtual networks and managing network policies. It also discusses past issues faced with Contrail and plans for future improvements, including evaluating new versions for better high availability and policy management. The presentation concludes with a Q&A session.
More Related Content
Similar to OpenContrail at Workday - Security Policies Use Case
OpenContrail at Workday - Security Policies Use Case
- 1. OpenContrail User Group MickMcCarthy & Edgar Magana, Workday Private Cloud. Sydney – November 2017.
- 2. Who Are We? MickMcCarthy Software Engineer, Workday Private Cloud. Edgar Magana Principal Engineer/Architect, Workday Private Cloud.
- 3. Outline of Talk ►Our Networking Model ► Our Network Policies ► How We Manage Our Network Policies ► Summary of Contrail Issues (Past 12 Months) ► Future of Workday Private Cloud & Contrail ► Questions
- 4. Our Current NetworkingModel Tree Topology
- 5. WPC – CreatingTarget Virtual Networks (1/2) • We use a custom script, which takes in certain parameters to create RT virtual networks – e.g. • Project UUID • Network name • Subnet prefix • Route Target • We add a routing object to interconnect • Therefore, we require rules to ensure only desired communications.
- 6. WPC – CreatingTarget Virtual Networks (2/2) The script creates tenants and rules using YAML definitions: 1. Sample tenant definition: 2. Sample ACL:
- 7. How We ManageOur Network Policies
- 8. Summary of ContrailIssues (Past 12 Months) • ZK Timeout Issue • TBB Issue • “IROND is Broken” • LARGE number of rules !!!
- 9. Future of WorkdayPrivate Cloud & Contrail • High Availability – Contrail 3.2 / Evaluating 4.1 • Better management of ACLs • Contrail in BM • Label-based policy management
- 10.