This article is part of a bigger document that I wrote for myself with notes about Cisco ACI, Openshift, HP Synergy, 3PAR integration and contains the part I found most challenging considering I learned it from 0 in a rather constraining time interval and with some pressure.

As such I felt the need to document it and do a sort of braindump in order to avoid reinventing the wheel in the future in case I start forgetting.

Continue reading

A current customer test desired to see how well the AVI Load Balancer scales and as such they used Ixia BreakingPoint to determine the behavior. The point was to see when exactly the AVI Controller tells Openstack to spawn a new Instance of an AVI SE (Avi Load Balancer VM that holds a VIP and pool members reachable behind it) and how this process goes.

Following setups were tested:

  • AVI LB VMs doing BGP (BGPaaS) with the Contrail vRouter and announcing VIPs
  • AVI Controller being configured to spawn AVI SEs / LB VMs but using the inbuilt ECMP/AAP features of Contrail (yes, if you are asking yourselves, the VIP does not have to be from the same subnet as the AVI LB directly connected one to the vRouter)
  • AVI LB VMs doing BGP Multihop with the SDN GW inside a VRF (this means that the SDN GW learns the prefixes and reuses the same LSP/label for transport/VPN as it already has for the directly connected IP of the AVI LB VM that originated the prefix)

Continue reading

Sometimes it may happen that when you look in Contrail at the interfaces on a vRouter (on a Compute host) that some of them appear down. This you can also see on the Compute Node itself with vif –list. There can be some leftovers and this is the way to clean them up:

Continue reading

Sometimes when playing in the Contrail GUI (eg. with EVPN-VXLAN settings via the Router object) you might trigger some problems with the objects in the internal contrail api database and then end up in an inconsistent state. This article aims at showing a simple way of cleaning that one up (in my case changing the VNI triggered a bug).

Continue reading

Recently I had the chance to play in a lab with a Load Balancer manufacturer for the Cloud that I had no clue about before and which proved to be a challenging but also rewarding experience. I’m talking about AVI Load Balancer (www.avinetworks.com) and this article will walk you through the basic concepts of it, how to integrate it with Contrail, how to see what it does in Contrail and how it provisions the VIPs and also what potential tips&tricks and shortcomings might be.

Continue reading

Someone asked me a few days ago if it would be possible to trigger Contrail operations via ansible. After a bit of looking around I did not locate anything already made so wanted to see for myself how doable this is. While keeping in mind that I never played with Python more than modifying a few things in scripts that I already found from others (I’m way better at reverse engineering and improving/changing what is already in place), I decided this would be a good challenge for starting things off.

As this was just my play as hobby from home and I desired to see if I can build something, the current module just does a few basic Virtual Network things:

  • Add a Virtual Network
  • Add to it route-targets, network, policy, subnets
  • Delete the Virtual Network

Continue reading

While searching for how to get started with Postman I found a lot of articles but nothing simple and strict to the point. As such here goes my attempt, with screenshots, at showing how a simple test looks. I will show case two simple operations:

  • getting a Keystone Token from Openstack via V3 API
  • using that Token and making a request to Contrail Controller to list the configured Virtual Networks

Continue reading

Author's picture

Mihai Tanasescu

Network, Security, Servers, Openstack, Openshift. If there’s anything new and cool, then I like to learn about it. I’m also a fan of deep diving under the hood of a product to see what makes it tick, what leftovers from programming make it break and how it does its stuff.

SE @ Cisco

Switzerland