networking-bagpipe 6.0.0

Mechanism driver for Neutron ML2 plugin using BGP E-VPNs/IP VPNs as a backend

Team and repository tags

networking-bagpipe

Driver and agent code to use BaGPipe lightweight implementation of BGP-based VPNs as a backend for Neutron.

• Free software: Apache license

• Documentation: https://docs.openstack.org/developer/networking-bagpipe

• Source: http://git.openstack.org/cgit/openstack/networking-bagpipe

• Bugs: http://bugs.launchpad.net/bagpipe

Overview

BGP-based VPNs rely on extensions to the BGP routing protocol and dataplane isolation (e.g. MPLS-over-x, VXLAN) to create multi-site isolated virtual networks over a shared infrastructure, such as BGP/MPLS IPVPNs (RFC4364) and E-VPN (RFC7432). They have been heavily used in IP/MPLS WAN backbones since the early 2000’s.

These BGP VPNs are relevant in the context of Neutron, for two distinct use cases:

1. creating reachability between Neutron ports (typically VMs) and BGP VPNs outside the cloud datacenter (this is true independently of the backend chosen for Neutron)

2. leveraging these BGP VPNs in Neutron’s backend, to benefit from the flexibility, robustness and scalability of the underlying technology (as do other existing backends such as OpenContrail, Nuage Networks, or Calico – although the latter relies on plain, non-VPN, BGP)

BaGPipe proposal is to address these two use cases by implementing this protocol stack – both the BGP routing protocol extensions and the dataplane encapsulation – in compute nodes or possibly ToR switches, and articulating it with Neutron thanks to drivers and plugins.

The networking-bagpipe package includes:

• for use case 1: backend code for Neutron’s BGPVPN Interconnection service plugin (networking-bgpvpn) ; only agent code is in networking-bagpipe, the Neutron server-side part, being currently in networking-bgpvpn package)

• for use case 2: a Neutron ML2 mechanism driver

• agent code common to both, providing adaptation code to consolidate and pass information via its REST API to BaGPipe BGPVPN implementation (itself in bagpipe-bgp package)