Scribd
Upload
2 views6 pages

unit 5

The document discusses cloud networking, specifically focusing on Virtual Private Clouds (VPCs) and Virtual Networks (VNets), as well as Software Defined Networking (SDN) and Network Function Virtualization (NFV). It outlines the architecture and advantages of SDN, including the role of OpenFlow and SDN controllers, and highlights the importance of network automation using tools like Ansible and Python. Additionally, it compares traditional networking with NFV, emphasizing cost-effectiveness and vendor neutrality.

Uploaded by

meetsk9585
Copyright
© All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as DOCX, PDF, TXT or read online on Scribd
2 views6 pages

unit 5

The document discusses cloud networking, specifically focusing on Virtual Private Clouds (VPCs) and Virtual Networks (VNets), as well as Software Defined Networking (SDN) and Network Function Virtualization (NFV). It outlines the architecture and advantages of SDN, including the role of OpenFlow and SDN controllers, and highlights the importance of network automation using tools like Ansible and Python. Additionally, it compares traditional networking with NFV, emphasizing cost-effectiveness and vendor neutrality.

Uploaded by

meetsk9585
Copyright
© All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as DOCX, PDF, TXT or read online on Scribd

Cloud Networking, SDN and Automation

1. Cloud Network Design

Cloud networking provides virtualized network infrastructure over the internet. Major
cloud providers (AWS, Azure, GCP) use similar concepts.

1.1 Virtual Private Cloud (VPC)

A VPC is a logically isolated virtual network in a public cloud (mainly AWS term).

Components of a VPC

a) CIDR Block

 Defines IP range (example: [Link]/16)

 Supports private IP addressing

b) Subnets

 Public Subnet – has internet access

 Private Subnet – no direct internet access

c) Internet Gateway (IGW)

 Enables communication with the internet

 Attached to VPC

d) NAT Gateway

 Allows private subnet instances to access internet

 Prevents inbound internet traffic

e) Route Table

 Controls traffic routing

 Example:

o [Link]/0 → Internet Gateway

f) Security

 Security Groups – stateful firewall

 Network ACLs – stateless firewall


1.2 Virtual Networks (VNet)

VNet is Microsoft Azure’s equivalent of VPC.

2. Software Defined Networking (SDN)

Traditional Networking Problem

 Control plane + Data plane tightly coupled

 Manual configuration

 Vendor-dependent hardware

 Poor scalability

What is SDN?

SDN separates the control plane from the data plane and centralizes network control.

SDN Architecture

1. Application Layer (Rules/Policies)

2. Control Layer (SDN Controller)

3. Infrastructure Layer (Switch / Router)

2.1 SDN Planes Explained

a) Data Plane

 Forwards packets

 Implemented in switches and routers

b) Control Plane

 Decides routing and forwarding rules

 Implemented in SDN controller

c) Application Plane

 Network applications (firewall, load balancer, QoS)

2.2 SDN Advantages


 Centralized control

 Vendor independence

 Easy automation

 Better scalability

 Faster network changes

3. OpenFlow Protocol

What is OpenFlow?

OpenFlow is a communication protocol between the SDN controller and network devices.

Functions of OpenFlow

 Adds flow rules

 Deletes flow rules

 Modifies flow tables

 Collects statistics

4. SDN Controllers

An SDN Controller is the brain of the SDN network.

Functions

 Network topology discovery

 Flow management

 Policy enforcement

 Traffic optimization

Types of Controllers

Open Source

 OpenDaylight

 ONOS

 Ryu

 Floodlight
Commercial

 Cisco APIC

 VMware NSX Controller

 Juniper Contrail

5. Network Function Virtualization (NFV)

What is NFV?

NFV virtualizes network services that traditionally run on dedicated hardware.

Traditional vs NFV

Traditional NFV

Hardware appliances Virtual machines

Vendor-specific Vendor-neutral

Costly Cost-effective

Examples of Virtual Network Functions (VNFs)

 Virtual Firewall

 Virtual Router

 Virtual Load Balancer

 Virtual IDS/IPS

NFV Architecture

1. NFVI – Hardware + Virtualization layer

2. VNFs – Virtualized network services

3. MANO – Management and Orchestration

6. Network Automation Basics

Network automation reduces manual configuration, errors, and deployment time.

6.1 Network Automation with Ansible

What is Ansible?
 Open-source automation tool

 Agentless

 Uses SSH

 Written in Python

Key Ansible Components

 Inventory – List of devices

 Playbooks – YAML files

 Modules – Pre-built automation tasks

 Roles – Reusable automation components

Example Use Cases

 Device configuration

 Backup configs

 VLAN creation

 Interface management

6.2 Network Automation with Python

Why Python?

 Easy to learn

 Powerful libraries

 Widely used in networking

Common Python Libraries

 Netmiko – SSH device management

 Paramiko – Secure connections

 NAPALM – Multi-vendor automation

 Requests – REST API calls

Use Cases

 Bulk device configuration

 Network monitoring
 API-based network management

 Log analysis

Example

 Create VPC using Terraform

 Configure routing with Ansible

 Monitor network using Python scripts

You might also like