Solving Kubernetes Networking with OpenContrail

@LachlanEvenson

LEVEL SET

WHAT’S THE BIGGEST CHALLENGE WITH

KUBERNETES?

SHOULD WE JUST ACCEPT THIS REALITY?

THE CHALLENGE

WHY OPENCONTRAIL?

VALUE

• Distributed router• Multi-tenancy, Full Isolation,Fault Tolerance• Inline statefull full L4 Flow-based firewall• Hardware integration using standard protocols • Full featured network services - Security Policies,

NAT, Multicast, Mirroring, and Load Balancing • Analytics

8

ARCHITECTURAL DIFFERENCES

• OpenContrail processes replace kube-proxy• Kube-network-manager• OpenContrail kubelet plugin• Hardware/Software gateway

WORDS OF WISDOM

GET CONNECTED

http://slack.opencontrail.org/

GET STARTED• https://

github.com/Juniper/contrail-kubernetes/blob/master/docs/getting-started-guides/opencontrail-gce.md

• https://github.com/Juniper/container-networking-ansible

DEMO

QUESTIONS?