Research On Multi-tenant Isolation And Networking Service Extension In Quantum

The evolution of cloud computing over the past years is one of the major advances inthe history of computing. Cloud computing is a promise enable technology to cope withthe rapid development and emerging of new innovation of Internet, Big Data, wirelesscommunication network and Internet of Things. Cloud computing also represents a hugeopportunity to the whole IT industry.Cloud computing, with the characteristics of elasticity and on-demand service, have ainternal need to provide the ability of network as a service (NaaS). The network shouldsupport with dynamic and on-demand connection service for different users andapplications to meet the diverse business and service requirements of cloud computing.OpenStack comes into world in such a special background. It is a collection of opensoftware stacks to build infrastructure as a service (IaaS) cloud computing platform.After introducing OpenStack and Quantum networking service, the paper gives acomprehensive analysis of Quantum plugin set, including Linux bridge, Open vSwitchand Ryu network operation system. The mechanism bechind these plugins is eithervirtual local area network (VLAN) or general route encapsulation (GRE), whichprovides segmented networks to function isolation in multi-tenant cloud computing.Some works are done in OpenStack platform by using respective GRE network modelin Open vSwitch plugin and Ryu OpenFlow controller plugin.Wide area network (WAN) is an important part of cloud computing networkframework. Depending on the services offered by the provider, the enterprise will havedifferent levels of control over the WAN. virtual private network (VPN) is a perfectsolution to integrate with cloud computing systems，the thesis proposes an approach torealize it through GRE tunnel (L2-over-L3) over WAN to realize site-to-site connections,which extends the cloud network into WAN and makes VPN as a service.The principle of the design is simple to use GRE as an encapsulation to build anoverlay network, using tenant network identifier (TNI) filed of GRE protocol tofunction isolation betweent multi-tenant even different applications. The design baseson OpenStack networking service subproject Quantum, by extending the abstract application programming interface (API) and plugin to define virtual networks. Acorresponding experiment is done in use of Open vSwitch to simulating a WANnetwork environment. It turns out to be an excellent solution to extend the virtualizednetwork over WAN to isolate multi-tenant and make an extension of the networkingservice in cloud.