TungstenFabric Release master Tungsten Fabric Project Jul 05, 2021 CONTENTS 1 Documentation Structure 3 1.1 User Documentation...........................................3 1.1.1 Getting Started.........................................3 1.1.2 Releases.............................................3 1.2 About Tungsten Fabric.......................................... 38 1.2.1 Contribute to Tungsten Fabric................................. 38 1.2.2 Getting Started as a Contributor................................ 40 1.2.3 Processes before submitting a blueprint............................ 44 1.2.4 Blueprint Submission...................................... 44 1.2.5 Code Submission........................................ 46 1.2.6 Test plan Submission...................................... 46 1.2.7 Tungsten Fabric JIRA workflow................................ 46 1.2.8 How to review a patch in Gerrit................................. 48 1.2.9 RST conventions........................................ 50 1.2.10 Writing style.......................................... 69 1.3 Infrastructure............................................... 84 1.4 Administration.............................................. 84 1.4.1 Documentation Structure.................................... 84 1.5 Tungsten Fabric Governance....................................... 87 1.5.1 Docs Structure......................................... 87 1.5.2 Governance Documents..................................... 110 1.5.3 Current Committee Membership................................ 111 1.5.4 Elections............................................ 111 1.5.5 Overview of the Tungsten Fabric Community and Governance Groups............ 111 1.5.6 Acronym Reference....................................... 113 1.6 Tungsten Fabric installation and upgrade guide............................. 113 1.6.1 Documentation Structure.................................... 113 1.7 Tungsten Fabric networking and security user guide.......................... 417 1.7.1 Documentation Structure.................................... 418 1.8 Tungsten Fabric Service Provider Focused Features Guide....................... 421 1.8.1 Documentation Structure.................................... 421 1.9 Tungsten Fabric Analytics and Troubleshooting Guide......................... 444 1.9.1 Documentation Structure.................................... 444 1.10 Tungsten Fabric fabric lifecycle management guide........................... 479 1.10.1 Documentation Structure.................................... 479 1.11 Tungsten Fabric cloud-native user guide................................. 484 1.11.1 Documentation Structure.................................... 485 1.12 Tungsten Fabric Operator........................................ 526 1.12.1 Documentation Structure.................................... 526 i 2 Licensing 547 ii TungstenFabric, Release master Important: To report a bug for any part of the Tungsten Fabric project, including documentation, please use the Tungsten Fabric Jira. Tungsten Fabric (formerly known as OpenContrail) is a secure software defined networking project designed for the cloud native, multicloud environment. Placing it on top of any IP network allows you to have a single portal for defining, monitoring, and analyzing your entire multicloud network, its security, and its performance. Using Tungsten Fabric, you can write and deploy network and security policies that are portable to any cloud environ- ment. All of your clouds can have a consistent and easily maintainable configuration. Standardized policies will make your security team happy, too. CONTENTS 1 TungstenFabric, Release master 2 CONTENTS CHAPTER ONE DOCUMENTATION STRUCTURE 1.1 User Documentation The user documentation covers details such as quick start guides and releases. 1.1.1 Getting Started Getting Started with Tungsten Fabric This directory contains community generated documentation on how to get started as a user of Tungsten Fabric, including installation and basic usage. Getting Started with tf-devstack Repository: https://gerrit.tungsten.io/r/admin/repos/tungstenfabric/tf-devstack README Documentation: https://gerrit.tungsten.io/r/gitweb?p=tungstenfabric/tf-devstack.git;a=blob;f=README. md;hb=HEAD Instructional Blog Post: https://tungsten.io/getting-started-with-tungsten-fabric-using-tf-devstack/ 1.1.2 Releases Tungsten Fabric 5.1 Release Release Notes: Tungsten Fabric 5.1 Table of Contents Introduction New and Changed Features Supported Platforms Tungsten Fabric 5.1 Known Behavior Resolved Issues Deprecated Items Revision History 3 TungstenFabric, Release master Tungsten Fabric Release 5.1 Release Notes Release 5.1 July 2019 Table of Contents • Introduction • New and Changed Features • New and Changed Features in Tungsten Fabric Release 5.1 • BGPaaS Peer Zone Collection • Installing Tungsten Fabric with Mesos • Adding a New Compute Node to an Existing Containerized Tungsten Fabric Cluster • Support for Edge Routed Bridging • Routing Policies Match on Extended Communities • Support for OpenShift 3.11 • Support for Kubernetes 1.12 • Auto-provisioning of IPtable Filtering Rules on Tungsten Fabric Nodes • Certificate Lifecycle Management Using Red Hat Identity Management • Support for Controlling the Maximum Flow Scale Supported on a Virtual Machine Inter- face • Support for Multiple Network Interfaces in Kubernetes • Support for Prefix-Based Fat Flow • Enable TLS Communication Between Analytics and Kafka • Support for Route Reflectors • Support for Tungsten Fabric on Windows Operating System • Support for EVPN Multicast Type 6 Selective Multicast Ethernet Tag Routes • Support for MPLS L3VPN InterAS Option C • Support for Virtual Port Group • Supported Platforms Tungsten Fabric 5.1 • Known Behavior • Resolved Issues • Deprecated Items • Requesting Technical Support • Revision History 4 Chapter 1. Documentation Structure TungstenFabric, Release master Introduction Tungsten Fabric is an open, standards-based software solution that delivers network virtualization and service au- tomation for federated cloud networks. It provides self-service provisioning, improves network troubleshooting and diagnostics, and enables service chaining for dynamic application environments across enterprise virtual private cloud (VPC), managed Infrastructure as a Service (IaaS), and Networks Functions Virtualization (NFV) use cases. These release notes accompany Release 5.1 of Tungsten Fabric. They describe new features, limitations, and known problems. These release notes are displayed on the Tungsten Fabric Documentation Web page at https://tungstenfabric.github.io/ website. New and Changed Features The features listed in this section are new or changed as of Tungsten Fabric Release 5.1. A brief description of each new feature is included. • New and Changed Features in Tungsten Fabric Release 5.1 New and Changed Features in Tungsten Fabric Release 5.1 The features listed in this section are new as of Tungsten Fabric Release 5.1. BGPaaS Peer Zone Collection Starting with Tungsten Fabric Release 5.1, to better support high availability (HA) architectures, BGPaaS supports control node zone selection, with options available to configure BGPaaS control node zone peers. This capability enables you to set up primary and secondary control node zones, which can have one or more control nodes. For more information, see BGP as a Service. Installing Tungsten Fabric with Mesos Starting with Tungsten Fabric Release 5.1, Tungsten Fabric supports Mesosphere DC/OS. Tungsten Fabric overlay and non-overlay network virtualization features are available in Apache Mesos environment. For more information, see Installing Tungsten Fabric with Mesos. Adding a New Compute Node to an Existing Containerized Tungsten Fabric Cluster Starting with Tungsten Fabric Release 5.1, Tungsten Fabric supports the adding of a new compute node to the existing OpenStack cluster by configuring the instances.yaml file. For more information, see Adding a New Compute Node to Existing Containerized Tungsten Fabric Cluster. 1.1. User Documentation 5 TungstenFabric, Release master Support for Edge Routed Bridging Starting with Tungsten Fabric Release 5.1, the edge-routed bridging (ERB) for QFX series switches feature configures the inter-VN unicast traffic routing to occur at the leaf (ToR) switches in an IP CLOS with underlay connectivity topology. The ERB feature introduces the ERB-UCAST-Gateway and CRB-MCAST-Gateway roles in release 5.1. ERB is supported on the following devices running only Junos OS release 18.1R3: • QFX5110-48S • QFX5110-32Q • QFX10002-36Q • QFX10002-72Q • QFX10008 • QFX10016 For more information, see Edge Routed Bridging for QFX Series Switches. Routing Policies Match on Extended Communities Tungsten Fabric Release 5.1 supports extended communities on the import routing policy function. Release 5.1 allows import routing policy terms to match on extended communities and import routing policy actions to add, set, and re- move extended communities. Filtering routes based on extended communities prevent advertising unnecessary service interface and static routes from the control node. For more information, see Creating a Routing Policy With External Communities in Contrail Command. Support for OpenShift 3.11 Tungsten Fabric Release 5.1 supports the installation of a standalone Red Hat OpenShift Container Platform version 3.11 cluster using ansible-openshift as the deployment tool. For more information, see Installing a Standalone Red Hat OpenShift Container Platform 3.11 Cluster Using OpenShift Ansible