Ramy CHAABANE

This Internship was about one of the most-hot topic in IT Industry nowadays, which is an implementation of a cloud platform using the Software Defined Networking (SDN). The idea behind the project is how to deploy a private cloud within an enterprise using the Contrail System (including OpenStack as an orchestrator System).

In order to deploy the Cloud, I configured a dynamic service chaining using Juniper Firefly (vSRX) instance as a firewall (enabling NFV features) and an MX router as a Border Gateway.

The MX router needs a special configuration in order to act as a gateway: we need to create an iBGP session, enable MPLS and create a VRF ( Virtual Routing and Forwarding). In this project I used a virtual version of the MX router and installed it to a VMware ESXi hypervisor.

The Firewall also needs to be configured: we need to configure the IP addresses assigned by OpenStack, create zones and permit the required services (ping, http, https...). In this project, I launched two firewall instances.

To configure our dynamic service chaining, we need in first place to create virtual networks (VNs). In my project, I created three different virtual networks with three different CIDR. The second step is to create a service template which is required to launch a service instance (firewall in our case) so we can assign to each instance a VN. Next, we need to deploy some virtual machines running windows 7 OS: to do that, we need to prepare a windows 7 cloud image using the KVM hypervisor.

To set up topology, we need to create and assign policies to these networks using the firewall instances as a service. It's very well explained and easy to create a policy with Contrail.

Keywords: Cloud Computing, Virtualization, Software Defined Networking (SDN), Network Function Virtualization (NFV), Contrail, OpenStack, KVM, ESXi, MX router, Firefly, Juniper.