First Published: February 23, 2018

Introduction

Cisco Network Function Virtualization Infrastructure (Cisco NFVI) provides the virtual layer and hardware environment in which virtual network functions (VNFs) can operate. VNFs provide well-defined network functions such as routing, intrusion detection, domain name service (DNS), caching, network address translation (NAT) and other network functions. While these network functions required a tight integration between network software and hardware in the past, VNFs decouple software from the underlying hardware.

Cisco NFVI is based on the Newton release of OpenStack, the open source cloud operating system that controls large pools of compute, storage, and networking resources. The Cisco version of OpenStack is Cisco Virtualization Infrastructure Manager (VIM). VIM manages the OpenStack compute, network, and storage services, and all Cisco NFVI build and control functions. Cisco NFVI pods perform four key roles:

  • Control (including Networking)

  • Compute

  • Storage

  • Management, logging, and monitoring

Hardware used to create the Cisco NFVI pods include:

  • Cisco UCS® C240 M4—Performs management and storage functions and services. Includes dedicated Ceph (UCS 240-M4) distributed object store and file system. (Only Red Hat Ceph is supported).

  • Cisco UCS C220/240 M4—Performs control and compute services.

  • Cisco UCS B200 M4 blades—Can be used instead of the UCS C220 for compute and control services. The B200 blades and C240 Ceph server are connected with redundant Cisco Fabric Interconnects managed by UCS Manager.

The UCS C240 and C220 servers are M4 Small Form Factor (SFF) models where the operating systems boots from HDD for control nodes, from HDD/SSD for compute nodes, and from internal SSD for Ceph nodes. Each UCS C240, C220, and B200 has two 10 GE Cisco UCS Virtual Interface Cards.

Software applications that manage Cisco NFVI hosts and services include:

  • Red Hat Enterprise Linux 7.4 with OpenStack Platform 10.0-Provides the core operating system with OpenStack capability. RHEL 7.4 and OSP 10.0 are installed on all Cisco NFVI UCS servers . CVIM 2.2.17, also includes the meltdown bug fix as part of the Kernel update..

  • Cisco Virtual Infrastructure Manager (VIM)—An OpenStack orchestration system that helps deploy and manage an OpenStack cloud offering from bare metal installation to OpenStack services, taking into account hardware and software redundancy, security and monitoring. Cisco VIM includes the OpenStack Newton release with additional features and usability enhancements tested for functionality, scale, and performance.

  • Cisco Insight—Deploys, provisions, and manages CiscoVIM on Cisco UCS servers.

  • Cisco UCS Manager—Used to perform certain management functions when UCS B200 blades are installed.

  • Cisco Integrated Management Controller (IMC)-Provides embedded server management for Cisco UCS C-Series Rack Servers. Supported Cisco IMC firmware versions install or upgrade of Cisco VIM 2.2 is 2.0 (13i) or greater (2.0(13n) is recommended). . Because of security issues, we recommend you to use CIMC 2.0(13n). Note that under no circumstances the CIMC version can run 3.0 series.

  • Cisco Virtual Topology System (VTS)—is a standards-based, open, overlay management and provisioning system for data center networks. It automates DC overlay fabric provisioning for physical and virtual workloads.

  • Cisco Virtual Topology Forwarder (VTF)—Included with VTS, VTF leverages Vector Packet Processing (VPP) to provide high performance Layer 2 and Layer 3 VXLAN packet forwarding.

Supported Layer 2 networking protocols include:

  • VxLAN supported using Linux Bridge

  • VTS VLAN supported using ML2/VPP, ML2/ACI

  • OpenVSwitch (OVS) (including SRIOV with Intel NIC 710 NIC)

For pods based on UCS B-Series pods, and those based on C-series with Intel NIC , Single Root Input/Output Virtualization (SRIOV). SRIOV allows a single physical PCI Express to be shared on a different virtual environment. The SRIOV offers different virtual functions to different virtual components, for example, network adapters, on a physical server.

Any connection protocol can be used unless you install UCS B200 blades with the UCS Manager plugin, in which case, only OVS over VLAN can be used.

Features of Cisco VIM 2.2.17

Cisco VIM 2.2.17 is a standalone fully automated cloud lifecycle manager offering from Cisco for private cloud. The current version of VIM, integrates well with Cisco C or B-series UCS servers and Cisco or Intel NIC.

The following table provides a summary of the feature set that is offered.

Feature Name

Comments

OpenStack Version

RHEL 7.4 with OSP 10 (Newton).

Hardware Support Matrix

  1. UCS C220/B200 M4 controller or compute with Intel V3 (Haswell).
  2. UCS C240 M4 controller or compute + Intel V4 (Broadwell).

NIC support

  1. Cisco VIC: VIC 1227, 1240, 1340, 1380.
  2. Intel NIC: X710, 520.

POD Type

  1. Dedicated controller, compute and storage node (full on).
  2. Dedicated control, compute and storage (C-Series) node running on Cisco VIC, or Intel 710 X.
  3. Dedicated control, compute and storage (B-Series) node running on Cisco NIC.
  4. MICRO POD: Integrated (AIO) control, compute and storage (C-series) node running on Cisco VIC, or Intel 710 X with capability to support additional standalone compute nodes.
  5. Hyper-Converged: Dedicated control and compute nodes, with all storage acting as compute (C-series) nodes, running on a combination of 1-Cisco VIC (1227) and 2x10GE 520 or 2x40GE 710XL Intel NIC.

  6. In a full-on (VIC based), or Hyper-Converged pod, computes can either have a combination of 1-Cisco VIC (1227) and 2x10GE 520 or 2x40GE 710XL Intel NIC or 1-CiscoVIC (1227). The compute running pure Cisco VIC will not be running SR-IOV.

Boot Computes from Different Target Devices in the same pod

Boot from 2x1.2 TB HDD or 2x1.6 TB SSD in a full-on Pod.

Computes supporting with VIC/NIC or pure VIC in the same pod

Computes with VIC/NIC will have SRIOV support on them.

ToR and FI support

  1. For VTS based installation, use the following Nexus version-7.0(3)I2(2a) and 7.0(3)I2(2c).
  2. For mechanism driver other than VTS, use the following Nexus software version 7.0(3)I4(6) 7.0(3)I6(1).
  3. UCS-FI-6296
  4. Support of NCS-5500 (with recommended Cisco IOS XR version 6.1.33.02I)

IPV6 Support for Management Network

  1. Static IPv6 management assignment for servers.

  2. Support of IPv6 for NTP, DNS, LDAP and AD.

  3. Support of IPv6 for Cloud API end point.

Mechanism Drivers

OVS/VLAN, Linuxbridge/VXLAN, ACI/VLAN, ML2/VPP with VLAN (based on Vector Packet Processor (VPP) virtual switch (fd.io))

SDN Controller Integration

VTS; ACI (ships in the night or with Unified ACI Plugin).

Install Methodology

Fully automated online or offline.

Scale

  1. Compute: 40 hosts
  2. Ceph OSD: 20 hosts

Automated Pod Life Cycle Management

  1. Add or remove compute and Ceph nodes and replace controller.
  2. Reconfiguration of passwords and selected optional services.
  3. Automated software update.

Platform security

Secure OS, RBAC, Network isolation, TLS, Source IP filtering, Keystone v3, Bandit, CSDL compliant, hardened OS, SELinux.

Change the CIMC password after post install for maintenance and security.

Non-root login for Administrators.

Enabling Custom Security Policy for VNF Manager.

EPA

NUMA, CPU pinning, huge pages, SRIOV with Intel NIC.

HA and Reliability

  1. Redundancy at hardware and software level.
  2. Automated backup and restore of management node.

Unified Management Support

Single pane of glass in a single or multi instance (HA) mode: Supports multi-tenancy and manages multiple pods from one instance.

Central Logging

ELK integrated with external syslog (over v4 or v6) for log offload.

VM Migration

Cold migration and resizing.

Storage

Object store with SwiftStack, Block storage with Ceph.

Monitoring

Third party integration with Zenoss (called NFVIMON).

Support of External Auth System

  1. LDAP
  2. Active Directory (AD)

Software Update

Update of Cloud Software for bug fixes on the same release.

Software Upgrade

Seamless Upgrade of VIM Managed Pod from liberty to Newton in connected and disconnected mode.

Disk maintenance for Pod Nodes

Ability to replace faulty disk(s) on the Pod node(s) without the need for add/remove/replace node operation.

Integrated Test Tools

  1. Open Source Data-plane Performance Benchmarking: VMTP (an open source data plane VM to VM performance benchmarking tool), NFVBench (NFVI data plane and service chain performance benchmarking tool).
  2. Services Health Checks Integration: Cloudpulse and Cloudsanity.

Key Issues addressed in 2.2.17

Conntrack connection tracking table increase.

Known Caveats

The following list describes the known caveats in NFVI 2.2.6

CSCve39684
Translation of vic_slot 7 to MLOM fails in CIMC 2.0(13i) version.
CSCva37451
Traffic loss of 8-10s seen while controller with active l3 reboots.
CSCva36943
Volume attach failure errors should be reported to the user.
CSCva36914
After a MariaDB HA event, you should run the recovery playbook.
CSCva36907
Nova compute reports goes down for up to two minutes after a controller reboot.
CSCva36782
Nova HA: VM is stuck in scheduling state after Nova conductor HA.
CSCva32195
Auto-created L3 network not cleaned up with the router/tenant deletion.
CSCva32312
Update fails if compute is not reachable even after updating the containers on the controller node.
CSCva34476
Nova api is unavailable for few minutes once the controller is down.
CSCva32193
The ARP entry on ToR does not refresh resulting in an external ping to VM VIP failure.
CSCva57121
The Ceph cluster does not move to Error state when all storage nodes are down.
CSCva66093
Rollback not supported for repo update failure.
CSCvf81055
VMs goes to 'SHUTOFF' state intermittently on compute node reboot.
CSCve13042
Recovery play book needs to handle ceph recovery after power outage.
CSCve76157
Performance Issue on IE browser.
CSCvf74264
Insight UI: The pod users cannot update the restapi password once it is changed.
CSCvf86622
When using MECHANISM_DRIVER, aci which is the command-line interfaces for neutron quota-update do not get enforced.
CSCvf86623
When using MECHANISM_DRIVER: aci and VMs originally in an ACTIVE state on the rebote compute node are unable to acquire an ip address from DHCP.
CSCvf91442
Insight UI: Storage Node information is not shown after performing remove compute operation.
CSCvg23272
Export of syslog over IPv6 network is not supported, use the IPv4 network instead.
CSCvh31319
ciscovim client throws TLS1.1 alert error with software update (2.2.8 > 2.2.12).

Using the Cisco Bug Search Tool

You can use the Bug Search Tool to search for a specific bug or to search for all bugs in a release.

Procedure

Step 1

Go to the Cisco Bug Search Tool.

Step 2

In the Log In screen, enter your registered Cisco.com username and password, and then click Log In. The Bug Search page opens.

Note 

If you do not have a Cisco.com username and password, you can register for them at http://tools.cisco.com/RPF/register/register.do.

Step 3

To search for a specific bug, enter the bug ID in the Search For field and press Enter.

Step 4

To search for bugs in the current release:

  1. In the Search For field, enter Cisco Network Function Virtualization Infrastructure 2.0(1) and press Enter. (Leave the other fields empty.)

  2. When the search results are displayed, use the filter tools to find the types of bugs you are looking for. You can search for bugs by status, severity, modified date, and so forth.

    Tip 
    To export the results to a spreadsheet, click the Export Results to Excel link.     

Related Documentation

The Cisco NFVI 2.2.17 documentation set consists of:

  • Cisco NFV Infrastructure Installation Guide

  • Cisco NFV Infrastructure Administrator Guide

  • Cisco NFV Infrastructure Release Notes

These documents will be available on cisco.com when Cisco NFV Infrastructure is released.

Obtaining Documentation and Submitting a Service Request

For information on obtaining documentation, submitting a service request, and gathering additional information, see the monthly What’s New in Cisco Product Documentation, which also lists all new and revised Cisco technical documentation, at: http://www.cisco.com/c/en/us/td/docs/general/whatsnew/whatsnew.html

Subscribe to the What’s New in Cisco Product Documentation as an RSS feed and set content to be delivered directly to your desktop using a reader application. The RSS feeds are a free service. Cisco currently supports RSS Version 2.0.

External References

NFVI documentation is now available on Cisco.com.

Here are the documentation links: