Network Service Mesh events

NSMCon EU 2020

Monday, August 17, 2020 | Virtual
Colocated with Kubecon+CloudNativeCon EU 2020

Table of contents

Monday, August 17,2020 - 13:00-20:30 CEST | Virtual

Edge Infrastructure will cause Enterprise and Service Provider network infrastructure to converge. Enterprise networks will integrate seamelessly with Service Providers. The current techniques do not operationally or technically scale. This convergence calls for a new operational and security paradigm.

Network Service Mesh will provide Cloud Native APIs which will help bridge the gap. These API calls are rooted in the Zero Trust security model which will facilitate federated workload identity. Once federated identity is established, networks between enterprises and service providers will seamlessly merge while simultaneously providing fine-grained control of resources.

Come join the Network Service Mesh community and help spearhead this important effort!

Frederick F. Kautz IV - Head of Edge Infrastructure, doc.ai
Frederick Kautz is the Head of Edge Infrastructure at Doc.ai. His work serves as the foundation for the CNCF Telecom User Group. Frederick also participates in the Cloud Infrastructure Telecom Taskforce (CNTT, a joint effort between Linux Foundation and GSMA) and is a lead in OVP 2.0 to certify and badge 5G infrastructure for use in Telecom. Previously, he was in Red Hat’s Office of the CTO team, where he fathered Red Hat Container Storage Engine. He is also a founder of Network Service Mesh, a CNCF Project.

Bobby Samuel - Staff VP of Engineering, Anthem Inc.
Bobby Samuel, leads the Anthem AI and software engineering teams based out of Palo Alto, CA. The Anthem AI team is made up of world class engineers, clinical professionals, data scientists, and AI mathematicians with a mission to improve patient outcomes. Bobby and his team partner across the Anthem Digital ecosystem to deploy clinical products and solutions at enterprise scale, leveraging cloud native technologies and deep learning networks. Bobby joined Anthem in July 2010 and has served in various leadership roles to drive organizational transformation spanning people, process and technology. Prior to joining the AI team, Bobby was a key technology leader on a core systems modernization program and was also responsible for flagship claims system. Before joining Anthem, he held roles in software delivery and health care consulting.

Slides

google slides

Video

youtube

13:15:00+02 - Inside Network Service Mesh

The Network Service Mesh (NSM) is a novel, ambitious approach to implement cloud native networking. At the core of NSM is a set of APIs designed to implement scalable, reliable, on-demand connectivity between Network Service Endpoints. Using a systems modeling approach, this talk will shed light on NSM’s APIs and architecture. Together, we shall untangle the mesh and arrive at a concise and accurate mental model of NSM’s internals, its core components and their interactions - If you want to know how the Network Service Mesh works, this presentation is for you.

Speaker

Dominik Tornow - Principal Engineer, Cisco Systems
Dominik is a Principal Engineer in the Office of the CTO at Cisco. He focuses on systems modeling, specifically conceptual and formal modeling, to support the design and documentation of complex software systems.

Slides

keynote pdf

Video

youtube

13:45:00+02 - A Break From the Past, Why CNFs Must Move Beyond the NFV Mentality

Cloud native software approaches are infiltrating Telcos at an ever accelerating pace. The conundrum many operators find themselves faced with, is understanding what it really means to be cloud native, and how these principles apply to their networks. Adopting legacy approaches from the NFV era forces paradigms onto the network that potentially erode some if not most of the benefits that making this transition promised in the first place. Technologies such as NSM present new opportunities for tackling these challenges via adopting cloud native software practices.

Speakers

Jeffrey Saelens - Principal Engineer, Charter Communications
Jeffrey Saelens is a Principal Architect in Charter Communications’ Office of the CTO. Starting his career in the US Army, Jeffrey was a Green Beret who focused on communications and systems engineering. After leaving the military, he dove into the service provider world heavily focusing on NFV and SDN transformations within data center, core and access networks.

W. Watson - Principal Consultant, Vulk Coop
W. Watson has been professionally developing software for more than 25 years and is an advocate of open source governance models. He has spent the last couple of years developing complementary cloud native systems such as the cncf.ci dashboard. He currently works on the Layer 2 integration to Packet.net for the CNF Testbed and the CNF Conformance initiative.

Slides

google slides

Video

youtube

14:15:00+02 - BREAK

14:30:00+02 - Offloading dataplane from the network services for Telco usecases

Network Service Mesh provides a better framework to solve some of the key challenging telco requirements that cannot be addressed today using kubernetes primary networking model. The seminar will highlight the proposals that can enhance Network service mesh framework to support telco use cases.

Speakers

Roshini Ratnam - Networking and Connectivity Architect, Ericsson
Roshini Ratnam, is an Architect in Cloud Native Connectivity at Ericsson. Roshini has above 10 years of experience in various Telecom and Networking projects with different organizations including Ericsson, Nokia Networks and Cisco Systems. In her current role she mainly focuses on leading connectivity and networking solutions for cloud native applications. This also includes prototyping solutions for Telecom-specific requirements.

Anders Franzen - Technology Specialist, Ericsson
Anders Franzen is an engineer in Ericsson AB with 30+ years of professional experience in HA-systems, networking and operating systems for telco. Living in Stockholm, Sweden. He is currently working with the transition into the cloud native paradigm

Tarik Hammam - System Manager, Ericsson
Tarik is an engineer working in Ericsson AB with 40+ years of professional experience in the R&D related areas of telco core network systems design. Living in Stockholm, Sweden. He is currently involved with the transition towards the cloud native paradigm.

Johan Ljunglid - Engineer, Ericsson
Johan Ljunglid is an engineer at Ericsson AB with a background in network services, proxies, and load balancing. His main focus areas include network infrastructure and architecture and he is currently working with Kubernetes and cloud native applications for telecom use cases.

Slides

ppt pdf

Video

youtube

15:00:00+02 - Using DNS to smooth your NSM adoption

Network Service Mesh is rapidly evolving to support more complex topologies, especially in hybrid or multicloud environments. In these environments service advertisement and discovery also become significantly more complex. There are two distinct problems. The first is discovery of NSM network services by all the NSM deployments. The second is workload services and endpoints must be discoverable on the NSM created interfaces. In this presentation and demo we will show how externaldns (https://github.com/kubernetes-sigs/external-dns) integrated with NSM can meet all the complex service advertisement and discovery issues multicloud environments require. We will go into detail on how to configure NSM and NSEs to provide service discovery to the workloads. Additionally, we will show how externaldns can be used to register Floating Inter-domain NSRs to allow discovery of NSM network services.

Speakers

John Joyce - Principal Engineer, Cisco Systems
John is a principal engineer at Cisco responsible for developing cloud infrastructure and solutions. As part of the Cloud CTO Office, John currently focuses on contributing to the Kubernetes, Istio and Network Service Mesh communities and building multicloud solutions. Previously, John was an active contributor to OpenStack. John has a long history contributing to various Cisco virtual and physical networking products.

Tim Swanson - Senior Technical Lead, Cisco Systems
Tim is a senior technical lead engineer at Cisco in the office of the CTO for Cloud Platform & Solutions. Tim’s current focuses are on multicloud solutions, service meshes, and contributing to related opensource c ommunities—primarily, Istio. Previously, Tim was an active contributor to OpenStack. Prior to open-source work, Tim was primarily involved in developing embedded features for Cisco’s physical networking products, with a focus on manageability. His spare time consists coaching sports and generally being active with his 2 children.

Slides

ppt

Video

youtube

15:30:00+02 - The NSM Operator

This presentation intends to demonstrate the benefits of a kubernetes operator, a quick introduction to operator-sdk and operator lifecycle manager using the nsm-operator as an example.

Speaker

Alexandre Menezes - Service Reliability Engineer, Red Hat
Alexandre Menezes is a Service Reliability Engineer working at Red Hat with the Operator Enablement Team helping customers and partners succeed in developing and packaging their applications with the operator framework. With 17 years of experience in the IT industry, he has worked on data center networking, storage area networking, linux systems solutions and IT operations analytics. Most recently, in the past 3 years, he has been working on Kubernetes, Openshift, devops and container solutions. And he has also been an instructor for networking and python, ansible, containers and kubernetes on workshops and bootcamps.

Matt Dorn - Principal Engineer, Red Hat
Matt Dorn is a Principal Engineer at Red Hat and helps hundreds of IT teams around the world succeed with cloud native technology. He is the author of the “Preparing for the Certified OpenStack Administrator Exam” book, creator of the O’Reilly “Getting Starting with OpenStack” online class, and one of the leaders of the San Antonio Kubernetes MeetUp. Matt previously worked at CoreOS as a Field Engineer and Senior Technical Instructor. Prior to CoreOS, he worked at Rackspace and trained engineers on building clouds with OpenStack. Matt blogs at madorn.com and is fanatical about providing an easy-to-understand learning path that makes technology accessible and fun.

Slides

google slides pdf

Video

youtube

16:00:00+02 - LUNCH

17:00:00+02 - NSM Interdomain: Functional Walkthrough, Use-cases, and Demo

The ability of Network Service Mesh to provide connections between network service clients and endpoints regardless of their deployment domain is very attractive and exciting for those providing infrastructure for multi-cluster and multi-cloud applications. However, NSM’s highly distributed architecture and flexibility in the component implementations can make it difficult to understand the deployment and usage of an interdomain capable NSM setup. This talk will walk-through the NSM components involved, various control-plane flows, and domain specific deployment requirements for interdomain NSM. We will also introduce some of the control-plane deployment variations, such as floating interdomain. Additionally, we will demonstrate an NSM interdomain deployment to highlight component and domain specific details, as well as, usage with specific clients and endpoints for a network-service.

Speakers

Slides

ppt

Video

youtube

17:30:00+02 - Attesting, Authenticating and Authorizing NSM Components with SPIRE

In the course of normal operation, many different NSM components touch the control and data paths. Any one of these services could be compromised to modify or capture network traffic. To prevent this, NSM can use SPIRE, a CNCF project which creates a secure X.509 encryption certificate for each service based on its true identity as reported by Kubernetes (or other infrastructure like AWS), interpreted by rules specified in the SPIRE configuration. In this talk, we will discuss what NSM operators need to know about SPIRE: how it ensures security, how to configure it to secure NSM traffic, and how to operate a scalable and reliable central SPIRE server in the context of NSM.

Speakers

Daniel Feldman - Principal Software Engineer, Scytale.io
Daniel Feldman works on SPIFFE service authentication technology, including SPIRE and Scytale Enterprise. He previously implemented service authentication at Veritas Technologies.

Slides

google slides

Video

youtube

18:00:00+02 - Traffic visualization solutions for NSM

Тhe NSM project already announced its second release and is now in a pretty good stage of capabilities it can offer, including inter-domain connectivity, DNS support, secure gRPC communication and more. It also provides communication visibility of dropped and successfully transmitted bytes and packets between each connected client and endpoint. The community would like to go further and provide a really good and interactive way to observe the network traffic and topology - something we find highly beneficial and important for increasing the adoption of the project. In this talk we’re going to share different visualization solutions we have explored for NSM, demonstrate some of them with a 4G LTE network example deployed with NSM, share the path for their further integration and what we want to change and improve in that direction. The talk is aiming to provoke a discussion around the preferences of those interested in adopting the project and using such functionality in future.

Speaker

Ivana Atanasova - Open Source Engineer, VMware
Ivana Atanasova is part of the VMware’s Open Source Program Office. She’s been contributing to OpenFaaS as a project member and later became contributor to Network Service Mesh. Previously she has been working on Apache Brooklyn and Brooklyn Blockstore, as well as a contractor with the Institute of Mathematics and Informatics at the Bulgarian Academy of Sciences for NLP related projects. She’s been speaking to various events including KubeCon, Open Networking Summit and Open Source Summit EU.

Video

youtube

18:30:00+02 - CN-WAN: a Cloud Native (SD-)WAN for Microservice Applications

SDWAN provides WAN optimization services such as latency reduction, throughput improvement, TCP optimization, and packet loss prevention. However, existing solutions can’t offer such services with microservices granularity. As a result, cloud native applications are missing the opportunity to efficiently use those precious WAN resources on both the user-to-app as well as the app-to-app path. In this presentation we introduce the concept of a Cloud-Native WAN, the evolution of SDWAN to support cloud-native applications. In particular we show how to leverage the NSM forwarder construct to plug a microservice application to the entry point of an SDWAN to offer optimizations with microservice granularity. The proposed approach allows developers to declare specific application traffic SLAs using simple configurations applied to the application workload objects. We show a proof of concept implementation where using CN-WAN significantly improves the application quality of experience.

Speakers

Fabio Maino - Distinguished Engineer, Cisco Systems
Fabio Maino is a Distinguished Engineer in the Enterprise Networking CTO team at Cisco where he leads a small team of engineers that are exploring the boundaries between Enterprise Networks and the Cloud Native ecosystem. Fabio has about 50 patents filed with the US PTO, is one of the founders of the OpenOverlayRouter.org open source project, and has a PhD in Computer Networking and Security from Politecnico di Torino, Italy.

Lorand Jakab - Software Engineer, Cisco Systems
Lorand Jakab is a Software Engineer in the Enterprise Networking CTO team at Cisco, His interest in Cloud Native and networks comes from his work with LISP network overlays in the OpenOverlayRouter.org open source project, of which he is one of the founders. Lorand has a phD in Computer Science from Universitat Politècnica de Catalunya, BarcelonaTech.

Alberto Rodriguez Natal - Software Engineer, Cisco Systems
Alberto Rodriguez-Natal is a Research Engineer in the Enterprise Networking CTO team at Cisco, working on network virtualization, systems architecture, and protocol design. Before joining Cisco, he earned a PhD in Software-Defined Networking at BarcelonaTech. Alberto has been an active participant at the IETF for many years and in the past he was one of the main maintainers of the OpenOverlayRouter opensource project. His current obsession is how Enterprise Networks can better serve Cloud-Native applications.

Video

youtube

19:00:00+02 - BREAK

19:30:00+02 - Simpler, Faster, More Flexible: Forward Evolution of NSM

As a community, NSM has accomplished a lot, and learned a lot. Those learnings are being applied to making Network Service Mesh simpler, faster, and more flexible. Come hear about the changes already underway to make it easier and faster to build NSM components, further improve resiliency of the system, reduce further latency for healing and recovery, and most importantly: improve development velocity.

Speaker

Ed Warnicke - Distinguished Consulting Engineer, Cisco Systems
Ed Warnicke is a Distinguished Consulting Engineerat Cisco Systems. He has been working for over a decade in many areas of networking and Open Source. Ed is a founder of and active contributor to the Network Service Mesh project. Ed has a masters in Physics (String Theory) from Rutgers University.

Slides

google slides

Video

youtube

20:00:00+02 - NSM Customer Success! QoE, L3VPN, and NAT64 oh my!

In this session, Zia Syed and Dan Bernier will present an NSM Customer Success story! After meeting at NSMCon 2019, Bell and Cisco partnered together to combine their NSM visions. In this session, Zia and Dan will present how they took NSM proof-of-concept ideas and made them into functional use-cases that benefit Bell’s business goals.

At first, the NSM solution was one that enabled container-based applications to request their own network “Quality of Experience” using a SDN system nicknamed “Jalapeno”. The combination allowed NSM to offer services such as traffic engineering, path steering, or even virtual topology creation to containerized applications. Since then, the use-cases have grown, with L3-VPN taking center stage as an NSM service created out of this partnership. One of Bell’s key use cases is to attach a cloud-native network function (NFV) endpoint directly to an L3VPN VRF. With NSM we can do this!

Speakers

Zia Syed - System Engineer, Cisco Systems
Zia Syed is a Software Systems Engineer at Cisco, where he has launched his career by taking on new challenges in application and network optimization. Over the past three years, he has worked with modern tech stacks, open-source solutions, and futuristic innovations to develop transformations in scalability, automation, and efficiency for Web operators. Before joining Cisco, Zia graduated from Cal Poly San Luis Obispo with a degree in Computer Science.

Bruce McDougall - Systems Architect, Cisco Systems
Bruce McDougall is a Systems Architect at Cisco where he has spent 10 years working with some of the world’s most sophisticated Web/OTT and Telco operators on high scale network architecture, Segment Routing, MPLS, SDN, and network automation. Prior to Cisco, Bruce spent a number of years as a network engineer and architect working in both the web and service provider sectors. His goal is to help large scale network operators move toward centralized control planes and common API-driven dataplanes across all transport networks, which will improve the ability to innovate on top of the network and lead to massive increases in operational scale.

Slides

ppt

Video

youtube

Are you running workloads in multiple clusters? Across multiple clouds: on-premises, hybrid, multi-cloud, or public cloud? Do they need to interact with legacy workloads running in less “cloudy” environments? Network Service Mesh (NSM) ties them all together, at the granularity of individual workloads, not clusters/VPCs/data centers.

NSM, a community-driven CNCF Sandbox project, is rapidly gaining momentum because simplifies connectivity between workloads, independent of where they run. It extends an IP reachability domain to workloads running in multiple clusters, legacy environments, on-premises, or in a public cloud, communicating with the existing protocols.

NSM does this at the granularity of individual workloads. Your workloads have connectivity to just the workloads they need - nothing more, nothing less. NSM brings the useful features of a Service Mesh from the lofty heights of HTTP all the way down to IP itself. Applications and Application Service Meshes, such as Istio, run unaltered on top, leaving the hybrid/multicloud IP connectivity to NSM.

The project emerged organically as a community project to solve these problems by applying the Service Mesh thought process all the way down to IP with the global peering mentality of the Internet itself – without breaking your existing environment.

Join the people building and using NSM at Network Service Mesh Con for a day of tutorials, deep dives, and use cases to learn how NSM works, what it can do for you, and, most importantly, what’s coming next.

Review NSMCon Prospectus and contact sponsors@networkservicemesh.io to secure your sponsorship today.

Table of contents

Schedule

Slides

Video

Speaker

Slides

Video

Speakers

Slides

Video

Speakers

Slides

Video

Speakers

Slides

Video

Speaker

Slides

Video

Speakers

Slides

Video

Speakers

Slides

Video

Speaker

Video

Speakers

Video

Speaker

Slides

Video

Speakers

Slides

Video

Why Attend NSMCon?

Become a Sponsor

Sponsors