Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
File renamed without changes.
File renamed without changes.
Original file line number Diff line number Diff line change
Expand Up @@ -4,9 +4,7 @@
Prerequisites
=============

`Switch fabric up & running <https://www.netris.io/docs/en/latest/tutorials/vpc-gateways-with-managed-fabric.html>`_

`ISP upstreams connected through BGP <https://www.netris.io/docs/en/latest/tutorials/connecting-fabric-to-isp.html>`_
:doc:`Switch fabric up & running </vpc-gateways-with-managed-fabric>` and :ref:`connected to ISP <bgp_def>`

Step-by-Step Configuration Instructions for the Netris Controller
-----------------------------------------------------------------
Expand Down
File renamed without changes.
File renamed without changes.
File renamed without changes.
19 changes: 17 additions & 2 deletions definitions.rst
Original file line number Diff line number Diff line change
Expand Up @@ -9,20 +9,35 @@ When configuring and operating a Netris system, the following nomenclature is im

* **User** - A user account for accessing Netris Controller through GUI, RestAPI, and Kubernetes. The default username is ``netris``, with password ``newNet0ps``.

* **The Netris VPC** - logically segregated virtual network.The VPC acts as a VRF in traditional networking, providing the flexibility to employ overlapping IP ranges across various VPCs while maintaining secure management and operation of resources.
* **Netris VPC** - logically segregated virtual network.The VPC acts as a VRF in traditional networking, providing the flexibility to employ overlapping IP ranges across various VPCs while maintaining secure management and operation of resources.

* **V-Net (Virtual Network)** is a Netris construct for grouping switch ports into a defined network segment—much like a traditional VLAN or a public cloud subnet. It is a virtual networking service that provides Layer-2 (unrouted) or Layer-3 (routed) virtual network segments in a Netris VPC. V-Net is assigned to one VPC and one or multiple sites. Your endpoints (servers, VMs) are connected to V-Nets.

* **L2VPN (Layer 2 Virtual Private Network)** is a V-Net type and is similar to a traditional VLAN with modern and scalable implementation.
* **L3VPN** is a V–Net type and is typically used for back-end (east–west) connectivity in GPU clusters on Ethernet-based AI fabrics such as NVIDIA Spectrum-X. Built as one mini-subnet per switch port, a VXLAN L3VPN is conceptually similar to MPLS L3VPN in provider networks.

* **Tenant** - IP addresses and Switch Ports are network resources assigned to different Tenants to have under their management. Admin is the default tenant, and by default, it owns all the resources. You can use different Tenants for sharing and delegation of control over the network resources. Network teams typically use Tenants to grant access to other groups to request and manage network services using the Netris Controller as a self-service portal or programmatically (with Kubernetes CRDs or Terraform) via a DevOps/NetOps pipeline.

* **Permission Group** - List of permissions on a per section basis can be attached individually to a User or a User Role.

* **User Role** - Group of user permissions and tenants for role-based access control (RBAC).

* **Site** - Each separate deployment (each data center) should be defined as a Site. All network units and resources are attached to a site. Site entry defines global attributes such as; AS numbers, default ACL policy, Site Mesh (site to site VPN), and other site-level parameters.
* **Site** - Each separate deployment (a region or a data center) should be defined as a Site. All network components and resources should be associated with their respective Site and VPC. Site entry defines global attributes such as; AS numbers, default ACL policy, and other site-level parameters.

* **IPAM** - You can create IP Allocations and Subnet assignments for a VPC. These may overlap between different VPCs. A Subnet can be assigned to multiple sites if you aim to extend your V-Net to multiple locations.

* **Subnet** - IPv4/IPv6 address resources linked to *Sites* and *Tenants*

* **Switch Port** - Physical ports of all switches attached to the system, or server endpoints in a Bare Metal Cloud environment.

* **Inventory** - Inventory of all network units that are operated using Netris Agent.

* **External connections** - You can connect your VPC to ISP providers or other segments of your network using Netris E-BGP service, or statically by defining a V-Net and using Net->Routes (for natively integrated Bare Metal Cloud Providers please refer to the provider-specific tutorial, as external connections usually establish automatically

* **E-BGP** - Defines all External BGP peers (iBGP and eBGP).

* **NAT services** - SNAT allows your endpoints to communicate with the Internet. DNAT allows your endpoints to be accessible from the Internet.

* **Load-balancing service** - Use L4LB service to share the load between your endpoints.

* **Access lists** - ACLs provide a layer of security that acts as a firewall for controlling traffic in and out of one or more subnets.
Binary file removed images/add-new-hardware.png
Diff not rendered.
Binary file removed images/allocation.png
Diff not rendered.
Binary file removed images/allocation_empty.png
Diff not rendered.
Binary file removed images/bgp_empty.png
Diff not rendered.
File renamed without changes
Binary file removed images/create_dnat_empty.png
Diff not rendered.
Binary file removed images/create_link.png
Diff not rendered.
Binary file removed images/create_snat_empty.png
Diff not rendered.
File renamed without changes
File renamed without changes
File renamed without changes
File renamed without changes
File renamed without changes
File renamed without changes
File renamed without changes
File renamed without changes
Binary file removed images/nat_subnet_empty.png
Diff not rendered.
Binary file removed images/request-L4.png
Diff not rendered.
File renamed without changes
File renamed without changes
Binary file removed images/subnet_empty.png
Diff not rendered.
Binary file removed images/subnet_listing.png
Diff not rendered.
File renamed without changes
Binary file removed images/topology_2.png
Diff not rendered.
File renamed without changes
15 changes: 9 additions & 6 deletions index.rst
Original file line number Diff line number Diff line change
Expand Up @@ -14,17 +14,18 @@ You are welcome to join our community Slack channel (see button at the top) to g
:maxdepth: 2
:caption: General Information

definitions
introduction
supported-platform-matrix
supported-switch-hardware
netris-architecture
definitions

.. toctree::
:maxdepth: 2
:caption: Try & Learn Netris

try-learn/index
try-learn/nvidia-spectrum-x-scenario
try-learn/onprem-k8s

.. toctree::
:maxdepth: 2
Expand All @@ -33,11 +34,13 @@ You are welcome to join our community Slack channel (see button at the top) to g
installation/installation
switch-agent-installation
netris-softgate-HS
ai-netris-host-networking

.. toctree::
:maxdepth: 2
:caption: Fabric Management

site
topology-management
network-policies
switch-ports
Expand All @@ -62,7 +65,7 @@ You are welcome to join our community Slack channel (see button at the top) to g
netris-ufm-integration
netris-nvlink-integration
kubernetes-integration
tutorials/netris-cloudstack
cloudstack/netris-cloudstack
terraform-integration
evpn-on-host

Expand All @@ -75,12 +78,12 @@ You are welcome to join our community Slack channel (see button at the top) to g
monitoring-observability/healthchecks

.. toctree::
:maxdepth: 2
:maxdepth: 0
:caption: Tutorials

vpc-gateways-with-managed-fabric.rst
cloudstack/netris-cloudstack
ai-netris-host-networking
vpc
tutorials/vpc-gateways-with-managed-fabric.rst

.. toctree::
:maxdepth: 4
Expand Down
2 changes: 2 additions & 0 deletions introduction.rst
Original file line number Diff line number Diff line change
Expand Up @@ -6,6 +6,8 @@ Introduction to Netris

Netris is a network automation and abstraction software for cloud builders. Netris brings cloud-like VPC abstractions for operating physical networks like it is a cloud. Netris automatically configures switching, routing, load-balancing, and network security based on user-defined services and policies. Netris continuously monitors the network’s health and either applies software remediation or informs you of necessary actions if human intervention is required. Netris abstracts away the complexities of detailed network configuration, letting you perform efficiently by operating your physical network in a top down approach like a cloud – instead of the legacy box by box operation.

Netris :doc:`SoftGate <netris-softgate-HS>`, also known as VPC gateway, provides Network Services and is an optional, multi-tenant (VPC-aware) software component designed for cloud providers and scales horizontally to provide this ingress and egress connectivity. The SoftGate software runs on a dedicated set of operator-provided bare-metal x86 servers and is tightly integrated with the Netris-managed North-South fabric.

.. image:: images/private-cloud-enterprise-dc-2.png
:align: center

6 changes: 3 additions & 3 deletions l4-load-balancer.rst
Original file line number Diff line number Diff line change
Expand Up @@ -6,7 +6,7 @@
#######################
L4 Load Balancer (L4LB)
#######################
Netris L4 Load Balancer (L4LB) leverages SoftGate(Linux router) nodes to provide Layer-4 load balancing services, including on-demand cloud load balancing with native integration with Kubernetes.
Netris L4 Load Balancer (L4LB) leverages SoftGate(Linux router) nodes to provide Layer-4 load balancing services, including on-demand cloud load balancing with native integration with :doc:`Kubernetes <kubernetes-integration>` and :doc:`Terraform <terraform-integration>`.

Enabling L4LB service
---------------------
Expand Down Expand Up @@ -69,10 +69,10 @@ Add new L4 Load Balancer fields are described below:
* **Port** - Service port on the backend host.
* **Enabled** - Administrative state of particular backend.

.. image:: images/request-L4.png
.. image:: images/l4lb_create.png
:align: center
:class: with-shadow
:alt: Request an L4 Load Balancer
:alt: Create an L4 Load Balancer

Example: Requesting an L4 Load Balancer service.

Expand Down
Loading