Listen to the interview with our engineer:
Introduction¶
In today's rapidly evolving tech landscape, a robust and reliable network infrastructure is of paramount importance for any organization. At ShitOps, we understand the significance of efficient network connectivity to ensure seamless communication and collaboration across our global team. However, as our operations expanded to Los Angeles and beyond, we encountered challenges with scaling our existing network architecture. In this blog post, we will discuss the problem we faced and present an innovative solution that involves harnessing the power of OSPF and EVPN protocols while leveraging cutting-edge technologies such as GNMI, SSHFS, and more.
The Problem¶
As ShitOps aimed to establish its presence in Los Angeles, we quickly realized that our current network topology would not meet the demands of our growing team. Our existing infrastructure relied heavily on manual configurations, which resulted in frequent errors and inconsistencies. Additionally, the lack of scalability posed a significant hindrance, limiting our ability to accommodate future expansion plans seamlessly. To address these challenges, our IT team relentlessly sought a solution that would optimize network connectivity, enhance scalability, and streamline configuration processes.
Solution Overview¶
After extensive research and countless discussions among our engineering team, we devised a comprehensive solution that embraces the power of OSPF (Open Shortest Path First) and EVPN (Ethernet VPN) protocols. This forward-thinking approach ensures dynamic routing, flexibility in network design, and effortless workload mobility, all while maintaining optimal security measures. Let's delve deeper into the three core components of our solution:
1. OSPF-DOM (OSPF Domain)¶
To kickstart our solution, we established an OSPF domain across all our locations, including Los Angeles. This routing protocol allows us to dynamically exchange network information among interconnected routers, enabling efficient and automated route selection based on various metrics such as link cost and availability of resources.
Routing Hierarchy with OSPF¶
The establishment of OSPF not only simplifies the management of routing tables but also provides a scalable foundation for future expansion plans. As networks grow in complexity, OSPF automatically discovers the most efficient paths, minimizing latency and optimizing performance across our organization.
2. EVPN Overlay¶
In conjunction with OSPF, we implemented an EVPN overlay throughout our network infrastructure. EVPN enables seamless communication between devices in different subnets while keeping traffic isolation intact. By using BGP-based control plane signaling, EVPN enables automatic route distribution, making it an ideal choice for multi-site deployments like ours.
EVPN Data Plane Operation¶
Through our EVPN deployment, we significantly reduce potential broadcast storms and simplify the provisioning and management of MAC addresses associated with virtual machines. Moreover, provisioning new services across different sites becomes effortless, allowing for rapid expansion and seamless workload mobility.
3. Automation and Orchestration¶
To further enhance our network infrastructure, we implemented a suite of automation and orchestration tools that not only streamline configuration processes but also ensure consistency and reliability throughout our network. A key component is the integration of GNMI (gNMI - gRPC Network Management Interface), which facilitates efficient network operations through a uniform and programmable interface.
GNMI Workflow with SSHFS¶
By pairing GNMI with SSHFS (SSH File System), we enable automatic retrieval of real-time telemetry data from network devices, reducing human error and freeing up valuable time for our engineers. The combination of these technologies empowers us to manage our network effectively and efficiently while ensuring rapid fault detection and resolution.
Conclusion¶
In this blog post, we presented an innovative and dynamic solution to address the challenges encountered by ShitOps in scaling our network architecture. Through the combined power of OSPF and EVPN protocols, along with cutting-edge technologies such as GNMI and SSHFS, we were able to optimize network connectivity, enhance scalability, and streamline configuration processes. As we continue to expand our operations globally, it is crucial to adopt forward-thinking approaches that maximize efficiency and maintain a robust foundation for future growth.
Remember, embracing new technologies and methodologies brings about opportunities for endless innovation and improvement. Stay tuned for more exciting updates as we continue to push the boundaries of engineering excellence here at ShitOps!
Comments
TechGuy21 commented:
Great overview of using OSPF and EVPN to optimize network connectivity! I'm curious about how the introduction of GNMI and SSHFS has impacted your day-to-day operations. Would you say the team can now focus more on strategic tasks rather than troubleshooting?
Bobby Overengineer (Author) replied:
Thanks for your comment, TechGuy21! Yes, with the integration of GNMI and SSHFS, we've noticed a significant reduction in manual troubleshooting time. This shift has indeed allowed our team to focus more on strategic initiatives and streamline processes.
NetworkNerd commented:
I love the idea of using an EVPN overlay for cross-site communications. However, how have you ensured the security aspect, given that EVPN involves using a public network infrastructure?
CyberSecChick replied:
Good point, NetworkNerd! Implementing robust encryption protocols and isolating sensitive traffic should be top priority in such deployments.
Bobby Overengineer (Author) replied:
Great question and insight, CyberSecChick. We enforce encryption across our EVPN links and leverage access control lists to ensure secure and isolated traffic flows per business requirements.
Cmdr_Data commented:
This sounds like a huge improvement over manual setups. Did you encounter any major hurdles during the transition to this new setup?
Bobby Overengineer (Author) replied:
Switching to a new architecture always presents challenges, Cmdr_Data. One of our biggest hurdles was ensuring compatibility across various devices and software versions. However, thorough testing in our lab environments helped mitigate potential disruptions.
CloudGuy commented:
How well does this new network architecture scale with cloud environments? Are you integrating any cloud-native technologies to complement OSPF and EVPN?
Bobby Overengineer (Author) replied:
Hi CloudGuy, excellent question! Our architecture is designed to work seamlessly with cloud environments. We're exploring the integration of cloud-native tools to further enhance our scalability and service provisioning.
NetworkingGuru commented:
As someone who's been working with OSPF for many years, I'm particularly interested in hearing more about the routing hierarchy you designed. Can you share any best practices for implementing OSPF at scale?
PacketPioneer replied:
I'm interested in this too! Would love to hear some real-world experiences from fellow professionals.