4. • Hide infrastructure complexity from applications
• No more Vlan, Vxlan, VTEP, Spanning tree, Vlan stitching
contiv: Networking for Microservice
Virtual Network Per
Tenant
Org 1
Org 2
Segment per
Microservice
Network based
service routing
Segment 1
Srv1
Segment 2
Srv2 Srv2 Srv2
Srv1 Srv1
Service
Security Policies
5. Number of IP table rules increase
exponentially as microservices scale out
Scaling security policies
0
2000
4000
6000
8000
10000
12000
14000
16000
18000
20000
1 2 3 4 5 6
Contiv IP tables
Number of
Microservices
Scale out
# of instances
Contiv
# of rules
IP table
# of rules
50 1 500 500
50 2 500 2000
50 3 500 4500
50 4 500 8000
50 5 500 12500
50 6 500 18000
6. Contiv Network Performance
Special thanks to: Leslie Qi Wang
Source: https://communities.cisco.com/community/developer/opensource/blog/2016/02/03/docker-overlay-network-performance-comparison--bare-metal
7. Performance at Scale
HW configuration:
2x UCS C240 servers with 2s socket, 12 core Intel Xeon E5 cpu each, 192G DRAM, 1x10G NIC.
1x Nexus 9000 series switch
0
1E+09
2E+09
3E+09
4E+09
5E+09
6E+09
7E+09
8E+09
9E+09
1E+10
0 100 1000 5000
Number of Security Rules
Throughput
Throughput