Chap 27 - Virtualization Flashcards

1
Q

What was one of the main drivers behind server virtualization?

A

Server hardware resources were being underutilized.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

What is a VM?

A

Virtual Machine - it is a software emulation of a physical server with an operating system.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

What is a hypervisor?

A

The virtualization software that creates VMs and performs the hardware abstraction that allows multiple VMs to run concurrently.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

What are the 4 most popular hypervisors?

A
  • VMware vSphere
  • Microsoft Hyper-V
  • Citrix XenServer
  • Red Hat Kernel-based Virtual Machine (KVM)
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

What is a Type 1 Hypervisor?

A

It runs directly on the system hardware. It is commonly referred to as “bare metal” or “native.”

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

What is a Type 2 Hypervisor?

A

This type of hypervisor (for example, VMware Fusion) requires a host OS to run. This is the type of hypervisor that is typically used by client devices.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

What is one key capability of VMs?

A

They can be migrated from one server to another while preserving transactional integrity during movement.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

What is a container?

A

It is an isolated environment where containerized applications run. It contains the application, along with the dependencies that the application needs to run.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

What is a container image?

A

It is a file created by a container engine that includes the application code along with its dependencies.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

What are 6 popular container engines?

A
  • Docker
  • rkt (pronounced “rocket”)
  • Open Container Initiative
  • LXD (pronounced “lexdi”), from Canonical Ltd.
  • Linux-Vserver
  • Windows Containers
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

What is a Virtual Switch (vSwitch)?

A

It is a software-based Layer 2 switch that operates like a physical Ethernet switch.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

What are vSwitches used for?

A

They enable VMs to communicate with each other and with external physical networks through the physical network interface cards (pNICs).

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

What is a limitation of vSwitches?

A

Multiple vSwitches can be created under a virtualized server, but network traffic cannot flow directly from one vSwitch to another vSwitch within the same host, and the vSwitches cannot share the same pNIC.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

What are 5 of the most popular vSwitches?

A
  • Cisco Nexus 1000VE Series Virtual Switch
  • Cisco Application Virtual Switch (AVS)
  • Open vSwitch (OVS)
  • IBM DVS 5000v
  • vSphere Switch
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

What is one of the downsides to standard vSwitches?

A

Every vSwitch that is part of a cluster of virtualized servers needs to be configured individually in every virtual host.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

What is distributed virtual switching?

A

It is a feature that aggregates vSwitches together from a cluster of virtualized servers and treats them as a single distributed virtual switch.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

What are 3 advantages to using distributed virtual switching?

A
  • Centralized mgmt simplifies administration
  • Migration of networking statistics and policies with virtual machines during a live VM migration
  • Configuration consistency across all the hosts that are part of the distributed switch
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

What do containers use vSwitches for?

A

To enable communication within a node (server) or with the outside world.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

What is another name for vSwitches?

A

Virtual Bridges

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

What does Docker do by default?

A

It creates a virtual bridge called Docker0, and it is assigned the default subnet block 172.17.0.1/ 16. Every container created by Docker is assigned a virtual Ethernet interface (veth) on Docker0 and an IP address from 172.17.0.0/16.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

What does the veth interface appear like to the container?

A

eth0

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

Can containers communicate with each other?

A

All containers can then communicate with each other only if they are within the same node.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

How do you enable containers to communicate with containers in other nodes?

A

Routing at the OS level or by using an overlay network.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

What happens if Docker is installed on another node?

A

If Docker is installed on another node using the default configuration, it ends up with the same IP addressing as the first node, and this needs to be resolved on a node-by-node basis.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
Q

What can be done to avoid having to manage duplicate IP addresses on Docker nodes?

A

Use a container orchestrator such as Kubernetes.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
26
Q

What is Network Function Virtualization (NFV)?

A

It is an architectural framework created by the European Telecommunications Standards Institute (ETSI)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
27
Q

What 2 things does the NFV architectural framework define?

A
  • Standards to decouple network functions from proprietary hardware such as routers and firewalls
  • How to manage and orchestrate the network functions
28
Q

What are 6 advantages of NFV?

A
  • Reduced capital expenditure
  • Faster time to market (TTM)
  • Improved ROI
  • Ability to scale up/down on demand
  • Openness to virtual appliance and software networking vendors
  • Ability to test new innovation with low risk
29
Q

What is Network Function Virtualization Infrastructure (NFVI) comprised of?

A

All the hardware and software components that comprise the platform environment in which virtual network functions (VNFs) are deployed.

30
Q

What are 5 examples of Cisco’s NFV?

A
  • CSR 1000v
  • Cloud Services Platform 2100 (CSP2100)
  • ISRv
  • NGFWv
  • ASAv
31
Q

What does the NFVI Manager do?

A
  • Manages and controlles the NFVI hardware and virtual resources
  • Collects performance measurements and fault information
  • Lifecycle management (setup, maintenance, and teardown) of all NFVI resources
  • VNF service chaining
32
Q

What is Service Chaining?

A

Chaining VNFs together to provide an NFV service or solution (i.e. connecting an IDS to a NGFW to a CSR1000v)

33
Q

What are Element Managers (Ems) or Element Management System (EMS)

A

They perform fault, configuration, accounting, performance, and security (FCAPS) functions for VNFs. A single EM can manage one or multiple VNFs, and an EM can also be a VNF.

34
Q

What is the NFV Orchestrator?

A
  • It is responsible for creating, maintaining, and tearing down VNF network services
  • Creates an end-to-end network service over multiple VNFs
  • Lifecycle mgmt of one or more VNFs
  • FCAPS for the virtual components of a VNF
35
Q

What is FCAPS?

A

Fault, Configuration, Accounting, Performance and Security

36
Q

What is an NFV Orchestrator and VNF Manager together called?

A

NFV Management and Orchestration (MANO)

37
Q

What is OSS?

A

Operations Support System is a platform typically operated by service providers (SPs) and large enterprise networks to support all their network systems and services.

38
Q

What are 4 things that an OSS does?

A
  • Maintains network inventory
  • Provisions new services
  • Configures network devices
  • Resolves network issues
39
Q

What is BSS?

A

Business Support System - a combination of product management, customer management, revenue management (billing), and order management systems that are used to run the SP’s business operations

40
Q

What does OSS and BSS have in common?

A

They typically work in tandem to improve the overall customer experience.

41
Q

What is an example of North-South traffic?

A

North– south traffic comes into the hosting server through a physical NIC (pNIC) and is sent to a VNF; then it is sent from the VNF back out to the physical wire through the pNIC.

42
Q

What is an example of East-West traffic?

A

East– west traffic comes into the hosting server through a pNIC and is sent to a VNF. From there, it could be sent to another VNF (service chained) and possibly service chained to more VNFs and then sent back out to the physical wire through a pNIC.

43
Q

What is an example of combination North-South and East-West traffic?

A

a VNF uses a north– south traffic pattern for user data and an east– west traffic pattern to send traffic to a VNF that is just collecting statistics or that is just being used for logs or storage.

44
Q

What are traffic patterns important?

A

It is important to understand traffic flow direction when deciding which technology to use to switch traffic between VNFs as well as to the outside world.

45
Q

What process is repeated twice - once on physical server and once on VM?

A

data -> NIC RX ring ->NIC sends packet and packet descriptor via DMA to Main Memory buffer -> NIC sends IRQ to CPU -> CPU gives control to NIC driver which services the IRQ, receives packet, moves it into the network stack -> packet arrives in a socket and socket receive buffer -> then to OVS Virtual Switch -> OVS moves it from kernal to user space -> process repeated on the VM

46
Q

What 3 I/O technologies have been developed to avoid overhead and increase packet throughput?

A
  • OVS Data Plane Development Kit (OVS-DPDK)
  • PCI Passthrough
  • Single-root I/ O virtualization (SR-IOV)
47
Q

What is the Data Plane Development Kit (DPDK)

A
  • Operates in User space
  • Poll Mode Driver (PMD) constantly polls for data coming into the pNIC, processes it, bypasses network stack, CPU, kernel, then switched directly to the VNF
48
Q

What is PCI Passthrough?

A

Maps a VNF directly to a single pNIC

49
Q

What is the downside to PCI Passthrough?

A

Each VNF requires a dedicated pNIC

50
Q

What advantages are there to PCI Passthrough?

A
  • One-to-one mapping
  • Bypasses hypervisor
  • Direct access to I/O resources
  • Reduces CPU utilization
  • Reduces system latency
  • Increases I/O throughput
51
Q

What is Single-root I/O Virtualization (SR-IOV)?

A
  • It is an enhancement to PCI passthrough
  • Allows multiple VNFs to share the same pNIC
  • Emulates multiple PCIe devices on a single PCIe device (such as a pNIC)
52
Q

What does SR-IOV call the emulated PCI device?

A

Virtual Functions (VFs)

53
Q

What does SR-IOV call the physical PCI device?

A

Physical Function (PFs)

54
Q

What are the 2 modes an SR-IOV-enabled pNIC can operate in?

A
  • Virtual Ethernet Bridge (VEB)
  • Virtual Ethernet Port Aggregator (VEPA)
55
Q

What is Virtual Ethernet Bridge (VEB) mode?

A

Traffic between VNFs attached to the same pNIC is hardware switched directly by the pNIC

56
Q

What is Virtual Ethernet Port Aggregator (VEPA) mode?

A

Traffic between VNFs attached to the same pNIC is switched by an external switch

57
Q

What is Cisco’s Enterpise Network Functions Virtualization (ENFV)?

A

Cisco solution that replaces physical firewalls, routers, WLC, load balancers, and so on with virtual devices running in a single x86 platform.

58
Q

What advantages come from ENFV?

A
  • Reduces the number of physical devices, truck rolls, technician visits
  • Simplifies roll out of new services, updates, VNFs
  • Centralized mgmt (DNA Center)
  • Enhances network operations flexibility
  • Supports SD-WAN
  • Supports 3rd party VNFs
59
Q

What 4 main components make up ENFV?

A
  • Management and Orchestration (MANO)
  • VNFs
  • Network Functions Virtualization Infrastructure Software (NFVIS)
  • Hardware Resources
60
Q

What are 2 main functions of DNA Center?

A
  • Roll out new branch locations
  • Deploy new VNFs and virtualized services.
61
Q

What do DNA Centers network profiles include?

A
  • Configuration for LAN and WAN virtual interfaces
  • Services or VNFs to be used, chaining parameters, CPU and memory requirements
  • Device configuration for VNFs
62
Q

What does NFVIS stand for?

A

Network Function Virtualization Infrastructure Software

63
Q

What 7 VNFs does Cisco support?

A
  • ISRv
  • ASAv
  • NGFWv
  • Viptela vEdge
  • cEdge
  • vWAAS
  • vWLC
64
Q

What 7 3rd party VNFs does Cisco support?

A
  • ThousandEyes
  • Fortinet
  • PaloAlto
  • InfoVista
  • CTERA
  • Windows server
  • Linux Server
65
Q

What components make up NFVIS?

A
  • Linux
  • Hypervisor by KVM
  • vSwitch by Open vSwitch (OVS)
  • VM Lifecycle Mgmt by imbedded Elastic Services Controller Lite
  • Plug and Play client
  • Orchestration
  • HTTPs Web Server
  • Device Mgmt
  • Role-based Access Control (RBOC)
66
Q

What x86 hosting platforms are available for NFVIS?

A
  • Cisco Enterprise Network Compute System (ENCS)
  • Cisco Cloud Services Platform
  • Cisco 4000-series ISRs with a Cisco UCS Series E blade
  • UCS C-series