Get Automating with Infoblox DDI IPAM and Ansible

Transcription

1 Get Automating with Infoblox DDI IPAM and Ansible Sumit Jaiswal Senior Software Engineer, Ansible Sailesh Kumar Giri Product Manager, Cloud, Infoblox

2 AGENDA 10 Minutes: Intro to Infoblox (Sailesh) 25 Minutes: Infoblox Ansible Modules Detailed (Sumit) 15 Minutes: Demonstration (Sailesh) 15 Minutes: Q&A

3 October 2-3

4 Infoblox: The DDI Leader Over 8,000 customers 83 of Fortune 100 Global sales and support Consistent investment in DDI All organizations looking to deploy DDI should consider Infoblox. Selected Alliance Partners

5 Infoblox DNS, DHCP and IPAM (DDI) Automate, Consolidate and Secure your Core Network Services Manage all IP addresses for your Enterprise Network and Hybrid Cloud on a single console and database Control network services from a single, distributed platform Gain visibility, trending analysis, user correlation and predictive reporting Consolidated Management of DNS, DHCP and IPAM Consolidated DNS, DHCP and IPAM Platform Single console and database for physical, virtual and Cloud Ensure Secure DNS and Always-On Services High Availability and Disaster Recovery Flexible deployment on physical, virtual and Cloud Access to Rich Reporting and Analytics Reporting and Analytics Automation with APIs, ecosystem integrations

6 Patented Grid Technology The Infoblox Advantage Reliable, distributed, and secure platform with centralized management VMware OpenStack Xen Hyper-V AWS Highly scalable Central management Virtualization & Cloud Integration / Automation Cloud Orchestration Integration Grid Master Site Grid Master Visibility across physical & virtual networks Five-9s service availability Visibility to cloud workloads Grid Member DNS / DHCP Infoblox Grid Standard API s for ecosystem integration Grid Member DNS / DHCP Branch Office Microsoft DNS, DHCP Grid Member DNS / DHCP Infoblox Inc. All Rights 2013 Infoblox Inc. All Reserved. Rights Reserved.

7 The Power of Cloud Network Automation Traditional Approach Provision Virtual Instance Request IP or Use Allotment Forward IP Data for Tracking Update Database or Spreadsheet Automated Infoblox Cloud Network Automation Provision Virtual Instance Automated Automated 5 6 Manual Request DNS Record 4 Allocate and Manually Enter DNS 5 Clean Up When De-provisioned 6 Implement change anytime Eg: DNS names, IP addresses No tickets between network, server teams for DNS, IP Automatic reclamation of resources upon spin down

8 Automating with Ansible Ansible is an open-source IT configuration management, deployment, and orchestration tool based on Python. It s designed to be minimal in nature, consistent, secure, and highly reliable, with an extremely low learning curve for administrators, developers and IT managers. SIMPLE POWERFUL AGENTLESS Human readable automation Gather Information and Audit Agentless architecture No special coding skills needed Configuration management Uses OpenSSH and paramiko Tasks executed in order Workflow orchestration No agents to exploit or update Get productive quickly Manage ALL IT infrastructure More efficient & more secure

9 WITHOUT ANSIBLE TEAMS IN SILOS TOOL A TOOL B TOOL C TOOL D SERVERS STORAGE NETWORK SECURITY

10 WITH ANSIBLE THE UNIVERSAL LANGUAGE SERVERS STORAGE NETWORK SECURITY

11 Infoblox Integration with Ansible The Ansible 2.5 release includes following Infoblox Network Identity Operating System (NIOS) enablement: Five Modules A lookup plugin (for querying Infoblox NIOS objects) A dynamic inventory script

12 ANSIBLE INFOBLOX MODULES NIOS_DNS_VIEW NIOS_HOST_RECORD NIOS_NETWORK NIOS_NETWORK_VIEW NIOS_ZONE Configure DNS views Configure HOST records Configure Network Objects Configure Networking Views Configure DNS Zones First released in Ansible 2.5, fully supported by Red Hat via Ansible Engine 2.6 subscription

13 NIOS_NETWORK_VIEW Module PLAYBOOK Example --- name: Nios Network View hosts: localhost connection: local tasks: - name: Create Network View nios_network_view: name: ansible-new-view comment: this is an example comment state: present provider: "{{ nios_provider }}"

14 NIOS_ZONE Module PLAYBOOK Example --- name: Nios zone hosts: localhost connection: local tasks: - name: Create Zone nios_zone: name: ansible.com state: present comment: this is an example comment provider: "{{ nios_provider }}"

15 NIOS_DNS_VIEW Module PLAYBOOK Example --- name: Nios Dns view hosts: localhost connection: local tasks: - name: Create DNS View nios_dns_view: name: ansible-dns comment: test new comment state: present provider: "{{ nios_provider }}"

16 NIOS_NETWORK Module PLAYBOOK Example --- name: Nios Network hosts: localhost connection: local tasks: - name: Configure an Ipv4 network view nios_network: network: /24 comment: this is an example comment state: present provider: "{{ nios_provider }}"

17 NIOS_HOST_RECORD Module PLAYBOOK Example --- hosts: localhost connection: local tasks: - name: Create Host record with name as 'test_host' in 'ansible.com' zone nios_host_record: name: test_host.ansible.com ipv4: - address: comment: this is an example comment state: present provider: "{{ nios_provider }}"

18 Ansible Infoblox Lookup Plugin PLAYBOOK FOR SEARCHING PARTICULAR HOST: VERBOSE OUTPUT:

19 Ansible Infoblox Lookup Plugin Playbook for NEXT AVAILABLE IP: VERBOSE OUTPUT:

20 Ansible Infoblox Dynamic Inventory DEBUG PLAYBOOK: HOSTS LIST DEBUG OUTPUT VIA DYNAMIC INVENTORY:

21 How Ansible and Infoblox Works together Network Engineer ANSIBLE + Infoblox DDI Grid Round the clock Network Automation

22 Demo Ansible Server: OS Ubuntu Python Ansible or higher PIP package management system from python Infoblox-client WAPI client to perform WAPI calls to Infoblox. Ansible Server infoblox-client Infoblox Grid (NIOS): NIOS Cloud admin account (cloud-api-only) Permissions DNS (all DNS views), DHCP (all Network views), Grid (all members) 22 Infoblox Inc. All Rights Infoblox Inc. All Reserved. Rights Reserved. Infoblox Grid

23 Q&A

24 Thank you facebook.com/ansibleautomation github.com/network-automation twitter.com/ansible 24