Virtual Router &
Overlay Network
Sueng-Yong Park
Dept. of Electronic Engineering
Yonsei Univ.
Fu
tur
e
N
et
w
o
rk
Fu
tur
e
N
et
w
o
Fu
tur
e
N
et
w
o
rk
Fu
tur
e
N
et
w
o
rk
Virtualization: Xen Architecture
•
Xen allows users to create virtual PCs.
–
Thin hypervisor encapsulates underlying HW.
–
Domain 0 middles between virtual PC and HW.
–
Virtual PCs run on user space.
2
Fu
tur
e
N
et
w
o
rk
Fu
tur
e
N
et
w
o
rk
DomU DomU Dom0
Driver
Frontend Frontend Backend
Fu
tur
e
N
et
w
o
rk
Fu
tur
e
N
et
w
o
rk
Virtualization: Xen Architecture
•
domU userspace is a nice place to put SW router.
–
Hypervisor provides modular resource managements.
–
Process isolation provides undisturbed experiments.
–
But, it also has XEN limitations.
3
Fu
tur
e
N
et
w
o
rk
Fu
tur
e
N
et
w
o
rk
Xen architecture
dom0 userspace
domU userspace
domU userspace
processes processes processes
dom0 kernel device drivers
domU kernel domU kernel
Xen hypervisor Hardware
ring 3
ring 0 x86_32 : ring 1 x86_64 : ring 3
We can put Software Router in user space.
Fu
tur
e
N
et
w
o
rk
Fu
tur
e
N
et
w
o
rk
Internals of XORP
4
Fu
tur
e
N
et
w
o
rk
Fu
tur
e
N
et
w
o
rk
IPCfinder
router
manager CLI SNMP
BGP4+ OSPF
RIP IS-IS
PIM-SM
IGMP/MLD RIB
FEA
Management Processes
Unicast Routing
Mutiicast Routing
Forwarding Engine
RIB = Routing Information Base
FEA = Forwarding Engine Abstraction
Click Elements
Standard Linux Kernel is OK.
Fu
tur
e
N
et
w
o
rk
Fu
tur
e
N
et
w
o
rk
Virtual Router Architecture
5
Fu
tur
e
N
et
w
o
rk
Fu
tur
e
N
et
w
o
rk
Dom1 Dom2 Dom3
Data plane hypervisor(Dom0) Control
Plane
Control Plane
Control Plane XEN+XORP
XEN
Intel Ethernet Device Driver
•
Ethernet (hardware) + Software(XEN + XORP)
Fu
tur
e
N
et
w
o
rk
Fu
tur
e
N
et
w
o
rk
Virtual Router Architecture
6
Fu
tur
e
N
et
w
o
rk
Fu
tur
e
N
et
w
o
rk
•
Network mode communication is suitable because it may
provide service with less overhead.
•
NAT mode seems to be interesting when the experiment
include different physical interfaces, like WiFi.
VM • • • VM
• • •
NIC
Network Mode NAT Mode
VM • • • VM
• • •
• • •
VLAN1 0
VLAN# #
NIC
• • •
VLAN2 0
VLAN10 VLAN20
Fu
tur
e
N
et
w
o
rk
Fu
tur
e
N
et
w
o
rk
Virtual Network Concept
7
Fu
tur
e
N
et
w
o
rk
Fu
tur
e
N
et
w
o
rk
•
Remote control & monitoring virtual router over WAN
Network/Router management
<XML-RPC> <XML-RPC>
Hypervisor
GRE Tunnel 172.16.13.0/24
192.
168.12. 0/24
.2 .2
.1 .1
192 .168.
12 3.
0/24
.1 .3
S1/1 S1/1
S1/0
S1/0
fa1/1 fa0/1
fa0/0.100 fa0/0.100
fa0/0.100
fa0/0.100
17
2.
16.
1.
0/
24
17
2.
16.
3.
0/
24
.2
.1
.2
.1 VLAN 100
[SW1] [SW2]
[R1]
[PC2] [PC1]
Fu
tur
e
N
et
w
o
rk
Fu
tur
e
N
et
w
o
rk
TEIN 2(EU ) CERN ET
(China)
BcN Testbed
2G 622M 622M 1G IX
10G Suw on 20G 10G 10G 10G
D aeG u D aejun
10G
Pusan
Internet2 (U SA ) Canet*4 (Canada) K w angJu
Jeju BcN Q uality Control
Center
Seoul K REO N E
T
1G
166M
TransPA C2 10G
JG N II (Japan)
Six Point of Presences (POPs) in Korea
Interconnections between POPs are being upgraded from 2.5~5G to 10~20G.
Construction of Network Operation Center (NOC)
SW solution for NOC management
Remote monitoring and management capability for research access ports.
Construction of NOC.
Construction of remote conference system
User’s view for Overlay 3 User’s view for Overlay 2 User’s view for Overlay 1
User’s view for Overlay 3 User’s view for Overlay 2
V irtual N etw ork Topology
Virtual Router Control Center
Slice of Virtual Router Virtual Router
Overlay 1
Overlay 1
Overlay 2
Overlay 2
Overlay 3
Overlay 3
KOREN
Seoul Suwon
Daejon
KwangJu
DaeGu
Test Switch for Overlay NW
FIB
Secure
Channel
PC
XML-RPC
SSL
hw
sw
May follow openflow switch specification
Future Plan: Virtual Network
Management
Source: http://cleanslate.stanford.edu
Fu
tur
e
N
et
w
o
rk
Fu
tur
e
N
et
w
o
Future Plan: Router In Your Control
13
Fu
tur
e
N
et
w
o
rk
Fu
tur
e
N
et
w
o
rk
IPCfinder
router
manager CLI SNMP
BGP4+ OSPF
RIP IS-IS
PIM-SM
IGMP/MLD RIB
FEA
Management Processes
Unicast Routing
Mutiicast Routing
Forwarding Engine
RIB = Routing Information Base
FEA = Forwarding Engine Abstraction
Click Elements Your RIB
XML-RPC over Secure Link
Intelligent Edge Router
14
• For a low cost edge router, dedicated external server is a good solution for
intelligent operation.
• Usually easier to develop S/ W as the development
environment is familiar.
Source: http://www.cisco.com
Fu
tur
e
N
et
w
o
rk
Fu
tur
e
N
et
w
o
Fu
tur
e
N
et
w
o
rk
Fu
tur
e
N
et
w
o
rk
Demo: Standard Platform
Cisco RouterPC2_VM1 PC1_VM1
1 0.20.3
0.0/24
10
fa0/0 fa0/1
PC1_VM2
1 0.10
.30.0/24
1 0.1
0.4 0.0
/24
10.1
0.50 .0/2
4 .2
.1 .1
.2 .3 .4
.4
.3
.2
.1
PC2_Dom0@Seoul PC1_Dom0@Suwon
10.2
0.40 .0/2
Fu
tur
e
N
et
w
o
rk
Fu
tur
e
N
et
w
o
rk
Demo: Monitoring & Control
of Overlay Network
Cisco Router
PC2_VM1 PC1_VM1
1 0.20.3
0.0/24
10
fa0/0 fa0/1
PC1_VM2
1 0.10
.30.0/24
1 0.1
0.4 0.0
/24
10.1
0.50 .0/2
4 .2
.1 .1
.2 .3 .4
.4
.3
.2
.1
Seoul Suwon
10.2
0.40 .0/2
4
Fu
tur
e
N
et
w
o
rk
Fu
tur
e
N
et
w
o
rk
Demo: Monitoring of ICMP Pkt
ATTACK
Cisco Router
PC2_VM1 PC1_VM1
1 0.20.3
0.0/24
fa0/0 fa0/1
PC1_VM2
1 0.10
.30.0/24
1 0.1
0.4 0.0
/24
10.1
0.50 .0/2
4 .2
.1 .1
.2 .3 .4
.4
.3
.2
.1
서 울 수 원
10.2
0.40 .0/2
4
<Network Monitor>
Fu
tur
e
N
et
w
o
rk
Fu
tur
e
N
et
w
o
rk
Demo: Monitoring of ICMP Pkt
ATTACK
Cisco Router
PC2_VM1 PC1_VM1
1 0.20.3
0.0/24
10
fa0/0 fa0/1
PC1_VM2
1 0.10
.30.0/24
1 0.1
0.4 0.0
/24
10.1
0.50 .0/2
4 .2
.1 .1
.2 .3 .4
.4
.3
.2
.1
Seoul Suwon
10.2
0.40 .0/2
4
<Network Monitor>
