Emil Gągała Piotr Jabłoński
Juniper Networks Cisco Systems
What is SDN all about?
In the beginning there was a chaos
CLOUD BUILDING BLOCKS
Storage Compute
?
Network
CAN I VIRTUALIZE MY…
Where is my money?
The main promise of NFV is to benefit from commodity pricing of IT hardware, reduced power consumption and moving to a much faster service delivery method based on downloading software appliances as opposed to installing new hardware appliances," says Paul Veitch, chief network strategist at British Telecom
“Faster time to market, Elasticity, Redundancy, Independence from hardware" says Axel Clauberg, VP/CTO Deutsche Telekom
“To deploy router, security, voice, it take 3 truck rolls – not sustainable” says Verizon executive
“AT&T plans to increase the value of its network by: Driving improved time-to-revenue; Providing cost-performance leadership;
Enabling new growth services and apps; Ensuring world-class, industry leading security, performance and reliability; and Facilitating new business and revenue models.”
Bringing Agility to Networks
Time to Service Deployment
Operating Expenses
Operational Complexity Servers managed per admin
# of SKUs to manage
Code to production launch Telco: 6-7 Months Amazon: Few seconds
Telco: < 100
Google: 1 per 10,000 srvrs
Google: 10 Configs
Telcos: 1,000’s
Every 11 seconds; Avg 10K or max 30K servers at a time using continuous integration & deployment
Mobile SP Quote: 6-7 months per service; mostly manually
Operator DC: Each admin can manage upto ~100 servers large headcount Each admin can operate ~10,000 servers
vendors: 1000’s of SKUs to manage makes it overly complex Google: ~10 shared hardware system bundles
Ample room for accelerating TTM, reducing costs and optimizing operations Dynamic network service automation is the key priority
•
Create new network services quickly•
Optimize network configurations in real time•
Simplify network provisioning•
Finding SDN-knowledgeable engineers•
Incomplete or non-existent standards•
Unclear cost benefits tradeoffsSDN DRIVERS
* Source: Infonetics Research, 2013 (Survey conducted around SDN and NFV Adoption)
SDN BARRIERS
CURRENT IT* FAST IT
28% Troubleshooting 19% Security 18% Configuration
14% Equipment Upgrade14% Traffic Optimization
7% Other
14% Troubleshooting 10% Security 8% Configuration
14% Equipment Upgrade10% Traffic Optimization
43%
Other
36%
Total Network Operations Time Savings
36%
More Time Available for Business Innovation
Average Time Spent by Network Administrator
* Source: Forrester Commissioned Study
CURRENT IT* FAST IT
SDN Definition
Software Defined Networking / SDN
SDN is an emerging network architecture where network control is decoupled from forwarding and is directly programmable .
https://www.opennetworking.org/images/stories/downloads/white-papers/wp-sdn- newnorm.pdf
What is SDN? - Classical Approach
Control Plane Control Plane
Data plane Data plane
Control Plane Control Plane
Data plane Data plane
Where/How to Send packet
Forwarding Packets
Control Plane Control Plane
Data plane Data plane
Controller
NETops/
DEVops
“…In the SDN architecture, the control and data planes are decoupled, network intelligence and state are logically centralized, and the underlying network infrastructure is abstracted from the applications…”
Source: www.opennetworking.org
Control Plane Control Plane
Data plane Data plane
Control Plane Control Plane
Data plane Data plane
Where/How to Send packet
Forwarding Packets
Control Plane Control Plane
Data plane Data plane
Controller
NETops/
DEVops
Control Plane Control Plane
Control Plane Control Plane
PRESERVE WHATS WORKING EVOLVE FOR EMERGING REQUIREMENTS
•
Resiliency•
Scale & Security•
Rich Feature Set•
Operational Simplicity•
Programmability•
Application AwareREVOLUTION Evolution NOT
What is SDN? – New Approach
SDN Architecture
Openflow does not equal SDN
Openflow Openflow
Software Defined Networking
Openflow is one flavor of SDN
Network Programming Model
SDN
Program for Optimized Experience
Harvest Network Intelligence Application development
frameworks Application Development
Application Development
Programmatic network automation
Management Management
Automated, policy-directed service management
Orchestration Orchestration
Network-wide service access Network Service
Network Service
Common control abstractions:
OpenFlow Control
Control
Common forwarding abstractions Forwarding
Forwarding
Device configuration Transport / Device / ASICs
Transport / Device / ASICs
Programming Architecture Stack
NFV
NFV
Network Function Virtualization
Definition of NFV
“Network Functions Virtualisation aims to transform [...] networks by evolving standard IT virtualisation technology
to consolidate many network equipment types onto industry standard high volume servers, switches and storage”
ETSI NFV Reference Architecture – VNF
ETSI breaks down NFV architecture into three areas.
• On boarding
• Instantiation
• Configuration
• Internal Failure
• Scaling Out/In
• Scaling Up/Down
• Building a Service Chain
NFV Relationship with SDN
“Network Functions Virtualisation is highly complementary to Software Defined Networking (SDN), but not dependent on it (or vice-versa).”
SDN NFV
SDN
• Network Abstraction
• Centralized controller
• Open
• API
• Cloud focus
NFV
• Equipment Abstraction
• Managed Network Services
• High Availability
• CAPEX, OPEX, Space, Power
• SP focus
Virtualized Network Functions
CDNCDN Security GatewaySecurity Gateway Identity Services Identity Services Adaptive SecurityAdaptive Security
WAN Acceleration
WAN Acceleration Mobile Core
EPC Mobile Core
EPC Wireless LAN ControlWireless LAN Control Route ReflectorRoute Reflector
Video Cache
Video
Cache DPIDPI Network AnalysisNetwork Analysis Network ManagementNetwork Management
Many familiar network services functions have already been developed for virtualized
implementations
How to do it?
Virtual Overlay Network, Virtualized Services
Physical Underlay Network
Flow-through provisioning for services and gateways Integrated fault management and trouble shooting Hardware acceleration
End-to-end per-tenant QoS ...
Integrate the Virtual and Physical Networks
1 + 1 > 2
Reactive hop-by-hop
First packet of every flow is punted to controller.
Controller reactively programs every flow on every switch on path.
How does controller reach switch?
Per-tenant state in physical network:
Switches contain many flows.
Switches must support OpenFlow
Scalability? Fork-lift upgrade?
Proactive overlay networks
High scalability. Evolutionary.
Controller proactively programs virtual overlay switches only.
Existing protocols establish IP fabric underlay.
Packets are not punted to controller.
No per-tenant state in physical network:
Switches only know physical servers.
Underlay network uses existing protocols.
Topology change does not affect service layer.
"Lego Blocks"
VN VN
VN
Virtual Machines
Cloud Tenants and Virtual Network Functions
Virtual Networks
Connect Virtual Machines
Gateway Devices
Connect the Virtual to the Physical
VM VM
Service chain
LOGICAL TOPOLOGY
Simple
• High level of abstraction
Simple to configure
Simple to troubleshoot
Controller provides abstraction
• Configure logical layer
• Mapping to physical layer
• "SDN as a Compiler"
• Analytics at physical layer
• Mapping to logical layer
VM G1
VM G3
VM R1
VM R2
VM R3 VN R
BMS R4
VN G
VM VM G2
FW
L3VPN
Summary
ENTERPRISE PRIVATE CLOUD
•
IT-as-a-Service(Internal Managed Svcs)
•
Orchestration•
Automation•
Agility SP IaaS, VPC•
Managed Cloud Services•
L3VPN extension into DC’s•
Intra, Inter-Domain Orchestration•
Multi-tenancyOPTIMIZED SP CORE
•
Global Optimization for TE•
Policy-based BW AllocationSP UNIVERSAL EDGE