Network Virtualization & Cloud Networking

Transcription

1 1 Network Virtualization & Cloud Networking Pascale Vicat-Blanc Primet Senior Researcher at INRIA Leader of the RESO team LIP Laboratory UMR CNRS-INRIA-ENS-UCBL Ecole Normale Supérieure de Lyon France 9/3/2010 1

2 2 Outline 1. Context & Motivations 2. Cloud networking 3. Network virtualization 4. The ViPXi Concept 2

3 Context: Clouds & Networks 3 Convergence of computing and communication Expansion of Cloud Services IaaS, PaaS, SaaS XaaS Invest => Rent CAPEX => OPEX 3

4 4 Lyon Amsterdam Cloud Technology = A huge collection of virtualized computing resources accessible via the Internet Cloud Berlin Palo Alto Genève Tokyo Bengalore Benjing 4

5 5 Lyon Amsterdam But the legagy Internet Cloud: Berlin Palo Alto Is only communication oriented Exposes a Best effort service = tuyaux percés Tokyo Genève Bengalore Benjing 5

6 6 Outline 1. Context & Motivations 2. Cloud networking 3. Network virtualization 4. The ViPXi Concept 6

7 7 Data Center Network Today s Data Center Network Core Switch End of Row Switch Top of Rack Switch Picture from: James Hamilton, Architecture for Modular Data Centers Data intensive applications are experiencing bandwidth bottleneck in the tree structure data center networks. E.g. Video data processing, MapReduce 7

8 8 Network Virtualization with XEN 8

9 9 Results : Sending Aggregated throughput ±= Theoretical throughput (941,49Mb/s) Fair bandwidth sharing ~32% without virtualization Important CPU overhead (between +58% and +140%) Fair CPU sharing between domains U 9

10 10 Outline 1. Context & Motivations 2. Cloud networking 3. Network virtualization 4. The ViPXi Concept 10

11 Context: Internet ossification 11 Workarounds = overlays, http, firewall traversal DCCP UDP IP TCP SCTP Clean slate? 11

12 12 Virtualization is the solution!! Decouples the physical hardware from the service level M-to-N mapping (M real resources, N virtual resources) Deliver greater resource utilization and flexibility Server virtualisation (XEN, KVM ) as used in Clouds (EC2) How can this concept help in Internet de-ossification? 12

13 13 Network virtualization Concurrent & independant networks Security, Isolation, Appliance Customization: routing, traffic engineering, protocols Tube P2P Game IMG CDN Chat HTCP RCP Grid BIC cubic TCP VoD TeleP IP IP UDT IP IP IPv4 IPv6 Virtualisation layer = network hypervisor Physical layer 13

14 14 Benefits of virtualization 1. Security: provide a confined environment where non-trusted applications can be run; 2. Isolation: limit hardware resource access and usage, through isolation techniques, or expand it transparently for the applications 3. Appliance: adapt the runtime environment to the application instead of porting the application to the runtime environment; 4. Customization: use dedicated or optimized OS mechanisms (scheduler, virtual memory management, network protocol) for each application; 5. Ease management: manage as a whole applications and processes running within a virtual machine. 6. Cost reduction: resource consolidation, load balacing, dynamic resizing, resource provisioning, power saving 7. Ease development process: Testing, experiments 14

15 Virtualization in networks is not new! So what? 15 Overlays VPNs Active Networks VLANs 15

16 Dynamic Ethernet Virtual Circuit 16 Dynamic mapping (CE-VLAN) TSS Add/Drop Ports Automatic end-to-end Ethernet Virtual Circuit provisioning PSC TE Link WDM FA-LSP WDM LSP Mapping (CE-VLAN) TSS Add/Drop Ports PSC OCh OCh PSC [PSC,WDM] TE-link Transport Service Switch (Ingress ROADM) [WDM,WDM] TE-link [WDM,WDM] TE-link Automatic Switched Optical Network (Egress ROADM) [WDM, PSC] TE-link Transport Service Switch 16

17 17 Virtualization of networks is more Overlays VPNs Virtual Networks Active Networks VLANs 17

18 18 Virtual Networks with Virtual Routers Virtual Routers 18

19 19 Network Slicing Goal: Allow multiple instances to co-exist Mechanism: Virtual forwarding tables a s b t Slice 1 dst t next-hop a c Slice 2 t c 19

20 20 Outline 1. Context & Motivations 2. Cloud networking 3. Network virtualisation 4. The ViPXi Concept 20

21 21 ViPXi : virtual infrastructure concept A virtual (private execution) infrastructure : ViPXi is defined as: A collection of individual virtual resources and groups A virtual network topology with weighted links (rate, latency ) An executing timeline (for co-scheduling). ViPXI A ivpxi B HIPerNet software: selects, allocates, schedules nodes&channels [G.Koslovski, PVB and al. Grid05, GridNets08, ICNS09, CCGrid09, IJNM10] 21

22 22 Virtual Infrastructures Solutions Computing+Network resource virtualisation ViPXi: Virtual Private execution Infrastructure VXDL: Virtual Infrastructure description Time-aware Virtual Infrastructure Allocation Security model: SPKI, CBIDs, cryptography 22

23 23 Application-mapping principles 23 23

24 24 1) Bootstrap: virtualized substrate creation Underlying physical ICT infrastructure QuickTime et un décompresseur sont requis pour visionner cette image. Virtualized substrate: VXspace 24 24

25 25 2) ViPXi specification VXDL language Specification of virtual resources sets Specification of virtual topology Specification of time line Example: Specification of three ViPXis : Same resource set & topology, different link rates VN 1 VN 2 VR 5 VR 6 4 virtual resources: VN 1, VN 2, VN 3, VN 4 2 virtual routers: VR 5 and VR 6 VN 3 VN 4 ViPXI-3 ViPXI-2 ViPXI-1 VN X VR Y VR 5 VR Mbps 200 Mbps 75 Mbps 150 Mbps 50 Mbps 100 Mbps 25 25

26 26 3) Allocation and creation VXDL file VXDL file VXDL file ViPXi request submission HIPerNet engine HIPerNET framework is a component-based software technology. Set of independant & replaceable modules to: Parse VXDL requests Allocate & schedule ViPXIs Control of ViPXIs & Virtual resources Manage users & security 26

27 27 4) ViPXI deployment & configuration VN 1 VN 2 VR 5 VR 6 HIPerNET framework: combines system and network virtualization provisions and configures virtual resources creates and manages ViPXIs VN 3 HIPerNet VN 4 engine Virtualized resources 27 27

28 5) ViPXI & application deployment 28 VN 1 VN 2 VR 5 VR 6 HIPerNet VN 3 VN 4 engine VPXI deployment VN 1 VR 5 VN 3 VN 2 VR 6 VN 4 28

29 6) Execution 29 Execution of NAS with different bandwidth setups VN X VR X VR 5 VR Mbps 200 Mbps 75 Mbps 150 Mbps 50 Mbps 100 Mbps 29

30 From HIPerNet to ViPXisor 30 ViPXi editor ViPXi admin ViPXisor 30

31 31 Conclusion & perspectives The current Internet model cannot face the Cloud challenges Network virtualization offers Flexibility Dynamicity Security Guarantied performances ICT Infrastructure virtualization is the KEY for Future Internet New business models for Network Infrastructure & Network Service Providers Advanced Internet Services with SLAs Approach contributing to GreenICT Visit LYaTiss booth to learn more on Network virtualization & Clouds 31

32 Annexe: Some of our references on network virtualisation Julien Laganier and Pascale Vicat-Blanc Primet. HIPernet: a decentralized security infrastructure for large scale grid environments. In 6th IEEE/ACM International Conference on Grid Computing (GRID 2005), November 13-14, 2005, Seattle, Washington, USA, Proceedings, pages , Fabienne Anhalt, Guilherme Koslovski, Pascale Vicat-Blanc Primet Specifying and provisioning Virtual Infrastructures with HIPerNET. International Journal of Network Management (IJNM) - special issue on Network Virtualization and its Management, Pascale Vicat-Blanc Primet, Sebastien Soudan, and Dominique Verchere. Virtualizing and scheduling optical network infrastructure for emerging IT services. Optical Networks for the Future Internet (special issue of Journal of Optical Communications and Networking (JOCN)), 1(2):A121-A132, Guilherme Koslovski, Tram Truong Huu, Johan Montagnat, and Pascale Vicat-Blanc Primet. Executing distributed applications on virtualized infrastructures specified with the VXDL language and managed by the HIPerNET framework. In First International Conference on Cloud Computing (CLOUDCOMP 2009), Munich, Germany, October Pascale Vicat-Blanc Primet, Fabienne Anhalt, and Guilherme Koslovski. Exploring the virtual infrastructure service concept in Grid'5000. In 20th ITC Specialist Seminar on Network Virtualization, Hoi An, Vietnam, May Pascale Vicat-Blanc Primet, Jean-Patrick Gelas, Olivier Mornard, Guilherme Koslovski, Vincent Roca, Lionel Giraud, Johan Montagnat, and Tram Truong Huu. A scalable security model for enabling Dynamic Virtual Private Execution Infrastructures on the Internet. In IEEE/ACM International Conference on Cluster Computing and the Grid (CCGrid2009), Shanghai, May Guilherme Koslovski, Pascale Vicat-Blanc Primet, and Andrea Schwertner Char. VXDL: Virtual Resources and Interconnection Networks Description Language. In GridNets 2008, Oct

33 Slice concept 33 PlanetLab (march Princeton) Dedicated overlays for researchers Resource virtualization Over the Internet 33

34 34 Overlay Networks: end user has a better view! A normal path B Internet route around the problem logical links C 34

35 35 Results : Forwarding 377Mb/s Low aggregated throughput compared to the theoretical throughput (941,49Mb/s) Fair bandwidth sharing ~18% without virtualization Very important CPU overhead (+~230%) 35