Cloud Enablement Architecture and NfV Services Prashant Jhingran Technical Marketing Engineer Cisco Systems

Transcription

1 Cloud Enablement Architecture and NfV Services Prashant Jhingran Technical Marketing Engineer Cisco Systems 1

2 Agenda Key SP Challenges Demystifying NfV NfV and Standardization Applicability of NfV NfV Use cases Case Study - Virtualizing Service Provider Wi-Fi Core Summary

3 Key SP challenges and Path Forward Traffic Growth Lean SP Competitive Pressure TRADITIONAL SP Network Cost and Complexity Rapid Innovation Time to Market Slow Innovation

4 Transformation To Carrier As A Service Traditional SP TRANSFORMATION Agile SP NFv + SDN & Physical E2E Service Orchestration Self Service Carrier Class Carrier As A Service NfV E2E Solution

5 Demystifying NfV

6 Network Functions Virtualisation Enablers, benefits and applications NfV = Transition of network infrastructure services to run on virtualised compute platforms Using cloud technology to provide network functionality Enablers Hypervisor and cloud computing technology Improving x86 h/w performance Optimised packet processing and coding techniques Network industry standardising on Ethernet SDN based orchestration Value Proposition Shorter innovation cycle Improved service agility Reduction in CAPEX and OPEX Applications Potentially all network functions ddos CGN DHCP WLC NMS SBC DPI DNS RaaS Caching Firewall IPS PCRF SDN Ctrl. CDN NAT Virus Scan Portal BRAS WAAS

7 The Backdrop : Ever increasing Traffic Levels Exabytes per Month % CAGR Web/Data (24.2%, 18.9%) Source: Cisco VNI Global IP Traffic Forecast, % 90% 80% Traffic Share 70% 60% 50% 40% 30% 20% Core : Multiple 10G à 100G 42% 55% 58% 45% Metro : 10G à Multiple 10G or 100G 10% 0% Long-Haul (Also Traverses Metro)

8 NfV and Standardization

9 Network Functions Virtualization history Brought to prominence in October operators published a white paper, coining the term Network Functions Virtualization (NFV) Announced and the highlight of the SDN and OpenFlow world Congress in Darmstadt Formal process based on an ETSI Industry Standard Group (ISG) Created January 2013 Anticipated lifetime 2 years Role of NFV part 1 Use cases, architecture and terminology, highlighting of functional gaps Output is informational Role of NFV part 2 Format, terms of reference etc. under discussion Continue when NFV part 1 completes Likely to be more normative in nature than NFV part 1

10 ETSI NFV Organization OSS/BSS Os-Ma Se-Ma NFV Management and Orchestration Orchestrator Technical Steering Committee NFVI EMS 1 VNF 1 Virtual Computing Computing Hardware Service, VNF and Infrastructure Description EMS 2 S/W Architecture VNF 2 Vn-Nf Virtual Storage Infrastructure Virtualisation Layer Vl-Ha Storage Hardware EMS 3 VNF 3 Virtual Network Hardware resources Network Hardware Ve-Vnfm Nf-Vi Or-Vnfm VNF Manager(s) Management and Operations Vi-Vnfm Virtualised Infrastructure Manager(s) Or-Vi Reliability and Availability Expert Groups Performance and portability Security Execution reference points 2014 Cisco and/or its affiliates. All rights reserved. Main NFV Cisco reference Public Other reference points points ETSI All rights reserved 10

11 Applicability of NfV

12 Network solutions: Design approaches High OSS/BSS, subsystem and N/W control CPU Appliances (L4-L7) Variable CPU / FPGA / NPU Wireless GWs Distributed: Lots CPUs + NPUs Distributed: CPUs + Lots of NPUs CPU Reqs Centralized: CPU or SoC Wireline GWs Low Home CPE Business CPE Centralized: CPU + NPU Backbone, Metro and DC switching 0 10Mbps 100Mbps 1Gbps 10Gbps 100Gbps 1Tbps 10Tbps 100Tbps 1Pbps

13 Virtual Network Functions (VNF) evaluation criteria Physical Design Requirements interface count, interface size, system design requirements, specialist N/W functions Performance Requirements L1-L3 packet performance, CPU processing, fabric capacity Network Architecture Will virtualization fit the network architecture principles of the network Elasticity of the service Economics Onboarding, CapEX and OpEx

14 Virtualized standard server based solutions assessment Strengths High CPU processing functions Not extreme packet processing Low physical interface counts (<20) Low-medium interface speeds Ethernet interfaces (copper 10/1000/10Gbps) Standard hardware server builds Elastic services where h/w can be redeployed Weaknesses Very high packet processing Specialized SP design and h/w functionality High physical interface counts (>20s) High interface speeds (>40G) Diverse interfaces types Unpredictable performance metrics

15 NfV Use Cases

16 NfV use case: Virtualized SP / 3 rd party applications Orchestration Internet CPE IP edge Streamer NGN DNS Content Ingestion DHCP IaaS IMS Many examples Centralised DC OSS/BSS, voice and video solutions, N/W control, video/collaboration solutions, wireless/wi-fi, security NFV transition well underway There are several existing products in this space See earlier slide for details New solutions coming think and fast

17 NfV use case: Virtualized Edge Gateway Policy Server Orchestration Internet NGN CPE IP edge vbng vbng Vendors have complementing existing h/w gateway solutions with virtualized g/w solutions vpe, vbng/bras based on Cloud Service Router Virtual mobile gateways (MME, S/PGW) CableLabs have kicked off work on vcmts Virtualized gateways may require architectural changes Virtual racking and stacking Centralised DC

18 NfV use case : Virtual residential gateway Management and Control Gateway Data Centre Services F W Internet Wireless AP L2 Domain Cloud Data Centre L2 Domain Quantum Virtual Broadband Node L2 domain between home and data center Virtualized CPE and home services in the cloud

19 Signal StrengthD PG J WM E3 H4 T Q K5 N6 7C8 X UF9 RI L YO V S Z NfV use case: Virtual Service Infrastructure Cloud Orchestration and Management Physical Router Web Proxy NAT DPI FW 12 A B *0# Access GGSN/ PGW VO VO FW FW A- SBC Simple reconfiguration of service chains via SDN and virtualization tools Improved scaling Elastic services

20 Data Center Evolution Legacy DC NFV DC L3 VPN Public Internet L3 VPN Internet WAN Edge (NGN PE) * AS 109 L3 VPN Edge VRF embgp * (NGN-PE) vipsec GW Aggregation ASA- VPN Service- Core * * ASA- FW Aggregation Compute * * AS Front-end VRF Firewall Outside VLAN Shared/public VLAN Back-end VRF Firewall Inside, ACE outside VLAN RP RP Server VLANS VRF VRF * L3 VPN Edge (DC-PE) ASA- VPN * ASA- FW Tennant L3 Edge (VRF-CE) * * ebgp + static redist. vlb vlb vfw Public Zone o o n n (DMZ) Protected FE Zone 1 Zone 2 e Zone e 3 Front-end Zones vlb Back-end Zones Virtualized Compute and DC overlay Agility (Create/Delete), Scale, Flexible Topologies, BYOD, Elasticity, Utility Based Pricing S u ḇ Z o n Se Wu ḇ Z S u ḇ Z o n Se X u ḇ Z

21 Case Study: Virtualizing Service Provider Wi-Fi Core

22 Wi-Fi E2E Solution Architecture a/b/g/n Backhaul WLAN Controller Session management L4 Redirection Transparent Auto Logon Policy enforcement Accounting start / stop Legal Intercept L2 / L3 WAG L3 NAT Firewall DPI Video optimization Internet WLAN Access CAPWAP SUM DHCP PI DNS Portal AAA PCRF DNS MSE Core Network UCS Subscriber management Subscriber authentication Service authorization Web portals Policy definition Roaming Address assignment Accounting / Billing Whitelisting Location awareness Network Analytics 22

23 What to virtualize? a/b/g/n Backhaul WLAN Controller Session management L4 Redirection Transparent Auto Logon Policy enforcement Accounting start / stop Legal Intercept L2 / L3 WAG L3 NAT Firewall DPI Video optimization Mgmt Internet WLAN Access CAPWAP SUM DHCP DNS Portal UCS PCRF MSE Core Network DNS AAA DNS service Authentication Accounting Management Subscriber management Subscriber management Subscriber authentication Service authorization Web portals Policy definition Roaming Address assignment Accounting / Billing Whitelisting Location awareness Network Analytics 23

24 Virtualized Wi-Fi instance Backhaul WLAN Controller Session management L4 Redirection Transparent Auto Logon Policy enforcement Accounting start / stop Legal Intercept L2 / L3 WAG L3 NAT Firewall NAT Mgmt Internet WLAN Access CAPWAP DHCP Portal MSE Core Network UCS DNS AAA DNS service Authentication Accounting Management Subscriber management Web portals Policy definition Roaming Address assignment Whitelisting Location awareness Network Analytics BBX Ad insertion 24

25 Virtualized Wi-Fi Service Instances a/b/g/n WLAN Access Backhaul WLAN Controller L2 / L3 Core Network WAG Service Instance - 1 L3 NAT CAPWAP DHCP Portal MSE DNS a/b/g/n WLAN Access Backhaul WLAN Controller Core Network L2 / L3 WAG UCS / Blade Server Service Instance - 2 NAT L3 Internet AAA Mgmt CAPWAP DHCP Portal MSE 25

26 Differences between service instances IP addresses for all components on the SP management network Public IP addresses for virtual WLC s NAT pool for each service instance VLAN s must be unique per service instance within a cluster Everything else remains the same across ALL service instances 26

27 Virtual Wi-Fi (inside of a service instance) Backhaul vwlc-1 VL-1093 VL-1094 vwag Web Portal VL-61 DNS AAA V4 & V6 vwlc-2 Mgmt vnat SP Network VL-62 DNS V4 & V6 ISC DHCP (V4 & V6) MSE 27

28 Summary The backdrop to NfV and all network evolution is increasing amount of network traffic Both vendors & SP s are experimenting with NfV Caution: NfV doesn t mean EoL of your production hardware NfV: some functions are obvious / large spectrum are dependent on SP and their architecture A hybrid network environment consisting of blend of custom NFs and Virtualized NFs (VNFs)

29 Thank you.

30 Layer 2 Connectivity with Virtual Switch vwlc vwag MSE DHCP vnat Portal vwlc vwag MSE DHCP vnat Portal Virtual Machines Virtual Virtual Switch Switch Controler Virtual Switch vsphere vsphere ESXi host 1 L2 Trunks ESXi host 2 Physical Switches 30

31 Service Instances across a cluster ESXi Host - 1 ESXi Host - 2 ESXi Host - 3 ESXi Host - 4 Service Instance 1 DHCP vwlc MSE DNS vnat vwag Portal Service Instance 2 Portal MSE vnat DHCP DNS vwag vwlc Service Instance 3 DHCP DNS Portal MSE vwlc vwag vnat Virtual Switch Virtual Switch Virtual Switch Virtual Switch Ware Cluster 31

32 Fault tolerance for service instances ESXi Host - 1 ESXi Host - 2 ESXi Host - 3 ESXi Host - 4 Service Instance 1 DHCP vwlc MSE DNS vnat vwag Portal Fault Tolerance DHCP DNS Portal MSE vwlc vnat vwag Virtual Switch Virtual Switch Virtual Switch Virtual Switch Ware Cluster Only s with a single vcpu can be made fault tolerant Virtual hard disk should be set up as Thick eager zeroed Only 4 Fault Tolerant s per ESXi host 32

33 Wi-Fi service instances Location -1 Service Instance - 1 DNS Mgmt Location -2 Backhaul Service Instance - 2 SP Network Service Instance - 3 AAA Location -3 ESXi Host1 ESXi Host2 ESXi Host3 ESXi Host4 Ware Cluster Consistent subscriber experience Centralized asset management Customized portal experience Shared IP address space Separate administration domain Custom billing / reporting Centralized asset management Fault isolation / troubleshooting Rapid cookie cutter deployment Opportunity to customize Self service management portals License based solution 33

34 Web-Authentication with DNS redirect Client AP WLC AAA DHCP WAG PORTAL Association (1) DNSMasq Association (2) DHCP Discover (3) DHCP Relay (4) DHCP Offer (5) DHCP Request / ACK (6) DNS Query (7) DNS Response (9) Portal IP address HTTP Request (10) HTTP Response (11) Web Login page Unauthenticated Session DNS REDIRECT (8) User Login (12) RADIUS Auth (14) RADIUS CoA (13) CoA Ack (15) User profile Cached Authenticated Session DNS redirection removed 34

35 Summary The backdrop to NfV and all network evolution is increasing amount of network traffic Both vendors & SP s are experimenting with NfV Caution: NfV doesn t mean EoL of your production hardware NfV: some functions are obvious / large spectrum are dependent on SP and their architecture A hybrid network environment consisting of blend of custom NFs and Virtualized NFs (VNFs)

36 References ETSI - SDN Central - Cisco Live

37 Content Contributors Piyush Patel Ravindra Shankar Simon Spraggs 37

38 Thank you.