SDN Techtorial. with Hands-on Lab. Follow us on Twitter at #CiscoConnect_T. Toronto, Canada May 30, 2013

Transcription

2 Azeem Suleman Lead Solutions Architect Cisco Advanced Services Talha Hashmi Senior Manager, Unified Infrastructure DC Practice Cisco Advanced Services 2012 Cisco and/or its affiliates. All rights reserved. Cisco Connect 2

3 Agenda 1. SDN Overview Challenges Definition 2. Cisco Open Network Environment (ONE) Framework Agents and Controller Platform APIs Network / Virtual Overlays BREAK 4. Use Cases 3. Hands On Lab 2012 Cisco and/or its affiliates. All rights reserved. Cisco Connect 3

5 What is SDN? SDN

6 An open solution for VM mobility in the Data-Center A way to reduce the CAPEX of my network and leverage commodity switches A solution to build virtual topologies with optimum multicast forwarding behavior A way to optimize link utilization in my network enhanced, application driven routing A means to scale my fixed/mobile gateways and optimize their placement A way to distribute policy/intent, e.g. for DDoS prevention, in the network A platform for developing new control planes A solution to automated network configuration and control A means to get assured quality of experience for my cloud service offerings A way to optimize broadcast TV delivery by optimizing cache placement and cache selection A way to configure my entire network as a whole rather than individual devices An open solution for customized flow forwarding control in and between Data Centers A solution to build a very large scale layer-2 network Develop solutions at software speeds: I don t want to work with my network vendor or go through lengthy standardization. A means to do traffic engineering without MPLS A way to build my own security/encryption solution A solution to get a global view of the network topology and state A way to scale my firewalls and load balancers Simplified Operations Enhanced Agility New Business Opportunities 2012 Cisco and/or its affiliates. All rights reserved. Cisco Connect 6

7 open standard that enables researchers to run experimental protocols in campus networks. Provides standard hook for researchers to run experiments, without exposing internal working of vendor devices This is not just about OpenFlow-related protocols, which is neither an architecture nor is it comprehensive regarding forwarding needs. This is about solving real customer problems Here are the real problems! We have been solving them all along! Cisco and/or its affiliates. All rights reserved. Cisco Connect 7

8 Customer Care-Abouts Cloud Video Mobility Data Deluge Agility Rapid on-boarding Broader VM mobility Simplification Automation Reduce operational complexity Business Value Visibility S. L. A. Differentiate / Monetize IS THE NETWORK READY? 2012 Cisco and/or its affiliates. All rights reserved. Cisco Connect 8

9 Customer Insights: Network Programmability Research/ Academia Experimental OpenFlow/SDN components for production networks Massively Scalable Data Center Customize with Programmatic APIs to provide deep insight into network traffic Cloud Automated provisioning and programmable overlay, OpenStack Service Providers Policy-based control and analytics to optimize and monetize service delivery Enterprise Virtual workloads, VDI, Orchestration of security profiles Hybrid clouds Network Slicing Network Flow Management Scalable Multi-Tenancy Agile Service Delivery Private Cloud Automation Diverse Programmability Requirements Across Segments Most Requirements are for Automation & Programmability 2012 Cisco and/or its affiliates. All rights reserved. Cisco Connect 9

10 Slow Towards Programmatic Interfaces to the Network Approaching Today s Application Developer Dilemma Many Network Applications today: OTT for speed and agility App Fast App Avoid network interaction complex and slow innovation New Model for Network Applications Keep speed and agility New Full-duplex interaction with the network across multiple planes extract, control, leverage network state CLI(s) Service Edge Service Core Service CPE Appliance Service Mobile A New Programming Paradigm is Needed 2012 Cisco and/or its affiliates. All rights reserved. Cisco Connect 10

11 Re-assessing the Network Control Architecture Evolving Design Constraints on the Control Plane Evolving Design Constraints on the Control Plane Generic Network Internet Domain specific networks (DC, SP Access/Agg, Branch,..) Operate w/o communication guarantees distributed system with arbitrary failures, nearly unbounded latency, highly variable resources, unconstrained topologies Optimize for reliability Domain specific qualities of these networks relax or evolve network design constraints Well defined topologies, little variety in network device-types, no arbitrary changes in connected end-hosts,.. Optimized for reliability *and* domain specific performance metrics Solutions for domains differ: DC!= WAN, TOR!= PE 2012 Cisco and/or its affiliates. All rights reserved. Cisco Connect 11

12 Towards the Open Network Environment for SDN Evolve the Control-Plane Architecture Application Software Infrastructure Software Embedded Software Fully Distributed Control Plane: Optimized for reliability Hybrid Control plane: Distributed control combined with logically centralized control for optimized behavior (e.g. reliability and performance) 2012 Cisco and/or its affiliates. All rights reserved. Cisco Connect 12

14 Open Network Environment (ONE) Approaching a Definition Applications (End-User and System Applications) Resource Orchestration, Management Programmatic Interfaces Virtual and Physical Infrastructure 2012 Cisco and/or its affiliates. All rights reserved. Cisco Connect 14

15 Open Network Environment (ONE) Introduced at Cisco Live San Diego 2012 Applications (End-User and System Applications) Resource Controllers Orchestration, and Agents Management Programmatic Platform Interfaces APIs Virtual Virtual/Overlay and Physical Infrastructure Networks 2012 Cisco and/or its affiliates. All rights reserved. Cisco Connect 15

16 Open Network Environment (ONE) The Next Step: Infrastructure Software Platform Applications (End-User and System Applications) Application Software Resource Orchestration & Management API API API Infrastructure Service Functions Orchestration Functions Management Functions Infrastructure Software API Elementary Infrastructure Functions (Controller-layer) API and Agents Physical and Virtual Infrastructure (Overlays and Network Function Virtualization) Embedded Software 2012 Cisco and/or its affiliates. All rights reserved. Cisco Connect 16

17 ONE from a Software Architecture Standpoint ONE from a Software Architecture Standpoint Integrating Network and Software Architecture Principles Software Architecture 4+1 view model Open Network Environment Logical View Features, Functions, Classes, Abstractions, Development view SDKs, Packages, Libraries, Tools, Programmatic APIs Resource Orchestration - Agents and Controllers Network/ Virtual Overlays Scenarios Objectives - Scenarios/Use-Cases Process View Architectures, Processes, Interactions, Objects, Agents, Controllers,.. Physical View Deployment, Hosting, Topology, Connectivity, Overlay, Development View Logical View Process View Physical View See also: Cisco and/or its affiliates. All rights reserved. Cisco Connect 17

18 Full-Duplex, Multi-Layer/Multi-Plane APIs APIs Management Orchestration Network Services Harvest Network Intelligence Workflow Management Network Configuration & Device Models,.. L2-Segments, L3-Segments, Service-Chains Multi-Domain (WAN, LAN, DC) Topology, Positioning, Analytics Multi-Layer Path Control, Demand Eng. Program for Optimized Experience Control Forwarding Device/Transport Routing, Policy, Discovery, VPN, Subscriber, AAA/Logging, Switching, Addressing,.. L2/L3 Forwarding Control, Interfaces, Tunnels, enhanced QoS,.. Device configuration, Life-Cycle Management, Monitoring, HA, Cisco and/or its affiliates. All rights reserved. Cisco Connect 18

19 Full Duplex, Multi-Layer/Multi-Plane APIs Industry Examples Management Orchestration Network Services Control Forwarding Device/Transport Workflow Management Network Configuration & Device Models,.. L2-Segments, L3-Segments, Service-Chains Multi-Domain (WAN, LAN, DC) Topology, Positioning, Analytics Multi-Layer Path Control, Demand Eng. Routing, Policy, Discovery, VPN, Subscriber, AAA/Logging, Switching, Addressing,.. L2/L3 Forwarding Control, Interfaces, Tunnels, enhanced QoS,.. Device configuration, Life-Cycle Management, Monitoring, HA,.. Network Models - Interfaces (OMI) OpenStack, Quantum API Positioning (ALTO) Path Control (PCE) Interface to the Routing System (I2RS) OpenFlow Protocol Network Function Virtualization (NfV) 2012 Cisco and/or its affiliates. All rights reserved. Cisco Connect 19

20 Not all Networking APIs are created the same Classes of Networking APIs following their Scope Classify Networking APIs based on their scope API Scopes: Location independent; Area; Particular place; Specific device Alternate approaches like device/network/service APIs difficult to associate with use cases Location where an API is hosted can differ from the scope of the API Different network planes could implement different flavors of APIs, based on associated abstractions Utility Example: Get Auth, Publish Log,.. Scope: Location independent Area/Set Example: Domain, OSPF-area,.. Scope: Group/Set/Area Place in the Network Example: Edge Session, NAT Scope: Specific place/location Element Example: interface statistics Scope: Specific element 2012 Cisco and/or its affiliates. All rights reserved. Cisco Connect 20 20

21 Programmatic Network Access Agents as Flexible Integration Vehicles Application Frameworks, Management Systems, Controllers,... Protocols onepk OpenFlow I2RS PCEP BGP-LS Ouantum OMI Puppet Netconf Management Orchestration Network Services Control Forwarding BGP Diameter Radius OpenFlow Agent I2RS Agent PCEP Agent BGP-LS Agent Ouantum Agent OMI Agent Puppet Agent Netconf Agent Device onepk API & Agent Infrastructure Operating Systems IOS / NX-OS / IOS-XR 2012 Cisco and/or its affiliates. All rights reserved. Cisco Connect 21

22 Cisco onepk (one Platform Kit) Rapid Application Development DEVELOPER ENVIRONMENT Language of choice Programmatic interfaces Rich data delivery via APIs COMPREHENSIVE SERVICE SETS Better apps New services Monetization opportunity Python Java C REST Data Path Policy Element Route Discovery Utility Developer Others DEPLOY On a server blade On an external server Directly on the device CONSISTENT PLATFORM SUPPORT IOS NX-OS IOS-XR IOS NX-OS IOS-XR 2012 Cisco and/or its affiliates. All rights reserved. Cisco Connect 22

23 onepk and Agent Framework Enabling specific solutions/protocols (OpenFlow, IRS, ) on top of onepk Application Framework / Controller Agent Communication Component Solution defined protocol (e.g. OpenFlow) Network Device Agent Implementation (e.g. OpenFlow) onepk APIs Presentation Agent Framework onepk API Infrastructure IOS / XE NX-OS IOS-XR 2012 Cisco and/or its affiliates. All rights reserved. Cisco Connect 23

24 Orchestration: Agents and Controllers Consolidate State Across Multiple Network Elements APIs Some network delivered functionality benefits from logically centralized coordination across multiple network devices Agent APIs Controller Agent APIs Functionality typically domain, task, or customer specific Typically multiple Controller-Agent pairs are combined for a network solution Agent APIs Agent APIs Controller Process on a device, interacting with a set of devices using a set of APIs or protocols Controller Offer a control interface/api Analyze Agent Process or library on a device, leverages device APIs to deliver a task/domain specific function Gather Act Controller-Agent Pairs offer APIs which integrate into the overall Network API suite Notify Agent Observe 2012 Cisco and/or its affiliates. All rights reserved. Cisco Connect 24

25 Orchestration: Controllers and Agents Task Specific Solutions and Generic Controller Infrastructure Session Border Control Wireless LAN Control Path Computation Generic Controller Infrastructure SIP-proxy/ SBC WLC PCE App App App Control Programs leveraging the ONE Controller ONE Controller H.248 CAPWAP PCEP SBC B2BUA SBC B2BUA SBC B2BUA AP AP AP PCC PCC PCC OF-Agent OF-Agent OF-Agent onepk onepk onepk Networking already leverages a great breath of Agents and Controllers Current Agent-Controller pairs always serve a specific task (or set of tasks) in a specific domain System Design: Trade-off between Agent-Controller and Fully Distributed Control Control loop requirements differ per function/service and deployment domain As loose as possible, as tight as needed Latency, Scalability, Robustness, Consistency, Availability 2012 Cisco and/or its affiliates. All rights reserved. Cisco Connect 25

26 Headend Orchestration Content, Applications, Resources Where You Need Them Virtualized Functions Consumer Apps DATA CENTER Compute Storage Pod Aggregation Backbone Network Element Network Element Off-Net Provider Video Processing Net Services Billing Svc Delivery Compute Storage Regional Transport Router Compute Storage Transport Router Compute Storage ISP/ Partners Origin Server Encryption Pod Network Element Network Element Transcode Device Mgmt Net Services Compute Storage Enable optimal resource usage Enable higher quality services with increased service velocity Access Transport Router Compute Ethernet Business Storage Fiber PON On the Go HFC Home Transport Router Compute Storage Off-Net Customers Services hosted in Central Data-Centers and Data-Centers in the PoP 2012 Cisco and/or its affiliates. All rights reserved. Cisco Connect 26

27 Orchestration Service Cross-Connect Network-Ramp to Cloud Services Take request to provide services to a given Cloud Service Control Traffic Routing traffic from Edge to DC Provision and manage services in the DC Service Request Services Cross Connect Traffic flow Service SP Network Data Center 2012 Cisco and/or its affiliates. All rights reserved. Cisco Connect 27

28 Orchestration Elastic DC Services Route Traffic from Edge router into a DC switch Load Balance across a set of service instances Add more service instances when needed Remove services when not needed Services Controller Load Controller VM Controller Service Service Traffic flow Load Balancer Service Service Load Monitor SP Network Data Center Service 2012 Cisco and/or its affiliates. All rights reserved. Cisco Connect 28

29 Orchestration & Control Cisco Extensional Network Controller (XNC) Platform for generic control functions state consolidation across multiple entities Cisco Apps Customer Apps ISV Apps Open Src Apps REST OSGi Current Showcase Examples Flexible Network Partitioning and Provisioning ( Slicing ) Network Troubleshooting Custom Routing Java-based Advanced Functionality Core Functionality onepk OpenFlow Built-in GUI for Management Network Infrastructure

30 What is Project OpenDayLight? OpenDaylight is an open source project under the Linux Foundation with the mutual goal of furthering the adoption and innovation of Software Defined Networking (SDN) through the creation of a common market-supported framework. wiki.opendaylight.org 2012 Cisco and/or its affiliates. All rights reserved. Cisco Connect 30 30

31 Deployment HA Platform Physical, Virtual, Cloud Evolution Physical, Virtual, Cloud Evolution PURPOSE BUILT COMMON HARDWARE VIRTUAL MACHINES - NfV ELASTIC CLOUD COMMON PLATFORM: Consistency of Policy, Features, Security, Management HYPERVISOR Hardware Software Redundancy Resiliency Manual Automatic Evolve: Engineering, Operations, Architecture

32 Physical and Virtualized Network Functions Examples Nexus/Catalyst ASR/ISR/CRS Identity/Policy - ISE Firewall - ASA vswitch (Nexus 1000v) vrouter (CSR1000v) vise vfw (ASA 1000v) WAAS Security - ESA Wireless LAN Controller Security Gateway vwaas vesa vwlc VSG Video Cache Web Security - WSA Network Analysis - NAM IOS/XR RR vvideocache vwsa vnam vroutereflector

33 3 Overlay and Transport Networks Overlay Transport Network Host Hybrid Instance Scale VM Mobility & LAN Extension Agile Operations Hypervisor-agnostic (ESX, HyperV, KVM, Xen,..) Network / Host / Hybrid NfV Service Chains Service Placement / Topology Multi-Segment Integration (DC-WAN) OAM Correlate Overlay and Transport Traffic Forwarding Control (Flow-Steering, Multicast) Speeds & Feeds (e.g. low latency forwarding) Fast Convergence (50ms), Segment Routing Statistics / Events (e.g. latency measurement) Buffering / Scheduling / QoS System resiliency

34 Virtual Overlay Networks Example: Virtual Overlay Networks and Services with Nexus 1000V Large scale L2 domains: Tens of thousands of virtual ports OpenStack Quantum API REST API Common APIs Incl. OpenStack Quantum API s for orchestration Nexus 1000V VXLAN Gateway Physical (VLAN) Network Scalable DC segmentation and addressing VXLAN ASA 1KV vwaas VSG Virtual Services Any Hypervisor ASA 55xx Virtual service appliances and service chaining/traffic steering Tenant 1 Tenant 2 Virtual Workloads Tenant 3 Physical Workloads VSG (cloud-ready security), vwaas (application acceleration), vpath Multi-hypervisor platform support: ESX, Hyper-V, OpenSource Hypervisors Physical and Virtual: VXLAN to VLAN Gateway 2012 Cisco and/or its affiliates. All rights reserved. Cisco Connect 34

35 Virtual Overlay Networks Example: Virtual Overlay Networks and Services with Nexus 1000V VM VM VM VM VM VM VM VM VM VM VM VM VM VM VM VM Nexus 1000V VSM Nexus 1000V VEM VMware vsphere Nexus 1000V VSM Nexus 1000V VEM WS 2012 Hyper-V Nexus 1000V VSM Nexus 1000V VEM KVM Nexus 1000V VSM Nexus 1000V VEM XenServer VMware vcenter SCVMM OpenStack OpenStack Consistent architecture, feature-set & network services ensures operational transparency across multiple hypervisors.

36 Cloud technology stacks Multi-Hypervisor and Multi-Orchestration Cloud Portal & Orchestration Virtual Network Infrastructure Hypervisor Compute Platform Physical Network Storage Platform Multi-orchestration Virtual Service Appliances Virtual Switch / Virtual Router Multi-Hypervisor UCS Unified Fabric & Service Appliances Storage Eco-System 2012 Cisco and/or its affiliates. All rights reserved. Cisco Connect 36

37 Network Service becomes a first class citizen in cloud computing and automation Enable full automation of Infrastructure Provisioning and Control including the Network Cloud Automation: Automation of Compute, Network, Storage resources Apply to automate all types of networks: physical devices, virtual devices, overlay/non-overlay networks Orthogonal to whether SDN concepts are leveraged IaaS, PaaS, XaaS, Auto-scaling Apps Innovation in the design of cloud-based applications Cloud Platform API Interface Resource Abstractions Compute, Storage and Networking Infrastructure 2012 Cisco and/or its affiliates. All rights reserved. Cisco Connect 37

38 Network Service becomes a first class citizen Example: OpenStack with Quantum for Network Automation Portal (Horizon) Applications Cloud Platform - Developer API Other Services Compute (Nova) Storage (Swift) Network (Quantum) Identity (Keystone) Servers Disks Networks Folsom Release Images (Glance) Compute, Network, Storage Devices Physical and Virtual Openstack is for infrastructure automation orthogonal to whether SDN concepts are applied 2012 Cisco and/or its affiliates. All rights reserved. Cisco Connect 38

39 Quantum Architecture Extensible allowing vendor specific capabilities Quantum API API Extensions Quantum Service L2/L3 network abstraction definition and management Device and service attachment framework Does NOT implement any abstractions Quantum Plug-in API Vendor/User Plug-In Maps abstraction to implementation on physical network Makes all decisions about *how* a network is implemented Can provide additional features through API extensions

40 Industry Standards && Forums SDN WG Overlay Networking Projects Technical Advisory Group, Working Groups: Config, Hybrid, Extensibility, Futures/FPMOD/OF2.0 Open Network Research Center at Stanford University Open Source Cloud Computing project ETSI SGI on Network Function Virtualization Overlay Working Groups: NVO3, L2VPN, TRILL, L3VPN, LISP, PWE3 API Working Groups/BOFs NETCONF, ALTO, CDNI, XMPP, SDNP, I2AEX Controller Working Groups: PCE, FORCES New working group: I2RS Interface to the Routing System Initiatives: Quantum (Folsom release) Donabe 2012 Cisco and/or its affiliates. All rights reserved. Cisco Connect 40 40

41 Summary: Open Network Environment Leverage Network Value Workflow and Intent Applications Network Intelligence, Guidance Application Software New Businesses SaaS + Integration Operations BI Services Orchestration Policy (Application + Network + Security) Analytics Infrastructure Software Management Orchestration Analytics, Controllers Programmability Network Statistics, States, Objects and Events Embedded Software Route, Switch, Appliance IOS, XR, NXOS, others

44 onepk Use case: Automated Network Provisioning Network OS Management Server Switch Management agent Switch Automate network configuration Use the same process and tools currently in use for servers IPC onepk API Management Agent (onepk Application) Container

45 onepk Use Case Deep Packet Modification onepk Custom Packet Action Packet Modifier Business Problem: Need to modify specific fields within select data packets to achieve a desired network behavior. Data Flow Packet Removal Packet Match onepk Data Path Services Packet Inject Data Flow Packet Modification Algorithm Built Using onepk Modifies Selected Packets Solution: Developer uses onepk to extract, modify and re-insert specific packets using match, modify and forward techniques. Benefits: Quickly and efficiently modify network behavior or traffic flows based on needs. Examples: Special off-box Crypto Packet/flow visibility

46 Use Case: Network Tapping ONE Controller & Nexus Switching Production Network Openflow Analyzer Monitor Network IDS-Green Tool Ports OF Switches (sliced) Network Ports Public Internet 2012 Cisco and/or its affiliates. All rights reserved. Cisco Connect 46

48 Dynamic Bandwidth / QoS Allocation Business Problem Enable superior experience for subscribers which access a particular cloud service Solution Install customer policy (QoS, access control,..) using onepk on key networking elements, e.g. Provider Edge (PE) routers Similarities to broadband Bandwidth on Demand use cases Broadband: Policy controlled on Subscriber- Gateway (BRAS/BNG, GGSN/PGW,..) only Common API like onepk enables control points on all key networking devices Request premium service 3 Policy Server Ingress PE SP Network Customer traffic is getting superior/specific treatment Install customer policy on all key network elements Egress PE Cloud Services 2012 Cisco and/or its affiliates. All rights reserved. Cisco Connect 48

49 Path Computation & Custom-Routing Business Problem Physically diverse active/standby paths Route traffic using non-standard algorithms (e.g. lowest latency, $-cost) Optimize Network Utilization Optimize Placement of new servers PCEP, OF, IRS, CLI L3 IP/MPLS Stateful PCE Demand Admission API ONE Controller onepk PCEP IRS OF Data-Collection Path/Demand Placement Engine Topology Solution On-line, topology aware traffic engineering solution (leveraging PCE path computation element) GMPLS UNI BGP-LS, SNMP, OF, CLI, IRS TL1, IRS, OF Demand Admission API ONE Controller onepk Topology Optical Stateful PCE TL1 IRS OF Path/Demand Placement Engine Data-Collection Topology TL1, BGP-LS Multi-Layer PCE solution 2012 Cisco and/or its affiliates. All rights reserved. Cisco Connect 49

50 Cloud Services Optimization/Automation Business Problem xaas services are manually provisioned, increasing costs and reducing customer satisfaction. Solution Agents running on-box at the customer premises using onepk orchestrate service recommendation and turn-up Cisco and/or its affiliates. All rights reserved. Cisco Connect 50 Cisco Confidential