SDN Building Blocks. Edward Balas Sept 17th, 2014

Transcription

1 SDN Quick Overview Southern Partnership in Advanced Networking Ma; Zekauskas, April 8, 2015 Slide material shamelessly excerpted from the presentajons at the OIN workshop in Pi;sburgh, PA and the GENI Engineering Conference in Arlington VA, both last month

2 Acknowledgement Overview material shamelessy excerpted from the presentajons at the OIN workshop in Pi;sburgh, PA last month. Credit to Ed Balas (and others) of Indiana University h;p://oinworkshop.com ; - > Prior Workshops - > {Pi;sburgh PA} (March 18, ) ; SDN folder Or h;ps://iu.box.com/s/w1156ha08kyhdvrznncfo`5on7ycv47

3 Acknowledgement Internet2 virtualizajon originally presented at the GENI Engineering Conference 22 in Arlington VA (other virtualizajon presentajons available in prior OIN workshops, generally given by Ma;) h;p://groups.geni.net/geni/wiki/gec22agenda/ ExptDevRndTable h;p://groups.geni.net/geni/raw- a;achment/ wiki/gec22agenda/exptdevrndtable/ %20- %20Boyd%20- %20Internet2%20Developer%20Update.pptx

4 SDN Building Blocks Edward Balas Sept 17th,

5 My definition of SDN apps that control networks are decoupled from network equipment consider other information could be cross layer, or external Find better ways to align network to your organization s mission statement 4

6 SDN Drivers Automation improve quality, increase scale Orchestration get customers what they want faster combine network and biz logic Control find special snowflakes and act 8

7 What do you want in Campus? support divergent use case science vs commodity keep security zones separate automation to maintain quality and scale baked in security for reactive protection automation and control are drivers 10

8 Network Function Virtualization traditional network functions moved into a vm and not require physical hardware. allows scaling with your DC i386 stack, because that is what you are using for everything else? could also consider things like VRFs as a way to do this at line rate. 13

9 Service Chaining I have a virtual router, firewall and load balancer build a forwarding pipeline to combine the feature set required for the virtual community RTR FW LoadBalancer srv1 srv2 client 14

10 OpenFlow Specification control forwarding on a switch from external app programs an abstract forwarding table application does not run on route engine TCP session between TLS optional Versions 1.0 and 1.3 Application Controller Switch OpenFlow Event Loop Management Network NorthBound APIs Built in Modules OpenFlow Agent Forwarding Table 21 Port Port Port Port Port Port

11 Matches Action Counters Forwarding Table Model 23

12 Interaction Patterns When does the Controller program the forwarding rules on the switch? 3 basic approaches Proactive Reactive Combined Application Controller Switch OpenFlow Event Loop Management Network NorthBound APIs Built in Modules OpenFlow Agent Forwarding Table 30 Port Port Port Port Port Port

13 SciPass Secure OpenFlow Based Science DMZ Edward Balas July 9,

14

15

16

17 Internet2 Network: Controlling a Slice of the Na6onal Network Eric Boyd Senior Director of Strategic Projects

18

19 I2 Production Service Service User I2 Prototype Service Internet2 Service Taxonomy Implemented Using LHCONE NET+ External Provider Services Dependencies XSEDE GENI? Layer 3 R&E IP and TR-CPS Services I2-Run Service Specific Hardware Connectors GENI Learning Switch ONOS? General Purpose VLAN Service - AL2S SDN Controller ESNET NOAA NVS (Network Virtualization Service) Virtualized Ethernet Switching Hypervisor Ethernet Switches Circuits and Wavelengths - AL1S Fiber & Optical Transport

20 KEY OpenFlow Switch Internet2 Software Stack Experimenter Code EXP APP FOAM STITCHING AGGREGATE OESS UI EXP APP API API API OESS API NSI API GENI Learning Switch MD-OESS NOX OESS NOX NSI OSCARS NSI IDCP OpenFlow FIU FSFW Utah FSFW MAX FSFW OpenFlow OpenFlow FlowSpaceFirewall OpenFlow OpenFlow OpenFlow OpenFlow Switch OpenFlow Switch OpenFlow Switch