新 一 代 軟 體 定 義 的 網 路 架 構 Software Defined Networking (SDN) and Network Function Virtualization (NFV)

Transcription

1 新 一 代 軟 體 定 義 的 網 路 架 構 Software Defined Networking (SDN) and Network Function Virtualization (NFV) 李 國 輝 客 戶 方 案 事 業 群 亞 太 區 解 決 方 案 架 構 師 美 商 英 特 爾 亞 太 科 技 有 限 公 司 1

2 Legal Disclaimer INFORMATION IN THIS DOCUMENT IS PROVIDED IN CONNECTION WITH INTEL PRODUCTS. NO LICENSE, EXPRESS OR IMPLIED, BY ESTOPPEL OR OTHERWISE, TO ANY INTELLECTUAL PROPERTY RIGHTS IS GRANTED BY THIS DOCUMENT. EXCEPT AS PROVIDED IN INTEL'S TERMS AND CONDITIONS OF SALE FOR SUCH PRODUCTS, INTEL ASSUMES NO LIABILITY WHATSOEVER AND INTEL DISCLAIMS ANY EXPRESS OR IMPLIED WARRANTY, RELATING TO SALE AND/OR USE OF INTEL PRODUCTS INCLUDING LIABILITY OR WARRANTIES RELATING TO FITNESS FOR A PARTICULAR PURPOSE, MERCHANTABILITY, OR INFRINGEMENT OF ANY PATENT, COPYRIGHT OR OTHER INTELLECTUAL PROPERTY RIGHT. Intel may make changes to specifications and product descriptions at any time, without notice. Designers must not rely on the absence or characteristics of any features or instructions marked reserved or undefined. Intel reserves these for future definition and shall have no responsibility whatsoever for conflicts or incompatibilities arising from future changes to them. Intel processor numbers are not a measure of performance. Processor numbers differentiate features within each processor family, not across different processor families. See for details. The products described in this document may contain design defects or errors known as errata which may cause the product to deviate from published specifications. Current characterized errata are available on request. The code names presented in this document are only for use by Intel to identify products, technologies, or services in development, that have not been made commercially available to the public, i.e., announced, launched or shipped. They are not "commercial" names for products or services and are not intended to function as trademarks. Contact your local Intel sales office or your distributor to obtain the latest specifications and before placing your product order. Copies of documents which have an order number and are referenced in this document, or other Intel literature may be obtained by calling or by visiting Intel's website at No computer system can provide absolute security under all conditions. Intel Trusted Execution Technology (Intel TXT) requires a computer with Intel Virtualization Technology, an Intel TXTenabled processor, chipset, BIOS, Authenticated Code Modules and an Intel TXT-compatible measured launched environment (MLE). Intel TXT also requires the system to contain a TPM v1.s. For more information, visit Requires a system with Intel Turbo Boost Technology. Intel Turbo Boost Technology and Intel Turbo Boost Technology 2.0 are only available on select Intel processors. Consult your PC manufacturer. Performance varies depending on hardware, software, and system configuration. For more information, visit Intel Virtualization Technology requires a computer system with an enabled Intel processor, BIOS, and virtual machine monitor (VMM). Functionality, performance or other benefits will vary depending on hardware and software configurations. Software applications may not be compatible with all operating systems. Consult your PC manufacturer. For more information, visit The original equipment manufacturer must provide TPM functionality, which requires a TPM-supported BIOS. TPM functionality must be initialized and may not be available in all countries. The TCO or other cost reduction scenarios described in this document are intended to enable you to get a better understanding of how the purchase of a certain products, including Intel products, combined with a number of situation-specific variables, might affect your future cost and savings. Circumstances will vary and there may be unaccounted-for costs related to the use and deployment of a given product. Nothing in this document should be interpreted as either a promise of or contract for a given level of costs. All products, computer systems, dates and figures specified are preliminary based on current expectations, and are subject to change without notice. Intel Xeon, Intel Atom, Intel Xeon Phi, Intel Core i5, Intel Trusted Execution Technology (Intel TXT), Intel Advanced Encryption Standard New Instructions (Intel AES-NI), Intel Advanced Vector Extensions (Intel AVX), Intel Open Network Platform, Intel Lustre*, Intel SSD, Intel Ethernet lers and the Intel logo are trademarks of Intel Corporation or in the US and other countries. Copyright 2013, Intel Corporation. All rights reserved. * Other brands and names may be claimed as the property of others. 2

3 Agenda Why SDN/NFV? What is SDN/NFV? Intel s solution to enable SDN/NFV 3

4 Today s Network Infrastructure External Clients Mobile Clients ISP A Router Intrusion Detection Routers/SWs Web Services Firewall SSL Acceleration Local Caching Cloud Services Internet ISP B Router Stateful Firewalls Load Balancer Stateful Firewalls WAN Back End Servers and Storage Fixed Function Hardware based on Multiple Disparate Architectures 4

5 Software Defined Infrastructure: The Evolution of Infrastructure A world where the application defines the system One application per system One application per virtual system Applications DEFINE the system Compute Application Network Application APP A APP B APP C VM Manager Application A Application B Storage Application STORAGE Resource Pool NETWORK COMPUTE Traditional Hardware Abstracting the Hardware Abstracting the Datacenter 5

6 Software Defined Infrastructure Services Delivery Application A Application B Application C Application D SERVICE ASSURANCE Policies and intelligent monitoring trigger dynamic provisioning and service assurance as applications are automatically deployed and maintained Infrastructure Attributes Resource Pool Orchestration Software Orchestration Software Power Performance Security Thermals Utilization Location PROVISIONING MANAGEMENT Orchestration provisions, manages and optimally allocates resources based on the unique requirements of an application POOLED RESOURCES Network, Storage and Compute elements are abstracted into resource pools Storage Network Compute 6

7 SDN vs NFV Software Defined Networking (SDN) Network Function Virtualization (NFV) Data Data Data Data Plane Plane Plane Plane Data Data SDN ler OpenFlow Data Data Standard Server Based on three elements 1. Separation of control and data 2. Centralized management 3. Programmable network behavior via well-defined interfaces Allow network administrators to easily manage and program network services through the abstraction of lower level functionality and decoupling of network control and forwarding functions Leverages standard virtualization technology Consolidate many network equipment types onto industry standard servers, switches & storage Accelerate development and deployment of interoperable solutions Move away from proprietary, and increasingly costly, hardwarebased appliances that inhibit the rollout of new revenue-earning network services and constrain innovation --ETSI NFV ISG 7

8 SDN + NFV Driving Architectural Transformation From This, Today Traditional networking topology Monolithic vertical integrated box TEM proprietary solutions Firewall ADC Router To This, the Vision Networking within VMs Standard x86 server hardware Open SDN standard solutions Firewall VM ADC VM Router SDN + NFV Vendor A Vendor B Vendor C Hypervisor & Orchestrator > _ TEM/OEM Proprietary OS ASIC, DSP, FPGA, ASSP IA Processor NIC Silicon Chipset Acceleration Silicon Open Software 8

9 Open Source, Open Standards, A New Dawn in Networking Network OS of Choice X86 + IO & High Performance Fabrics 9

10 NFV/SDN Environment Orchestration Network Apps North Bound APIs ler ler South Bound APIs Node Node Node Node Node Node Top of Rack Network Appliances Micro Servers RSA Virtual Servers NFV 10 *Other brands and names are the property of their respective owners

11 Intel s Path and Roadmap Driving Efficient Workload Consolidation Four Workloads. One Architecture Application Processing Processing Intel Xeon Processor E Chipset 5520 Intel Xeon E Communications Chipset 8920 Intel Xeon E v2 + Communications Chipset Future Platforms: Glen Forest River Forest Packet Processing NPU/ASIC Intel QuickAssist Technology Intel Data Plane Development Kit HyperScan Signal Processing DSP DSP Intel Media Software Development Kit 1 Intel Transcede SoCs 2 Intel System Studio DSP DSP One Instruction Set Architecture One Tool Suite Multiple Opportunities 1. Intel Media Software Development Kit requires an Intel Xeon E3 or Intel Core processor (processor graphics) 2. More information can be found in product brief ( 11 All products, computer systems, dates and figures specified are preliminary based on current expectations, and are subject to change without notice.

12 Expanding Moore s Law to Networking Throughput 220 Gbps* IVB-EP 2S Intel Data Plane Development Kit 160 Gbps* SNB-EP 2S Intel Data Plane Development Kit 24 Gbps* Nehalem 1S Intel Forwarding Stack 40 Gbps* Westmere 1S Intel Forwarding Stack 80 Gbps* SNB-EP 1S Intel Data Plane Development Kit Future 1: Intel internal estimate 2: Intel Internal measurement of packet processing performance using Intel Xeon processors. Software and workloads used in performance tests may have been optimized for performance only on Intel microprocessors. Performance tests, such as SYSmark and MobileMark, are measured using specific computer systems, components, software, operations and functions. Any change to any of those factors may cause the results to vary. You should consult other information and performance tests to assist you in fully evaluating your contemplated purchases, including the performance of that product when combined with other products. For more information go to intel.com/performance 12

13 Intel Data Plane Development Kit (intel DPDK) Enabling v and vrouter Innovation on Moore s Law Intel DPDK Accelerated Open v Openv.org SDN Software Commercial Virtual es & Routers Memory Management *White Box represents Open Source virtual switch projects Queue Ring Functions Flow Classification NIC Poll Mode Drivers 01.org DPDK.org 13 *Other brands and names are the property of their respective owners

14 ORCHESTRATION Intel Contributions* to OpenStack for SDN and NFV Monitoring/Metering (Ceilometer) Metrics Object Store (Swift) Image Store (Glance) OVF Meta-Data Import User Interface (Horizon) Compute (Nova) Trusted Compute Pools (Extended with Geo Tagging) Enhanced Platform Awareness Intelligent Workload Scheduling UX UX UX Block Storage (Cinder) Network Services (Neutron) Intel DPDK v Advanced Services in VMs VPN-as-a-Service (with Intel QuickAssist Technology) Key Encryption and Management Enhanced Platform Awareness PCIe SR-IOV Accelerators (Havana) Intelligent Workload Scheduling Metrics (Havana) CPU Feature Detection (Icehouse) OVF Meta-Data Import (Juno) Key Service (Barbican) Security Trusted Compute Pools (Folsom) Trusted Compute with Geo Tagging (Icehouse) Key Management (Icehouse) Networking VPN-as-a-Service with Intel QuickAssist Acceleration (Icehouse) Advanced Services in VMs (Icehouse/Juno) Intel DPDK Open v (Juno) 14 *Other brands and names are the property of their respective owners

15 Intel SDN/NFV Solutions and Ecosystem Intel Architecture Intel Network Acceleration Intel Open Source Software Solutions Intel Commercial Software Solutions Intel VT-X Intel VT-d Intel Data Direct I/O Intel Communications Chipset w/quick Assist Intel Ethernet w/ SRIOV Intel Ethernet Intel Data Plane Development Kit (DPDK) Intel DPDK Accelerated OvS Intel Open Network Software Intelligent Network Platform Open Virtualization Profile Carrier Grade Comms Server Intrusion Protection System NG Firewall Intel Open Network Platform Reference Architectures Intel Network Builders ( Intel ONP Server Intel ONP 15

16 Summary NFV and SDN are driving the network transformation Global opportunities and challenges across Cloud, Telecom and Enterprise Open Source and Open Standards are vital to unlocking the transformation Intel is investing with partners across the industry to lead the transformation 16

17 17