network virtualization

Transcription

1 network virtualization and openflow christos kolias network architecture, orange silicon valley ethernet summit, february 21-23, 2012 t

2 Agenda What is Network Virtualization Why Network Virtualization Virtual Networks OpenFlow/SDN FlowVisor Network Auctioning and Net Apps Store VirtualCast net Orange SV Disclaimer: the following constitute my own opinions, thoughts and views and not necessarily those of the company 2

3 Orange, a worldwide presence (OSV), a wholly owned subsidiary of the Orange- France Telecom Group, is the Silicon Valley presence of Orange Internet, Fixed, Mobile, TV provider Orangeis one of the major telcos, in 5 continents, 32countries, 226million customers, 6 million business customers 180,000employees and45.3 bn revenues in

4 Network Virtualization What is network virtualization Optimize efficient use/sharing of resources, e.g., CPU, capacity, spectrum, buffering, memory, storage, routing table, NE ports, topology, in a (seemingly) dedicated fashion Allocate resources dynamically Multiple architectures, protocols, systems, providers Allows multiple, heterogeneous virtual networks (VNs) to operate over the same physical substrate A VN for VoIP, another for IPTV I can run IPv4 on one virtual network and IPv6 on another Use different policies, QoS, security, etc A VN is more than a mere collection of virtual nodes & links VLANs, VPNs and MPLS/tunnels, VRF, VOQ in switching Overlay protocols (XoY, e.g, PWE, PPPoA, PPPoEoA, EoMPLS, L2oL3) 4

5 In effect, infrastructure can be sliced/partitioned network-wide Enforce (traffic) isolation and (resources) independence But resources are finite! So, how can I get one of these slices, on-the-fly? network embedding/mapping (hard) online mapping: requests arrive dynamically lots of constraints no more layering (please!) Advanced topics: slice A B C D CPU BW memory storage FIB topology can I dice my slice? can I splice my slices? can I treat a number of slices as an aggregate (class) Different networks may require different virtualization techniques (as to address different problems) 5

6 Why Network Virtualization Enables dynamic environment Handle on-demand requests, provisioning (temporal) Workload distribution Load Balancing (spatial) Can bind separate physical switches into one virtual switch Multi-tenancy, domain isolation. Scaleability. Decouple network services/functionality from underlying hardware and operating system Hardware independence Programmatic platform Hides network complexity. Flattens network Server virtualization ultimately needs network virtualization Live Migration of VMs across network boundaries Virtualization aware networks What about running multiple network OS on same hardware? Cloud services (almost) necessitate network virtualization 6

7 Issues architecture/design instantiation efficiency/flexibility scalability granularity volatility security compatibility manageability billing regulatory/legal Solutions customization programmability layering brokering/monitoring (self) morphing (dynamic configurability) centralization 7

8 Virtual Networks Virtual nodes (virtual switches/routers) and links +software + management tools End-to-end virtualization of the network. Hundreds/thousands of VNs should be able to create/deploy them dynamically Topology/network complexity places lots of constraints Evolution (or extinction) of VPNs, VLANs, MPLS? VN 1 VN 2 VN 3 Net ANet A VN1 VN2 VN2 Net Net B B Net C Net C 8

9 Network Virtualization logical view [source: The 4WARD Project] 9

10 VXLAN (VirtualeXtensibleLAN): uses 24-bit identifier to scale up to 16M i/f s; beyond L2 domain DCB (Data CenterBridging): extends L2 switching with (some) performance guarantees: b/w allocation, QoS treatment DCE (Data Center Ethernet) CEE (Convergence Enhanced Ethernet) VEPA (Virtual Ethernet Port Aggregation) EVB (Ethernet Virtual Bridging) VEB (Virtual Ethernet Bridge) SPB (Shortest Path Bridging) VN-Tag, 802.1BR VN-GRE vswitch(virtual Switch): software switch to run in a VMWare environment, Cisco Nexus 1000V virtual switch, IBM 5000V DVS OpenFlow/SDN Open vswitch: open source multilayer virtual switch, open to programmatic extension & control using OpenFlow(Nicira) 10

11 Network of the Future Network Can Today Network Virtualization enable a Network OS? Network OS Feature Feature Operating System Specialized Simple Packet Forwarding Hardware Feature Operating System Feature Feature Operating System Feature Specialized Simple Packet Forwarding Hardware Feature Operating System Feature Specialized Simple Packet Forwarding Hardware switch/router Feature Feature Specialized Simple Packet Forwarding Hardware Operating System Specialized Simple Packet Forwarding Hardware 11

12 Software-Defined Networking (SDN) Users can define (their) traffic flows and decide how these are treated in the network People want to control their own network It is the economics, stupid Installing small piece of firmware, users get direct access to the hardware 12

13 OpenFlow/SDN OpenFlow: an implementation of the clear decouplingof the slow path (control plane) and fast path (data plane) the abstraction of the control plane creates a logical map of the network OpenFlow provides for communication path between controller and data plane network programmability CONTROL PLANE ROUTING SECURITY intelligent flow management TE It is all about empowering the user/administrator/ operator giving them more control OpenFlow/SDN supports customer s definition of virtual networks; define your own rules/policies SIMPLE PACKET FORWARDING SIMPLE PACKET FORWARDING SIMPLE PACKET FORWARDING LOAD SECURITY BALANCING SDN (control, programmability, management, network virtualization) Open interface to hardware e.g., OpenFlow SIMPLE PACKET FORWARDING software-defined network SIMPLE PACKET FORWARDING DATA PLANE 13

14 The Power of OpenFlow/SDN Ability to runand provisionnew, end-to-end tailored services & apps on top of hardware Programmable platform brings elasticity/dynamicity into network Couples the intelligence/agility of software with the speedof hardware Unified method for traffic engineering, network management. Open API Build Your Own Router, FW, LB, DPI It can change the way we design systems & networks If packetdestined to IPv6 rewrite its IPv4 header If pkt_src_ip_addr = send packet to port 2 (my ipad) else send packet to port 7 (my TV) If pkt_dst_ip_addr = , calculate flow_rate if flow_rate> 100 kbps send packet to port 3 (WiFi) else if pkt_tos= premium send packet to port 7 (4G) else send packet to port 8 (3G) 14

15 Network Virtualization and OpenFlow/SDN: FlowVisor Due to its network programmability aspect, OpenFlow is a great candidate for implementing network virtualization FlowVisor: a network virtualization layer allows for implementing multiple controllers acts as proxy between switches and controllers ensures slice and traffic isolation intercepts packets and decides where forward, eg. controller, switch port FlowVisor architecture not inherently tied to OpenFlow App App App App App App Mobile Voice IPTV OpenFlow (Controllers) Network Virtualization (eg. FlowVisor) What happens if there are different flowvisors and controllers? Network Virtualization could be a killer app for OpenFlow 15

16 Network Slicing & OpenFlow/SDN A slice can span across several switches (ports) Each slice is controlled by a single controller Switch s portson that slice appear as a (single) whole switch to controller Creates a virtual topology Slicing policy has to be extensible, flexible and modular allocates resources to slices Nested implementation: controller A slice A slice B switch slice C controller C multiple flowvisors 16

17 isolated slices network virtualization Mobile Feature Feature Feature Feature Feature Feature Network Operating System 1 Network Operating System 2 IPTV Network Operating System 3 Feature Voice Feature Network Operating System 4 Controller 1 Controller 2 Controller 3 Controller 4 OpenFlow (Controller) Virtualization or Slicing Layer (eg. FlowVisor) Simple Packet Forwarding Element Simple Packet Forwarding Element Simple Packet Forwarding Element Open interface to hardware Open interface to hardware Simple Packet Forwarding Element Simple Packet Forwarding Element SDN 17

18 the network as a sliceable/virtualizeable substrate 4G/LTE Backhaul WiFi offload WiMax IMS Set-Top Box SIP Mobile NetVisor Home Gateway IPTV NetVisor VoIP NetVisor DSL NetVisor Network Administrator NetVisor OpenFlow Switch OpenFlow Switch OpenFlow Switch 18

19 Virtual Data Centers Virtual Data Centers (VDCs): using virtualization technologies (i.e., VMware) and cloud solutions to emulate your racks in a highly efficient, optimized environment Make physically dispersed DCs operate logically as one Infrastructure services:virtual servers, virtual storage, virtual networking Infrastructure-as-a-service (IaaS) Multi-tenancy Issues Availability Scalability Containment Security/Trust Bandwidth, power (energy) Business Continuity/Disaster Recovery, Redundancy 19

20 Virtualized Data Centers Virtualized DCs (VdDCs): virtualization of resources/functionality Dynamic resource virtualization & management Can an application to be deployed be virtualized? source: Dell 20

21 Cloud Networking & Services Network programmability and network virtualization can not only enable but also propel cloud networking & services Allocate on-demand networking & computing resources Individualized, customizable network/service slices Flexible, dynamic deployment of services Ease of management SLAs are very important HyperCloud: cloud services based on network virtualization Pay as you go, pay as you grow Shift in economics: OpEx vs CapEx(owning equipment) 21

22 What would be the role of Network Management Further integration/coordination with control plane? administration security provisioning monitoring Out-of-band or in-band? Run across full stack? Support for network virtualization Net Apps Control Plane Network Virtualization Plane Data Plane Management Plane Physical Plane 22

23 Network Auctioning Net Apps Store How can I get a slice (that meets my needs/requirements e.g., performance/security-slas, capacity) for broadcasting the Oscars/SuperBowl Sunday evening? Go to eclouday! A market (actually, bazaar) for cloud networks Customizeable, ephemeral slices Private Virtual Networks (PVNs) Auction network resources and/or services Peering SDN can play a huge role Need for automation, orchestration, optimization 23

24 Net Apps Store Create a market for network applications & services an app for WiFi offload an app for bandwidth control an app for policy control an app for video/content distribution Revenue sharing model (provider-3 rd parties) Open APIs network plug-ins Service-as-a-Service: instantiate/deliver services (on- the-fly) NaaS: deliver network (slice)-as-a-service (not just a dumb bit pipe), need to rethink about OSS/BSS Different apps for different NOS 24

25 VirtualCast Net App Server 1 Server 2 Server :5004 same multicast address openflow : :5004 Video Server 1, 2 and 3 each streams into the network (same multicast address) One server per slice, clients assigned to a slice Clients constantly listen to that multicast address. Client A receives stream 2 and Client B receives stream 1 (as controlled by switch) CLI command for rotate channels (slices), e.g., every 10 sec Open Source NOX controller. Wrote a program to perform this. f l o w v i s o r Client 1 slice A Client 2 Client 3 slice B Client 4 All slices share same multicast address but traffic is isolated Resources (eg servers) can be easily, seamlessly moved to another slice, CLI cmd Automation: process can be scheduled/timed We could have not done this without OpenFlow/FlowVisor! 25

26 c:\> virtualcast.sh server_1 ip rotation_interval 26

27 Market Today & Conclusion Start-ups: Nicira (2007), Big Switch Networks (2010), Embrane (2010), ConteXtream(2007), Xsigo, +... Cisco, Juniper, Arista, IBM, NEC, Dell, Brocade, Avaya, etc SDN is all about s/w for programming (and re-) the network Market/Exchange for virtual network instances + net apps SDN and Network Virtualization bring (real) intelligence into your network Make smart choices with your smart devices => make your network smarter. Smart devices need smart networks! Consumerization of networking SDN can breed innovation in your network! OpenFlowa building block. Network Virtualization and SDN: a match made in heaven... 27

28 thankyou! 28