F V CE Brocade Communications Systems, Inc. PROPRIETARY INFORMATION 2

Transcription

1 S D N F V CE

2 S D N : Example Openflow F V CE 2015 Brocade Communications Systems, Inc. PROPRIETARY INFORMATION 2

3 SDN in the Data Center: Programmatic Control 50% reduction in SDN deployment cost Concurrent network control by SDN controller and traditional control plane Optional protection layer between both modes Enabled by Hybrid port mode Reuses infrastructure for both SDN and traditional control plane Protection Layer SDN Programmed Rules Traditional Networking Rules Traditional Control Plane Physical Infrastructure SDN Controller 2015 Brocade Communications Systems, Inc. PROPRIETARY INFORMATION 3

4 Example: Volumetric traffic management Efficient and scalable Real-time detection of large flows via sflow-rt (Real-Time) Collector programs controller to apply appropriate treatment of flow Brocade value: Capability integrated into router with OpenFlow hybrid mode High-performance flow management Benefits: Mitigation at border relieves rest of DC Programmatic closed-loop control Limits investment in expensive appliances SDN DDOS APP MLXe VDX MLXe MLXe VDX Internet Tenant A Tenant B Data Center 2015 Brocade Communications Systems, Inc. PROPRIETARY INFORMATION 4

5 100G Firewall Bypass White-List Flow Offload Release 1.1 DMZ Router/Switch Processed data Brocade Flow Optimizer sflow sampled packets White-List Flow parameters in Openflow rules OpenFlow port Normal Routing port OpenFlow Hybrid port 100G WAN Link Raw data HPC/Science High Volume Flows Firewalled Traffic HPC/Science LAN Campus network 250ms - double throughput of firewall path 1.5sec - same throughput as NO firewall Improves 100G performance by 2x for legitimate flows 2015 BROCADE COMMUNICATIONS SYSTEMS, INC. PROPRIETARY INFORMATION

6 OpenFlow Feature overview Version Port Match L2+IPv6+L4 Header Match L2+IPv4+L4 Header Match IPv6 Support (In NI5.8) MAC Mask and IP Mask (Standards-based) Group Table Select, Indirect Multiple Controller Extensible Match with TLV QinQ 1.0 Yes Yes No No No No No No No No No No 1.3 Yes Yes Yes Yes Yes* Yes Yes Yes Yes Yes Yes Yes per-flow meters Enqueu TTL OpenFlow v1.3 is not backward compatible with OpenFlow 1.0 Greater flexibility with OpenFlow v1.3 Watch out for the details 2014 Brocade Communications Systems, Inc. Company Proprietary Information 6

7 Network Functions Virtualization S D N F V CE 7

8 What is the Difference between SDN and NFV? Complimentary, but independent technologies NFV SDN Purpose-built dedicated device Industry-standard server Control plane SDN Controller Software Software Software Hypervisor Custom Hardware x86 Hardware Consolidate diverse network equipment types (firewall, switching, routing, ADC, BRAS, EPC, etc. ) onto industrystandard x86 servers using virtualization. Benefits: Reduced cost and increased agility Separate control plane from the data plane in network devices (physical and virtual) with intelligence and programmability centralized in a controller. Benefits: Increased agility via automation and increased innovation via programmability 2015 Brocade Communications Systems, Inc. PROPRIETARY INFORMATION 8

9 Complementary Forces A compound disruption SDN: Manipulator Global controller Orchestration & automation AGILITY SDN NFV: Manipulated Virtual machine-based Elastic & agile NFV COST 9

10 ETSI NFV Reference Architecture Three key components NFVI (Physical and Virtual resources) Compute Storage Network Orchestration and Management VNF OSS/BSS NFV E2E Architectural Framework Source: ETSI NFV 2015 Brocade Communications Systems, Inc. PROPRIETARY INFORMATION 10

11 Brocade Vyatta 5400 vrouter The most widely used virtual router in the world Router Firewall VPN Feature Highlights OSPF, BGP Stateful, NAT IPSec, SSL Routing IPv4, IPv6, Static, PBR, OSPF, RIP, BGP, Multicast Security IPv4, IPv6, Stateful Firewall, NAT VPN IPSec, SSL, Route-based, L2-bridging, DMVPN System Management CLI, RESTful API, GUI OR IP Services High Availability SSH, DHCP, DNS, SNMP VRRP, Stateful Failover, Config Sync Hypervisor x86 Server Platforms VMware, Xen, KVM, Hyper-V, x Brocade Communications Systems, Inc. PROPRIETARY INFORMATION 11

12 Cloud services #1 Virtual routing / tenant isolation in traditional hierarchical L2/L3-networks : Packet transition point Packet processing/ queuing Potential points where packet drops, latency can occur 2014 BROCADE COMMUNICATIONS SYSTEMS, INC. PROPRIETARY INFORMATION 12

13 Cloud services #1 cont d Virtual routing and tenant isolation localized using VNFs saving transmission cost : Packet transition point Packet processing/ queuing Potential points where packet drops, latency can occur 2014 BROCADE COMMUNICATIONS SYSTEMS, INC. PROPRIETARY INFORMATION 13

14 Cloud services #2 Cloud Bridging Simple and secure VPN services between data centers and cloud providers Enables Cloud expansion Internet Internet Internet Internet VPC Internet Gateway Cloud Bridging VPN Internet Internet Virtual Environment HYPERVISOR Physical Environme nt Cloud Bursting Private or Public Cloud Environment On-Premise Data Center 2014 BROCADE COMMUNICATIONS SYSTEMS, INC. COMPANY PROPRIETARY INFORMATION 14

15 Single Root I/O Virtualization (SR-IOV) Virtualizes PCIe Appears as multiple physical devices Works with Guest OS or Hypervisor Physical Functions (PFs) Full PCIe functions SR-IOV Extended Capability Virtual Functions (VFs) Lightweight PCIe functions Uses minimized set of config resources 2015 BROCADE COMMUNICATIONS SYSTEMS, INC. 15

16 Brocade Vyatta 5600 Virtual Router THE HIGHEST PERFORMING VIRTUAL ROUTER IN THE WORLD New Architecture vplane architecture Up to 10Gbps per Core on bare metal 10Gbps+ on VM with SRIOV or PCI pass-through Target Use Case: NFV vrr, vpe, vce, vbras High Performance BGP Routing Target Use Case: CSP vr, vfw, vvpn VMware, KVM, Xen, Bare Metal Routing Security VPN System Management IP Services High Availability Platforms Feature Highlights IPv4, IPv6, Static, PBR, OSPF, RIP, BGP, Multicast IPv4, IPv6, Stateful Firewall, NAT IPSec, SSL, Route-based, L2-bridging, DMVPN CLI, RESTful API, GUI HQoS, SSH, DHCP, DNS, SNMP VRRP, Stateful Failover, Config Sync VMware, KVM, x Brocade Communications Systems, Inc. PROPRIETARY INFORMATION 16

17 Common Data Model Vyatta 5600 vrouter Architecture GUI CLI REST Netconf netlink_route Shadow Interface Back Plane Interface DPI Firewall/NAT AAA Hybrid Dev/Ops Data Model FIB Shadow Interface Control Plane Interface Encryption QoS HA Shadow Interface Routing Protocols Flow Affinity/ Service Chaining Stateful Data Plane Master Thread vplane Session State netlink_xfrm vplaned User Space Kernel Control Plane vrouter control plane and data plane on single VM or host Extensible high speed packet pipeline Full RFC compliant router in data plane Stateful firewall, NAT in data plane Scale performance by number of cores Hybrid Dev/Ops data model with interface support for REST, YANG/Netconf Backplane leverages IPC and shared memory 2015 BROCADE COMMUNICATIONS SYSTEMS, INC. COMPANY PROPRIETARY INFORMATION 17

18 Throughput Results of Vyatta 5600 on KVM Dual-socket Intel E5-2667v2 server, RFC2544 Test ments/success_stories/brocadetelefonica-ss.pdf Packet size in bytes 2015 BROCADE COMMUNICATIONS SYSTEMS, INC. COMPANY PROPRIETARY INFORMATION

19 Vyatta vrouter SP NFV Use Cases : vce Controller LAN L2-CPE NETCONF/YANG vce LAN L2-CPE vce PE vce LAN L2-CPE vce vrouter LAN L2-CPE NFV Infra Customer premises Access / Aggregation Edge Core / Peering / Internet 2015 BROCADE COMMUNICATIONS SYSTEMS, INC. COMPANY PROPRIETARY INFORMATION 19

20 Summary 20

21 The OSI stack of Data Centers Applications & Services BUSINESS LOGIC APPLICATIONS & SERVICES CLOUD ORCHESTRATION PLATFORM Control NETWORK CONTROLLER VMware NSX OpenDaylight SERVER AND STORAGE CONTROLLERS Storage Management Compute Management Virtual Infrastructure NETWORK Network Virtualization vswitch VXLAN, NVGRE VCS Virtual Fabric NETWORK FUNCTIONS Layer 3-7 Functions NFV Services: vrouter, vfw, vadc, etc. SERVER Virtual Machines ESXi HyperV Xen KVM STORAGE Software-defined Storage Storage- Hypervisor vappliance vvolumes Network Management OpenStack VMware vcloud Suite Physical Infrastructure NETWORK COMPUTE STORAGE Ethernet/IP Fabric, Core/Border Router Fibre Channel SAN Appliances: Security, ADC, etc. Rack Skinless Blade Appliances Arrays DAS Flash Appliances 2015 Brocade Communications Systems, Inc.. Proprietary information 21

22 Resiliency and Redundancy Definition re sil ien cy (noun) \ri- zil-yən(t)-sē\ the ability to become strong, healthy, or successful again after something bad happens an ability to recover from or adjust easily to misfortune or change the ability of something to return to its original shape after it has been pulled, stretched, pressed, bent, etc. re dun dan cy (noun) \ri- dən-dən(t)-sē\ a part in a machine, system, etc., that has the same function as another part and that exists so that the entire machine, system, etc., will not fail if the main part fails 2013 Brocade Communications Systems, Inc. Proprietary Information 22

23 Summary There are many flavours of SDN Openflow is just one Server hardware matters - also for Software performance VNFs have their place, so has networking hardware Consider alternative resilience strategies (virtual compute like) VNF Production deployments exist, many PoCs are under way 2015 Brocade Communications Systems, Inc. PROPRIETARY INFORMATION 23

24 Thank you!