Overviews of Cloud Computing and SDN activities in WIDE Project

Transcription

1 CJK Workshop Overviews of Cloud Computing and SDN activities in WIDE Project Yuji Sekiya The Univ. of Tokyo / WIDE Project

2 CJK Workshop Research Consortium WIDE Project Commercial companies, research institutions, and universities over 50 organizations and over 1,000 people are joined Founder : Prof. Jun Murai Director : Prof. Hiroshi Esaki Researches Activities are in working groups. WIDE workshop is held two times a year (May, December) WIDE camp is held two times a year (March, September)

3 CJK Workshop Cloud Computing Activities in WIDE Project Cloud WG in WIDE Project Started on 2010 Targeted to evaluate and develop Fundamental Technologies for Cloud Computing. Distributed Storage Load Balancing of Resources Load Balancing of Applications Distributed Processing for Big Data Actual TestBed The first target is IaaS (Infrastructure as a Service) WIDE Cloud (Inter-University IaaS Cloud)

4 CJK Workshop Distributed IaaS Cloud WIDE Cloud

5 Federated Cloud Controller CJK Workshop OpenSource Based WIDE Cloud Architecture Application Layer Middleware Layer NoSQL SQL Control Layer libvirt RESTful API VM Image Virtual Resource Layer Facility Layer map646 NEMO NFS VLAN Sheepdog kvm glusterfs iscsi VXLAN L Network Server Storage Application

6 CJK Workshop Full IPv6 cloud Use map646 for IPv4 translation Distributed Filesystem GlusterFS ukai VM Mobility NEMO (Network Mobility) VXLAN + L Resource Management Auto VM migration Cloud Controller (WCC) Not only IaaS Hadoop / Presto clusters are working for NECOMA Project Challenges in WIDE Cloud Location-Level Redundancy Network Mobility Site A VM Replication Hypervisors VMs Distributed Storage Site C Datacenter1 Hypervisors Site B IPv6 Internet Datacenter 3 10 Site A Site A Migratable Network IPv4 Internet Hypervisors Datacenter 4 Datacenter 2 Migratable Network NAT64 Boxes Hypervisors Site B Site B

7 CJK Workshop WCC : Over 400 VMs are working! It s working over four years!!

8 CJK Workshop GINEW Project SDN Activities in WIDE Project Joint Research with NICT Provide virtual SLICE to users on JGN-X testbed SDN-IX by NECOMA / NSPIXP Project

9 CJK Workshop Basic Idea of User Defined and Organized Network Virtual Node Underlay Network Node Virtual Link Underlay Network Link Genera ng UDON API Change Route of Virtual Link A to B A Abstracted Layer of UDON Corresponding Configura ons Then, Change the route of Virtual Link from A to B B C

10 CJK Workshop JGN-X 利 用 者 A Network Virtualization on JGN-X JGN-X 利 用 者 B Zone A-1 Zone A-2 Network for User A Zone B-1 Zone B-2 Network Slice B ユーザ 提 供 レイヤー Network Slice A Network Slice B 仮 想 化 スライス 提 供 レイヤー 仮 想 資 源 グループ A 仮 想 資 源 グループ C 仮 想 資 源 グループ B 東 京 大 学 担 当 ミドルウェア 仮 想 化 リソース プールレイヤー Sapporo OF OF VN DCN OF Fukuoka Okinawa VN Okayama Hiroshima OF VN OF Kagawa Kochi DCN Osaka VN OF Kanazawa NICT Koganei Nagoya VN OF Iwate Sendai OF VN DCN OF Tokyo 物 理 リソース プールレイヤー

11 CJK Workshop Demonstration on SC13 Adaptive Bandwidth Control Application of GINEW API Collaboration w/ PerfSONAR User s Program manage shared bandwidth, Measuring by PerfSONAR Controlling by GINEW Already prepared, Will be applied soon. => DONE TH SG Sharing Bandwidth Bandwidth Measurement By PerfSONAR User s Program Bandwidth Control By GINEW

12 CJK Workshop Developing and Deploying SDN-IX (PIX-IE) PIX-IE : Programmable Internet exchange in EDO Technology is developed in NECOMA Project Current roles of Internet Exchanges Layer-3 IX / Layer-2 IX Exchanging Internet Traffic following BGP information Need more? The granularity of TE (Traffic Engineering) is BGP prefix. BGP granularity is /24 (IPv4) and /48 (IPv6) prefixes Need more? DDoS is one of the most serious problem in the Internet An wants to prevent or mitigate the traffic at the edges of ingress Need more? Path exchanges between Ases The index is not only VLAN. Using dst address and/or src address, dst port, TOS, MPLS label, VXLAN SDN-IX

13 CJK Workshop Operated by WIDE Project Research IX 2 IXs in Tokyo and Osaka DIX-IE (Tokyo) : 53 ASes NSPIXP3 (Osaka) : 13 Ases Activities IPv4/IPv6 native dual stack Connected between Tokyo = OSAKA (NSPIXP23) More Research => SDN-IX (Programmable IX) NF Park MLX-1 GbE x 2 10G 20G(10G x 2) NSPIXP Project MLX-1 BI15K -1 MLX-2 ComSpace-1 BI15K -2 MLX-1 NTT Otemachi BI151 BI81 KDDI Otemachi MG8-1 MLX-3 MG8-2

14 CJK Workshop ) DDoS Prevention and Mitigation on IX Programmable IX (PIX-IE) Victim Link Saturation Spoofed SRC UDP Victim Service

15 CJK Workshop Current Solution Human Interaction Programmable IX (PIX-IE) The operator has to contact to each, and ask to filter the DDoS packets Victim Link Saturation Spoofed SRC UDP Victim Service

16 CJK Workshop Solution by SDN Mitigation Programmable IX (PIX-IE) Mitigation Mitigation Mitigation REST API Victim Victim Service

17 CJK Workshop ) Flexible Path Exchanges The demand for extend own local network into other Autonomous Systems Event : Temporally use (e.g. experiments at SC) Connect to colocation hosts at Data Centers IaaS Cloud Equinix serves their customers with private wires that are connected to Amazon EC2 Existing way to extend VPN (including Overlay Networks): They have encapsulation and encryption overhead...

18 CJK Workshop ) Flexible Path Exchanges Interconnection of VLAN, VXLAN, MPLS, Application Datacenter A Datacenter B VLAN : 30 VLAN : 1000 Datacenter C VLAN : 50 Programmable IX (PIX-IE) VLAN # migration VLAN : 2000 Datacenter D VLAN : 100 VLAN : 500

19 CJK Workshop 2014 JSON Format { context : String, AS : AS Number, VLAN : VLAN ID } Current Implementation 2 Check Context and Authentication 19 1 Context + ASnum + VLANnum Controller 1 Context + ASnum + VLANnum AS X Network OpenFlow based IX AS Y Network 3 Create L2 circuit for AS X and Y

20 CJK Workshop Interop Tokyo 2014 Demonstration in Interop Tokyo 2014 The largest ITC events in Japan Over 130,000 people are visited

21 CJK Workshop a Screenshots

22 Thank You