CLOUD NETWORKING THE NEXT CHAPTER FLORIN BALUS

Transcription

1 CLOUD NETWORKING THE NEXT CHAPTER FLORIN BALUS

2 COMMON APPLICATION VIEW OF THE NETWORK Fallacies of Distributed Computing 1. The network is reliable. 2. Latency is zero. 3. Bandwidth is infinite. 4. The network is secure. 5. Topology doesn't change. 6. There is one administrator. 7. Transport cost is zero. 8. The network is homogeneous. Peter Deutsch - Sun Fellow, 1994 net wûrk : Unspeakably huge, complex, mysterious, stuffy network thing that nobody understands* 2 * = Gluecon Keynote Smarting the Dumb Pipes by Ross Turk.

3 CLOUD NETWORK PERFORMANCE H. Ballani, P. Costa, T. Karagiannis, A. Rawstron, Towards Predictable Datacenter Networks, Microsoft Research, ACM SIGCOMM 2011, MS Research MapReduce Task Enterprise DC 4 hours ($100) Popular Cloud hours ($250-$400) Network performance can be a key obstacle to cloud adoption 3

4 DATA CENTER NETWORK VIRTUALIZATION L2 Service Virtualization The devil is in the details Promise of Nirvana 4

5 1 st GENERATION L2 SERVICE (VLANs) SERVER & STORAGE INFRASTRUCTURE ISSUES & LIMITATIONS Service Appliances DC Core Network VLAN scalability L2 core scaling issues Management complexity Network stability Server & Storage Arrays

6 L2 NETWORK VIRTUALIZATION APPROACH (L2 over IP tunnels: VXLAN/NVGRE) Service Request SERVER & STORAGE INFRASTRUCTURE DC GWs ISSUES & LIMITATIONS IP Core Does not address enterprise use cases L2-Segment Bandwidth and routing inefficiencies VM VM TORs Core network complexity Storage Operational complexity VMs 6

7 ENTERPRISE APPLICATIONS CURRENT NETWORK VIEW REALITY L2-only virtualization L2-Segment VM VM Storage 7 Source:

8 1. REAL ENTERPRISE USE CASES Enterprise Site A Enterprise DC VM VM Subnet 1 Subnet 2 Firewall W W VPN Service L2 VPN Service VRF/Router VRF/Router Firewall BL BL Subnet 1 VLAN 11 VM VM VM VM Subnet 1 Subnet 2 VM VM VM VM DMZ designs Multi-tier Applications DC Service Hybrid Clouds DC Service L2/ Multi-DC - DR Services 8

9 2. BANDWIDTH AND LATENCY ISSUES -L4 services only in certain locations (VMs or ToRs) DC GWs DC GWs Core Nodes Core Nodes TORs GW TORs GW V-Switches B W B GW W VMs GW V-Switches W B B 11 VMs 11 B 12 W 11 B Centralized gateways result in sub-optimal bandwidth utilization, performance issues, and choke-points 9

10 2. BANDWIDTH AND LATENCY ISSUES Using hardware-based routers Enterprise Site Enterprise Site WAN Service DC DC GW WAN Service VRF/Router TENANT 1 VLAN 12 VLAN 11 Aggregation Core L2 service VM VM VM VM Access Storage DC Gateways fail to solve the service problem 10

11 3. NETWORK COMPLEXITY Translation to L2 VLANs required Enterprise Site VPN Service Enterprise Site VPN Service DC GW TENANT 1 Subnet 1 Subnet 12 Spanning Tree VLANs VM VM VM VM Storage VM Router Backup Router External connectivity requires VLAN toolset and configuration 11

12 3. CORE NETWORK COMPLEXITY VXLAN Implementations require Multicast (PIM and IGMP) at the Core Per-Tenant multicast group VXLAN requires per-tenant state in the core network 12

13 4. INTERFACING TO EXISTING SERVICES OSS Nightmares Cloud Mgmt Interface? VLAN SP OSS MPLS-based WAN Service (Administrative Domain B) Data Center (Administrative Domain A) Significant costs and complexity in interfacing between different operational models and administrative domains 13

14 NETWORK SERVICE REQUIREMENTS Scalability No per-tenant state L2 Multi-tenancy Full tenant traffic isolation L2 & Services Support for real application topologies VPN Service Extension Hybrid and extended clouds SDN Programmability Rapid service deployment 14

15 DIDN T WE SOLVE THIS PROBLEM BEFORE? SERVICE EDGE (ETHERNET, IP / MPLS) IP CORE NETWORK CONTENT STORAGE & DISTRIBUTION INTERNET Issues and Limitations Not optimized for data center designs Unfamiliar protocols for IT organizations But, Rich toolkit of technologies and lessons learned CLOUD STORAGE AND COMPUTE 15

16 SOLUTION: DISTRIBUTED L2-L4 SERVICES Enterprise Site Enterprise Site WAN Service WAN Service DC PE Simple IP Core VRF/Router TENANT 1 VLAN 12 VLAN 11 VM VM VM VM Network Virtualization Edge (NVE) L2-L4 Services Distributed on all Edge Forwarding Elements of the DC 16

17 CONTROL AND DATA PLANE INTERACTIONS Cloud Management Service Management SP OSS APIs SDN/NVO3 Control Plane MP-BGP MP-BGP MP-BGP Compute & Enterprise Storage Data Plane IP Core Gateway MPLS VPN Services Site NVE/OVS NVO3 Tunnels 17

18 MULTI-DC AND MULTI-VENDOR SERVICES Enterprise Services Consumer Services IP/MPLS Core MP-BGP Control Plane BGP-MP BGP-MP Cloudstack DC Openstack Openstack DC Controlled BGP interoperability enables federation of multi-vendor cloud services 18

19 DRIVING TOWARD INTEROPERABILITY IETF NVO3 Working Group - Problem statement - draft-etf-nvo3-problem-statement - Framework - draft-ietf-nv03-framework - Data plane requirements - draft-bl-nvo0-dataplane-requirements - Control plane requirements Openflow Specification draft-drake-nvo3-evpn-control-plane - Federation of SDN Controller - draft-sb-nv03-sdn-federation 19

20 CLOUD NETWORK SERVICES RAPIDLY EVOLVING TO MEET ENTERPRISE NEEDS MPLS VPN Hybrid Clouds L2 Virtualization Services Service Chain (FW,LB) Performance SLAs 20

21 21