The networking declaration of independence

Transcription

1 The networking declaration of independence How overlay networking gives you control of your networks Chris Swan, the original cloud networking company copyright

2 Agenda What is NFV? Declaration of Independence NFV Capabilities Preview: Waves of Adoption copyright

3 What is Network Function Virtualization? copyright

4 Positioning - NFV and SDN copyright

5 NFV can be a networking Swiss Army knife Application SDN (Software Defined Network) Appliances Allow control, mobility & agility by separating network location and network identity Control over end to end encryption, IP addressing and network topology NFV Hybrid Router Switch Firewall virtual device able to extend to IPsec/SSL VPN concentrator Protocol Redistributor Dynamic & Scriptable SDN multiple sites copyright

6 Networking Declaration of Independence copyright

7 Nicira s declaration of independence from metal, freed NFV from OpenFlow + %20The%20Seven%20Properties%20of%20Virtualization.pdf copyright

8 These same properties free NFV from the constraints of OpenFlow (technology, timing and target) Nicira defined the 7 Properties of network virtualization as: 1. Independence from network hardware 2. Faithful reproduction of the physical network service model 3. Follow operational model of compute virtualization 4. Compatible with any hypervisor platform 5. Secure isolation between virtual networks, the physical network, and the control plane 6. Cloud performance and scale 7. Programmatic networking provisioning and control copyright

9 Independence from network hardware Public Cloud Region 1 Overlay Network Cloud Server Overlay IP: xx Standard IPsec Tunnel Cloud Server NFV Firewall / IPsec Device IP: xx LAN Data Center Servers Customer Data Center With VM-based network devices you can use the cloud network as bulk transport and are indifferent to all else. copyright

10 Reproduction of physical network model Public Cloud Region 1 Overlay Network Cloud Server Cloud Server NFV Standard IPsec Tunnel Virtual Network Data Center Servers Data Center Servers Customer Data Center NFV devices look and feel like the same networking devices customers have used for ever, without boundaries copyright

11 Follow operational model of compute virtualization NFV NFV NFV NFV NFV functions can be dynamically brought on-line, up to the elastic limits of the total infrastructure available (!!) copyright

12 Compatible with any hypervisor platform Public Clouds Private Clouds Virtual Infrastructure NFV does more than follow the model of compute virtualization, it exists via compute virtualization. copyright

13 Secure isolation US East 1 EMEA APAC Overlay Network Subnet: /22 Cloud Server A Cloud Server B Cloud Server C Cloud Server D Cloud Server E Cloud Server F Overlay IP: Overlay IP: Overlay IP: Overlay IP: Overlay IP: Overlay IP: NFV Public IP: Overlay IP: Active IPsec /24 Tunnel /24 Firewall / IPsec Cisco 5505 Peered NFV Public IP: Overlay IP: Failover IPsec Tunnel Peered Public IP: Overlay IP: Active IPsec Tunnel / /24 Firewall / IPsec Cisco 5585 User Workstation User Workstation Data Center Server Data Center Server LAN IP: LAN IP: LAN IP: LAN IP: Customer Remote Office Chicago, IL USA Remote Subnet: /24 Customer Data Center London, UK Remote Subnet: /24 Isolation takes many forms: from underlying infra, allow my protocols, keep my chattiness in, keep others out, etc.. copyright

14 Cloud performance and scale NFV Data Center Server User Workstation User Workstation Where NFV really shines today: create a WAN in minutes, use cloud as points of presence for your business copyright

15 Programmatic networking provisioning & control Public Clouds Private Clouds + Virtual Infrastructure Cloud Compute and Network APIs + NFV Device APIs allow previously unimaginable flexibility and power copyright

16 Preview: Waves of Adoption copyright

17 Waves of NFV Adoption Tomorrow 11:25-11:50 in DCIM / Software Defined Datacentres and Networks Stream Public Cloud Region 1 Overlay Network Public Cloud Region 1 Overlay Network Encrypted Overlay network in VPC Cloud Server Overlay IP: xx Cloud Server Cloud Server Cloud Server Web App 1 Web App 2 Web App 3 Standard IPsec Tunnel NFV NFV Encrypted Connections Standard IPsec Tunnel Multiple IPsec Devices Firewall / IPsec Device IP: xx LAN Data Center Servers Customer Data Center Customer Site 1 Customer Site 2 Customer Site N Bursting and Containment Hubs and Spokes Winning back control copyright

18 Questions? Paddington, London, UK copyright