Programmable WAN Networking is SFW. David Ward CTO & Chief Architect Platform Systems Division, Juniper Networks

Transcription

1 Programmable WAN Networking is SFW David Ward CTO & Chief Architect Platform Systems Division, Juniper Networks

2 The Developer and The Network Improving user experience by programming the network Real Problems. Real Revenue. Real Attention.

3 Beyond ferreting the information Current approximation techniques are barely sufficient and inefficient APPLICATION WORLD: GUESSING NETWORK WORLD: DERIVING Applications blindly probe the network to understand what it can deliver Networks spy on traffic to try to understand applications? Network Aware Applications?? Application Aware Networking? Game ping-stats, doppler, geolocation, whois Proprietary codecs Approximate topology/location Deep Packet Inspection Stateful flow analysis Application fingerprinting Service specific overlay topologies

4 How to ensure the best experience? Bringing together the important elements enabled via real-time interaction to influence the experience of the end user Application: Knows end-device capabilities. Proximity of end-user to content. Controls resources. Content: Adjusts placement, selection & insertion of content from analytics. End-User: Knows what it wants and is directed there Network: Real-time interaction between application, content and end-users.

5 Let s talk about why networks & applications need to work together

6 What brings the two together? THE APPLICATION WORLD THE NETWORK WORLD Bi-directional interaction and programmability

7 Interaction at multiple touch points Inform network of desired behavior Inform application of data intrinsically in the network THE APPLICATION WORLD Network Programmability THE NETWORK WORLD User service profile Enterprise edge Hypervisor stack Programmable Touch points CDN Billing profile Business edge service profile VPN/mobile/security gateways

8 What is possible in this new world? APPLICATION NETWORK Applications made better by information from network Understanding of end-device capabilities Real location / topology Adjust behavior to real-time usage Billing granularity Flexibility of service placement NETWORK APPLICATION Networks made better by information from application Bandwidth and resource optimization New service topologies Security identification Service-specific packet treatment Control of resources from applications

9 How do networks & applications work together?

10 There s more than what you are hearing Software Defined Networks Separation of existing protocols from forwarding plane for network devices Programming of forwarding plane via centralized orchestration platforms SOLUTION No interaction with existing Network routing/ Programmability signaling protocols of the Internet Augment what s already on the internet Integration with routing, signaling and policy logic Modular, programmable touchpoints Seamless service model via collaborative inputs Standards-based approach

11 Application and network interaction As a developer you will have many ways to influence the network or application Choices depend on your touch point to the network Intuiting Info Communicating Application deriving network Proprietary control channels, pingstats, GSM, check-ins, traceroute Application programming network Dynamic interaction OpenStack CloudStack OpenFlow PCE GenApp Provider- based development plaborms Network spying on application DPI, Netflow, IPDR, IDS Network informing application ALTO BGP- TE, BGP- CDNI

12 THE APPLICATION WORLD THE NETWORK WORLD How do we make this happen? Network Programmability Without breaking everything Real-time topology understanding (ALTO, BGP-TE) Steering traffic through optimal paths (PCE) Selecting specific traffic (OpenFlow) New touch points: gateways, billing collectors, service appliances, CDN, DPI SI Partner THE APPLICATION WORLD ISV Partner Service Provider Research InsKtuKon Web Services API Enterprise Customer Orchestration Across Networks Network APIs ALTO BGP-TE PCE Mgmt THE NETWORK WORLD OpenFlow GENAPP

13 The protocols Function Network Intelligence Query Point Path Computation Policy Enforcement / Provisioning Service Location Delivery Vehicle ALTO PCE OpenFlow Services Registry BGP-TE SMI GENAPP Service Engineered Paths Network intelligence query point Path computation and establishment Policy enforcement Service location Where is it in the network Path Computation Element (PCE) for determining traffic path and setup Permit/Deny policy enforcement through programmable flow filters (OpenFlow) / SMI Centralize/Distributed registration for services, application resources and content cache locations

14 ROUTER: CONTROL AND DATA PLANES AUGMENT CONTROL PLANE, CONTROL PKT. FWDG Abstraction level: data plane (low), control plane (high) PCE Controller ALTO etc. PCEP OF ALTO, BGP-TE Ingress Packet Decap IFL Feature Execution IFF Feature Execution Router Control Plane Routing MPLS OpenFlow Protocols RIB, LIB, OFF Feature Execution Output IFL Feature Exec Packet Decap Egress Route lookup Router Programmable Networking is SFW Copyright 2011 Juniper Networks, Inc.

15 SHIPS IN THE NIGHT VS. INTEGRATED Ships-in-the-Night Integrated OpenFlow Control Plane Control Plane OpenFlow Router Router A subset of ports controlled by OF, another subset controlled by router s native CP physical resources are partitioned Some level of integration: OF_NORMAL : Implementer free to define what normal is May not be what router normally does Use OF for feature definition augment the native control plane No longer partitioning of resources Can operate at different abstraction levels (low-level like OK1.0 or higher level) Programmable Networking is SFW Copyright 2011 Juniper Networks, Inc.

16 INTEGRATED FORWARDING ZONES Using a common API, we to have multiple programming entities sharing the same Layer 1-7 devices Layer-3 device could have IGP/BGP zone (default) OpenFlow zone PCE/LSP zone ALTO zone Only one zone permitted per logical port with ability to drop through; to default zone The way VRFs work today Arbitration function necessary to ensure clean resource split no deadlock states permitted Programmable Networking is SFW Copyright 2011 Juniper Networks, Inc.

17 Orchestration and Development Platforms Tradi&onal IT: OperaKon/Billing systems Web = device Services and subscriber API management COPS, Radius, Diameter, netconf, DHCP, CAPWAP, GSMP Orchestration Across Networks Emerging Network Func&on Specific SLA monitoring, OTT virtualizakon, Path management, Unified CommunicaKon Operation Emerging Emerging Billing Service Specific Network Flow Systems intelligence, user telemetry Function informakon, Specific sensor networking, Based service Specific Platforms profile updates, network appliance and CDN control New Provider Based Development Pla=orms Emerging Service Specific funckonality for a specific customer set: mobile phone, STB New Provider-

18 Network Operators Building Development Platforms Network operator innovation centers around the world Pla=orm poten&al: Reaching ~53% of world popula&on; Equals ~64% of world GDP

19 Networked application examples Content / Service Routing Locate best copy of content for the end user, using customer rules Managed content distribution Content prepositioning to caches Live events Map-Reduce class of applications High-end distributed computing Cloud OS network operations Move VMs / Apps / Storage between locations Cloudburst Flexibly, on-demand allocate cloud & network capacity to customers Security DDoS attack prevention

20 What is a Service Engineered Path? Tunneling/switching technology that provides a path to specific service functions Enables selective traffic redirection based upon ephemeral classifiers Signaled paths requested via PCE Path Computation Element Standardized API Ephemeral Classifiers Service Delivery Orchestrator Ephemeral Classifiers SMI OpenFlow Control Feedback Loop OpenFlow Ephemeral Classifiers EC EC Service Engineered Path 1 Service Engineered Path 2 MPLS RSVP/LDP LSP, VLAN, IP Tunnel DPI Applica&on SDK SEPR Service Node

21 Example: service appliance pooling Pre- SEP Service Appliance Topology Edge Router 1 Edge Router 2 Edge Router 3 NAT FW IDP NAT FW IDP SBC DPI WCCP Local Appliance Pooling Service Engineered Paths Appliance Pooling Topologies Centralized Appliance Pooling SEPR 1 SEPR 2 SEPR 3 SEPR 4 SEPR 5 SEPR 6 Service Engineered Paths Service Engineered Path 1 Service Engineered Path 2 Service Engineered Path 3 NAT FW IDP SBC DPI WCCP NAT FW IDP SBC DPI WCCP Local Appliance Resource Pool Centralized Appliance Resource Pool

22 Example: service specific topology Streaming Video Source Video Video Op&mized SEP Path Peering (SEPR) If desknakon of subscriber matches opt- in profile forward traffic onto Service Engineered Path else use normal route path Non- op&mized Path Subscriber traffic flows may be forced across specific service topologies as dictated by policy Video traffic for one set of subscribers follows a specific path that is engineered to provide the optimal video experience Path enabled using Service Engineered Path technology Non-subscribing enhanced video traffic follows the normal routed path Video Video SEPR1 Video

23 Example: Content Request Routing From where the user is connected to where the content is best served Based on: Network Application APPLICATION NETWORK NETWORK APPLICATION Network proximity Network availability Network congestion Content availability Content load Content capacity Open standard: ALTO Application Layer Traffic Optimization Content Content Content This is new because: Uses information of the network infrastructure Runs across multiple service providers Mobile & broadband subscribers Chicago ALTO cost ALTO directs traffic to best POP based on network conditions London ALTO cost - 50 Amsterdam ALTO cost - 10

24 Example: Content Request Routing Per-network response times and site availability DNS and Plug-ins APPLICATION NETWORK NETWORK APPLICATION Server Availability Server Load Server Capacity New York ISP A DNS Answer: Chicago! Where do I get my content? Network Proximity Network Availability Network Congestion Chicago Data Center Media Server London ALTO London Data Center DNS ISP B BGP BGP Media Server Paris ALTO Server Amsterdam Data Center DNS ISP C Media Server

25 Mapping The Traffic Delivery Chicago ALTO Cost- 200 London ALTO Cost - 50 Amsterdam ALTO Cost - 10 ALTO directs traffic to best POP based on network conditions Chicago ALTO Cost- 200 With London and Amsterdam MFCs overloaded, traffic is diverted to Chicago

26 Example: Bandwidth Calendaring Schedule a reserved path for your session Web Services API Orchestration NETWORK APPLICATION without having to know the network Technology used: Real-time topology understanding (ALTO, BGP-TE) Steering traffic through optimal paths (PCE) Reservation transaction (WebServices API) Selecting specific traffic (OpenFlow) What would I use this for? Location 1 Location 2 Network Scheduled application/session specific path in the network Flexibility of service placement Scheduled data center backups Managed content distribution Cloud orchestration

27 Example: Social Networking Today s wheel of missed fortune Untapped mine of information Collected End User Information Content/Gaming Analytics Platforms Pure Social SN topology platform types Advertising Commerce Communication Approximate End User Location Access technology and capability Mobility events Bandwidth, utilization Capabilities of device and network Network location Proximity to caches / servers Bandwidth / billing / usage caps Security profile Network

28 Tune in - turn on: Be in the topology Weak architecture = one-legged tap dancing Continuous, real-time streaming of surrounding content, resources, places, people Where am I? I am here! AcKve broadcast Game broadcast Passive derivakon You re here! <access> <capability> <BW> <profile> And this is around you: <content> <resources> <places> <people>! Above the topology Visualize the topology Below the topology In the topology Low value in navigational coordinates APPLICATION NETWORK

29 What did he just say? UNLEASH THE POTENTIAL! Today the two worlds are not interlocked PROGRAMMABLE NETWORKING DEVELOPMENT PLATFORMS EMERGING AND GETTING A LOT OF VC Enables: Flexibility of service placement Fungibility of assets Control of resources Derivation of telemetry and proximity Decisions that impact your applications are being made by: IT departments Network equipment vendors Providers delivering your application Application developers

30 Network Programmability This is not a lottery This is a game of skill Enhance your skills Enhance your applications slideshare.net/junosdeveloper

31