YI-CHIH HSU & JEI-WEI ESTINET TECHNOLOGIES

Transcription

2 About EstiNet A Professional Company in Software Defined Network Taipei HQ Hsinchu Tainan Since Taiwan Locations Technologies Founders A Professional Company in Software-Defined Networking Copyright , EstiNet Technologies Inc. All Rights Reserved. 2

6 Top 10 Strategic Technology Trends for 2014 & 2015 Source: Gartner D 列印 3D Printing 雲與端架構 Cloud/Client Architecture 混合雲服務仲介 Hybrid Cloud & IT as a Service Broker 行動應用 Mobile Apps and Applications 行動裝置管理 Mobile Device Diversity and Management 智慧機器 Smart Machines 軟體定義一切 Software-Defined Anything 個人雲 The Era of Personal Could 物聯網 The Internet of Everything 網路規模資訊技術 Web-Scale IT D Printing 3D 列印 Advanced, Pervasive and Invisible Analytics 先進普遍隱形的分析 Cloud/Client Computing 雲與端運算 Computing Everywhere 運算無所不在 Context-Rich Systems 豐富內容系統 Risk-Basked Security and Self-Protection 風險導向安全與自我防護 Smart Machines 智慧機器 Software-Defined Applications and Infrastructure 軟體定義應用與架構 The Internet of Things 物聯網 Web-Scale IT 網路規模資訊技術 Mobile IoT Big Data Cloud SDx A Professional Company in Software-Defined Networking Copyright , EstiNet Technologies Inc. All Rights Reserved. 6

10 Software-defined Network Drivers and Impact Private cloud is not just about cost reduction. Agility will be a key benefit 1 By 2020, 50 billion devices will be connected to wireless networks 2 SDN/OpenFlow market will grow to almost $2 billion by 2016 driven by the growing need for scalability & network programmability 3 HUMAN MIDDLEWARE DEVICE SECURITY SCALE, PROGRAMMABILITY 1 Gartner G , Five Things That Private Cloud Is Not, 3 August 2012,Thomas J. Bittman 2 Ericsson white paper, More Than 50 Billion Connected Devices, February IDC #235074, Technology Assessment: The Impact of OpenFlow on Data Center Network Architectures June 2012 A Professional Company in Software-Defined Networking Copyright , EstiNet Technologies Inc. All Rights Reserved. 10

11 What Happened to Network You can create a virtual machine with 1TB storage within 60 seconds, but you need to wait 24 hours to set up network A Professional Company in Software-Defined Networking Copyright , EstiNet Technologies Inc. All Rights Reserved. 11

16 Remember mainframes? source: Curtsey of Dan Specialized Applications Ap Ap Ap Ap Ap Ap Ap Ap Ap Ap Ap Ap p p p p p p p p p p p p Open Interface Specialized Operating System Specialized Hardware Windows Linux Open Interface Microprocessor Mac OS Vertically integrated Slow innovation Closed, proprietary Small industry Horizontal Rapid innovation Open interfaces Huge industry A Professional Company in Software-Defined Networking Copyright , EstiNet Technologies Inc. All Rights Reserved. 16

17 That s what today s routers are source: Curtsey of Dan Vertically integrated, complex, closed, proprietary Networking industry with mainframe mindset Routing, management, mobility management, access control, VPNs, Feature Feature Feature Feature Feature OS Million of lines of source code 6,000 RFCs Custom Hardware Billions of gates Bloated Power Hungry A Professional Company in Software-Defined Networking Copyright , EstiNet Technologies Inc. All Rights Reserved. 17

19 What SDN really is source: Curtsey of Dan Specialized Features Ap Ap Ap Ap Ap Ap Ap Ap Ap Ap Ap Ap p p p p p p p p p p p p Open Interface Specialized Control Plane Control Plane 1 Control Plane 2 Control Plane 3 Specialized Hardware Vertically integrated Closed, proprietary Slow innovation Horizontal Open interfaces Rapid innovation Open Interface Merchant Switching Chips A Professional Company in Software-Defined Networking Copyright , EstiNet Technologies Inc. All Rights Reserved. 19

20 Software Defined Network, SDN source: Curtsey of Scott 3. Well-Defined Open API Features 1. Open Interface to Hardware Features Network OS Network Operation System Features Operation System Forwarding Hardware 2. Network OS Open and Closed- Source Features Operation System Forwarding Hardware Features Features Operation System Forwarding Hardware Operation System Forwarding Hardware Operation System Forwarding Hardware A Professional Company in Software-Defined Networking Copyright , EstiNet Technologies Inc. All Rights Reserved. 20

23 SDN Defined On Open Networking Foundation Source: opennetworking.org In the SDN architecture, the control and data planes are decoupled network intelligence and state are logically centralized the underlying network infrastructure is abstracted from the applications A Professional Company in Software-Defined Networking Copyright , EstiNet Technologies Inc. All Rights Reserved. 23

24 SDN Delivers Achieve Agility Ability to Apply Business Logic to Network Behavior in Dynamic Fashion Programmability Application Layer Open programmable interfaces to automate orchestration of network services SDN Architecture Control Layer Centralized Intelligence Separate control and data plane; Abstract control plane of many devices to one Infrastructure Layer Open standard-based programmatic access to infrastructure Abstration A Professional Company in Software-Defined Networking Copyright , EstiNet Technologies Inc. All Rights Reserved. 24

27 ECO-System on SDN 2010/11/05 Learning Bridge, STP, RSTP, VLAN, LACP etc. Legacy L2 Functionalities Agent H/W pswitch OpenFlow conformance test tool for switch development Conformance Test Provisioning Orchestration Virtualization Northbound API SDN Controller Southbound API (OpenFlow) Add OpenFlow agent upon hardware switch device Network Management Fault Configuration Performance Security Accounting Switch OS vswitch Applications Applications base on the Network virtualization/ Orchestration Platform i.e. Provision & Network Management Network Virtualization Platform EstiNet Network Simulator & Emulator for SDN controller development A Professional Company in Software-Defined Networking Copyright , EstiNet Technologies Inc. All Rights Reserved. 27

28 OpenFlow OpenFlow Controller A southbound API For OpenFlow Controller and OpenFlow Switch Communication OpenFlow is a way to implement SDN OpenFlow Channel OpenFlow Protocol Group Table Flow Flow Flow Flow Table Table Table Table OpenFlow Pipeline Meter Table OpenFlow Switch A Professional Company in Software-Defined Networking Copyright , EstiNet Technologies Inc. All Rights Reserved. 28

29 Flow Table Flow Entry Format Example: Flow Entries in Flow Table Flow ID Src IP Dst IP Eth type Priority Counters Instructi ons 1 * 10.1.*.* * Port 1 20 Timeouts Cookie 2 * * 0x88A Drop 10 3 * 10.2.*.* * Port2 30 Eth type = 0x88A8 Dst IP = 10.1.*.* Eth type = 0x8100 Dst IP = 10.1.*.* Drop Eth type = 0x8100 Dst IP = 10.1.*.* Dst IP = 10.2.*.* Dst IP = 10.2.*.* *.* 10.2.*.* *.* A Professional Company in Software-Defined Networking Copyright , EstiNet Technologies Inc. All Rights Reserved. 29

31 Match Fields 41 Match Fields in OpenFlow Spec 1.4 IN_PORT IN_PHY_PORT METADATA ETH_DST ETH_SRC ETH_TYPE VLAN_VID VLAN_PCP IP_DSCP IP_ECN IP_PROTO IPV4_SRC IPV4_DST TCP_SRC TCP_DST UDP_SRC UDP_DST SCTP_SRC SCTP_DST ICMPV4_TYPE ICMPV4_CODE ARP_OP ARP_SPA ARP_TPA ARP_SHA ARP_THA IPV6_SRC IPV6_DST IPV6_FLABEL ICMPV6_TYPE ICMPV6_CODE IPV6_ND_TARGET IPV6_ND_SLL IPV6_ND_TLL MPLS_LABEL MPLS_TC MPLS_BOS PBB_ISID TUNNEL_ID IPV6_EXTHDR PBB_UCA Dst MAC Src MAC Ether Type VLAN ID VLAN Priority Dst IP Src IP IP Proto IP ToS TCP/ UDP Src Port TCP/ UDP Dst Port L2 L3 L4 MAC Address Switching IP Address Routing Port Firewall A Professional Company in Software-Defined Networking Copyright , EstiNet Technologies Inc. All Rights Reserved. 31

37 Why SDN? Simple Easy Centralized Auto-Provisioning and Supervision Flexible Seamless Multi-Level Partial or Full Scale Network Migration Secure Fine-Grained Flow Monitoring and Analyzing A Professional Company in Software-Defined Networking Copyright , EstiNet Technologies Inc. All Rights Reserved. 37

38 Dr. SDN - the Application Platform for Software-Defined Networks Apps Platform Zero-Touch Deployer Traffic Guard Smart Tapper Migration Kit Control Platform Infra Platform OpenFlow Switches Hybrid Switches A Professional Company in Software-Defined Networking Copyright , EstiNet Technologies Inc. All Rights Reserved. 38

41 Control Plane Data Plane Zero-Touch Deployer Controller Management Cost Reduction Provide the network mgmt. portal to minimize administration efforts Provide easy-to-configure White List Mechanism Core Switch Core Switch Edge Switch Automatic Network Planning Auto VLAN encapsulation Auto best route maintenance and selection Core Router Core Switch Core Switch Edge Switch Anytime Flow-level Monitoring Provide fine-grain flow-level monitoring including: Switch Connectivity Host Status Link Status A Professional Company in Software-Defined Networking (SDN) Copyright , EstiNet Technologies Inc. All Rights Reserved.. 41

42 Screenshot Zero-Touch Deployer On-line device in a location Topology view of routing path Port binding in the seat map A Professional Company in Software-Defined Networking Copyright , EstiNet Technologies Inc. All Rights Reserved. 42

43 Control Plane Smart Tapper Data Plane Core Switch Controller Core Switch Edge Switch Easy Click-and-Go Monitoring Immediate flow-level traffic mirroring simply by clicking the mirror and monitor machines Automatic computation for traffic mirror paths Automatic merge for mirrored flows Core Router Core Switch Core Switch Edge Switch On-demand Tapping Allow pre-configured criteria to trigger traffic mirroring Network Administrators can mirror traffic in on-demand manners A Professional Company in Software-Defined Networking (SDN) Copyright , EstiNet Technologies Inc. All Rights Reserved.. 43

45 Control Plane Data Plane Core Switch Core Router Controller Core Switch Traffic Guard Edge Switch Decentralized Abnormal Traffic Sensing on Edge Traditional network requires a powerful centralized IDS (Intrusion Detection System) to filter out malicious attacks EstiNet Traffic Guard can utilize Switch Hardware to collect attack patterns in decentralized manner More Resistant to Insider Attack Reject abnormal flow at edge Prevent congestions on core network devices Core Switch Core Switch Edge Switch Flexible Detection Methods Flow-based Port-based Host-based Subnet-based A Professional Company in Software-Defined Networking (SDN) Copyright , EstiNet Technologies Inc. All Rights Reserved.. 45

48 SDN Migration Issues 1. SDN can NOT interoperate with legacy network. Centralized SDN control methods do not work as traditional legacy distributed protocols. 2. Full-scale deployment is NOT always the case of bringing new networking technology in Enterprise customers would prefer to do partial upgrade for their stable existing network deployment Mixed SDN network and legacy network is expected to be common in the future. A Professional Company in Software-Defined Networking Copyright , EstiNet Technologies Inc. All Rights Reserved. 48

49 Migration Kit Seamless Fully interoperable with legacy networks Flexible Support both full-scale deployment and partial replacement Modular Provide rich set of L2/L3 protocol engines for SDN Controllers OSPF, ISIS, BGP, MPLS, RSTP, STP Optimized Achieve path optimization for customers custom needs EstiNet s design currently under the patent-filing process and pending Migration Kit SDN Controller SDN Switch Protocol Engine Virtualized Interfaces Forwarding Abstraction Layer Virtualized Network View Forwarding Compute Unit OpenFlow Agent SDN flow table SDN Ports A Professional Company in Software-Defined Networking Copyright , EstiNet Technologies Inc. All Rights Reserved. 49

50 How to Start? Migrate from Traditional Network to SDN From Edge (Ready) From Core (*on Develop) ZD ZD TG AM ST AM SDN Contr oller SDN Contro ller A Professional Company in Software-Defined Networking Copyright , EstiNet Technologies Inc. All Rights Reserved. 50

51 Thank You Q &A