Data Center SDN. ONF SDN Solutions Showcase Theme Demonstrations SDN SOLUTIONS SHOWCASE

Transcription

1 Data Center ONF Solutions Showcase Theme Demonstrations

2 Data Center -Enabled Science- DMZ Demonstration Brocade & Indiana University Adaptive Traffic Forwarding for Large Data Flows Using SciPass 2014 Open 2 Networking Foundation

3 Data Center 7 important solutions Customers using real to solve real business challenges Meet with them following demo conclusion Passport stickers available after demo conclusion (must be present Friday to win $3000+ in prizes) Handouts available, decks at sdnshowcase High-information, low sales pitch 3

4 Brocade & Indiana University Brocade Communications Inc. San Jose, CA. 4,000 Employees worldwide Customers in 160 countries! Ethernet Routing/Switching! Software-Defined Networking! Network Functions Virtualization! Application Delivery Switches! SAN Backbone/Director blades! SAN Transceivers! Management Software Ethernet & Fibre Channel GlobalNOC at Indiana University Bloomington, Indianapolis and Boulder, Co 100 Employees and growing 20+ Research and Education Partner Nets! 24x7 NOC services! Engineer services! NMS Software as a Service! development! Training and outreach 4

5 Science DMZ Use Case Customer Challenge The Solution Solution Benefits!! Goal is to transfer large datasets as close to 100G as possible!! Firewall is a choke point for elephant flows!! Overall performance degradation!! Requiring manual input for configuration changes can t scale, especially under peak demand!! Moving high-performance science network outside firewall increases security exposure!! Selectively bypass FW automatically for trusted users (ie., create white-list) Dynamic and real-time Firewall service bypass functionality DPI to identify good / trusted flows OpenFlow to bypass FW SciPass is one implementation example!! Automation for scaling existing processes!! Big performance gain for trusted users; eases constraints on FWs, up to 100GE!! Uses existing security and network infrastructure!! Uses standards-based API and protocols Details at 5

6 Traditional REN Science DMZ Campus Firewall is a Performance Bottleneck Campus Firewall is a Performance Bottleneck Most campus networks do not have a Science-DMZ Traditional Science-DMZ architecture connects science LAN outside FW Creates security exposure New solution is needed Science DMZ Switch /40G /40G High performance Data Transfer Nodes with high-speed storage WAN Science DMZ Enterprise Border Switch Router/Firewall 100 GbE link 10/40 GbE link 6

7 Science-DMZ Demo Service Flow Traffic Analytics App (BRO ) White-List Flow parameters Traffic Management App (SciPass) OpenFlow port Normal Routing port OpenFlow Hybrid port DMZ Router/Switch Processed data Mirrored Traffic 100G WAN Link Raw data HPC/Science High Volume Flows Firewalled Traffic HPC/Science LAN Campus network 7

8 Demo Topology 10 GbE 100 GbE MLXe Border Router IU Server WAN InterTubes Argonne Server Firewall 8

9 SciPass Operation - Phase 1 By default all traffic passes through firewall A copy of traffic is sent to one of the sensors Network Sensor selection load balanced Firewall 100G SciPass: Controller OpenFlow Switch Feedback 100G PerfSONAR Network 9

10 SciPass Operation - Phase 2 BRO inspects traffic to find good science flows Requests a bypass for the flows deemed good Network 100G SciPass: Controller Feedback Firewall OpenFlow Switch 100G PerfSONAR Network 10

11 SciPass Operation - Phase 3 SciPass inserts bypass OpenFlow forwarding rules! Traffic not sent to! Traffic not sent to Firewall Network Throughput improves 100G SciPass: Controller Feedback Firewall OpenFlow Switch 100G PerfSONAR Network 11

12 SciPass Performance SciPass performance is labeled reactive bypass (green line) T = 64 ms - time to detect and bypass T = 250 ms - double throughput of the firewall T = 1.5 sec - same throughput as NO firewall ( proactive bypass ) 12

13 Let s Watch the Demo! Thanks for watching; please ask questions at the end of the demo or see us afterwards Please visit Brocade at Expo location 21 13