HOW SDN AND (NFV) WILL RADICALLY CHANGE DATA CENTRE ARCHITECTURES AND ENABLE NEXT GENERATION CLOUD SERVICES Brian Levy CTO SERVICE PROVIDER SECTOR EMEA JUNIPER NETWORKS
CIO DILEMA IT viewed as cost center Line of business owner needs agility Transform IT into profit center & innovate Powered by Cloud
CLOUD DRIVES AGILITY PRIVATE CLOUD 72% Only 11% no plans to deploy private cloud** APPS IN THE CLOUD PUBLIC CLOUD $54.5B $131B 19% CAGR* 17% CAGR* Virtual Virtual Virtual Physical Virtual My on-premises data center Physical Virtual Physical My managed service provider Virtual Physical My hosted service provider * Gartner, June 2013, Public Cloud Forecast 2011-2017 ** Gartner, Sept 2013, Private Cloud Matures, Hybrid cloud is Next My cloud service provider
NEW ENTERPRISE APPS - NEW ARCHITECTURE Technology architectures must better support increasingly dynamic operational and business processes SILOS SCALE UP SCALE OUT APPLICATIONS Tightly coupled Client/server App performance Big data, real-time analytics Self-service COMPUTE Specialized hardware Virtualization, automation Large & dynamic workloads, mobility STORAGE Storage tied to physical infrastructure SAN/NAS Converged Network Distributed storage NETWORK Closed, Proprietary Physical network Integration with cloud, mgmt tools Dynamic network, Automation, x-domain virtualization Last 10 years Last 3 years Now and future
NETWORK WAS NOT DESIGNED FOR CLOUD 100% VIRTUAL COMPUTE 46% Share of virtualized servers and storage is growing rapidly VIRTUAL COMPUTE 71% 0% Time PHYSICAL COMPUTE 54% but, networks are still designed to connect Physical Hosts and Physical Networking Services PHYSICAL COMPUTE 29% 2011 2016
LIMITATIONS OF CURRENT APPROACHES TO NETWORKING IN THE CLOUD INTER-CLOUD ORCHESTRATION Inability to orchestrate multicloud/hybrid cloud environments SERVICE INSERTION Appliance-based network functions limits service velocity SCALABILITY Tying per-tenant information to physical network restricts scale PROGRAMABILITY No programmatic API at the network level for integrated orchestration
CLOUD CHARACTERISTICS ELASTIC. ON-DEMAND. AGILE.
NETWORK CHARACTERISTICS SPEED. ALWAYS ON. HIGH PERFORMANCE.
THE QUESTION How to get the best of both worlds? ELASTIC. ON-DEMAND. AGILE. SPEED. ALWAYS ON. HIGH PERFORMANCE. How to increase the agility of the network, without breaking what is good?
EVOLUTION OF NETWORK VIRTUALIZATION VLAN APPROACH OPENFLOW REACTIVE APPOACH PROACTIVE SOFTWARE OVERLAY Manual End-to-End VLAN configured on physical switches Reactive End-to-End Requires programming of flows Virtual Network Overlays Automated network provisioning with the ability to run on top of any physical network
NETWORK VIRTUALIZATION JOURNEY VLAN Tenant state embedded in the physical network Manual configuration of VLANs at every switch Performance Management, Scale - 4096 Tenant IDs Service insertion is complex MANUAL. INEFFICIENT. LOW SCALABILITY.
NETWORK VIRTUALIZATION JOURNEY Reactive OpenFlow Approach Controller becomes the choke point Centralized Openflow Controller Per-Tenant state in the physical network OpenFlow needs to be supported in the physical network HIGH LATENCY. LOW SCALABILITY. NEW FAILURE MODE. FORK-LIFT UPGRADE.
NETWORK VIRTUALIZATION JOURNEY Proactive Software Overlay Networks Logically centralized and distributed SDN Controller Controller proactively programs virtual overlay switches & gateways only Existing protocols establish IP fabric underlay No per-tenant state in physical network: Switches only know physical servers LOW LATENCY. HIGH SCALABILITY. ROBUST. EVOLUTIONARY.
CONTRAIL FUNCTIONALITY 4 key Components of the Contrail Family Contrail SDN Controller Contrail Controller Open, Standards-based Controller Controller Analytics Contrail Analytics Virtualized Server vrouter IP fabric (underlay network) Virtualized Server vrouter Real-time analytics engine on various protocols between any network Contrail vrouter QFX, Q-Fabric, EX engine which handles the forwarding plane work on the compute node MX-3D/EX9200 (Gateway Element) Gateway Element MX Series (or other router) or EX9200 can serve as a gateway eliminating the need for a SW gateway & improving scale
CONTRAIL - FEATURES ANY Open Cloud Platform VIRTUAL NETWORK CONTRAILCONTROLLER VIRTUAL NETWORK OVERLAY Routing Switching Gateway Services IPAM, Virtual DNS Load Balancing Rich Analytics Service Chaining Security ANY Hypervisor ANY Physical Network High Availability Elastic, Resilient VPN REST API
NETWORK RESPONDS TO APPLICATION APPLICATION Continuous Network, Infrastructure Feedback Resource Orchestration Analytics Compute & Storage Provisioning Infrastructure Events, Logs, Statistics Automated & Orchestrated Network Networking Services Orchestration Virtual Network Provisioning Policy & Security Framework
WHAT ABOUT THE PHYSICAL NETWORK? Increased agility? Automation? Orchestration? Yes, Yes, Yes
AN ANALOGY Cars for the last 100 years Cars today. Manual everything transmission, radio, heat, etc Automatic climate control, back up sensors, lane change warnings, GPS, etc. Make the network easier to drive without taking away control.
SOFTWARE DEFINED NETWORK? SDN is the Brains of the network it is the part that creates service contexts for use within the network A service context is a service delivered over an infrastructure to a requester, here the requester could be a person, device, other network provider, application etc SDN is responsible for the lifecycle management of that service context from birth to death In SDN architectures the Brains are logically centralised and have domain over a given infrastructure SDN goes beyond human capacity with SDN you can have more than one Brain but the Brains or Controllers need to be synchronised if they are managing the same infrastructure
THE ETSI NFV FOUNDATION ARCHITECTURE Juniper is an active supporter of the ETSI Network Functions Virtualisation Initiative. We recently hosted the forums plenary meeting in our campus in Sunnyvale with over 350 attendees from 155 companies attending. Juniper is providing regular technical contributions to the forum and working with the industry to develop the architectural framework for the future
NETWORK FUNCTIONS VIRTUALISATION? NFV or (Network Functions Virtualisation) is the virtualisation of functions within the network. Today we have individual physical boxes within communication networks for particular functions NFV uses the same techniques that have been used in IT systems for years to create virtualised compute and storage architectures, however, in this case we are virtualising network functions such a firewalls, routers etc The effect of NFV will be profound on network infrastructures as now we are redefining the way communications functions are actualised and scaled Having network functions on demand, scalable and flexible within networks will be the most important change driving new network designs in the coming years
INTRODUCING THE HI IQ NETWORK Empowering End Customers With Customization OPERATIONS AUTOMATE Simplicity and Agility INFRASTRUCTURES SCALE Performance and Efficiency SERVICES CREATE Intelligence and Programmability
THE HI IQ NETWORK OUR VISION Networks where the functionally and not just the bandwidth of the infrastructure can be dynamically changed as needed to meet differing demands and to bring new services to market in minutes rather than months This is an network infrastructure that is able to adapt to different demands placed upon it with a level of flexibility way beyond the networks of today. It is an infrastructure that is application aware, self learning and intuitive, where the capabilities of the network can be adjusted in real time to provide the best level of user experience for the customer and the greatest levels of efficiency for service provider
EXAMPLE: CUSTOMIZE THE CLOUD Business Subscribers Customize Their IT Needs Subscribers Select: ENTERPRISE SERVICES IP VPN Business Apps Security WAN Opt MDM Offer seamless access and integration to your mission critical applications backed by guaranteed SLAs http://intelligentspcloud/enterpriseservices/apps.aspx Business Applications Services And Applications Service Grades Schedule Scale / Size Up to 200 Users Choose your business application(s) Pricing $/App Office365 OracleSAP Salesforce.com 201-500 Users Google Apps Choose your business application(s) Pricing $/App Office365 OracleSAP Salesforce.com Google Apps SLA Selection Basic Standard Premium SLA Selection Basic Standard Premium Order Additional Service Options IP VPN Security WAN Opt MDM 500+ Users Choose your business application(s) Pricing $/App Office365 OracleSAP Salesforce.com Google Apps SLA Selection Basic Standard Premium Contact us
USE CASES
THE VIRTUALIZED DATA CENTER Silo ed Resource Allocation Manual Configuration Static Service Chains Dynamic Resource Allocation Automatic Configuration Dynamic Service Chains TRADITIONAL DATACENTERS VIRTUALIZED DATACENTERS VLANS Firewalls Load- Balancer VLANS VIRTUALIZED FINANC E Physical Servers HR Local Hard Drives MARKETIN G FINANCE HR MARKETING Virtual-Network based Orchestration (Compute, Storage, Apps)
ENTERPRISE USE CASE Virtualized Private and Hybrid Clouds Contrail enables enterprises to adopt private or hybrid virtual cloud strategies with application and workload mobility HUMAN RESOURCES ENTERPRISE PRIVATE CLOUD Contrail SDN Controller Orchestrator FINANCE ENGINEERING FINANCE VPC PUBLIC CLOUD (E.G., AWS) HR VPC ENGINEERING VPC Workload Mobility ENGINEERING VPC BENEFITS Contrail enables enterprises to adopt private or hybrid virtualized clouds to increase business agility Integration with Cloudscaling enables workload mobility between private and public clouds
SP: CLOUD BROKERAGE/HYBRID CLOUD Service providers partners with other cloud providers Secure public cloud access with network backed SLA s New revenue stream for carrier with service chaining Increased revenue & customer loyalty with innovative new service shared revenue model Carrier VPN Other Cloud Services Carrier Data Center
THREE KEY DIFFERENTORS FOR SERVICE PROVIDER CLOUD SERVICES Application SLA Service Wrap Trust / Security
EXAMPLE: CUSTOMIZE THE CLOUD SP Network Automates, Scales, and Creates Customer Portal Optimized, Agile Paths NFV vpe vcpe NFV HQ vcpe Branch Service Providers Perform: 1. Partner Broker / Resell 2. VPN Creation 3. NFV Service Chaining 4. Optimal Path Management 5. Service Level Agreement Service Level Agreement SP Network NFV SP Data Center vpe Premium XaaS vpe SaaS Cloud
Get the code at www.opencontrail.org Production-ready; open networking standards based controller Open Source SDN Controller Available via Apache 2.0 license www.opencontrail.org
SDN AND CLOUD PARTNERSHIPS SDN Technology Partnerships Cloud Orchestration Partnerships
JUNIPER IS LEADING AN SDN TRANSFORMATION ACCELERATED TTM LOWER TCO PROGRAMMABILITY NETWORK INSIGHTS OPENNESS & INTEROPERABILITY Agile deployment of network services for faster time to revenue 3rd party services can run unmodified on the platform, eliminating the need for custom development Higher utilization of existing infrastructure & cost effective x86 HW Centralizes management reducing operational cost & complexity Uses standard protocols obviating need for specialized knowledge NB REST APIs allows easy integration with existing OSS/BSS Network complexity abstracted out using rich and programmatic interface, allowing for policy-based automation Collects & analyzes huge amounts of network state information Offers APIs for 3rd party analytics & visualization software to integrate with the system Interoperable with multi-vendor infrastructure and services Contrail integrates with Openstack, Cloudstack, K, Xen, and other open-sourced products / components
THANK YOU Brian Levy CTO SERVICE PROVIDER SECTOR EMEA JUNIPER NETWORKS