CJK Workshop 2014 1 Overviews of Cloud Computing and SDN activities in WIDE Project Yuji Sekiya The Univ. of Tokyo / WIDE Project
CJK Workshop 2014 2 Research Consortium WIDE Project http://www.wide.ad.jp/ Commercial companies, research institutions, and universities over 50 organizations and over 1,000 people are joined Founder : Prof. Jun Murai Director : Prof. Hiroshi Esaki Researches Activities are in working groups. WIDE workshop is held two times a year (May, December) WIDE camp is held two times a year (March, September)
CJK Workshop 2014 3 Cloud Computing Activities in WIDE Project Cloud WG in WIDE Project Started on 2010 Targeted to evaluate and develop Fundamental Technologies for Cloud Computing. Distributed Storage Load Balancing of Resources Load Balancing of Applications Distributed Processing for Big Data Actual TestBed The first target is IaaS (Infrastructure as a Service) WIDE Cloud (Inter-University IaaS Cloud)
CJK Workshop 2014 4 Distributed IaaS Cloud WIDE Cloud
Federated Cloud Controller CJK Workshop 2014 5 OpenSource Based WIDE Cloud Architecture Application Layer Middleware Layer NoSQL SQL Control Layer libvirt RESTful API VM Image Virtual Resource Layer Facility Layer map646 NEMO NFS VLAN Sheepdog kvm glusterfs iscsi VXLAN L Network Server Storage Application
CJK Workshop 2014 6 Full IPv6 cloud Use map646 for IPv4 translation Distributed Filesystem GlusterFS ukai VM Mobility NEMO (Network Mobility) VXLAN + L Resource Management Auto VM migration Cloud Controller (WCC) Not only IaaS Hadoop / Presto clusters are working for NECOMA Project Challenges in WIDE Cloud Location-Level Redundancy Network Mobility Site A VM Replication Hypervisors VMs Distributed Storage Site C Datacenter1 Hypervisors Site B IPv6 Internet Datacenter 3 10 Site A Site A Migratable Network IPv4 Internet Hypervisors Datacenter 4 Datacenter 2 Migratable Network NAT64 Boxes Hypervisors Site B Site B
CJK Workshop 2014 7 WCC : http://wcc.wide.ad.jp/ Over 400 VMs are working! It s working over four years!!
CJK Workshop 2014 8 GINEW Project SDN Activities in WIDE Project Joint Research with NICT Provide virtual SLICE to users on JGN-X testbed SDN-IX by NECOMA / NSPIXP Project
CJK Workshop 2014 9 Basic Idea of User Defined and Organized Network Virtual Node Underlay Network Node Virtual Link Underlay Network Link Genera ng UDON API Change Route of Virtual Link A to B A Abstracted Layer of UDON Corresponding Configura ons Then, Change the route of Virtual Link from A to B B C
CJK Workshop 2014 10 JGN-X 利 用 者 A Network Virtualization on JGN-X JGN-X 利 用 者 B Zone A-1 Zone A-2 Network for User A Zone B-1 Zone B-2 Network Slice B ユーザ 提 供 レイヤー Network Slice A Network Slice B 仮 想 化 スライス 提 供 レイヤー 仮 想 資 源 グループ A 仮 想 資 源 グループ C 仮 想 資 源 グループ B 東 京 大 学 担 当 ミドルウェア 仮 想 化 リソース プールレイヤー Sapporo OF OF VN DCN OF Fukuoka Okinawa VN Okayama Hiroshima OF VN OF Kagawa Kochi DCN Osaka VN OF Kanazawa NICT Koganei Nagoya VN OF Iwate Sendai OF VN DCN OF Tokyo 物 理 リソース プールレイヤー
CJK Workshop 2014 11 Demonstration on SC13 Adaptive Bandwidth Control Application of GINEW API Collaboration w/ PerfSONAR User s Program manage shared bandwidth, Measuring by PerfSONAR Controlling by GINEW Already prepared, Will be applied soon. => DONE TH SG Sharing Bandwidth Bandwidth Measurement By PerfSONAR User s Program Bandwidth Control By GINEW
CJK Workshop 2014 12 Developing and Deploying SDN-IX (PIX-IE) PIX-IE : Programmable Internet exchange in EDO Technology is developed in NECOMA Project Current roles of Internet Exchanges Layer-3 IX / Layer-2 IX Exchanging Internet Traffic following BGP information Need more? The granularity of TE (Traffic Engineering) is BGP prefix. BGP granularity is /24 (IPv4) and /48 (IPv6) prefixes Need more? DDoS is one of the most serious problem in the Internet An wants to prevent or mitigate the traffic at the edges of ingress Need more? Path exchanges between Ases The index is not only VLAN. Using dst address and/or src address, dst port, TOS, MPLS label, VXLAN SDN-IX
CJK Workshop 2014 13 Operated by WIDE Project Research IX 2 IXs in Tokyo and Osaka DIX-IE (Tokyo) : 53 ASes NSPIXP3 (Osaka) : 13 Ases Activities IPv4/IPv6 native dual stack Connected between Tokyo = OSAKA (NSPIXP23) More Research => SDN-IX (Programmable IX) NF Park MLX-1 GbE x 2 10G 20G(10G x 2) MLX-1 @Tokyo NSPIXP Project MLX-1 BI15K -1 MLX-2 ComSpace-1 BI15K -2 MLX-1 NTT Otemachi BI151 BI81 KDDI Otemachi MG8-1 MLX-3 MG8-2
CJK Workshop 2014 14 1) DDoS Prevention and Mitigation on IX Programmable IX (PIX-IE) Victim Link Saturation Spoofed SRC UDP Victim Service
CJK Workshop 2014 15 Current Solution Human Interaction Programmable IX (PIX-IE) The operator has to contact to each, and ask to filter the DDoS packets Victim Link Saturation Spoofed SRC UDP Victim Service
CJK Workshop 2014 16 Solution by SDN Mitigation Programmable IX (PIX-IE) Mitigation Mitigation Mitigation REST API Victim Victim Service
CJK Workshop 2014 17 2) Flexible Path Exchanges The demand for extend own local network into other Autonomous Systems Event : Temporally use (e.g. experiments at SC) Connect to colocation hosts at Data Centers IaaS Cloud Equinix serves their customers with private wires that are connected to Amazon EC2 Existing way to extend VPN (including Overlay Networks): They have encapsulation and encryption overhead...
CJK Workshop 2014 18 2) Flexible Path Exchanges Interconnection of VLAN, VXLAN, MPLS, Application Datacenter A Datacenter B VLAN : 30 VLAN : 1000 Datacenter C VLAN : 50 Programmable IX (PIX-IE) VLAN # migration VLAN : 2000 Datacenter D VLAN : 100 VLAN : 500
CJK Workshop 2014 JSON Format { context : String, AS : AS Number, VLAN : VLAN ID } Current Implementation 2 Check Context and Authentication 19 1 Context + ASnum + VLANnum Controller 1 Context + ASnum + VLANnum AS X Network OpenFlow based IX AS Y Network 3 Create L2 circuit for AS X and Y
CJK Workshop 2014 20 Interop Tokyo 2014 Demonstration in Interop Tokyo 2014 The largest ITC events in Japan Over 130,000 people are visited
CJK Workshop 2014 21 a Screenshots
Thank You