Cisco NFVI Solution Djordje Vulovic Consulting Systems Engineer Cisco Day Belgrade, March 31 st, 2016
Network Function Virtualization NFV Current Network New Virtualized Appliance Appliance Appliance Appliance Appliance Appliance Virtual Network Functions Virtual Appliance Virtual Appliance Virtual Appliance Virtual Appliance Virtual Appliance Virtual Appliance Monolithic Lacks Elasticity Extremely costly to deploy/manage Longer Innovation cycles Orchestration & Automation Compute Storage Network Open Shared Infrastructure
Industry & Open Source Efforts around NFV & SDN Cloud Orchestration Data Plane Data Models, Config. Management Netconf/YANG Infrastructure SDN, Controllers Service Chaining NSH and SFC End-to-End Reference Architecture for NFV
ETSI Reference Framework - NFV VNF VNF VNF VNF VNF NFV Infrastructure ( NFVI ) Virtual Compute Virtual Storage Virtual Network NFV Management and Orchestration Virtualisation Layer Compute Storage Network Open Shared Infrastructure
ETSI NFV End-to-End Reference Architecture (Ph 1) NFV Management and Orchestration OSS/BSS Service, VNF and Infrastructure Description Os-Ma Se-Ma Orchestrator Or-Vnfm Technical Steering Committee NFVI EMS 1 S/W VNF 1 Architecture VNF 2 WG VNF 3 Virtual Computing Compute Hardware EMS 2 Vn-Nf Virtual Storage Virtualisation Layer Vl-Ha Storage Hardware Hardware resources EMS 3 Infrastructure WG Virtual Network Network Hardware Ve-Vnfm Nf-Vi Management VNF Manager(s) and Operations Or-Vi (MANO WG) Vi-Vnfm Virtualised Infrastructure Manager(s) Reliability and Availability Expert Groups Performance and Portability Security Execution reference points Other reference points Main NFV reference points
Industry NFV Deployment Models Single Vendor Stack HW decoupled from Virtualisation + VNF Islands HW + Virtualisation platform decoupled from VNFs Full decoupling wt Single virtualisation platform Full decoupling multi virtualisation platforms VNF X Y Z Y Z Y Z Y Z Virtualisation X Y Z X A A B Infrastructure X X X X X TCO & RISK TCO & RISK SI Costs Lowest Low Medium High Highest Functionality & Perf Deterministic Largely Deterministic Partially Deterministic Non Deterministic Non Deterministic Ops Complexity Lowest Low - Medium Medium High High Lifecycle Mgmt Lowest Medium Medium High Highest Flexibility Low High Medium High Highest TCO Lowest Low Medium High Highest
Cisco s Role in NFV Open Standards Based Platform DC and Networking Carrier Grade Solution Driving Ecosystem Contributing in Standards Multiple VNFs Partner Ecosystem Pre-Integration and Validation
UCSD Assurance Unified Management with assurance. Cisco NFV Architecture North Bound APIs Legend Virtual Network Functions Cisco and 3 rd Party CSR ASAv vnam vips NFV-O & Resource Orchestration NSO Network Services Orchestrator enabled by Tail-f or 3rd Party vpc-di vims Video Opt. 3 rd Party VNF Manager Cisco ESC Cisco CTCM 3 rd Party Virtual Infrastructure Manager Network VIM API Mercury based on RHEL OSP OpenStack APIC or VTS or OSC or 3rd Party GUI Linux (RHEL), Hyper Visor (KVM), Host Packages, Software Defined Storage NFVI Scope Cisco Physical Infrastructure Compute (UCS) Network Storage Ceph
Cisco NFV Solution Mapping to ETSI NFV Framework SP s Portal / Prime Service Catalog SP s OSS/BSS or Prime Order Fulfillment NSO (Powered by tail-f NCS) VNF 1 (Cisco or 3 rd Party) VNF 2 (Cisco or 3 rd Party) VNF 3 (Cisco or 3 rd Party) ESC Service Assurance KVM (or ESXi) Ceph (or Cinder/Swift) VTF/OVS/ACI OpenStack (or vcenter) Cisco UCS DAS on UCS Cisco N9K APIC / VTS, ODL
NFV Infrastructure + = NFVI Hardware Software The combination of Hardware and Software components that build the environment in which Virtual Functions (VNFs) are deployed
Business Case for NFVI Capital Efficiency Shared Infrastructure across multiple VNFs Deploy, Provision capacity optimally Better utilization of resources w/ Traffic/services Operational Savings Automate Onboarding, in-service activation Re-purpose of resources On Demand Better lifecycle management, sparing Service Agility Deploying VNF as a software package Automation of services enablement Elastic deployment models in network Innovation & Differentiation DevOps model of continuous deploy, integrate New consumption models aligned w/ business Enable New Use Cases - IoT/M2M /P2P
UCSD Assurance Unified Management with assurance. Cisco NFVI Solution Leading Industry Partnerships Legend Integrated platform Design and Validation Certified by Red Hat Joint Engineering Simple Access to Support Single Point of Contact Performance Acceleration, Enhanced Platform Awareness Virtual Infrastructure Manager Network VIM API Mercury based on RHEL OSP OpenStack APIC or VTS or OSC or 3rd Party GUI Linux (RHEL), Hyper Visor (KVM), Host Packages, Software Defined Storage NFVI Scope Cisco Physical Infrastructure Compute (UCS) Network Storage Ceph
Cisco Red Hat Partnership for NFVI Joint engineering Pre-integrated, validated, tested Fully open source & stds compliant No forks, 100% Upstream Carrier grade HW+SW infra High performing, reliable and secure Simplified manageability Single pane of glass across HW, SW, multi-sites Reliable install/upgrade Containerized services, CI/CD for upgrades Commercially bundled platform Cisco UCS/Nexus HW + RHEL-OS + RH OSP7 Tightly coupled technical support & professional services #1 Network & Server vendor and the #1 OpenStack vendor together delivering a world class NFVI platform Integrated platform sold & supported by Cisco Fully backed by Red Hat engineering & support Broadest open ecosystem of VNF s and ISV s
Cisco Red Hat Partnership for NFV https://www.redhat.com/cms/public/cisco-nfv-infrastructure-solution-brief-a4-en.pdf
Cisco/Intel Partnership for NFV http://www.intel.com/content/dam/www/public/us/en/documents/white-papers/cisco-nfv-partnership-paper.pdf
Cisco NFVI PoD Packaging Carrier Grade Easy to Manage Modular Configuration 1 2 3 6 5 4 Pre-integrated + Validated ½ Rack POD Full Rack POD Advanced Services Single Point of Ownership NFVI Branch Solution Compute Expansion Module Storage Expansion Module
NFVI Requirement #1: Cisco UCS Programmable Servers Extends Abstraction Beyond the Hypervisor to System Elements Infrastructure Automation Through API and Policy Truly Elastic Fully Orchestrated Workload Defined Virtual Resource Pools Infrastructure Management Programmable Infrastructure Virtual Pool of Resources XML API Automated and Dynamic
NFVI Requirement #2: Cisco Nexus Programmable Switches POAP PXE Linux/Python Daemon NXAPI Data Models BootStrap and Provisioning Package and Application Management Standard Open Interfaces Adaptable NXOS Automation and Visibility Server Management Tools Ease Of Operations Modular Open 3 rd Party App Integration Programmability Ready For Devops
Cisco UCS Director Network NFVI Compute VMs Storage On-Demand Automated Delivery Domain Managers OS and Virtual Machines VM VM Bare Metal Policy-Driven Provisioning Compute Compute and Hypervisor UCS Director Unified Management End-to-End Infrastructure Automation and Lifecycle Management Network Storage A Network and Services Tenant A B Tenant B C Tenant C
Cisco Openstack Platform Create a carrier-class platform suitable for NFV Cisco OpenStack Platform High Availability Containerized Openstack Control Plane Stability, Performance, Scalability & Security Install, Upgrade, Monitoring, Serviceability, Logging & Debugging Base OpenStack Distribution Cloud99 Robust Lifecycle Management Cisco Validated Solution Operational Excellence Open & Flexible Accelerating OpenStack adoption for Carrier-Class NFV Cisco Confidential
Cisco OpenStack Vs DIY Distrubtion DIY OpenStack OpenStack Distro Cisco OpenStack Product roadmap w/upgrades None OpenStack software only Complete OpenStack system SLAs No No Yes 99.99% Support None Software only Full stack Production timeline Unpredictable More predictable Predictable OpenStack skill sets required High High Low Operational complexity High Medium Low
Installer Differentiators 1 2 3 4 5 6 Bare-Metal Deployment Utilizes latest modern toolsets: Python, Ansible Innovative use of UCS CIMC APIs to configure HW Deploys RedHat Enterprise Linux (RHEL) and RHEL OpenStack Platform (OSP) Containerized Deployment of OpenStack Services Verifiable HA Deployment
Cloud Pulse OpenStack Health Check Health Checks using CloudPulse tool. Why are cloud health checks so important? Important to NFV applications, Telcos have strict SLAs. VNFs can be moved to a different cloud if OpenStack failure is detected early. Operators need to be aware of the failure before the customer experiences failure. Characteristics of a healthy OpenStack cloud: Control Plane: Openstack services can handle APIs and reply with an appropriate status. Openstack resources can be created and deleted. Data Plane: VMs can communicate within and/or across networks.
Cloud Pulse OpenStack Health Check CloudPulse Operator Infra Tests: DB Cluster Status RabbitMQ Cluster Status HA Proxy Test CloudPulse Operator Service Tests: Service Status Network Port Test CloudPulse Operator API Tests: Endpoint Functional Comprehensive CloudPulse API Light Endpoint: Nova list Cinder list Glance list Neutron net-list Keystone tenant-list CloudPulse API Functional Boot/Delete VM Create/Attach/Detach/Delete volume Create/Delete image CloudPulse API Comprehensive Boot VM on each compute Ping VM across networks
Cloud99 A Framework for OpenStack HA Testing Cisco created HAProxy Keepalived Neutron Glance Keystone nova cinder horizon Load the cloud: concurrent relevant control/data plane tests Process or node level disruption of service Monitor services Ensure no disruption for existing cloud resources!!!
ELK Stack Log Management Platform OpenStack Service Logs LOG Logstash Forwarder on all nodes Data Collection and Transformation Agent An Analytics Engine and DataStore Data Exploration Interface
NFVI CI/CD Differentiator Customizable Continuous Integration Pipeline TEST RH OSP RPMs Cisco Patches Continuous Integration System BUILD Docker Containers Repo
Performance and Validation EANTC: Throughput measurements OVS-DPDK vs. VPP Performance through virtual switch and its virtual interface to VNFs 10 Gbit/s, 1.6 million frames/s throughput with Cisco s VPP 7 Gbit/s, 1.09 million frames/s throughput with OpenvSwitch Latency is a key aspect http://www.lightreading.com/nfv/nfv-tests-and- trials/validating-ciscos-nfv-infrastructure-pt- 1/d/d-id/718684 Cisco Confidential
Cisco NFVI Solution Differentiators Recall, under the hood this solution is Cisco Infrastructure, running RHEL OSP Installer VM throughput Testing Logging/Monitoring? How does this solution Differentiate CI/CD HA Verification Health Checks