BROCADE SOFTWARE DEFINED NETWORKING: INDUSTRY INVOLVEMENT Rajesh Dhople Brocade Communications Systems, Inc. rdhople@brocade.com 2012 Brocade Communications Systems, Inc. 1
Why can t you do these things today? Traditional Network Network changes are difficult, slow, and risky Hierarchical Closed North/Southoptimized Monolithic Inflexible Can t handle rapid swings in traffic demands New services requires adding expensive specialized skills Unlimited funds needed to solve issues 2012 Brocade Communications Systems, Inc. 2
Cloud-Optimized Networks via SDN are the Solution Software Defined Networking Cloud Management System Network Controller Network changes are quick and easy Network Fabric Open Automated Personalized Flexible More Resilient Rapid deployment of new services Flexible, on demand networks Highly automated environments 2012 Brocade Communications Systems, Inc. 3
SDN Target Use Cases DC Network Virtualization DC Virtualization Network Analytics Network Analytics Overlay Gateway Network Fabric Tool 1 Production 100 GE and 10GE WAN Analytics & Telemetry Network Tool 2 Tool 3 Tool 4 Tool 5 WAN Network Virtualization WAN Virtualization Services Creation & Insertion Services Insertion Customer 1 ADC FW Cache Customer 2 DC 1 DC 2 100 GE and 10GE WAN AAA 2012 Brocade Communications Systems, Inc. 4
SDN Use Case: WAN Flow Management with OpenFlow 2012 Brocade Communications Systems, Inc. 5
Service Provider WAN Use Case Using Hybrid Switch Mode Features (Applications) Network Controller OpenFlow Network Hybrid switch mode OpenFlow ports run OpenFlow only WAN traffic managed exclusively using OpenFlow WAN Physical Infrastructure 2012 Brocade Communications Systems, Inc. 6
Service Provider WAN Use Case Unprotected Production IP Network with OpenFlow Overlay Features (Applications) Hybrid port mode Network Controller OpenFlow overlay runs concurrently with traditional MPLS/IP routing OpenFlow enabled on existing OpenFlow Overlay production network Traditional MPLS/IP Routing WAN Physical Infrastructure Unprotected OpenFlow allowed as an exception rule to MPLS/IP forwarding Service Provider can add new revenue-generating features on top of existing production network 2012 Brocade Communications Systems, Inc. 7
Research and Education Network (REN) WAN Use Case Protected Production IP Network with OpenFlow Overlay Protection Layer Features (Applications) Network Controller Hybrid port mode N k C ll OpenFlow overlay runs concurrently with traditional MPLS/IP routing OpenFlow Overlay Traditional MPLS/IP Routing WAN Physical Infrastructure OpenFlow enabled on existing production network Protected OpenFlow experimentation by researchers does not affect production traffic OpenFlow/Production traffic isolation in hardware 2012 Brocade Communications Systems, Inc. 8
Protected versus Unprotected Hybrid Port Mode Protected Hybrid Port Mode OpenFlow rules cannot affect the traffic of a set of protected VLANs Protection is supported in hardware Unprotected Hybrid Port Mode Ingress frames are checked against OpenFlow rules first If there is no match, traffic is processed by configured features on the port, e.g., BGP routing, MPLS, etc 2012 Brocade Communications Systems, Inc. 9
SDN Use Case: Network Virtualization Using L2 over L3 Tunnels 2012 Brocade Communications Systems, Inc. 10
Network Virtualization A SDN Application A SDN application that enables the creation of logical networks (multi-tenancy) over a common physical network Logical networks contain VMs and physical workloads (e.g., physical servers, firewalls, etc) Enables seamless control of network resources regardless of location SP Physical Infrastructure Logical networks can be used to bridge private and public clouds 2012 Brocade Communications Systems, Inc. 11
Network Virtualization Using L2 over L3 Tunnels An Industry Trend for Hyper-Scale Data Centers Network Virtualization created using L2 over L3 tunnels Tunnels L2 over L3 Tunnels SP Physical Infrastructure Programmatic interface may use OpenFlow Requires additional management protocols beyond OpenFlow to provision tunnels 2012 Brocade Communications Systems, Inc. 12
Public Cloud Use Case Hyper-scale DC Hyper-scale DC in terms of number of customers and VMs VLANs and MAC learning do no scale well in this case Must maximize number of VMs per server to lower costs Customer A (Logical Network) VM1 SP DC VM2 1 Customer A At Customer B DC VM VM Customer B L3 VPN or Internet CPE VM 3 Customer B (Logical Network) SP DC VM 4 2 Customer DC VM VM Network virtualization ti using tunnels to address VLAN/MAC learning limitations Flexible allocation of services (VMs and Physical workloads) anywhere in DC SDN provisioning at edge of DC network Not hop-by-hop SDN Controller Server vswitch L2 over L3 tunnels Cloud Router Data Center Requires hardware-based switches terminating tunnels VM3 VM1 vswitch For physical workload attachment (ToR) 1 Virtual workloads VM4 VM2 Physical workloads For access to L3VPN and the Internet (Cloud router) For customer site termination of tunnels (CPE) Cloud Data Center Server SDN: Edge of DC Network ToR 2 2012 Brocade Communications Systems, Inc. vswitch: software switch 13
Web 2.0 Use Case Internet SDN Controller Cloud Router Data Center Large internal customers Use of VLANs for customer isolation limits workload placement leading to under utilized resources (servers), leading to higher CapEx and OpEx Must maximize resource utilization (servers) to lower costs Network virtualization using tunnels to address Flexible allocation of services (VMs and Physical workloads) anywhere in DC SDN provisioning at edge of DC network Not hop-by-hop Requires hardware-based switches terminating tunnels For physical workload attachment For access to L3VPN and the Internet (Cloud router) 2012 Brocade Communications Systems, Inc. SDN: Edge of DC Network Server vswitch VM3 VM1 L2 over L3 tunnels Virtual workloads Internal Customer A (Logical Network) SP DC Server VM1 VM2 vswitch VM4 vswitch: software switch VM2 1 Web 2.0 Data Center Internal Customer B (Logical Network) SP DC VM3 VM4 ToR Physical workloads 14 2 2 1
The Emergence of the Cloud Router Routing Automation of IP-VPN PE Data Center Router Customers Cloud Gateway Direct mapping from customers Logical Network and Metro/WAN transport Data Center SDN Controller Server VM VM Internet, IP-VPN, WAN/Metro Tunnels Cloud Router Server VM VM Eliminates use of transit hop using VLANs Single SDN point of control between Metro/WAN and DC Cloud Scale Optimized to large multi-tenancy requirements End-to-end OAM and SLA from customer site to DC cloud services Provider edge and DC routing capabilities Inter-DC connectivity 2012 Brocade Communications Systems, Inc. 15
THANK YOU 2012 Brocade Communications Systems, Inc. 16