YI-CHIH HSU & JEI-WEI CHANG @ ESTINET TECHNOLOGIES A Professional Company in Software-Defined Networking Copyright 2000-2015, EstiNet Technologies Inc. All Rights Reserved. 1
About EstiNet A Professional Company in Software Defined Network Taipei HQ Hsinchu Tainan Since 2011 @ Taiwan Locations Technologies Founders A Professional Company in Software-Defined Networking Copyright 2000-2015, EstiNet Technologies Inc. All Rights Reserved. 2
Smart Home, Smart Machines, Internet of Everything A Professional Company in Software-Defined Networking Copyright 2000-2015, EstiNet Technologies Inc. All Rights Reserved. 3
Mobile Devices, Apps, Cloud/Client Computing, Analysis, IOT A Professional Company in Software-Defined Networking Copyright 2000-2015, EstiNet Technologies Inc. All Rights Reserved. 4
Cloud/Client Architecture, Web-Scale IT, Personal Could, Big Data A Professional Company in Software-Defined Networking Copyright 2000-2015, EstiNet Technologies Inc. All Rights Reserved. 5
Top 10 Strategic Technology Trends for 2014 & 2015 Source: Gartner 2014 3D 列 印 3D Printing 雲 與 端 架 構 Cloud/Client Architecture 混 合 雲 服 務 仲 介 Hybrid Cloud & IT as a Service Broker 行 動 應 用 Mobile Apps and Applications 行 動 裝 置 管 理 Mobile Device Diversity and Management 智 慧 機 器 Smart Machines 軟 體 定 義 一 切 Software-Defined Anything 個 人 雲 The Era of Personal Could 物 聯 網 The Internet of Everything 網 路 規 模 資 訊 技 術 Web-Scale IT 2015 3D Printing 3D 列 印 Advanced, Pervasive and Invisible Analytics 先 進 普 遍 隱 形 的 分 析 Cloud/Client Computing 雲 與 端 運 算 Computing Everywhere 運 算 無 所 不 在 Context-Rich Systems 豐 富 內 容 系 統 Risk-Basked Security and Self-Protection 風 險 導 向 安 全 與 自 我 防 護 Smart Machines 智 慧 機 器 Software-Defined Applications and Infrastructure 軟 體 定 義 應 用 與 架 構 The Internet of Things 物 聯 網 Web-Scale IT 網 路 規 模 資 訊 技 術 Mobile IoT Big Data Cloud SDx A Professional Company in Software-Defined Networking Copyright 2000-2015, EstiNet Technologies Inc. All Rights Reserved. 6
Technology Trends & SDx Mobile Device SDx Cloud Big Data IoT A Professional Company in Software-Defined Networking Copyright 2000-2015, EstiNet Technologies Inc. All Rights Reserved. 7
A Professional Company in Software-Defined Networking Copyright 2000-2015, EstiNet Technologies Inc. All Rights Reserved. 8
Portion of Network Purchases Influenced by SDx Source: SDx Central A Professional Company in Software-Defined Networking Copyright 2000-2015, EstiNet Technologies Inc. All Rights Reserved. 9
Software-defined Network Drivers and Impact Private cloud is not just about cost reduction. Agility will be a key benefit 1 By 2020, 50 billion devices will be connected to wireless networks 2 SDN/OpenFlow market will grow to almost $2 billion by 2016 driven by the growing need for scalability & network programmability 3 HUMAN MIDDLEWARE DEVICE SECURITY SCALE, PROGRAMMABILITY 1 Gartner G00238288, Five Things That Private Cloud Is Not, 3 August 2012,Thomas J. Bittman 2 Ericsson white paper, More Than 50 Billion Connected Devices, February 2011 3 IDC #235074, Technology Assessment: The Impact of OpenFlow on Data Center Network Architectures June 2012 A Professional Company in Software-Defined Networking Copyright 2000-2015, EstiNet Technologies Inc. All Rights Reserved. 10
What Happened to Network You can create a virtual machine with 1TB storage within 60 seconds, but you need to wait 24 hours to set up network A Professional Company in Software-Defined Networking Copyright 2000-2015, EstiNet Technologies Inc. All Rights Reserved. 11
PC Market A Professional Company in Software-Defined Networking Copyright 2000-2015, EstiNet Technologies Inc. All Rights Reserved. 12
Storage Market A Professional Company in Software-Defined Networking Copyright 2000-2015, EstiNet Technologies Inc. All Rights Reserved. 13
Network Market A Professional Company in Software-Defined Networking Copyright 2000-2015, EstiNet Technologies Inc. All Rights Reserved. 14
You Need Auto Provisioning! A Professional Company in Software-Defined Networking Copyright 2000-2015, EstiNet Technologies Inc. All Rights Reserved. 15
Remember mainframes? source: Curtsey of Dan Pitt @ONF Specialized Applications Ap Ap Ap Ap Ap Ap Ap Ap Ap Ap Ap Ap p p p p p p p p p p p p Open Interface Specialized Operating System Specialized Hardware Windows Linux Open Interface Microprocessor Mac OS Vertically integrated Slow innovation Closed, proprietary Small industry Horizontal Rapid innovation Open interfaces Huge industry A Professional Company in Software-Defined Networking Copyright 2000-2015, EstiNet Technologies Inc. All Rights Reserved. 16
That s what today s routers are source: Curtsey of Dan Pitt @ONF Vertically integrated, complex, closed, proprietary Networking industry with mainframe mindset Routing, management, mobility management, access control, VPNs, Feature Feature Feature Feature Feature OS Million of lines of source code 6,000 RFCs Custom Hardware Billions of gates Bloated Power Hungry A Professional Company in Software-Defined Networking Copyright 2000-2015, EstiNet Technologies Inc. All Rights Reserved. 17
Drawbacks of existing network A Professional Company in Software-Defined Networking Copyright 2000-2015, EstiNet Technologies Inc. All Rights Reserved. 18
What SDN really is source: Curtsey of Dan Pitt @ONF Specialized Features Ap Ap Ap Ap Ap Ap Ap Ap Ap Ap Ap Ap p p p p p p p p p p p p Open Interface Specialized Control Plane Control Plane 1 Control Plane 2 Control Plane 3 Specialized Hardware Vertically integrated Closed, proprietary Slow innovation Horizontal Open interfaces Rapid innovation Open Interface Merchant Switching Chips A Professional Company in Software-Defined Networking Copyright 2000-2015, EstiNet Technologies Inc. All Rights Reserved. 19
Software Defined Network, SDN source: Curtsey of Scott Shenker @UCB 3. Well-Defined Open API Features 1. Open Interface to Hardware Features Network OS Network Operation System Features Operation System Forwarding Hardware 2. Network OS Open and Closed- Source Features Operation System Forwarding Hardware Features Features Operation System Forwarding Hardware Operation System Forwarding Hardware Operation System Forwarding Hardware A Professional Company in Software-Defined Networking Copyright 2000-2015, EstiNet Technologies Inc. All Rights Reserved. 20
SDN Architecture A Professional Company in Software-Defined Networking Copyright 2000-2015, EstiNet Technologies Inc. All Rights Reserved. 21
Comparison with Traditional Network & Software Defined Network A Professional Company in Software-Defined Networking Copyright 2000-2015, EstiNet Technologies Inc. All Rights Reserved. 22
SDN Defined On Open Networking Foundation Source: opennetworking.org In the SDN architecture, the control and data planes are decoupled network intelligence and state are logically centralized the underlying network infrastructure is abstracted from the applications A Professional Company in Software-Defined Networking Copyright 2000-2015, EstiNet Technologies Inc. All Rights Reserved. 23
SDN Delivers Achieve Agility Ability to Apply Business Logic to Network Behavior in Dynamic Fashion Programmability Application Layer Open programmable interfaces to automate orchestration of network services SDN Architecture Control Layer Centralized Intelligence Separate control and data plane; Abstract control plane of many devices to one Infrastructure Layer Open standard-based programmatic access to infrastructure Abstration A Professional Company in Software-Defined Networking Copyright 2000-2015, EstiNet Technologies Inc. All Rights Reserved. 24
A Professional Company in Software-Defined Networking Copyright 2000-2015, EstiNet Technologies Inc. All Rights Reserved. 25
Open Networking Foundation, ONF 8 Board Members & 146 Current ONF Members A Professional Company in Software-Defined Networking Copyright 2000-2015, EstiNet Technologies Inc. All Rights Reserved. 26
ECO-System on SDN 2010/11/05 Learning Bridge, STP, RSTP, VLAN, LACP etc. Legacy L2 Functionalities Agent H/W pswitch OpenFlow conformance test tool for switch development Conformance Test Provisioning Orchestration Virtualization Northbound API SDN Controller Southbound API (OpenFlow) Add OpenFlow agent upon hardware switch device Network Management Fault Configuration Performance Security Accounting Switch OS vswitch Applications Applications base on the Network virtualization/ Orchestration Platform i.e. Provision & Network Management Network Virtualization Platform EstiNet Network Simulator & Emulator for SDN controller development A Professional Company in Software-Defined Networking Copyright 2000-2015, EstiNet Technologies Inc. All Rights Reserved. 27
OpenFlow OpenFlow Controller A southbound API For OpenFlow Controller and OpenFlow Switch Communication OpenFlow is a way to implement SDN OpenFlow Channel OpenFlow Protocol Group Table Flow Flow Flow Flow Table Table Table Table OpenFlow Pipeline Meter Table OpenFlow Switch A Professional Company in Software-Defined Networking Copyright 2000-2015, EstiNet Technologies Inc. All Rights Reserved. 28
Flow Table Flow Entry Format Example: Flow Entries in Flow Table Flow ID Src IP Dst IP Eth type Priority Counters Instructi ons 1 * 10.1.*.* * 60 500 Port 1 20 Timeouts Cookie 2 * * 0x88A8 3000 0 Drop 10 3 * 10.2.*.* * 50000 0 Port2 30 Eth type = 0x88A8 Dst IP = 10.1.*.* Eth type = 0x8100 Dst IP = 10.1.*.* Drop Eth type = 0x8100 Dst IP = 10.1.*.* Dst IP = 10.2.*.* Dst IP = 10.2.*.* 2 10.16.*.* 10.2.*.* 1 10.1.*.* A Professional Company in Software-Defined Networking Copyright 2000-2015, EstiNet Technologies Inc. All Rights Reserved. 29
OpenFlow Pipeline A Professional Company in Software-Defined Networking Copyright 2000-2015, EstiNet Technologies Inc. All Rights Reserved. 30
Match Fields 41 Match Fields in OpenFlow Spec 1.4 IN_PORT IN_PHY_PORT METADATA ETH_DST ETH_SRC ETH_TYPE VLAN_VID VLAN_PCP IP_DSCP IP_ECN IP_PROTO IPV4_SRC IPV4_DST TCP_SRC TCP_DST UDP_SRC UDP_DST SCTP_SRC SCTP_DST ICMPV4_TYPE ICMPV4_CODE ARP_OP ARP_SPA ARP_TPA ARP_SHA ARP_THA IPV6_SRC IPV6_DST IPV6_FLABEL ICMPV6_TYPE ICMPV6_CODE IPV6_ND_TARGET IPV6_ND_SLL IPV6_ND_TLL MPLS_LABEL MPLS_TC MPLS_BOS PBB_ISID TUNNEL_ID IPV6_EXTHDR PBB_UCA Dst MAC Src MAC Ether Type VLAN ID VLAN Priority Dst IP Src IP IP Proto IP ToS TCP/ UDP Src Port TCP/ UDP Dst Port L2 L3 L4 MAC Address Switching IP Address Routing Port Firewall A Professional Company in Software-Defined Networking Copyright 2000-2015, EstiNet Technologies Inc. All Rights Reserved. 31
A Professional Company in Software-Defined Networking Copyright 2000-2015, EstiNet Technologies Inc. All Rights Reserved. 32
A Professional Company in Software-Defined Networking Copyright 2000-2015, EstiNet Technologies Inc. All Rights Reserved. 33
Today s Network Management Deployment Data Collection Plan Analysis A Professional Company in Software-Defined Networking Copyright 2000-2015, EstiNet Technologies Inc. All Rights Reserved. 34
SDN Simplifies Network Management A Professional Company in Software-Defined Networking Copyright 2000-2015, EstiNet Technologies Inc. All Rights Reserved. 35
SHOWCASE OVERVIEW A Professional Company in Software-Defined Networking Copyright 2000-2015, EstiNet Technologies Inc. All Rights Reserved. 36
Why SDN? Simple Easy Centralized Auto-Provisioning and Supervision Flexible Seamless Multi-Level Partial or Full Scale Network Migration Secure Fine-Grained Flow Monitoring and Analyzing A Professional Company in Software-Defined Networking Copyright 2000-2015, EstiNet Technologies Inc. All Rights Reserved. 37
Dr. SDN - the Application Platform for Software-Defined Networks Apps Platform Zero-Touch Deployer Traffic Guard Smart Tapper Migration Kit Control Platform Infra Platform OpenFlow Switches Hybrid Switches A Professional Company in Software-Defined Networking Copyright 2000-2015, EstiNet Technologies Inc. All Rights Reserved. 38
A Professional Company in Software-Defined Networking (SDN) Copyright 2000-2015, EstiNet Technologies Inc. All Rights Reserved..
A Professional Company in Software-Defined Networking Copyright 2000-2015, EstiNet Technologies Inc. All Rights Reserved. 40
Control Plane Data Plane Zero-Touch Deployer Controller Management Cost Reduction Provide the network mgmt. portal to minimize administration efforts Provide easy-to-configure White List Mechanism Core Switch Core Switch Edge Switch Automatic Network Planning Auto VLAN encapsulation Auto best route maintenance and selection Core Router Core Switch Core Switch Edge Switch Anytime Flow-level Monitoring Provide fine-grain flow-level monitoring including: Switch Connectivity Host Status Link Status A Professional Company in Software-Defined Networking (SDN) Copyright 2000-2015, EstiNet Technologies Inc. All Rights Reserved.. 41
Screenshot Zero-Touch Deployer On-line device in a location Topology view of routing path Port binding in the seat map A Professional Company in Software-Defined Networking Copyright 2000-2015, EstiNet Technologies Inc. All Rights Reserved. 42
Control Plane Smart Tapper Data Plane Core Switch Controller Core Switch Edge Switch Easy Click-and-Go Monitoring Immediate flow-level traffic mirroring simply by clicking the mirror and monitor machines Automatic computation for traffic mirror paths Automatic merge for mirrored flows Core Router Core Switch Core Switch Edge Switch On-demand Tapping Allow pre-configured criteria to trigger traffic mirroring Network Administrators can mirror traffic in on-demand manners A Professional Company in Software-Defined Networking (SDN) Copyright 2000-2015, EstiNet Technologies Inc. All Rights Reserved.. 43
Screenshot Smart Tapper Click-and-Go Monitoring Topology view of Mirror path A Professional Company in Software-Defined Networking Copyright 2000-2015, EstiNet Technologies Inc. All Rights Reserved. 44
Control Plane Data Plane Core Switch Core Router Controller Core Switch Traffic Guard Edge Switch Decentralized Abnormal Traffic Sensing on Edge Traditional network requires a powerful centralized IDS (Intrusion Detection System) to filter out malicious attacks EstiNet Traffic Guard can utilize Switch Hardware to collect attack patterns in decentralized manner More Resistant to Insider Attack Reject abnormal flow at edge Prevent congestions on core network devices Core Switch Core Switch Edge Switch Flexible Detection Methods Flow-based Port-based Host-based Subnet-based A Professional Company in Software-Defined Networking (SDN) Copyright 2000-2015, EstiNet Technologies Inc. All Rights Reserved.. 45
Screenshot Traffic Guard Set abnormal threshold Alarm Abnormal A Professional Company in Software-Defined Networking Copyright 2000-2015, EstiNet Technologies Inc. All Rights Reserved. 46
MIGRATION KITS A Professional Company in Software-Defined Networking Copyright 2000-2015, EstiNet Technologies Inc. All Rights Reserved. 47
SDN Migration Issues 1. SDN can NOT interoperate with legacy network. Centralized SDN control methods do not work as traditional legacy distributed protocols. 2. Full-scale deployment is NOT always the case of bringing new networking technology in Enterprise customers would prefer to do partial upgrade for their stable existing network deployment Mixed SDN network and legacy network is expected to be common in the future. A Professional Company in Software-Defined Networking Copyright 2000-2015, EstiNet Technologies Inc. All Rights Reserved. 48
Migration Kit Seamless Fully interoperable with legacy networks Flexible Support both full-scale deployment and partial replacement Modular Provide rich set of L2/L3 protocol engines for SDN Controllers OSPF, ISIS, BGP, MPLS, RSTP, STP Optimized Achieve path optimization for customers custom needs EstiNet s design currently under the patent-filing process and pending Migration Kit SDN Controller SDN Switch Protocol Engine Virtualized Interfaces Forwarding Abstraction Layer Virtualized Network View Forwarding Compute Unit OpenFlow Agent SDN flow table SDN Ports A Professional Company in Software-Defined Networking Copyright 2000-2015, EstiNet Technologies Inc. All Rights Reserved. 49
How to Start? Migrate from Traditional Network to SDN From Edge (Ready) From Core (*on Develop) ZD ZD TG AM ST AM SDN Contr oller SDN Contro ller A Professional Company in Software-Defined Networking Copyright 2000-2015, EstiNet Technologies Inc. All Rights Reserved. 50
Thank You Q &A