nfv & sdn ( efficiency & automation )

1

NFV & SDN- Efficiency & Automation

최홍식 수석( lachesis@pentalink.co.kr ,Hongsik.choi@gmail.com )

Point of View about NFV- NFVI- VNF

Point of View about SDN- Control

- Orchestration

Combine Both

3

4

5

NFVI

6

Why OpenStack ?

Open Source Based Cloud Operating Sys-temOpen Source Based Sub Projects

Building Blocks to Create Cloud

Anti-Vendor Dependency

Scale-Out Platform for Cloud

7

Openstack Trend

8

But Problem is

Open Source is Gooood

Responsibility

Solved By

Internalization

9

RHEL OSP Reference

10

RHEL OSP Component

11

12

OpenStack Networking at Rackspace

• Three networks – Public, SNET and Isolated• Isolated (Private) networks• Broadcast and Multicast on Isolated networks• Attach / Detach Networks• Shared IP on Isolated networks• Additional IPs on PublicNet • L3 Router, VPN and Firewall: (Brocade Vyatta vRouter)• Routes on Isolated networks• Floating IP• L4-L7 Services

13

Replaced with NFV

vRouter vFW vADC

Virtual Appliances

vWAF

vCPE vRR …

Virtual Subsystems

vEPC(Customer-premises equipment) (Route Reflector) (IP Multimedia subsystem)(Evolved Packet Core)

vIMS

…

14

vRouter

Routing

Security

VPNSystem Manage-

mentIP Services

Platforms

High Availability

IPv4/6, Static, PBR, OSPFv2,3, RIP, BGPv4

IPv4, IPv6, Stateful Firewall, NAT

IPSec, SSL, Route-based, L2-bridging

CLI, REST API, GUI, NETCONF/YANG

SSH, DHCP, DNS, SNMP

VRRP, Stateful Failover, Config Sync

VMware, Xen, KVM, Hyper-V, x86Diagnostics, Moni-

tor Tcpdump, Wireshark, RS/SPAN, RSPAN

15

The Matter is

Performance

Efficiency

16

The Matter is

Performance PCI Pass-through SR-IOV

Bandwidth

DPDK Process

PCI Pass-through and SR-IOV

17

Physical NIC Dedicated Divided From Physical NIC to Virtual Functions

Network Bandwidth Enhanced

(SR-IOV Supported NIC Only)

18

Intel DPDK

19

DPDK Enabled Vyatta v5600

Core 0Core 1

Core 2Core 3

Packet PipelinePacket Pipeline

Core 0 Core 1

Core 2 Core 3

PacketPacket

Packet Packet

Packet

Packet

v5600

v5400

20

Vyatta OpenStack Plugin

21

The Matter is

EfficiencyHow many Core needed for Performance ?

22

vRouter 5600 Efficiency

40 G 1 U Server -> 40 VM

23

Performance & Efficiency

v56002 CPU0 % Used

24

Performance & Efficiency

v54002 CPU2 % Used

vADC

Performance

Web Accelerator

Cost Savings

Services Controller

Security & Protec-tion

Web Application Firewall

Efficiency & Con-trol

Traffic Manager

From LB to ADC(Application Delivery Controller)(Load Balancer)

26

Complete Powerful Efficiency VNF Package

SteelApp

Point of View about NFV- NFVI- VNF

Point of View about SDN- Control

- Orchestration

Combine Both

28

SDN Controller with Data Center Manage-ment

Leve

l of P

rogr

amm

abili

ty

Scope of Domain

Network Element Network IT Infrastructure

Pyth

onRE

STCL

ISc

riptin

g

Classic Network Management

Tools

Neutron

DevOps Tools

29

SDN Controller 선택 기준

Source : http://thenewstack.io/sdn-series-part-eight-comparison-of-open-source-sdn-controllers/

OpenDaylight Project Supported Edition

30

Service Abstraction Layer/Core

Base Network Functions

OpenFlow-Enabled Devices

DLUX VTN Coordinator OpenStack Neutron SDNI Wrapper

Open vSwitches Additional Virtual and Physical Devices

OpenFlow Stats Manager

OVSDB NETCONF PCMM/COPSSNBILISP BGP PCEP SNMPSXP

Network Application Orchestrations and Services

Data Plane Elements (Virtual Switches, Physical Device

Interfaces)

Controller Platform Services and Applications

Southbound Interfaces and Protocol Plugins

OpenFlow

OpenFlow Switch Manager

USCCAPWAP OPFLEX CoAPHTTP

OpenFlow Forwarding Rules Mgr

L2 Switch

Host Tracker

Topology Processing

AAA AuthN Filter

OpenDaylight APIs REST/RESTCONF/NETCONF

Messaging (Notifications and RPCs)

LACP

Network Services

Service Function Chaining

Reservation

Virtual Private Network

Virtual Tenant Network Mgr

Unified Secure Channel Mgr

OVSDB Neutron

Device Discovery, Identification, and Driver Management

LISP Service

DOCSIS Abstraction

SNMP4SDN

Network Abstractions (Policy/Intent)

ALTO Protocol Manager

Network Intent Composition

Group-Based Policy Service

Platform Services

Authentication, Authorization, and Accounting

Neutron Northbound

Persistence

SDN Integration Aggregator

Time Series Data RepositoryLink Aggregation Ctl Protocol

Data Store (Config and Operational)

1.0 1.3 TTP

Brocade SDN Con-troller

31

Brocade SDN Controller

Services and Abstraction Engine

Karaf / OSGi Container

Developer Interfaces

Topology Mapper Host Tracker

AkkaClustering

StatsManager

RESTCONF JAVA OpenStackNEUTRON ML2

Southbound PluginsOpenFlow NETCONF OVSDB PCEP SNMP BGP

Virtual Physical

Third-Party

DeveloperTools

Training andSupport

DeveloperPartners

ProfessionalServices

YANGModels

OpenDaylight Based

Open World No PlatformNo NorthBound Dependencies

Just Like App Store

32

Custom Analytics and Compliance

Big Data Security QoS and Traffic Management

WAN OptimizationFault and Disaster Recovery

Research and New Protocols

Service Configuration and Policy

Brocade SDN Controller Use Cases

33

Brocade Topology Manager 1.0

Brocade SDN Controller App

Create Nodes

Discovered Topology

34

Brocade Flow Manager 1.0

Brocade SDN Controller App

Switch to SwitchFlows

Host to Host Paths

Install & Man-ageOpenFlow flows

35

Flow Optimizer Appli-cation

Brocade SDN Controller App

Switch to SwitchFlows

Real time Data

Event & Audit

36

SFlow

NET-CONF/YANG

Open-Flow

OVS DB

Control & Orchestration

Point of View about NFV- NFVI- VNF

Point of View about SDN- Management- Monitoring

Combine Both

38

NFV & SDN

39

Service / Cloud Orchestrator 와 Controller, NFVi, Physical Network Function 관계

SDN Controller 의 Coverage

Source : AT&T’s SDN Controller Implementation Based on OpenDaylight (ODL Summit 2015)

40

Questions ?