nfv & openstack

NFV and OpenStack

Marie-Paule Odini – Distinguished Technologist

HP CMS CT Office

Mar 26th, 2015

HPC & OSL TES 2015 23 – 27 March 2015 | GRENOBLE France

What is NFV ?

© Copyright 2012 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice.3

What is NFV: Network Function Virtualization

Leverage IT virtualization techniques for telecom functions

• Use standard servers and storage

• Applicable to telco network functions

• Initiative from Tier 1 Operators & Vendors launched as a new Industry Specification Group (ISG) in ETSI

Key Benefits

• Reduced equipment costs

• Faster time to market

• Resource sharing

• Targeted service introduction

• More flexible, programmatic operations

virtualize network functions: from Home or Enterprise Gateway to Access/Core telecom network & Data centers


NFV ISG Phase#1 completed & Published, Jan. 2015http://www.etsi.org/technologies-clusters/technologies/nfv

GS NFV 001Network Functions Virtualisation (NFV); Use Cases

GS NFV 002Network Functions Virtualisation (NFV); Architectural Framework

GS NFV 003Network Functions Virtualisation (NFV); Terminology for Main Concepts in NFV

GS NFV 004Network Functions Virtualisation (NFV); Virtualisation Requirements

GS NFV-SWA 001Network Functions Virtualisation (NFV); Virtual Network Functions Architecture

GS NFV-INF 001Network Functions Virtualisation (NFV); Infrastructure Overview

GS NFV-INF 004Network Functions Virtualisation (NFV); Infrastructure; Hypervisor Domain

GS NFV-INF 003Network Functions Virtualisation (NFV); Infrastructure; Compute Domain

GS NFV-INF 005Network Functions Virtualisation (NFV); Infrastructure; Network Domain

GS NFV-INF 007Network Functions Virtualisation (NFV); Infrastructure; Methodology to describe Interfaces and Abstractions

GS NFV-INF 010Network Functions Virtualisation (NFV); Service Quality Metrics

GS NFV-MAN 001Network Functions Virtualisation (NFV); Management and Orchestration

GS NFV-PER 001Network Functions Virtualisation (NFV); NFV Performance & Portability Best Practises

GS NFV-PER 002Network Functions Virtualisation (NFV); Proofs of Concept; Framework

GS NFV-REL 001Network Functions Virtualisation(NFV); Resiliency Requirements

GS NFV-SEC 001Network Functions Virtualisation (NFV); NFV Security; Problem Statement

GS NFV-SEC 003Network Functions Virtualisation (NFV); NFV Security; Security and Trust Guidance

PUBLIC

http://www.etsi.org/technologies-clusters/technologies/nfv

http://www.etsi.org/deliver/etsi_gs/NFV/001_099/001/01.01.01_60/gs_NFV001v010101p.pdf




http://www.etsi.org/deliver/etsi_gs/NFV-SWA/001_099/001/01.01.01_60/gs_NFV-SWA001v010101p.pdf

http://www.etsi.org/deliver/etsi_gs/NFV-INF/001_099/001/01.01.01_60/gs_NFV-INF001v010101p.pdf






http://www.etsi.org/deliver/etsi_gs/NFV-MAN/001_099/001/01.01.01_60/gs_NFV-MAN001v010101p.pdf

http://www.etsi.org/deliver/etsi_gs/NFV-PER/001_099/001/01.01.02_60/gs_NFV-PER001v010102p.pdf

http://www.etsi.org/deliver/etsi_gs/NFV-PER/001_099/002/01.01.02_60/gs_NFV-PER002v010102p.pdf

http://www.etsi.org/deliver/etsi_gs/NFV-REL/001_099/001/01.01.01_60/gs_NFV-REL001v010101p.pdf

http://www.etsi.org/deliver/etsi_gs/NFV-SEC/001_099/001/01.01.01_60/gs_NFV-SEC001v010101p.pdf

http://www.etsi.org/deliver/etsi_gs/NFV-SEC/001_099/003/01.01.01_60/gs_NFV-SEC003v010101p.pdf


Latest Joint-Operator NFV White Paper

• Published October 14, 2014

• Detailed description of second release of NFV ISG documents

• Provides latest operator perspectives on industry progress on NFV implementation

• Highlights the importance to evolve network management systems to accommodate dynamic nature of NFV

• Encourages academic research and evolution of teaching courses

Paper available on ETSI NFV Portal: http://portal.etsi.org/NFV/NFV_White_Paper3.pdf

Slide 5

30 operators

contributed

http://portal.etsi.org/NFV/NFV_White_Paper3.pdf


ETSI ISG NFV Phase#1

Working GroupArchitecture of the Virtualisation

InfrastructureSteve Wright (AT&T) + Yun Chao Hu (HW) + Andy

Working GroupReliability & Availability

Naseem Khan (VZ), + Markus Schoeller (NEC)

Working GroupManagement & Orchestration

Mehmet Ersue (NSN) + Raquel Morera (VZ)

Working GroupSoftware Architecture

Tetsuya Nakamura(NTT) + MP Odini (HP)

Expert GroupSecurity

Igor Faynberg (ALU)

Expert GroupPerformance & Portability, POCs

Francisco Javier Ramón Salguero (TF)

Technical Steering CommitteeChair: Technical Manager : Diego Lopez (TF)

Vice Chair / Assistant Technical Manager : Nakamura Tetsuya (DOCOMO)NOC Chair (ISG Vice Chair) + WG Chairs + Expert Group Leaders + Others

HW = Huawei

TF = Telefonica

VZ = Verizon

ChairmanProdip Sen (Verizon) – now HP

Vice Chairman Uwe Michel (DT)

NOC (Network Operator Council)Initial Signing Operators

Chair: Don Clarke (Cable Labs – ex BT)

4 E2E ISG Level DocumentsTerminology, Use Cases, Architecture,

Requirements

CMS

Other HP


ETSI NFV Reference Architectural Framework

The NFV Orchestrator

Can interface to:

• 1 or multiple VNF Manager

• 1 or multiple VIM

Note: metadata “service, VNF and infrastructure Description” are typically inputs to MANO

NFVI

MANO

VNF

VIM


ETSI NFV – E2E Network Service with NFV

End

Point

VNF-1VNF-

2C

VNF-3

Hardware

resources

NFVS

VNF-

2A

VNF-

2B

Virtualisation Layer

VNF-FG-2

End-to-end Network Service

Compute/storage

Infrastructure

network

Physical linkLogical link

Virtualisation

VNF-FG Corresponding to

Network Function

Forwarding Graph

=> Compose VNF and PNF to create Network Services


ETSI NFV Use Cases

Use Case

Description

#1 Network Functions Virtualisation Infrastructure as a Service

#2 Virtual Network Platform as a Service (VNPaaS)

#3 Virtual Network Function as a Service (VNFaaS)

#4 Virtualisation of Mobile Core Network and IMS

#5 Virtualisation of Mobile base station

#6 Virtualisation of the Home Environment

#7 Service Chains (VNF Forwarding Graphs)

#8 Virtualisation of CDNs (vCDN)

#9 Fixed Access Network Functions Virtualisation

• Large Telecom Networks

• Regulated

• Roaming Services

• Growing data/video traffic

• Unpredictible peaks

• Enterprise SLAs

• Government security

• Emergency services

• etc


Use Case: 3GPP IMS MRF Telco Grade Media Server Environment

Sh

Ro

Rf

S-CSCF

SIP Invoking & Controlling

Logic Servicing Logic

MRF-c

SIP AS WEB AS

Application Server

ISC (SIP)

O-Leg T-Leg

Mr (SIP

NETANN/RFC5552

MSCML, MediaCtrl)

Mb (RTP/RTCP)

Cr (HTTP/HTTPs)

IMS net.

SOAP,

JDBC,

LDAP,

xCIP/LHS, ...

MRF-cMRB

MRF-p

Apps: IVR, VM …

Supports applications like IVR, Voice Mail, Voice-Video conference, …

Includes multiple codecs support, real time transcoding …


Ex#: IMS MSE/MRF modeling into VNF

The Multimedia Services Environment is decomposed into “VNF” & “VNFC” :

The IMS MRF VNF

The MRB VNF

The OCSEE VNF

The SIP Load Balancer VNF

The AS Storage VNF

SIP Load Balancer

OCSEE

SIP ASWEB AS

AS

WEB Load Balancer

AS

Reporting&

Monitoring

AS Storage


Ex#: IMS MRF VNF Descriptors (VNFD)

The IMS MRF VNFD includes the description of the MRF cluster

-MRB network & application configuration

-MRF instances number

-MRF storage instances number

-Affinity rules

-Anti-affinity rules

-IP QoS network constraints for each vLAN (Bandwidth, Jitter, Delay, Packet Loss Tolerance)

-etc


3GPP IMS MSE/MRF

Ex#: Architecture & Lifecycle simplified

NFV Management and Orchestration

vMRF

vMRF EM

OSS/BSS NFV Orchestrator

VirtualizedInfrastructure

Manager(s)

vMRF VNFManager

Nfvo-Vi

Nfvo-Vnfm

Vnfm-Vi

Os-Nfvo

Nf-Vi

NFVServiceCatalog

VNFCatalog

NFVInstances

NFVIResources

VeEn-Vnfm

VeNf-Vnfm

Vn-Nf

HP CMS

NFVI

OpenstackHWLe

ge

nd

HW(Compute, Storage, Networking)

Virtualization (ex KVM)

VIM (ex Openstack)

NFV Orchestrator

OSS

MSE/MRF Descriptor(XML file)

& SW image2- read

2- allocate

resources

3- deploy

vMRF software

1- deploy new MRF

MSE/MRF VNF Manager

4-manage lifecycle (scaling etc)


ETSI NFV SWA - VNF architecture

© ETSI 2013. All rights reserved

VNF 1VNFC

1VNFC

1VNFC

1

parallelizable VNFC

(min. and max. # of instances)

or

VNF 1

VNFC

1

VNF w/ single component VNF w/ multiple components

or

Virtual container• 1 VNFC = 1 container• virtualization

container(not just hypervisor)

[1,n]

VNF 1VNFC

1

VNF 1

stateless VNFC stateful VNFC

orVNFC

1

VNF 1

VNFC w/ externalized state

orVNFC

1 SSS

VNF 1

VNFC2

VNFC3

VNFC1

VNF 1

non-parallelizable VNFC

VNFC

1

[1,1]

VNF State Diagram

ScalabilityScale in/outScale up/downAutoscale, etc


ETSI SWA - VNFC to VNFC Communications

Affinity Affinity

DPDK support

SRIOV support DPDK support

SRIOV support

Affinity

An example of requirements


ETSI NFV Management & OrchestrationMANO


Multiple VIM & NW Controller Key Highlights:

• VNFM & NFVO could be across multiple NFVI Domains, iemultiple VIM

• VIM could interface multiple Network Controllers

• NFVO could request a “WAN manager” to bridge 2 PoP, PoP1 & PoP2 via a WAN. Meaning NFVO not only interface with VIM but also with WAN manager

• VNFM does not interact with WAN manager, only to NFVO and VIM

• WAN can support PNFSource: MANO GS


ETSI NFV INF – NFVI architecture & Interfaces


POC#6: Virtualized Mobile Network with Integrated DPI

Telefonica

Intel

Tieto

Qosmos

Wind River Systems

HP

vEPC and vDPI

Openstack

SDN

DPDK

=> Accelerated ETSI NFV in a

multi-vendor environment

* In

tel®

DP

DK

: In

tel®

Dat

a P

lan

e D

evel

op

men

t K

itN

IC :

Inte

l® 8

25

99

10

Gig

abit

Eth

ern

et C

on

tro

ller

Network Functions Virtualization (NFV) Infrastructure

Hardware Resources

Network Operation (OSS/BSS)

Virtualized Network Functions

vBS vGWvMME

EMS

10G/40G Intel® Ethernet Switch FM6764

HP ProLiant DL380p Gen8 Servers

Virtualization Layer

NFV Management and Orchestration

Virtualized Infrastructure Manager(s)

Orchestrator

Op

enSt

ack*

Glance

Keystone

Nova

Neutron

SDN Agent

Wind River* Linux + KVM

Intel DPDK Accelerated Open vSwitch*

vDSC

VNF Manager(s)

SDN

Ma

nag

er

vEPC

Man

ager

vBS

Ma

nag

er

vDSC

Ma

nag

er

Map UI Cloud Manager

Virtual Resources

NIC NIC

IntelDPDK

IntelDPDK*

IntelDPDK

IntelDPDK

vDPI

IntelDPDK

Intel Supplied Qosmos* Supplied Tieto* Supplied OpenStack Others

TIP TIP TIP TIP TIP

PhysicalNetwork Functions

EMS

Wind River* Supplied Hewlett Packard* Supplied

DemoMWC’14

Openstack


POC#15: Subscriber Aware Sgi/Gi-LAN Virtualization

TelenorConteXtreamSkyFire NetworksGuavusRedhatHP

SDN based service chaining

Across multi-Openstack

domains

Cache

Filter

VideoOptVideoOpt

TCPOp mizer

TCPOp mizer

P-GW

SGiWebandOTTVideoServices

SDN–Controller

OpenFlow

SubscriberA

SubscriberB

SubscriberC

AAA

TCPOp mizer

VideoOpt

Analy cs

So wareSwitch

Firewall

OFSwitch

SDNN/W

SimulatedforPoC

OpenStack

SelfServicePortal

PoC-Scope

Demo SDN world Congress

Oct’14

Openstack


POC #23 - E2E Orchestration of Virtualized LTE Core-Network Functions & SDN-based Dynamic Service Chaining of VNFs using VNF-FG

NFV#7

SKT

HP

Samsung

Telcoware

Multi-vendor Fully orchestrated &

automated vEPC – vIMS on

Openstack & SDN based

infrastructure

DemoSKT R&D Lab

SDN World Congress

Openstack


Vendor Presence in 34 ETSI NFV POC – HP Number #1

8

HP

5

Brocade

4ALU

HuaweiWindriver

RedhatQosmos

1 or 2Others

8

Intel

NFV#9


NFV and Openstackexample of requirements Nf-Vi, Vi-Vnfm, Nfvo-Vi

23

• Multi-hypervisor support

• Different virtualization model (ie docker, Linux)

• Support legacy, bare metal

• Support DPDK CPU, SRIOV NIC

• Expose NW load balancer and other functions

• Support HA , 5 9s

• Support Secure Boot , certification

• Support resource reservation (prior to instantiation)

• Map pCPU with vCPU (dedicated CPU – pinning)

• Support NUMA placement (memory access perf)

• Expose localization of resources

• Expose resource catalog

• Expose resource metrics

• Release backward compatible

• Rollback

• etc


NFV & OpenStack ?? Ex SecuritySecuri

ty-s

pecif

ic?

24

Over 1.7M lines of code

~ 6

mete

rs~ 6

mete

rs o

r 20

feet ? How can I ensure there is no security breach in 1.7M lines ?

? How does Openstack prevent back doors ?

? How does Openstack support secure boot, certified VM?

? How can I define security rules for an SDN application to change a flow table on an SDN switch that is provided by a IaaS Provider that may change along the life of the service ?

? How can I ensure that the memory I am sharing will not be accessed by somebody else ?

? Can I present the system admin to access my personal data

etc

Many blocks interact with Keystone

Keystone is not the only entity that deals with security

Keystone deals with security & policies, but NFV will need end to end security & policies across end to end network, at ?NFVO level : how to synchronize?

etc


ETSI NFV and Openstack

25

ETSI NFV

Telecom Large WW community

Specs ETSI NFV

Scope: Telco Cloud (ie Openstack) +

VNF + VNF & NS Orchestration

POCs

Gap Analysis with SDO and Opensource

“Liaison” Cloud Large WW community

Opensource Code

Scope: Enterprise Cloud

=> Many “Liaison”

3GPP

BBF

TMF

Phase 2 : Happening NOW


ETSI NFV Phase #2 Target: June ‘15

& Dec ‘15Focus: Interroperability

& Ecosystem


ETSI NFV Phase 2 new Work Items•IFA001 – IFA004: Acceleration (4 parts)

•IFA005: Or-Vi Interface Requirements Specification. NORMATIVE.

•IFA006: Vi-Vnfm Interface Requirements Specification. NORMATIVE

•IFA007: Or-Vnfm Interface Requirements Specification. NORMATIVE

•IFA008: Ve-Vnfm Interface requirements Specification. NORMATIVE

•IFA009: Refinement of VNF Manager and NFVO functionality and architecture options.

•IFA010: MANO Functional Requirements Specification. NORMATIVE

•IFA011: VNF Packaging Specification.

•IFA012: OSS - Orchestrator Requirements Specification. NORMATIVE.

•IFA013: Os-Ma-Nfvo Interface Requirements Specification. NORMATIVE.

•IFA014: Network Services Descriptor

•REL002: Study on the Management of NFV Reliability with Scalable Architecture.

•REL003: Study of models and features for E2E reliability in the NFV architecture.

•REL004: Active monitoring and failure detection in NFV environments.

EVE001: Infrastructure Hypervisor Domain Specification.

EVE002: Use cases for MEF Carrier Ethernet Services.

EVE003: NFVI Node Physical Architecture Guidelines for Multi-Vendor Environment.

EVE004: Review of virtualisation technologies.

EVE005: Report on SDN usage in NFV architectural framework

EVE006: NFV Roadmap

TST001: Guidelines for Pre-deployment validation of NFV environments and services.

TST002: Report on NFV interoperability test methodology

TST003: Opensource Components for NFV.

SEC004: Lawful Interception - problem statement and consequences for NFV

SEC005: Certificate Management Guidance

SEC006: Security Aspects and Regulatory Concerns Guide

SEC007: Attestation Methods for Secure Virtual Network Function Deployment

SEC008: Security Monitoring for NFV Deployments


Openstack Telco Working Grouphttps://wiki.openstack.org/wiki/TelcoWorkingGroup

The working group aims to define the use cases and identify and prioritise the requirements which are needed to deploy, manage, and run telecommunication services on top of OpenStack.

Mission Statement

Implemented (Juno)

Support two interfaces from one VM attached to the same network (Nova)

SR-IOV Networking Support (Nova)

Virt driver guest vCPU topology configuration (Nova)

Evacuate instance to scheduled host (Nova)

Heat multi region support (Heat)

https://wiki.openstack.org/wiki/TelcoWorkingGroup


Openstack Telco WG

Active Blueprint (extract – non exhaustive list)

Virt driver guest NUMA node placement & topology (nova)

Virt driver large page allocation for guest RAM * (nova)

Virt driver pinning guest vCPUs to host pCPUs (nova)

I/O (PCIe) Based NUMA Scheduling (nova)

Soft affinity support for server groups (nova) => abandonned

Open vSwitch-based Security Groups: Open vSwitch Implementation of FirewallDriver(neutron)

Framework for Advanced Services in Virtual Machines (neutron)

Neutron Services Insertion, Chaining, and Steering (neutron)

OVF Meta-Data Import via Glance (glance)

https://wiki.openstack.org/wiki/TelcoWorkingGroup#dupe


Open Platform For NFV – www.opnfv.org

Launched Sept 30th, 2014

Opensource NFV: OPNFV

Work with upstream SDO (ETSI NFV) and Opensource (Openstack, OpenDaylight, KVM, Xen ect)

Chairman: Prodip Sen, HP

http://www.opnfv.org/


OPNFV Approved Projects HP participation

Technical Steering Committee


OPNFV System Configuration And Reporting (OSCAR)

https://wiki.opnfv.org/oscar/project_proposal

HP OpenNFV


HP OpenNFV PR in Feb’14 : a new BU, new Products and OpenNFV Labs

MANO Layer

• HP NFV Director : ETSI Based NFV Orchestrator for full life-cycle management

• HP Helion OpenStack provides necessary OpenStack API support for NFV, and a carrier grade cloud management functionality

• HP SDN Controller

• Converged Infrastructure Management using a single tool – OneView

NFVI Layer

• Broader Hardware Support for high performance packet processing

• Hardware/Software features integrated for high speed packet processing (SR-IOV support in OneView/CS8)

• Native SDN Support with all HP Networking portfolio

• Common Networking Environment for Networking using Comware7 stack

OSS Layer

• Full OSS Suite from basic fault to service level management based on IMC & SiteScope

VNF Layer

• HP vHSS, vMRF, vSR and other key Network related Services Software available for virtualized environment deployment

• An ecosystem of partners


NFV

Man

agem

ent an

d O

rchestratio

n

HP CMS NFV Director

Model Driven vs Script Driven

A common point to ensure consistent management and behavior of VNFs and NSs• Automatically manages the end-to-end service across VNF, VNF-FGs,

and NSs

• Supports multiple VNF across multiple sites

• Handles provisioning and monitoring functions

Designed to meet the evolving ETSI specifications

• Full NFV orchestrator functionality, interfaces, and interaction models

• Includes VNF manager functionality and works with external (VNF-supplied) VNF managers

Supporting the journey to NFV• Handles virtual and physical network functions and hybrid services

• Supports networks consisting of traditional and SDN domains

Open and multivendor

• Supports integration with any VNF, VIM, and OSS using open APIs

Modular and extensible

• Start small and grow

• Flexible integration with OSS, EMS, VNF, and infrastructure

ETSI NFV Orchestrator with embedded VNF Manager

NFV Director

Policy management

Servicefulfillment

Servicemonitoring

Global resourcefulfillment

Global resourcemonitoring

Virtualized Infrastructure Manager

Catalog

Globalresourceinventory

Instanceinventory

VNFfulfillment

VNFmonitoring

External VNF ManagersEmbedded VNF Manager

VNFfulfillment

VNFmonitoring


HP & Wind River Join Forces to deliver carrier grade solutions

#1 Contributor to OpenStack™ Project, #1 Provider of carrier grade Linux

• Reliability • Carrier-Grade Linux

• Carrier Grade KVM Hypervisor

• Advance Self-Healing

• High Availability & Reliability Add-Ons for OpenStack Control Plane for 5x9’s Service Availability

• Performance• Performance Networking with DPDK enabled vSwitch

(OVS)

• Advance NFV Workload placement

• Manageability• Scheduling and Orchestration of workloads

• Security to meet Carrier Needs

• Open eco-system, standards based APIs

…… single point of accountability for CSPs building their next generation Open NFV

solution.

The OpenStack™ Word Mark and OpenStack Logo are either registered trademarks/service marks or trademarks/service marks of the OpenStack Foundation, in the United States and other countries and are used with the OpenStack Foundation's permission. We are not affiliated with, endorsed or sponsored by the OpenStack Foundation, or the OpenStack community

Nov 3rd Press Release


HP contributions to OpenStack®• Board member: Eileen Evans, VP Opensource

• 3 technical committee member: Monty Taylor, Sean Dague and Devananda van der Veen

• Number #1 contributor by number of employees to Havana release, and second to Icehouse

• Number #2 in number of commits for Havana & Icehouse

• Incl Continuous integration, testing, and deployment lead of OpenStack commits

• & Openstack developer infrastructure, dashboard, bare metal provisioning, open integration suite, quality assurance, database as a service, etc

Some other

Examples …


Telefonica UNICA


HP vision of NFV/SDN-approach for service providers

2013-2015

Single-purposeelement

Controlplane

Applicationplane

Dataplane

2014-2016

Control plane

Applications plane

Infrastructure plane

SaaS Services

2015-2020

NFV-SDN Projects NFV-SDN Cloud

SaaS Services SP#5

SP#4(SDN IaaS)

Infrastructure plane Control plane

Applications planeSDN APISP#3(SDN ASP)

SP#2(mobile)

SP#1(fixed)

Virtual Service Providers

POCS Deployments

NOW In parallel Starting with new business model

Based on NFV & SDN


Summary

Network Function Virtualization (NFV) is driving CSP requirements towards OpenstackVia ETSI NFV specifications and OPNFV open source project

HP is heavily involved and leading governance and contributions in ETSI NFV and other SDO, as well as Opensource community incl Openstack, OpenDaylight and OPNFV

HP is committed to NFV and Openstack, with HP OpenNFV and HP Helion Openstack for public, private, hybrid and NFV cloud

nfv & openstack

Technology

nfv gs nfv

nfv implementation

orchestration gs nfv

abstractionsgs nfvinf

nfv isg phase

etsi nfv portal

dynamic nature of nfv

etsi isg nfv phase