vcpe-os v3.0 ga - telescience...integration to 3 rd party 3 rd party nfv orchestrator services /...

vCPE-OS v3.1 GA

Solution PresentationJonny GilgonProduct Manager

2Proprietary and Confidential WBT May 2019

Agenda

• Introduction

• vCPE Applicaitons

• RAD’s vCPE Toolbox

• vCPE-OS 3.1GA Main New Features

• Zero Touch and Life Cycle Management

• Ordering and Licensing

• Key Takeaways

Introduction


• Service Providers have or plan to implement Centralized Virtual Network Services – mainly Firewalls

• However – driven by use-cases like SD-WAN and Local Internet Break-Out, industry is shifting its attention towards open-compute platforms for the network edge and customer premises

• A new generation CPE has appeared –COTS based universal CPE (uCPE) utilizing disaggregated architecture

Virtualization of network services – Where?

Customer Premises

Data Center

Virtualized functionality centralized in data centers

pCPEPhysical CPE

CustomerNetwork

Virtual Functions

Cent

raliz

ed

Service Provider Network

VNFs

Virtualization of network services

Virtualized functionality distributed to the customer premises

Customer Premises

Data Center

CustomerNetwork

Service Provider Network

De-C

entr

aliz

edVNFs

uCPEUniversal CPE

Virtual Functions


Comparison of individual functions, purpose built and often proprietary equipment vs. smartphone concept

Look back at the Smartphone revolution

- Telephony- Photo- Navigation- Scanner- Music- TV- PC - ... etc.

Smartphone providing multiple virtualized functions on common

HW platform

Navigation

TelephoniePhoto


RAD’s vCPE Toolbox transforms hardware-based operations into software-based virtual functions

Network Edge Revolution with vCPE Toolbox

Router

Firewall

Load Balancer

SD-WAN

IP PBX

UTM

DPI

Modem

Universal CPE provides multiple virtualized functions

on common HW platform

Firewall

RouterIP PBX


Tailored Service Platform for Verticals

RAD ETX uCPE platform

Cellular

Assured TransportVirtual Network Functions + VAS

Broadband

Fixed

InternetBranch

Enterprise HQ

Cloud

Cellular

IP/MPLS/Ethernet

NOC

Opportunity for Managed services

VNF 6VNF 5 VNF 7 VNF 8

LAN Security Monitoring

Video Surveillance

IP PBX

Web Proxy

IT services

VNF 2VNF 1 VNF 3 VNF 4

SD-WANFirewallQoS/QoE monitoring

WiFi Controller Network services

Note. This illustration is just examples of a range of value added services

vCPE Applications


L2 vCPE for Retail Carrier Ethernet Services with VAS

vFW vFW

BranchOffice

HQ

CustomerNetwork

Service Provider’s Revenue Span

Router Appliance

EADEADRouterAppliance

CustomerNetwork

Extended

vRouter vRouter

NFV enabled EAD

NFV enabled EAD

Customer self-manages routers (and other VNFs)

Retail Ethernet Services

• Service provider expands revenue by hosting customers’ virtual Routers, Firewalls, etc.

• Customer saves deployment and operations costs

Benefits• MEF Certified ETX-2i/2i-B• Pluggable x86 NFV module • RADview Domain Orchestrator• RAD VNFs

RAD’s Offering


• Wholesaler expands revenue by hosting customers’ virtual Routers, Firewalls, etc.

• Service Provider saves deployment and operations costs

Benefits

L2 vCPE for Wholesale Carrier Ethernet Services with VAS

vFW

BranchOffice

HQ

CustomerNetwork

Router Appliance

EADRouterAppliance

CustomerNetwork

vRouter

Service Provider manages routers (and other VNFs)

• MEF Certified ETX-2i/2i-B• Pluggable x86 NFV module • RADview Domain Orchestrator• RAD VNFs

RAD’s Offering

Service Provider NetworkWholesale Ethernet

Access Services

Wholesaler’s Revenue SpanExpanded

EADNFV enabled EAD


• CSP expands revenue by hosting Value added services vRouters, vFirewalls, IT services, etc.

• CSP saves deployment and operations costs

Benefits

L3 vCPE with Value Added Services

• ETX-2v• vCPE-OS• RADview Orchestrator• RAD VNFs

RAD’s Offering

Customer Edge

IP/MPLS/Ethernet

Internet

LTECloud

Enterprise DC

Enterprise HQ

VNF Ecosystem

Transport LayerNFVI

VNFVNFVNF

ETX-2v


• Reduce deployment and operations costs • Single scalable platform• Unified management

• Fast TTM for new services

Benefits

L3 vCPE with Value Added Services for Enterprise

• ETX-2v• vCPE-OS• RADview Orchestrator• RAD VNFs

RAD’s Offering

Customer Edge

IP/MPLS/Ethernet

Internet

LTECloud

Enterprise DC

Enterprise HQ

VNF Ecosystem

Transport LayerNFVI

VNFVNFVNF

ETX-2v


RAD vSD-WAN solution

IP/MPLS/Ethernet

Internet

LTECloud

Enterprise DC

Enterprise HQ

VNF Ecosystem

Transport LayerNFVI

SD-WANVNF

VNFVNF

ETX-2v

• RAD uCPE solution transforms SD-WAN from today’s monolithic application to a disaggregated service offering

• Freedom to select favorite SD-WAN application• Freedom to combine VNFs for building tailored solutions

Benefits• ETX-2v• vCPE-OS• vSD-WAN VNF

RAD’s Offering

Customer Edge

RAD’s vCPE Toolbox


uCPE HW portfolio

ETX-2i seriesETX-2v series 3rd party white boxes Pluggable Network Functions

Customer Edge

NFV Infrastructure Assured Packet Transport

vCPE-OSAPIs FW SD-WAN

VNF

Other VNFs

VNF Virtual Services

RAD vCPE Solution Components

RADview EMS/NMS and Domain Orchestrator Integration to 3rd party

3rd party NFV OrchestratorServices / Lifecycle Service Orchestration

Network Infrastructure

NFV SDN Existing WANIPCE 2.0OTNExisting OSS

Service Portal

Integration to 3rd party

Public Clouds

IP/MPLS/Ethernet

Wireless

Internet

Private CloudsCore services

Enterprise HQSD-WAN Overlay Transport

Assured Underlay Transport

Customer Edge

uCPE


vCPE Manager - RADview

RADview

Domain Orchestrator

Management of virtualization

infrastructure and Services

ModulePerformance Monitoring

Networking and service analytics and

reportingSAT

TWAMP, Y.1731

ModuleService

Management

End-to-end planning and provisioning

ModuleBasic

• Topology Map• Fault Management• Element Manager• Inventory• Security• Maintenance


Comprehensive Lifecycle Management solution

vCPE DeploymentZero Touch Deployment

Secure Management channels

VNF OnboardingVNF certification

Network Service Design

VNF provisioning NFV instantiation & Chaining

Day 1 VNF configuration

Service ContinuityvCPE Backup / Restore

VNF SW Backup / Restore

SW Maintenance uCPE SW updates/rollbackVNF SW updates/rollback

ModificationRemove / Replace VNFs Flexible Service Chains

Service AssurancevCPE / NFVI / VNF Analytics

vCPE Fault Management

RADview


vCPE Toolbox’s Innovativeness:A Wealth of Options to Meet Various Scenarios

Wide range of security measures to prevent hacking and malicious attacks on the vCPE-OS

Operating System

Open, slim and agileEnsures high performance of all vCPE aspects (incl. third-party VNFs)Already integrated with major VNF and Orchestrator brands

WAN Connectivity

Ubiquitous service look & feel over any access for unified global deployments of NFV VAS

Automation

Zero-touch provisioning, VNF onboarding & chainingMaintenance and updates

Service ContinuityBackup/Restore vCPE-OS SW, VM and configurations for NFV infrastructure (NFVI) stability

SecurityHealth

WAN, NFVI & VM PM,troubleshooting & healing operationsService chain diagnosticsReal-time CPU monitoring

Addressing All Aspects of Carrier-grade Service Assurance

Everything CSPs need to roll out carrier-grade NFV/SDN-based business services today


ETX-2v portfolio offering

Features DenvertonSmall site

DenvertonMedium site

XEON-DLarge site

XEON-DModular - MTU

I/Fs 2xCombo, 4xUTP 2xSFP+ 6xUTP 2xSFP+, 10xUTP 2xSFP+, 24xUTP

Optional I/Fs LTE, WiFi LTE, WiFi LTE, WiFi LTE, WiFi

Processor 2/4 cores 4/8/12/16 cores 6/8/12/16 cores 6/8/12/16 cores

RAM Up to 16 GB Up to 32 GB Up to 32 GB Up to 128 GB

Storage (SSD) Up to 512G Up to 2TB Up to 2TB Up to 2TB

Trusted Platform √ √ √ √

SRIOV - √ √ √

PoE Option - √ - √

Fanless √ - - -

RAD P/N Type ETX-2V-CA/AC/2CMB/4U/D ETX-2V-CA/AC/2SP/6U/D ETX-2V-CA/AC/2SP/10U/X ETX-2V-AX/AC/2SP/8U/X


Certified 3rd Party Whiteboxes with vCPE-OS


RAD NFV Eco-System

RAD is certifying Eco-System VNFs, including Consistency and Performance measurements. Covering ALL network functions in the market!

vCPE-OS v3.1 – Main New Features


• vCPE-OS improved performance• vCPE Shield

– Security and hardening of the uCPE

• vRouter – Phase I– Embedded router with basic routing capabilities

• LTE support– Use of LTE as broadband link

• Partial upgrade– Minor SW updates and security enhancements via SW

patches

• Netconf notification• VM snapshot • VM reconfiguration

New Capabilities with version 3.1 GA


vCPE-OS/RADview NFVI Evolution

OpenStack with centralized OS

controller

2017

2018H2Unified NETCONF/CLI

management for All-in-One

2018H1OpenStack with de-

centralized OS controller (All-in-One)

2019Lightweight vCPE (No

OpenStack)

Networking + Acceleration

KVM Hypervisor

VNF VNF

OVSOS

Compute Node

RADview

OpenstackController

OpenstackController

OpenstackController

…..


KVM Hypervisor

VNF VNF

OVSOpenStack Compute

Node

RADview

OpenstackController


KVM Hypervisor

VNF VNF

OVS

OS Compute

OS Controller

NETCONF/CLI

NETCONF/CLIOn top of Openstack

RADviewRADview


KVM Hypervisor

VNF VNF

OVSNETCONF

Libvirt

NETCONF/CLINo Openstack


• vCPE-OS 3.1 utilizes ~10% of the CPU core• The CPU core can be utilized for further

features, including embedded router.

Light on resources

90%

10%

2.2 3.1

7

2

2.2 3.1

• vCPE-OS 3.1 requires 2 GB RAM• Freeing ~5GB RAM

– Can be used for scaling up VNFs– Can reduce the WB price

0

10%

20%

30%40% 50% 60%

70%

80%

90%

100%

CPUUTILIZATION

0

1G

2G

3G4G 5G 6G

7G

8G

9G

10G

REQUIRED RAM (GB)


• Cisco Router VNF

Performances: Cisco Router VNF

Device ETX-2i ETX-2i

Processor i7-4700EQ @ 2.40GHz i7-4700EQ @ 2.40GHz

vCPU flavor 1 1

vRAM flavor 4GB 4GB

vDisk flavor 8GB 8GB

2.2 3.1

0

100

200

300

400

500

600

700

800

900

1000

64 128 256 512 1024 1280 1518

Cisco (CSR100v) Throughput [Mbps]


• Fortigate FW VNF

Performances: Fortigate FW VNF

Device ETX-2i ETX-2i

Processor i7-4700EQ @ 2.40GHz i7-4700EQ @ 2.40GHz

vCPU flavor 1 1

vRAM flavor 1GB 1GB

vDisk flavor 30GB 30GB

2.2 3.1

0

100

200

300

400

500

600

700

800

900

1000

64 128 256 512 1024 1280 1518

Fortigate Throughput [Mbps]


vCPE Shield – trusted and secure uCPE

*This slide is using Font Awesome

Secured User Management• External user management

• LDAP• TACACS+• RADIUS

• Local user management• User levels of permissions• Password hardening (strength,

expiration)

Up-To-Date security• Linux security patches

• Including SE-Linux• Specter and Meltdown patch

• Patch update mechanism• Verified and tested patches• Only signed SW packs allowed

Secured Interfaces• Advanced ACL capabilities

• For external interfaces• For internal interfaces• For logical interfaces

• SSL authentication for REST API• Only allowed operations get

through

Data security• Sensitive data encryption• Clean cache from sensitive data• Pre-shared Keys and RSA keys

• For secured connections• Stored on TPM

• Protecting data in transit• Supporting multiple secured

protocols: SSH, SFTP, SCP, HTTPS, IPsec


NEW! vRouter for uCPE

• Competitive price• Thin resources• Embedded acceleration• Unified management for OS and

Router

vCPE-OS vRouter

Strengthening RAD’s uCPE business case and widening

RAD’s VNF portfolio

• Feature rich virtual WAN Router• Flexible deployment options

• Embedded in vCPE-OS• Stand alone VNF – Roadmap

Networking + Acceleration + Drivers

NFVI

VNF

Embedded vRouter

VNFVNF

vRouter Embedded in vCPE-OS

Networking + Acceleration + Drivers

NFVI

VNF VNF

vRouter

VNF

vRouter VNF (Roadmap)

Any uCPE


• Comprehensive set of protocols– Static, OSPFv2, BGP– Policy Based Routing (PBR)– Network Address Translation (NAT)– IPsec– Access Control List (ACL)– Virtual Routing and Forwarding (VRF)– Internal Key Exchange v2 (IKEv2)– NETCONF/CLI management

• Light on resources• Utilizes accelerated data plane• Flexible use-cases

– Router for Management– Routing at OS level for data plane– Routing between VNFs (chaining)

vCPE-OS 3.1 Embedded Router – Phase I NETCONF/CLI/REST

Physical ports

Device ManagerNETCONF server

Embedded RouterControl PlaneVIM

Linux User Space

SR-IOV Linux Kernel

DPDKAccelerated L2/L3 Forwarding Plane (vectoring)

NFVI

VNF VNF VNFRAD

Routeras VNF

Embedded accelerated router improves vCPE business case


• Management & Control:– NETCONF/YANG, SNMP, CLI – NETCONF notifications– Security - SSH, SFTP, TFTP, TACACS+– DHCP client/server– SYSLOG/Alarms– SDN protocols - OVSDB/OpenFlow– ZTP over public IP– Netconf for NFVI– VM real time resources utilization– On demand VM monitoring– Change of SFC components– CPU Core Pinning

• Virtualization:– KVM for hosting 3rd party VNFs

– Per port acceleration mode: DPDK/SR-IOV– VM snapshot– VM reconfiguration

• I/Fs – Integrated drivers:– ETH ports – SFP, UTP– Broadband – LTE

• Flexible binding of networking:– Physical/logical ports– Virtualization layer

vCPE-OS 3.1GA Main Features (1/2)

* New features in version 3.0 GA are marked BLUE


• vRouter:– Routing with VRF – Static, BGP, OSPFv2– PBR– IPSEC – NAT and NAT-T– Local Switching– IKEv2

• Service assurance:– TWAMP – ICMP echo, UDP echo & RADM– Fault Propagation from port to VNF

• Security– User Management via TACACS+, RADIUS

and LDAP– Local user levels and permissions

– Password hardening– Secured Linux– Security patches – ACL– SSL for REST interface– Sensitive data encryption– Protected data in transit with SSH, SFTP,

SCP, HTTPS, IPsec– TPM for storing keys and certificates

vCPE-OS 3.1GA Main Features (2/2)

* New features in version 3.0 GA are marked BLUE

vCPE-OS ZTP and Life Cycle ManagementvCPE Toolbox and “Ready-to-Go” Solutions


Zero Touch Philosophy and Toolbox

OFF-NETON-NET

CPE is directly connected to Provider Network

Two Zero-Touch Scenarios

CPE is connected via 3rd party network

• Relatively secured infrastructure• Internal DHCP server• Known IP address structure

• Unsecured infrastructure • Unknown IP address structure• External DHCP server

SPNetworkuCPE

SPNetwork

3rd Party NetworkuCPE

Different ZTP procedures are available for the two scenarios


Pre-staging uCPE

Zero Touch Process for Off-Net Deployment

By RAD or Service Provider

Install SW and Certificates

Label CPE / carton with CPE ID

RAD can customize the ZTP solution to preferred operational procedures

ZTP preparation at NOC

Register CPE ID/Customer ID

Utilize RADview and CPE ID to prepare configuration and SW (optional)

Configuration and SW are automatically stored in Bootstrap server

Note: all parameters can be acquired from northbound interfaces to CRM via REST API


Zero-touch Entries


Pre-staging uCPE

Zero Touch Process for Off-Net Deployment

uCPE RADview

Bootstrap server

Internet

uCPE “Call Home” process

Fully automatic process: Connects securely to bootstrap

server

Downloads configuration and SW

Connects securely to RADview for Lifecycle Management and Monitoring

By RAD or Service Provider

Install SW and Certificates

Label CPE / carton with CPE ID

RAD can customize the ZTP solution to preferred operational procedures

ZTP preparation at NOC

Register CPE ID/Customer ID

Utilize RADview and CPE ID to prepare configuration and SW (optional)

Configuration and SW are automatically stored in Bootstrap server

Note: all parameters can be acquired from northbound interfaces to CRM via REST API

uCPE shipped & installed at customer site

Office

Installed by customer or technician

Connect CPE to networks & power

uCPE

Zero Touch


ETX as DHCP Client

ZTP file in XML format• <ETX-2>

– <sw-version>4.01.50</sw-version>– <sw-action>upgrade-only</sw-action>– <sw-src-file>/rad/etx/etx2.sw</sw-src-file>– <sw-dst-file>auto</sw-dst-file>– <cfg-version>etx2 4.01.50</cfg-version>– <cfg-action>replace-cfg</cfg-action>– <cfg-src-file>/rad/etx/etx2.cfg</cfg-src-file>– <cfg-dst-file>startup-config</cfg-dst-file>

• </ETX-2>

On-Net Zero Touch Provisioning

DHCP Requests

RCP: read ZTP XML file for further instructions

IP, TFTP Address & ZTP Configuration name

RCP: download config file and software according to ZTP file

DHCP server Authenticate device

Service ProviderNetwork

Solution address ZTP when devices are connected to Service Provider network

DHCPServer

TFTP Server

Ordering and Licensing


Main ETX-2v Ordering Options

P/N Description I/Fs Optional I/FsETX-2V/AC/2S/4U/R2C/120S/4R 2 Rangeley Cores; 4GB RAM; 120GB SSD 2xSFPs; 4xRJ-45 LTE

ETX-2V/AC/2S/4U/R2C/120S/8R 2 Rangeley Cores; 8GB RAM; 120GB SSD 2xSFPs; 4xRJ-45 LTE



ETX-2V/L/AC/2S/4U/D8C/240S/16R/LE/W 8 Denverton Cores; 16GB RAM; 240GB SSD 2xSFPs; 4xRJ-45; LTE

ETX-2V/L/AC/4SP/5U/D8C/1000S/24R/LE/W 8 Denverton Cores; 24GB RAM; 1TB SSD 4xSFP+; 5xRJ-45; LTE

ETX-2V/L/AC/4SP/5U/D16C/1000S/24R/LE/W 16 Denverton Cores; 24GB RAM; 1TB SSD 4xSFP+; 5xRJ-45; LTE

ETX-2V/L/AC/2SP/8U/X12C/2000S/32R/LE 12 Xeon-D Cores; 32GB RAM; 2TB SSD 2xSFP+; 8xRJ-45; LTE

ETX-2V/AC/VD/4U/D8C/240S/16R 8 Denverton Cores; 16GB RAM; 240GB SSD V/ADSL; 4xRJ-45 LTE


• vCPE-OS license is based on the number of cores of the x.86 platform it runs on• There are two license categories:

– A yearly based license for a single vCPE-OS instance, this includes the RADcare BasicPlus service

– A perpetual license (‘/P’) for a single vCPE-OS instance, of a specific release• License activation

– License key will be supplied per the target HW identifier (via RVP)– You can read this identifier via the installed vCPE-OS

vCPE-OS Licenses


vCPE-OS LicensesP/N Description

VCPE-OS-LIC/D4C Annual license For Denverton based x.86 CPU with 4 cores

VCPE-OS-LIC/D4C/P Perpetual license For Denverton based x.86 CPU with 4 cores







VCPE-OS-LIC/X6C Annual license For XEON-D based x.86 CPU with 6 cores

VCPE-OS-LIC/X6C/P Perpetual license For XEON-D based x.86 CPU with 6 cores






RADview

Item P/N Functions

RADview NMS

RV-SW/LINUX – per mng station Discovery, configuration, Inventory, real-time status, Zero Touch over Public-IP, scheduled tasks.RV-LIC/vCPE – per managed NFVI

PerformanceMonitoring RV-LIC/PMSESSION – per session Statistics collection, TWAMP, KPI, PM dashboard,

historic reports

Domain Orchestrator

RV-LIC/DNFVO – per module VNF on-boarding: repository, configuration, HEAT templates, Licensing, Service deployment: VNF instantiationVNF lifecycle management: Real-time resource consumption, resource adaption, management operations for live VNF

RV-LIC/DNFV – per managed uCPE

Key Takeaways


Any VNF - networking, security and ITAny Orchestration & SDN controllerRapid evolvement based on open source industry components

RAD’s vCPE Toolbox: Ready-To-Go Without Lock-in

vCPE OptimizedSlim and high performance

Operating System

Any AccessSeamless management of RAD’s pluggable PNFs for Carrier Ethernet, Cellular, xDSL, PON & TDM

Any HardwareRAD’s Whitebox and 3rd party server

RAD’s gray-box supporting Carrier Ethernet Complements RAD’s pluggable PNF for access monitoring & timing

High AvailabilityWAN, NFVI & VNF performance monitoring, troubleshooting &

self healing

Open

Thank youF o r y o u r a t t e n t i o n

Jonny GilgonProduct [email protected]

vcpe-os v3.0 ga - telescience...integration to 3 rd party 3 rd party nfv orchestrator services /...

Documents