Cisco Open Network Environment: Software Defined Networking and beyond

4,841
-1

Published on

onePK, the programming platform for Cisco networks, provides APIs in a variety of languages and styles for network programming. This presentation explains the onePK architecture and illustrates the use of onePK with different use cases. Presented at the November 2012 Network Innovation Summit.

Read more on the Cisco Architect & DE Discussions blog: http://blogs.cisco.com/getyourbuildon/

Published in: Technology
2 Comments
1 Like
Statistics
Notes
  • Read more on the Cisco Architect & DE Discussions blog, here's a blog series from Nathan: http://blogs.cisco.com/getyourbuildon/the-onepk-software-architecture-2/
       Reply 
    Are you sure you want to  Yes  No
    Your message goes here
  • Thanks, Jessy for favoring the preso!
       Reply 
    Are you sure you want to  Yes  No
    Your message goes here
No Downloads
Views
Total Views
4,841
On Slideshare
0
From Embeds
0
Number of Embeds
1
Actions
Shares
0
Downloads
348
Comments
2
Likes
1
Embeds 0
No embeds

No notes for slide

Cisco Open Network Environment: Software Defined Networking and beyond

  1. 1. Cisco Open Network EnvironmentSoftware Defined Networking and beyond Cisco Open Network Environment SDN Concepts and onePK Network Operating Systems Group, Cisco Systems Inc.© 2012 Cisco and/or its affiliates. All rights reserved. 1
  2. 2. SDN, OpenFlow, Openstack and Overlays – Importantto Align on Semantics What Is Software Defined Network (SDN)? What Is OpenFlow? “…In the SDN architecture, the control and data “…open standard that enables researchers planes are decoupled, network intelligence and state to run experimental protocols in campus networks. are logically centralized, and the underlying network Provides standard hook for researchers to run infrastructure is abstracted from the applications…” experiments, without exposing internal working of vendor devices…” Note: SDN is not mandatory for network programmability nor Note: OF is not mandatory for SDN automation Source: www.opennetworking.org Source: www.opennetworking.org What is OpenStack? What is an Overlay Network? Opensource software for building public Overlay network is created on existing network and private Clouds; includes Compute (Nova), infrastructure (physical and/or virtual) using a network Networking (Quantum) and Storage (Swift) protocol. Examples of overlay network protocol are: services. GRE, VPLS, OTV, LISP and VXLAN Note: Applicable to SDN and non-SDN networks Note: Applicable to SDN and non-SDN networks Source: www.openstack.org© 2012 Cisco and/or its affiliates. All rights reserved. 2
  3. 3. Customers Want to Solve for Different Pain-Points viaSDN…Common Theme Programmability/Automation Research/ Massively Scalable Cloud Service Providers Enterprise Academia Data Center  Experimental   Customize with   Automated   Policy-based   Virtual workloads, OpenFlow/SDN Programmatic provisioning and control and VDI, Orchestration components for APIs to provide programmable analytics to of security profiles production deep insight into overlay, optimize and networks network traffic OpenStack monetize service delivery Network Network Flow Scalable Agile Service Private Cloud “Slicing” Management Multi-Tenancy Delivery Automation Diverse Programmability Requirements Across Segments Most Requirements are for Automation & Programmability © 2012 Cisco and/or its affiliates. All rights reserved. 3
  4. 4. Networking Standards are Critical 802.1 Overlay Networking Projects, Cisco Innovations: Open Network Research FEX Architecture Center at Stanford University Technical Advisory Group Chair, Working Groups: Config, Hybrid, Extensibility, Futures/FPMOD/OF2.0 Working Groups: Quantum API Donabe Cisco Innovations: OpenStack API for Nexus OpenStack Extensions Open Source Cloud Overlay Working Groups: Computing project NVO3, L2VPN, TRILL, L3VPN, LISP, PWE3 API Working Groups: NETCONF, ALTO, CDNI, XMPP, SDNP, I2AEX Controller Working Groups: PCE, FORCES Note: Very little standardization in hypervisor technologies (e.g. live migration, config, APIs)© 2012 Cisco and/or its affiliates. All rights reserved. 4
  5. 5. Industry Standards 802.1 Overlay Networking Projects, Cisco Innovations: Open Network Research FEX Architecture Center at Stanford Org Cisco Leadership/Contributions for University Technical Advisory Open & Programmable Networking Group Chair, Working Groups: Config, Hybrid, ONF •  Harden OpenFlow spec Extensibility, Futures/FPMOD/OF2.0 •  Technical Advisory Group Chair Working Groups: Quantum •  Hybrid Group Chair API Donabe Openstack Major contributions to Quantum networking APIs Cisco Innovations: OpenStack API for Nexus OpenStack Extensions Open Source Cloud Computing project IETF Overlay protocols Overlay Working Groups: •  LISP, OTV, VXLAN, … NVO3, L2VPN, TRILL, L3VPN, LISP, PWE3 API Working Groups: NETCONF, ALTO, CDNI, XMPP, SDNP, I2AEX Controller Working Groups: PCE, FORCES© 2012 Cisco and/or its affiliates. All rights reserved. 5
  6. 6. Cisco Open Network Environment – Integrate andComplement Industry’s Most Comprehensive Networking Portfolio Hardware + Software Physical + Virtual Network + Compute Applications Platform Virtual APIs Overlays Network a onePK Controllers and N1KV Enhancements Agents SDN: for Open Clouds www.cisco.com/go/one Controller SW OpenFlow Agents© 2012 Cisco and/or its affiliates. All rights reserved. 6
  7. 7. onePK© 2012 Cisco and/or its affiliates. All rights reserved. 7
  8. 8. Evolving How We Interact With The Network Operating System Traditional Approach Evolution IOS Anything you can think of CLI SNMP HTML Monitoring XML Policy App AAA Interface C CDP Discovery Java Syslog Routing … Netflow Events Data Plane Routing Protocols Span App Actions EEM (TCL)© 2012 Cisco and/or its affiliates. All rights reserved. 8
  9. 9. onePK Architecture C, JAVA Program onePK API Presentation onePK API Infrastructure IOS / XE NXOS IOS XR (Catalyst, ISR, ASR1K) (Nexus Platforms) (ASR 9K, CRS)© 2012 Cisco and/or its affiliates. All rights reserved. 9
  10. 10. onePK Application Hosting Options Process Hosting Blade Hosting End-Point Hosting Network OS Network OS Network OS Container External Server onePK Blade onePK Apps Container Apps onePK Apps© 2012 Cisco and/or its affiliates. All rights reserved. Write Once, Run Anywhere 10
  11. 11. Yes, it is secureSecurity Five Ways Digital Signing App Certification Process Security Admin CLI Control Code Isolation Code Security Resource Allocation Strong Typing Security AAA (PKI) Runtime Container Isolation Encryption (TLS) Security Security Resource Consumption© 2012 Cisco and/or its affiliates. All rights reserved. 11
  12. 12. Languages and Service Sets Developer Data Path •  Debug Capabilities Element •  Packet/Flow Classifiers •  Tracing Interfaces •  Copy/Punt/Inject •  Element Capabilities •  Management Extensions •  Statistics •  Configuration Management •  Interface/Ports Events •  Location Information Network Element Network Element Discovery Network •  Network Element Discovery Network Element Element Policy •  Service Discovery Network •  Interface Policy •  Topology Discovery Element •  Interface Feature Policy •  Forwarding Policy Network •  Flow Action Policy Element Network Element Network Element Network Routing Utilities Element Cloud Connectors •  Read RIB Routes •  Syslog Events and Queries •  Identity •  Add/Delete Application Routes •  AAA Interface •  QoS •  RIB Events (Route up/down) •  Path Trace •  Provisioning© 2012 Cisco and/or its affiliates. All rights reserved. 12
  13. 13. Example onePK Applications© 2012 Cisco and/or its affiliates. All rights reserved. 13
  14. 14. Example: Simplified ManagementProblem: Misconfigurations cause network outages, degrade performance, impact SLAs.Value proposition: Get, set, and detect configuration changes via cross-platform API NX3K 1 21.  Network begins with mismatched MTU 1500 parameters on either side of link (e.g. MTU) MTU 15182.  Application checks parameters on either CRS side and identifies mismatches (red lines) 33.  Application sets parameters to match MTU 1518 4 (lines turn green) MTU 16004.  Application registers for events related to 9K parameters change.5.  Users logs into console and manually 5 MTU 1600 changes parameter. Topology indicates MTU 1500 change. 1K MTU 1500 ISR MTU 1000© 2012 Cisco and/or its affiliates. All rights reserved. 14
  15. 15. Example: Custom EncryptionProblem: Customers want custom encryption on specific traffic typesValue proposition: Punt traffic of interest, encrypt, and re-inject.1.  Policy APIs on ingress router are set to 1 telnet punt telnet and syslog to app onePK application2.  App encrypts punted traffic and re-injects http encrypt into data path. 2 encrypt3.  Policy APIs on egress router punt telnet and syslog to app Unsecure 5 Network4.  App decrypts punted traffic and re-injects 3 into data path. decrypt5.  Traffic that does not match policy passes http through unencrypted. onePK application telnet telnet 4© 2012 Cisco and/or its affiliates. All rights reserved. 15
  16. 16. Example: Custom RoutingData Center Traffic Forwarding Based on a Custom Algorithm Business Data & Logic onePK Custom Routing Application Unique Data Forwarding Algorithm Highly Optimized© 2012 Cisco and/or its affiliates. All rights reserved. for the Network Operator’s Application 16
  17. 17. Summary© 2012 Cisco and/or its affiliates. All rights reserved. 17
  18. 18. Summary: Open Network EnvironmentThe Industry’s Broadest Approach to Programmatic Access to the Network•  Evolutionary step for networking Integrate with and complement the Network Control Plane•  Centered around delivering open, programmable environment for real-world use cases No one-size-fits-all APIs, Agents/Controllers, Network Virtualization Joint evolution with industry and academia•  Technology-agnostic Not predicated on a particular technology or standard Draw from existing technologies and industry standards•  Delivered as incremental functionality Many customers will use hybrid implementations Build upon existing infrastructure with investment protection Open Network Environment www.cisco.com/go/one onePK www.cisco.com/go/onepk; www.cisco.com/go/getyourbuildon© 2012 Cisco and/or its affiliates. All rights reserved. 18
  19. 19. Some References•  Open Network Environment www.cisco.com/go/one•  onePK www.cisco.com/go/onepk www.cisco.com/go/getyourbuildon developer.cisco.com/web/getyourbuildon•  Blogs blogs.cisco.com/getyourbuildon/ blogs.cisco.com/tag/onepk/ blogs.cisco.com/tag/openflow/ blogs.cisco.com/tag/sdn/© 2012 Cisco and/or its affiliates. All rights reserved. 19
  20. 20. Thank you.© 2012 Cisco and/or its affiliates. All rights reserved. 20

×