Presentation for NAIM Network Internship Program

1. Visibility Challenge on
OF@TEIN SDN-enabled
Virtual Playgrounds
Aris C. Risdianto
OF@TEIN Project Team
TEIN-GIST@nm.gist.ac.kr
January 19th 2015 @ Seoul

2. Outline
• OF@TEIN SDN-enabled Testbed
– Infrastructure
– SmartX Box Implementation
– Lifecycle Experiments
• Visibility Challenge
– Flow Centric Visibility
– Flow Tapping Solution
– Flow Tapping Implementation in OF@TEIN

3. OF@TEIN :
Distributed Multiple Boxes as A Shared
& Organized Virtual Playground

4. OF@TEIN Testbed Infrastructure
(2012~2014)
Last Update: 2014-10-02
SmartX Box
OpenFlow FlowVisor
SDN Controller
Auto
Center
EU
(SmartFIRE)
OF@TEIN
Korea U
(Seoul)
Jeju U
(Jeju)Postech
(Pohang)
Indonesia
Malaysia
(UM)
Vietnam
Philippines
Thailand
Malaysia
(MYREN)
Pakistan
KOREN NOC
(Seoul)
GIST
(Gwangju)
OF@KOREN TEIN

5. SmartX Rack Type B vs SmartX Box Type B+
Worker VM #1
Monitoring
Agent
Worker VM #2
Worker VM #3
Remote Power Mng.
NF/OVS Capsulator Node
VM
#2
OpenFlow
Agent
SmartX-
Rack Agent
MediaX-VT
Agent
VM
#1
Dataplane OF Switch
Data Manag.
Management
VM (SmartX-Rack
/ OpenStack /
Monitoring Agents)
Worker VM #1
Worker VM #2
Worker VM #3
Open
vSwitch
Management Switch
Remote Power
Management
Storage
Manage
ment
Worker
OF Switch
Capsulator
P
• 3 Tier Nodes (Capsulator, OF Switch, Worker)
• 3 Network Planes: Power + Management / Control / Data
M
C D
SmartX Rack (Type B)
VM
VM
VM
O
F
S
VM
VM
VM
O
F
S
SmartX Box (Type B+)
VM
VM
VM
O
V
S
VM
VM
VM
O
V
S

6. SmartX Box Type B+ Implementation
OVS Bridge
Virtual NIC
Physical NIC
Worker
Node
Virtual
Switch
Virtual
Switch
Gre_GJPH1
Virtual
Switch
MappingSteering
PH C_PH
OVS
bridge
VM#
1
VM#
2
VM#
3
VM#
4
OVS
bridge
Control
Data
Physical
Switch
Tagging
…
…
XEN Hypervisor version 4.3.0
Ubuntu version 12.04.3
Kernel version 3.8.0-29
OpenvSwitch version 2.0.0
Power
Man’tIP
IP
IP

7. OF@TEIN Script-based and Chef-based
Configuration Tools for Lifecycle Experiment

8. Overlay Tunnels
Resource Based
Visibility*
Resources Request
SmartX Boxes
Network & FlowSpace
(Datapath, Tunnel, IP/VLAN)
Flow Based Visibility
+ Experiment UI
OF@TEIN Lifecycle Experiments Examples
Function
Compute
(VMs & Encoder)
Resources Request
and Verification
Operator
Developer
Resource
Allocation
Interconnect
FlowVisor
Storage
(Streaming Media)
L2
L3
L2
VMVM VMVM
(Pre-configured)
A Virtual Playground
Automated Experiment Preparation and Execution Script/Tools
(ping test/bandwidth measurement/video streaming)
Experiment
Control
Box
Experiment Visibility
Start/Stop/Monitor/Measure
(Application Server/Client, Data)
Automated Resources
Provision Script/Tools

9. OF@TEIN Lifecycle Experiments
Visualization and Results

10. Visibility Challenge:
“Virtualize but Visible”

11. VMVMVM
L2
A Organized Virtual
Playground
L2
L3
VM
OF@TEIN Flow-centered Visibility
(Work-in-Progress)
SmartX Box
(Type B+)
SmartX Control Center
Installation & Configuration
Developer
Visibility
FlowVisor + ODP
Physical Network
(TEIN + KOREN)
Overlay Tunnels
Flow Tapping & Sampling
Experiment Controls
Operator
Visibility
Automatiion Scripts
Application
Performance
Measurement
Flow
Visualization
+ Analysis
System Network
FlowSpace
Box Inter-Connect
Functions

12. Flow Tapping Solution
OpenFlow Network
OF Switch 1 Tap Aggregation
Switch
Filter (IP / TCP Port / Protocol)
Map/Redirect (Physical Port)
Next Hop Switch
OF Switch 2
OpenFlow (Tapping)
Controller
Analyzer/
Recorder
Manual Span
(Mirroring)
OpenFlow (Datapath)
Controller
Analyzer/
Recorder
Tapping Application
SAL, REST API, OVSDB, etc.

13. ONF Tapping Application
• Written in Java Code and run as
OSGI Bundle of OpenDayLight
• Web UI not integrated with Open
DayLight (parallel runs)
• Use ODP SAL for OpenFlow 1.0
• Depends on OpenDayLight frame
work and services
– SwitchManager
– ForwardingRulesManager
– StatisticManager
*Source code available but difficult to compile/debug (OSGI framework)
*No longer maintained by the initial developer (engineer from Wiretaps)

14. Tapping Application through ODP REST API
• Support many type of information (swit
chmanager, topology, flowprogrammer,
etc.)
• Not depends on OpenDayLight controll
er application
• Can be access through many codes (cur
l, python, java, etc.)

15. 15
Flow Tapping Application Development with Java Code
Check ODP
REST API +
Installed Flow
Entry before
new tapping
policy
Check Installed
Flow Entry after
adding new
tapping policy
Message after Flow
successfully Installed

16. OF@TEIN
SmartX Box B+ Tapping Application Implementation
VM
ODP Operator
Controller (VM)
br1 brcap
eth6 GW2
xenbr0
brtap
xenbr1 br2
eth5
GW1
eth4
brtap-to-br1
br1-to-brtap
br1_xbr1 br1_br2 br2_br1 GJ C_GJVif[X].1
eth7
ODP Tap
Controller (VM)
ODP Developer
Controller (VM)
SMARTX-BPLUS-TEST
Vif[X].0

17. SmartX Box Tapping Application Implementation
br1 brtap
OpenDayLight Tapping Web UI Flow Tapping Application
exp-vm

18. Fail FailTx Only Rx Only
SmartX Box Tapping Application Implementation
br1 brcap
eth6
brtap
xenbr1 br2
tap-to-xxxx
br1-to-brtap
br1_xbr1 br1_br2 br2_br1 GJ C_GJVif[X].1
eth7
Virtual interface
OVS Patch
Virtual Ethernet
Wireshark
VM
(192.168.2.10)
VM
(192.168.2.1)
Ping request
xenbr1-to-tap brcap-to-tapbr2-to-brtap
Programmable Capture Library (JNetPcap)

19. Thank you!
• Send Inquiry to jongwon@gist.ac.kr
• http://netmedia.gist.ac.kr
Contact us!
TEIN-GIST@nm.gist.ac.kr