SlideShare a Scribd company logo
1 of 12
Download to read offline
Analytics driven SDN and
commodity switches
Peter Phaal
Founder and President, InMon Corp.

Silicon Valley SDN Group, May, 2014
Copyright © 2014 InMon Corporation
Controller
Analyze
Plan
Act
Network
Measurement

Protocol Control

Protocol
Feedback control
“You can’t control what you can’t measure” Tom DeMarco
Copyright © 2014 InMon Corporation
Separation of edge and core
Fabric: A Retrospective on Evolving SDN by Martin Casado, Teemu Koponen, Scott Shenker, and Amin Tootoonchian
Network Elements Controller Functions
Edge flexible software virtual switches
network virtualization, tenant isolation,
security, NFV… e.g. NSX, Nuage …
Fabric
simple, low cost, vendor neutral,
hardware switches
traffic analytics and control 

to increase efficiency
dard headers)
, this requires
dreds of bits;
d only match
e forwarding
y far from the
y. We expect
to increasing
in turn means
owed and the
ign paradigm,
ery switch. It
a sweet spot
functionality
ion towards a
generality.
ements to the
to but more
hange in the
IPv4 to IPv6)
Fabric
Elements
Fabric Controller
Src
Host
Dst
Host
Edge Controller
Ingress
Edge Switch
Egress
Edge Switch
Figure 1: The source host sends a packet to an edge switch, which
after providing network services, sends it across the fabric for the
egress switch to deliver it to the destination host. Neither host sees
any internals of the fabric. The control planes of the edge and fabric
are similarly decoupled.
a new concept but rather we believe it should be included as an
architectural building block within SDN. We now identify the key
properties for these fabrics.
Separation of Forwarding. In order for a fabric to remain decou-
pled from the edge it should provide a minimal set of forwarding
primitives without exposing any internal forwarding mechanisms
Simple, low cost, vendor neutral → merchant silicon
Copyright © 2014 InMon Corporation
Rise of merchant silicon
20132011
Ports
Opportunity to leverage merchant silicon traffic analytics and
apply targeted controls to increase fabric efficiency
Copyright © 2014 InMon Corporation
Large “Elephant” flows
http://research.microsoft.com/en-us/UM/people/srikanth/data/imc09_dcTraffic.pdf
Elephant flows are the small number
of long lived large flows responsible
for majority of bytes on network
http://blog.sflow.com/2013/02/sdn-and-large-flows.html
Copyright © 2014 InMon Corporation
packets
decode hash sendflow cache flushsample
Flow
Records
flow cache embedded on switchcustom ASIC based switch
NetFlow
IPFIX
…
decode hash sendflow cache flush
Flow
Records
packets
send
poll
i/f counters
sample
multiple switches export sFlow
packets
send
poll
i/f counters
sample
...
external software flow cache
merchant silicon based switch
(Broadcom, Intel/Fulcrum, and Marvell)
JSON/REST

NetFlow
IPFIX
…
• Reduce ASIC cost / complexity
• Fast response (data not sitting on switch)
• Centralized, network-wide visibility
• Increase flexibility → software defined analytics
Move flow cache from ASIC to external software
Scale-out alternative to SNMP polling
Traffic analytics with sFlow
Centralized real-time analytics identifies large flows,
paths, hot spots etc. → plan corrective actions

How can controls be efficiently deployed?
Copyright © 2014 InMon Corporation
• Simple, no change to normal forwarding behavior - BGP, OSPF, SPB, TRILL, LAG/MLAG etc. used to
control L2 / L3 forwarding tables
• Efficient, merchant silicon hardware multipath forwarding efficiently handles most flows. OpenFlow used
to control ACL table and selectively override forwarding of specific flows (block, mark, steer, rate-limit),
maximizing effectiveness of limited general match capacity.

Note: very few ACLs needed in fabric since policy has shifted to edge - mainly required to protect control
plane
• Scaleable, flows handled by existing control plane, OpenFlow only used when controller wants to make
an exception. 

Note: An OpenFlow controller could pro-actively configure L2/L3 tables to define “NORMAL” forwarding
and still support hybrid control of ACL table
• Robust, if controller fails, network keeps forwarding
Traffic control with hybrid OpenFlow
Hybrid Programmable Forwarding Plane, David Ward, ONF Summit, 2011
Copyright © 2014 InMon Corporation
sFlow-RT feedback controller
Large flow steering
DDoS Mitigation
REST API
Open “Southbound” APIs
Data Plane
Real-time analytics and control
Hosts
Open “Northbound” APIs
User defined policy
sFlow-RT controller
real-time analytics
hybrid OpenFlow
controller
Open JavaScript/ECMAScript
API optimized for SDN traffic
engineering applications
Large flow marking
…
Web portal
OpenStack
etc.
Copyright © 2014 InMon Corporation
Brocade/InMon: DDoS mitigation
http://www.opennetsummit.org/pdf/2014/sdn-idol/Brocade-SDN-Idol-Proposal.pdf
“Real-Time SDN Analytics for DDoS Mitigation” winner of ONS SDN Idol 2014
Copyright © 2014 InMon Corporation
ALU/InMon: Large flow marking
http://enterprise.alcatel-lucent.com/docs/?id=23847
Copyright © 2014 InMon Corporation
Extend control beyond network
Analyze
Plan
Act
Network, Storage, Compute
sFlow-RT
Feedback
Controller
Maximize data center efficiency through coordinated workload
placement and resource allocation of network, storage, and
compute based on measured loads and communication patterns
e.g. reduce network congestion by instructing OpenStack to move virtual machine
Copyright © 2014 InMon Corporation
• InMon.com
• blog.sFlow.com
• sFlow.org
• Host-sFlow.SourceForge.net
• Velocity 2012

http://blog.sflow.com/2013/04/velocity-conference-talk.html
• Bay Area Network Virtualization Meetup

http://blog.sflow.com/2013/06/bay-area-network-virtualization-talk.html
• Mininet testbed

http://blog.sflow.com/2014/04/mininet-integrated-hybrid-openflow.html
Explore further

More Related Content

What's hot

Service Mesh on Kubernetes with Istio
Service Mesh on Kubernetes with IstioService Mesh on Kubernetes with Istio
Service Mesh on Kubernetes with Istio
Michelle Holley
 

What's hot (20)

What a difference 5 years make
What a difference 5 years makeWhat a difference 5 years make
What a difference 5 years make
 
SDN-Based Enterprise Connectivity Service
SDN-Based Enterprise Connectivity ServiceSDN-Based Enterprise Connectivity Service
SDN-Based Enterprise Connectivity Service
 
Open and Disaggregated Transport SDN - from PoC to Field Trial
Open and Disaggregated Transport SDN - from PoC to Field TrialOpen and Disaggregated Transport SDN - from PoC to Field Trial
Open and Disaggregated Transport SDN - from PoC to Field Trial
 
DPDK & Cloud Native
DPDK & Cloud NativeDPDK & Cloud Native
DPDK & Cloud Native
 
Service Mesh on Kubernetes with Istio
Service Mesh on Kubernetes with IstioService Mesh on Kubernetes with Istio
Service Mesh on Kubernetes with Istio
 
Networking Technology Transformation to SDN and NFV
Networking Technology Transformation to SDN and NFVNetworking Technology Transformation to SDN and NFV
Networking Technology Transformation to SDN and NFV
 
Transport SDN Overview and Standards Update: Industry Perspectives
Transport SDN Overview and Standards Update: Industry PerspectivesTransport SDN Overview and Standards Update: Industry Perspectives
Transport SDN Overview and Standards Update: Industry Perspectives
 
Colt inter-provider SDN NNIs and APIs
Colt inter-provider SDN NNIs and APIsColt inter-provider SDN NNIs and APIs
Colt inter-provider SDN NNIs and APIs
 
SDN & NFV Orchestration
SDN & NFV OrchestrationSDN & NFV Orchestration
SDN & NFV Orchestration
 
How to use SDN to Innovate, Expand and Deliver for your business
How to use SDN to Innovate, Expand and Deliver for your businessHow to use SDN to Innovate, Expand and Deliver for your business
How to use SDN to Innovate, Expand and Deliver for your business
 
Edge and 5G: What is in it for the developers?
Edge and 5G: What is in it for the developers?Edge and 5G: What is in it for the developers?
Edge and 5G: What is in it for the developers?
 
vCPE Challenges and Ways Forward
vCPE Challenges and Ways ForwardvCPE Challenges and Ways Forward
vCPE Challenges and Ways Forward
 
OpenDaylight Update (June 2018)
OpenDaylight Update (June 2018)OpenDaylight Update (June 2018)
OpenDaylight Update (June 2018)
 
Future Network
Future NetworkFuture Network
Future Network
 
Radisys at Mobile World Congress Americas
Radisys at Mobile World Congress AmericasRadisys at Mobile World Congress Americas
Radisys at Mobile World Congress Americas
 
Harmonizing of Open Source Networking
Harmonizing of Open Source NetworkingHarmonizing of Open Source Networking
Harmonizing of Open Source Networking
 
443029825 cloud-computing-week8-9-pptx
443029825 cloud-computing-week8-9-pptx443029825 cloud-computing-week8-9-pptx
443029825 cloud-computing-week8-9-pptx
 
Mobile Internet Optimization: An effective tool for operators
Mobile Internet Optimization: An effective tool for operatorsMobile Internet Optimization: An effective tool for operators
Mobile Internet Optimization: An effective tool for operators
 
Hp 1015-odini-5 sdn-in_nfv
Hp 1015-odini-5 sdn-in_nfvHp 1015-odini-5 sdn-in_nfv
Hp 1015-odini-5 sdn-in_nfv
 
Disaggregated Networking - The Drivers, the Software & The High Availability
Disaggregated Networking - The Drivers, the Software & The High AvailabilityDisaggregated Networking - The Drivers, the Software & The High Availability
Disaggregated Networking - The Drivers, the Software & The High Availability
 

Similar to Analytics driven SDN and commodity switches

Software Innovations and Control Plane Evolution in the new SDN Transport Arc...
Software Innovations and Control Plane Evolution in the new SDN Transport Arc...Software Innovations and Control Plane Evolution in the new SDN Transport Arc...
Software Innovations and Control Plane Evolution in the new SDN Transport Arc...
Cisco Canada
 
Naveen nimmu sdn future of networking
Naveen nimmu sdn   future of networkingNaveen nimmu sdn   future of networking
Naveen nimmu sdn future of networking
OpenSourceIndia
 
Naveen nimmu sdn future of networking
Naveen nimmu sdn   future of networkingNaveen nimmu sdn   future of networking
Naveen nimmu sdn future of networking
suniltomar04
 

Similar to Analytics driven SDN and commodity switches (20)

Highilights from Rod Randall (SIRIS/Stratus) LTE Asia
Highilights from Rod Randall (SIRIS/Stratus) LTE AsiaHighilights from Rod Randall (SIRIS/Stratus) LTE Asia
Highilights from Rod Randall (SIRIS/Stratus) LTE Asia
 
Active network
Active networkActive network
Active network
 
Innovation in SDN Tools and Platforms
Innovation in SDN Tools and PlatformsInnovation in SDN Tools and Platforms
Innovation in SDN Tools and Platforms
 
Software Innovations and Control Plane Evolution in the new SDN Transport Arc...
Software Innovations and Control Plane Evolution in the new SDN Transport Arc...Software Innovations and Control Plane Evolution in the new SDN Transport Arc...
Software Innovations and Control Plane Evolution in the new SDN Transport Arc...
 
Exhibitor session: Ciena
Exhibitor session: CienaExhibitor session: Ciena
Exhibitor session: Ciena
 
Software Innovations and Control Plane Evolution in the new SDN Transport Arc...
Software Innovations and Control Plane Evolution in the new SDN Transport Arc...Software Innovations and Control Plane Evolution in the new SDN Transport Arc...
Software Innovations and Control Plane Evolution in the new SDN Transport Arc...
 
Naveen nimmu sdn future of networking
Naveen nimmu sdn   future of networkingNaveen nimmu sdn   future of networking
Naveen nimmu sdn future of networking
 
Naveen nimmu sdn future of networking
Naveen nimmu sdn   future of networkingNaveen nimmu sdn   future of networking
Naveen nimmu sdn future of networking
 
SDN - a new security paradigm?
SDN - a new security paradigm?SDN - a new security paradigm?
SDN - a new security paradigm?
 
Taw opening session
Taw opening sessionTaw opening session
Taw opening session
 
Industry 4.0: Building the Unified Namespace with Confluent, HiveMQ and Spark...
Industry 4.0: Building the Unified Namespace with Confluent, HiveMQ and Spark...Industry 4.0: Building the Unified Namespace with Confluent, HiveMQ and Spark...
Industry 4.0: Building the Unified Namespace with Confluent, HiveMQ and Spark...
 
OVNC 2015-Enabling Software-Defined Transformation of Service Provider Networks
OVNC 2015-Enabling Software-Defined Transformation of Service Provider NetworksOVNC 2015-Enabling Software-Defined Transformation of Service Provider Networks
OVNC 2015-Enabling Software-Defined Transformation of Service Provider Networks
 
Software Define Network, a new security paradigm ?
Software Define Network, a new security paradigm ?Software Define Network, a new security paradigm ?
Software Define Network, a new security paradigm ?
 
[Solace] Open Data Movement for Connected Vehicles
[Solace] Open Data Movement for Connected Vehicles[Solace] Open Data Movement for Connected Vehicles
[Solace] Open Data Movement for Connected Vehicles
 
btNOG 9 presentation Introduction to Software Defined Networking
btNOG 9 presentation Introduction to Software Defined NetworkingbtNOG 9 presentation Introduction to Software Defined Networking
btNOG 9 presentation Introduction to Software Defined Networking
 
Technology Primer: Software-Defined Networking and Its Impact on Infrastructu...
Technology Primer: Software-Defined Networking and Its Impact on Infrastructu...Technology Primer: Software-Defined Networking and Its Impact on Infrastructu...
Technology Primer: Software-Defined Networking and Its Impact on Infrastructu...
 
SDN and Photonics for Dynamic Cloud Connectivity
SDN and Photonics for Dynamic Cloud Connectivity SDN and Photonics for Dynamic Cloud Connectivity
SDN and Photonics for Dynamic Cloud Connectivity
 
Open Source Edge Computing Platforms - Overview
Open Source Edge Computing Platforms - OverviewOpen Source Edge Computing Platforms - Overview
Open Source Edge Computing Platforms - Overview
 
Introduction to Software Defined Networking (SDN) presentation by Warren Finc...
Introduction to Software Defined Networking (SDN) presentation by Warren Finc...Introduction to Software Defined Networking (SDN) presentation by Warren Finc...
Introduction to Software Defined Networking (SDN) presentation by Warren Finc...
 
Introduction to Software Defined Networking (SDN)
Introduction to Software Defined Networking (SDN)Introduction to Software Defined Networking (SDN)
Introduction to Software Defined Networking (SDN)
 

Recently uploaded

一比一定制加州大学欧文分校毕业证学位证书
一比一定制加州大学欧文分校毕业证学位证书一比一定制加州大学欧文分校毕业证学位证书
一比一定制加州大学欧文分校毕业证学位证书
A
 
一比一原版美国北卡罗莱纳大学毕业证如何办理
一比一原版美国北卡罗莱纳大学毕业证如何办理一比一原版美国北卡罗莱纳大学毕业证如何办理
一比一原版美国北卡罗莱纳大学毕业证如何办理
A
 
一比一原版澳大利亚迪肯大学毕业证如何办理
一比一原版澳大利亚迪肯大学毕业证如何办理一比一原版澳大利亚迪肯大学毕业证如何办理
一比一原版澳大利亚迪肯大学毕业证如何办理
SS
 
@OBAT ABORSI 3 BULAN@ OBAT PENGGUGUR KANDUNGAN 3 BULAN (087776558899)
@OBAT ABORSI 3 BULAN@ OBAT PENGGUGUR KANDUNGAN 3 BULAN (087776558899)@OBAT ABORSI 3 BULAN@ OBAT PENGGUGUR KANDUNGAN 3 BULAN (087776558899)
@OBAT ABORSI 3 BULAN@ OBAT PENGGUGUR KANDUNGAN 3 BULAN (087776558899)
Obat Cytotec
 
一比一原版英国格林多大学毕业证如何办理
一比一原版英国格林多大学毕业证如何办理一比一原版英国格林多大学毕业证如何办理
一比一原版英国格林多大学毕业证如何办理
AS
 
一比一原版田纳西大学毕业证如何办理
一比一原版田纳西大学毕业证如何办理一比一原版田纳西大学毕业证如何办理
一比一原版田纳西大学毕业证如何办理
F
 
一比一原版(UWE毕业证书)西英格兰大学毕业证原件一模一样
一比一原版(UWE毕业证书)西英格兰大学毕业证原件一模一样一比一原版(UWE毕业证书)西英格兰大学毕业证原件一模一样
一比一原版(UWE毕业证书)西英格兰大学毕业证原件一模一样
Fi
 
100^%)( POLOKWANE))(*((+27838792658))*))௹ )Abortion Pills for Sale in Sibasa,...
100^%)( POLOKWANE))(*((+27838792658))*))௹ )Abortion Pills for Sale in Sibasa,...100^%)( POLOKWANE))(*((+27838792658))*))௹ )Abortion Pills for Sale in Sibasa,...
100^%)( POLOKWANE))(*((+27838792658))*))௹ )Abortion Pills for Sale in Sibasa,...
musaddumba454
 
一比一原版(Polytechnic毕业证书)新加坡理工学院毕业证原件一模一样
一比一原版(Polytechnic毕业证书)新加坡理工学院毕业证原件一模一样一比一原版(Polytechnic毕业证书)新加坡理工学院毕业证原件一模一样
一比一原版(Polytechnic毕业证书)新加坡理工学院毕业证原件一模一样
AS
 
Jual obat aborsi Bekasi ( 085657271886 ) Cytote pil telat bulan penggugur kan...
Jual obat aborsi Bekasi ( 085657271886 ) Cytote pil telat bulan penggugur kan...Jual obat aborsi Bekasi ( 085657271886 ) Cytote pil telat bulan penggugur kan...
Jual obat aborsi Bekasi ( 085657271886 ) Cytote pil telat bulan penggugur kan...
ZurliaSoop
 
一比一原版(Dundee毕业证书)英国爱丁堡龙比亚大学毕业证如何办理
一比一原版(Dundee毕业证书)英国爱丁堡龙比亚大学毕业证如何办理一比一原版(Dundee毕业证书)英国爱丁堡龙比亚大学毕业证如何办理
一比一原版(Dundee毕业证书)英国爱丁堡龙比亚大学毕业证如何办理
AS
 
一比一原版(Wintec毕业证书)新西兰怀卡托理工学院毕业证原件一模一样
一比一原版(Wintec毕业证书)新西兰怀卡托理工学院毕业证原件一模一样一比一原版(Wintec毕业证书)新西兰怀卡托理工学院毕业证原件一模一样
一比一原版(Wintec毕业证书)新西兰怀卡托理工学院毕业证原件一模一样
AS
 
一比一定制波士顿学院毕业证学位证书
一比一定制波士顿学院毕业证学位证书一比一定制波士顿学院毕业证学位证书
一比一定制波士顿学院毕业证学位证书
A
 

Recently uploaded (20)

一比一定制加州大学欧文分校毕业证学位证书
一比一定制加州大学欧文分校毕业证学位证书一比一定制加州大学欧文分校毕业证学位证书
一比一定制加州大学欧文分校毕业证学位证书
 
一比一原版美国北卡罗莱纳大学毕业证如何办理
一比一原版美国北卡罗莱纳大学毕业证如何办理一比一原版美国北卡罗莱纳大学毕业证如何办理
一比一原版美国北卡罗莱纳大学毕业证如何办理
 
[Hackersuli] Élő szövet a fémvázon: Python és gépi tanulás a Zeek platformon
[Hackersuli] Élő szövet a fémvázon: Python és gépi tanulás a Zeek platformon[Hackersuli] Élő szövet a fémvázon: Python és gépi tanulás a Zeek platformon
[Hackersuli] Élő szövet a fémvázon: Python és gépi tanulás a Zeek platformon
 
一比一原版澳大利亚迪肯大学毕业证如何办理
一比一原版澳大利亚迪肯大学毕业证如何办理一比一原版澳大利亚迪肯大学毕业证如何办理
一比一原版澳大利亚迪肯大学毕业证如何办理
 
@OBAT ABORSI 3 BULAN@ OBAT PENGGUGUR KANDUNGAN 3 BULAN (087776558899)
@OBAT ABORSI 3 BULAN@ OBAT PENGGUGUR KANDUNGAN 3 BULAN (087776558899)@OBAT ABORSI 3 BULAN@ OBAT PENGGUGUR KANDUNGAN 3 BULAN (087776558899)
@OBAT ABORSI 3 BULAN@ OBAT PENGGUGUR KANDUNGAN 3 BULAN (087776558899)
 
Beyond Inbound: Unlocking the Secrets of API Egress Traffic Management
Beyond Inbound: Unlocking the Secrets of API Egress Traffic ManagementBeyond Inbound: Unlocking the Secrets of API Egress Traffic Management
Beyond Inbound: Unlocking the Secrets of API Egress Traffic Management
 
一比一原版英国格林多大学毕业证如何办理
一比一原版英国格林多大学毕业证如何办理一比一原版英国格林多大学毕业证如何办理
一比一原版英国格林多大学毕业证如何办理
 
一比一原版田纳西大学毕业证如何办理
一比一原版田纳西大学毕业证如何办理一比一原版田纳西大学毕业证如何办理
一比一原版田纳西大学毕业证如何办理
 
一比一原版(UWE毕业证书)西英格兰大学毕业证原件一模一样
一比一原版(UWE毕业证书)西英格兰大学毕业证原件一模一样一比一原版(UWE毕业证书)西英格兰大学毕业证原件一模一样
一比一原版(UWE毕业证书)西英格兰大学毕业证原件一模一样
 
100^%)( POLOKWANE))(*((+27838792658))*))௹ )Abortion Pills for Sale in Sibasa,...
100^%)( POLOKWANE))(*((+27838792658))*))௹ )Abortion Pills for Sale in Sibasa,...100^%)( POLOKWANE))(*((+27838792658))*))௹ )Abortion Pills for Sale in Sibasa,...
100^%)( POLOKWANE))(*((+27838792658))*))௹ )Abortion Pills for Sale in Sibasa,...
 
Abortion Pills In Jeddah+966572737505 & Get cytotec Jeddah
Abortion Pills In Jeddah+966572737505 & Get cytotec JeddahAbortion Pills In Jeddah+966572737505 & Get cytotec Jeddah
Abortion Pills In Jeddah+966572737505 & Get cytotec Jeddah
 
Loker Pemandu Lagu LC Semarang 085746015303
Loker Pemandu Lagu LC Semarang 085746015303Loker Pemandu Lagu LC Semarang 085746015303
Loker Pemandu Lagu LC Semarang 085746015303
 
一比一原版(Polytechnic毕业证书)新加坡理工学院毕业证原件一模一样
一比一原版(Polytechnic毕业证书)新加坡理工学院毕业证原件一模一样一比一原版(Polytechnic毕业证书)新加坡理工学院毕业证原件一模一样
一比一原版(Polytechnic毕业证书)新加坡理工学院毕业证原件一模一样
 
Jual obat aborsi Bekasi ( 085657271886 ) Cytote pil telat bulan penggugur kan...
Jual obat aborsi Bekasi ( 085657271886 ) Cytote pil telat bulan penggugur kan...Jual obat aborsi Bekasi ( 085657271886 ) Cytote pil telat bulan penggugur kan...
Jual obat aborsi Bekasi ( 085657271886 ) Cytote pil telat bulan penggugur kan...
 
一比一原版(Dundee毕业证书)英国爱丁堡龙比亚大学毕业证如何办理
一比一原版(Dundee毕业证书)英国爱丁堡龙比亚大学毕业证如何办理一比一原版(Dundee毕业证书)英国爱丁堡龙比亚大学毕业证如何办理
一比一原版(Dundee毕业证书)英国爱丁堡龙比亚大学毕业证如何办理
 
HUMANIZE YOUR BRAND - FREE E-WORKBOOK Download Now
HUMANIZE YOUR BRAND - FREE E-WORKBOOK Download NowHUMANIZE YOUR BRAND - FREE E-WORKBOOK Download Now
HUMANIZE YOUR BRAND - FREE E-WORKBOOK Download Now
 
一比一原版(Wintec毕业证书)新西兰怀卡托理工学院毕业证原件一模一样
一比一原版(Wintec毕业证书)新西兰怀卡托理工学院毕业证原件一模一样一比一原版(Wintec毕业证书)新西兰怀卡托理工学院毕业证原件一模一样
一比一原版(Wintec毕业证书)新西兰怀卡托理工学院毕业证原件一模一样
 
Washington Football Commanders Redskins Feathers Shirt
Washington Football Commanders Redskins Feathers ShirtWashington Football Commanders Redskins Feathers Shirt
Washington Football Commanders Redskins Feathers Shirt
 
Registry Data Accuracy Improvements, presented by Chimi Dorji at SANOG 41 / I...
Registry Data Accuracy Improvements, presented by Chimi Dorji at SANOG 41 / I...Registry Data Accuracy Improvements, presented by Chimi Dorji at SANOG 41 / I...
Registry Data Accuracy Improvements, presented by Chimi Dorji at SANOG 41 / I...
 
一比一定制波士顿学院毕业证学位证书
一比一定制波士顿学院毕业证学位证书一比一定制波士顿学院毕业证学位证书
一比一定制波士顿学院毕业证学位证书
 

Analytics driven SDN and commodity switches

  • 1. Analytics driven SDN and commodity switches Peter Phaal Founder and President, InMon Corp.
 Silicon Valley SDN Group, May, 2014
  • 2. Copyright © 2014 InMon Corporation Controller Analyze Plan Act Network Measurement
 Protocol Control
 Protocol Feedback control “You can’t control what you can’t measure” Tom DeMarco
  • 3. Copyright © 2014 InMon Corporation Separation of edge and core Fabric: A Retrospective on Evolving SDN by Martin Casado, Teemu Koponen, Scott Shenker, and Amin Tootoonchian Network Elements Controller Functions Edge flexible software virtual switches network virtualization, tenant isolation, security, NFV… e.g. NSX, Nuage … Fabric simple, low cost, vendor neutral, hardware switches traffic analytics and control 
 to increase efficiency dard headers) , this requires dreds of bits; d only match e forwarding y far from the y. We expect to increasing in turn means owed and the ign paradigm, ery switch. It a sweet spot functionality ion towards a generality. ements to the to but more hange in the IPv4 to IPv6) Fabric Elements Fabric Controller Src Host Dst Host Edge Controller Ingress Edge Switch Egress Edge Switch Figure 1: The source host sends a packet to an edge switch, which after providing network services, sends it across the fabric for the egress switch to deliver it to the destination host. Neither host sees any internals of the fabric. The control planes of the edge and fabric are similarly decoupled. a new concept but rather we believe it should be included as an architectural building block within SDN. We now identify the key properties for these fabrics. Separation of Forwarding. In order for a fabric to remain decou- pled from the edge it should provide a minimal set of forwarding primitives without exposing any internal forwarding mechanisms Simple, low cost, vendor neutral → merchant silicon
  • 4. Copyright © 2014 InMon Corporation Rise of merchant silicon 20132011 Ports Opportunity to leverage merchant silicon traffic analytics and apply targeted controls to increase fabric efficiency
  • 5. Copyright © 2014 InMon Corporation Large “Elephant” flows http://research.microsoft.com/en-us/UM/people/srikanth/data/imc09_dcTraffic.pdf Elephant flows are the small number of long lived large flows responsible for majority of bytes on network http://blog.sflow.com/2013/02/sdn-and-large-flows.html
  • 6. Copyright © 2014 InMon Corporation packets decode hash sendflow cache flushsample Flow Records flow cache embedded on switchcustom ASIC based switch NetFlow IPFIX … decode hash sendflow cache flush Flow Records packets send poll i/f counters sample multiple switches export sFlow packets send poll i/f counters sample ... external software flow cache merchant silicon based switch (Broadcom, Intel/Fulcrum, and Marvell) JSON/REST
 NetFlow IPFIX … • Reduce ASIC cost / complexity • Fast response (data not sitting on switch) • Centralized, network-wide visibility • Increase flexibility → software defined analytics Move flow cache from ASIC to external software Scale-out alternative to SNMP polling Traffic analytics with sFlow Centralized real-time analytics identifies large flows, paths, hot spots etc. → plan corrective actions
 How can controls be efficiently deployed?
  • 7. Copyright © 2014 InMon Corporation • Simple, no change to normal forwarding behavior - BGP, OSPF, SPB, TRILL, LAG/MLAG etc. used to control L2 / L3 forwarding tables • Efficient, merchant silicon hardware multipath forwarding efficiently handles most flows. OpenFlow used to control ACL table and selectively override forwarding of specific flows (block, mark, steer, rate-limit), maximizing effectiveness of limited general match capacity.
 Note: very few ACLs needed in fabric since policy has shifted to edge - mainly required to protect control plane • Scaleable, flows handled by existing control plane, OpenFlow only used when controller wants to make an exception. 
 Note: An OpenFlow controller could pro-actively configure L2/L3 tables to define “NORMAL” forwarding and still support hybrid control of ACL table • Robust, if controller fails, network keeps forwarding Traffic control with hybrid OpenFlow Hybrid Programmable Forwarding Plane, David Ward, ONF Summit, 2011
  • 8. Copyright © 2014 InMon Corporation sFlow-RT feedback controller Large flow steering DDoS Mitigation REST API Open “Southbound” APIs Data Plane Real-time analytics and control Hosts Open “Northbound” APIs User defined policy sFlow-RT controller real-time analytics hybrid OpenFlow controller Open JavaScript/ECMAScript API optimized for SDN traffic engineering applications Large flow marking … Web portal OpenStack etc.
  • 9. Copyright © 2014 InMon Corporation Brocade/InMon: DDoS mitigation http://www.opennetsummit.org/pdf/2014/sdn-idol/Brocade-SDN-Idol-Proposal.pdf “Real-Time SDN Analytics for DDoS Mitigation” winner of ONS SDN Idol 2014
  • 10. Copyright © 2014 InMon Corporation ALU/InMon: Large flow marking http://enterprise.alcatel-lucent.com/docs/?id=23847
  • 11. Copyright © 2014 InMon Corporation Extend control beyond network Analyze Plan Act Network, Storage, Compute sFlow-RT Feedback Controller Maximize data center efficiency through coordinated workload placement and resource allocation of network, storage, and compute based on measured loads and communication patterns e.g. reduce network congestion by instructing OpenStack to move virtual machine
  • 12. Copyright © 2014 InMon Corporation • InMon.com • blog.sFlow.com • sFlow.org • Host-sFlow.SourceForge.net • Velocity 2012
 http://blog.sflow.com/2013/04/velocity-conference-talk.html • Bay Area Network Virtualization Meetup
 http://blog.sflow.com/2013/06/bay-area-network-virtualization-talk.html • Mininet testbed
 http://blog.sflow.com/2014/04/mininet-integrated-hybrid-openflow.html Explore further