This document discusses ElasticISP, a concept for running an ISP on virtualized network functions in the cloud to reduce costs and simplify operations. The key points covered include: - ElasticISP aims to make it cheaper and faster to start an ISP with reduced capital costs by running network functions like routing, firewalls, and LNS virtually rather than on physical hardware. - This allows an ISP to start for around $15k rather than $35k+ and be set up in just 0.5-2 days rather than months to deploy physical equipment. - The architecture discussed deploys virtual network functions from vendors like Cisco, Juniper and Cumulus across multiple cloud providers, with orchestr

1. KHNOG Micro Event – PHNOM PENH MAY2016
Skeeve Stevens & Try Chhay
ElasticISP
NFV in Action
eintellegonetworks
. a s i a

2. ElasticISP KHNOG MAY 2016
• NFV
• ElasticISP – The (Original) Concept
• ElasticISP – The Reality
• Elastic Architecture
• Q&A
Agenda
ELASTICISP

3. ElasticISP KHNOG MAY 2016
• Network Function Virtualisation
• https://en.wikipedia.org/wiki/Network_function_virtualization
• The NFV framework consists of three main components
1. Virtualized network functions (VNFs) are software implementations
of network functions that can be deployed on NFVI
1. Network function virtualizationinfrastructure
2. Network functions virtualizationmanagement and orchestration
architectural framework
NFV
ELASTICISP

4. ElasticISP KHNOG MAY 2016
ELASTICISP
The Business

5. ElasticISP KHNOG MAY 2016
• We had a lot of hardware in the AU office
• We have many people who want to start ISP
• Talk to 10 per month, Proposal to 3, build maybe 1
• Capex intensive
• Start small ISP cost is around $35k PS and $50k-$100k for hardware
• 50% of small ISP fail because they are not good at business
• No skills to run ISP network
Why ElasticISP?
ELASTICISP

6. ElasticISP KHNOG MAY 2016
• Cloud – Direct Access (AWS, Azure, Google Compute, OrionVM, Vmware)
• Core ISP Infrastructure (LNS, CGN, Routing, Peering, etc)
• IP Transit – Backup paths, OnDemand capacity
• Tails - xDSL, Fibre/NBN, MetroE, International Circuits - anything Layer 2
• Voice - SIPTrunks, Hosted Voice; Full Enterprise PABXs
• DDoS Protection-aaS
• VPN, Proxy, Security
What can we do?
ELASTICISP

7. ElasticISP KHNOG MAY 2016
• Make it easy for Cheap to start ~$15k (less CapEx, move to OpEx)
• Fast to start ~0.5 – 2 days
• Minimal risk of loss
• No Expertise for Network infrastructure
• Professional ISP Engineers doing management and liaise with providers
• Legal relationshipremains with ISP (not EIN)
• Grow to beyond 1000 customers – can move to physical or hybrid options
• EIN can use excess hardware (7200/MX80/switching)
• Use Cloud for off-loadafter exceeding hardware capacity
ElasticISP – The (Original) Concept
ELASTICISP

8. ElasticISP KHNOG MAY 2016
• Orchestrationis easy (Ansible)
• Cloud is awesome (once we found layer 2 cloud provider)
• Do not actually need any hardware except Switching - We are using
• Open Networking Switching (Cumulus + Dell for 10/40Gb)
• Juniper MX80 / Cisco 7200 (all to be retired?)
• Scales to massive numbers – millionusers? Capacity?
• Can be used for outsourced corporate network core
ElasticISP – The Reality
ELASTICISP

9. ElasticISP KHNOG MAY 2016
ELASTICISP
The Architecture

10. ElasticISP KHNOG MAY 2016
• APNIC Membership+ ASN and IPAddress Resources
• If not, eintellegowill consult/helpto get them
• Transit provider + Peering (IX)
• Wholesale Tail/carrier provider (i.e. CFOCN, Telecom, Wicam, SI, etc..)
• Own your billingsystem/authenticationservice (we can help find)
• $$$
• Support skills (EIN does not do Level 1 support!)
ElasticISP – Pre-Requisites
ELASTICISP

11. ElasticISP KHNOG MAY 2016
• BGP Edge Router: Transit and Peering
• Core Routing/Switching (IGP)
• LNS/LAC: Terminate PPPoE sessions
• CGN (if needed)
• Firewall - Security if needed
• Authentication server – Radius (AAA server)
• Anything else of your choosing (Proxy/Cache, Physical hardware, etc)
ElasticISP – ISP Equipment
ELASTICISP

12. ElasticISP KHNOG MAY 2016
Physical Topology
ELASTICISP
Transit
CORE-SW
LNS FW
IX Peering
CPE
Auth Server
Carrier
• Example of small/medium ISP
• Core Switch/Router
• LNS
• Firewall
• Authentication server

13. ElasticISP KHNOG MAY 2016
Logical Topology
ELASTICISP
• Public user access Internet through
LNS and Core router
• Private user access Internet through
firewall by using NAT
Transit
Core
LNS
Firewall
IX Peering
Private CPE
Auth Server
Public CPE
NAT
Private Internet session
Public Internet session

14. ElasticISP KHNOG MAY 2016
• The same Core Switch/Router/LNS/FW
• But they are inside physical devices
• Ex: Vmware inside physical server
• You don’t need any hardware
• Less budget
Physical Network - eISP
ELASTICISP
Transit
CORE-SW
LNS
FW
IX Peering
CPE
Auth Server
Carrier
EISP

15. ElasticISP KHNOG MAY 2016
• The same process as normal ISP
• Less cost, less risk and scalable
Logical Network eISP
ELASTICISP Transit
Core-SW
LNS Firewall
IX Peering
Private CPE
Auth Server
Public CPE
NAT
Private Internet session
Public Internet session
EISP

16. ElasticISP KHNOG MAY 2016
• Only physical switch for connectivity
• LNS and FW are in Cloud
• Ex: Cisco CRS1kv is
free 60 days
• Easy to scale as you grow
• Also easy to stop
if you give up the business
Physical Network – Cloud Provider
ELASTICISP
Transit-01
Wholesale-01
Wholesale-02
Transit-02
IX Peering-01
IX Peering-02
CPE-02
CPE-01
Cloud-01
Cloud-02
EISP
CORE-SW01
CORE-SW02
LNS-01
LNS-02
FW-01
FW-02

17. ElasticISP KHNOG MAY 2016
• Totally the same function
as previous ISP
• More easier to scale
from small/medium tobig ISP
Logical Network – Cloud Provider
ELASTICISP
Transit-01
Wholesale-01
Wholesale-02
Transit-02
IX Peering-01
IX Peering-02
CPE-02
CPE-01
EISP
CORE-SW01
CORE-SW02
LNS-01
LNS-02
FW-01
FW-02
Cloud-01
Cloud-01

18. ElasticISP KHNOG MAY 2016
• User send PPPOE request to LNS
• Divide user to two types: private user and public user
• LNS checks PPOE request and forward to authenticationserver (Radius)
• After authenticating, public user can access Internet directly
• Private user access Internet through firewall or CGN
• LNS and firewall access Internet through Core router with specific
virtual instance (VRF)
• Core router setup eBGP with Transit for Internet access for the network
• User is able to access Internet
ElasticISP – The User Process
ELASTICISP

19. ElasticISP KHNOG MAY 2016
• Cisco CSR1000v
• Juniper vSRX
• Cumulus VX
• Debian Linux as Edge Router (BGP Quagga)
• Centos
• Racoon (IPSec VPN)
• More to come!
• LNS
ElasticISP – What We’ve Tested
ELASTICISP

20. ElasticISP KHNOG MAY 2016
• Orchestration/ Automation via web portal
• More Cloud providers
• More Wholesale providers
ElasticISP – Plans
ELASTICISP

21. ElasticISP KHNOG MAY 2016
• Elastic Everything
• ElasticISPconcept is possible here in KH – more capex though
• This will be the future for everywhere, including Cambodia
• This is the new way – do not be left behind
• Network Engineers need to understand NFV and associatedtechnologies,esp
ecially virtualisation,cloud providers and elastic fabrics
• Open Networking is going to be a big part due to choice and costs
Summary & QA
ELASTICISP

22. TRY CHHAY
THANK YOU.
e: skeeve@eintellegonetworks.asia
t: @skeevestevens
linkedin: /in/skeeve
e: try@eintellegonetworks.asia
linkedin: /in/trychhay
SKEEVE STEVENS
eintellegonetworks.asia