Downloaded 10 times
Uploaded byKHNOG
ElasticISP
This document discusses ElasticISP, a concept for running an ISP on virtualized network functions in the cloud. The key points are: 1. ElasticISP aims to make it cheaper and faster to start an ISP by eliminating the need for physical networking hardware and deploying all functions like routing, firewalls, and LNS virtually in the cloud. 2. This allows an ISP to start for around $15k with minimal capital expenditure, and to easily scale network capacity and functions by adding more virtual instances as needed. 3. The document reviews ElasticISP concepts and architectures, including examples of logical and physical network designs using virtual routers, firewalls, and other functions deployed in public
More Related Content
![Getting Started with Apache Spark: Big Data Made Simple [Free Meetup]](https://cdn.slidesharecdn.com/ss_thumbnails/apachesparkgettingstarted-260203175547-8361bcc3-thumbnail.jpg?width=640&height=640&fit=bounds)
ElasticISP
- 1. KHNOG Micro Event– PHNOM PENH MAY2016 Skeeve Stevens & Try Chhay ElasticISP NFV in Action eintellegonetworks . a s i a
- 2. ElasticISP KHNOG MAY2016 • NFV • ElasticISP – The (Original) Concept • ElasticISP – The Reality • Elastic Architecture • Q&A Agenda ELASTICISP
- 3. ElasticISP KHNOG MAY2016 • Network Function Virtualisation • https://en.wikipedia.org/wiki/Network_function_virtualization • The NFV framework consists of three main components 1. Virtualized network functions (VNFs) are software implementations of network functions that can be deployed on NFVI 1. Network function virtualizationinfrastructure 2. Network functions virtualizationmanagement and orchestration architectural framework NFV ELASTICISP
- 4. ElasticISP KHNOG MAY2016 ELASTICISP The Business
- 5. ElasticISP KHNOG MAY2016 • We had a lot of hardware in the AU office • We have many people who want to start ISP • Talk to 10 per month, Proposal to 3, build maybe 1 • Capex intensive • Start small ISP cost is around $35k PS and $50k-$100k for hardware • 50% of small ISP fail because they are not good at business • No skills to run ISP network Why ElasticISP? ELASTICISP
- 6. ElasticISP KHNOG MAY2016 • Cloud – Direct Access (AWS, Azure, Google Compute, OrionVM, Vmware) • Core ISP Infrastructure (LNS, CGN, Routing, Peering, etc) • IP Transit – Backup paths, OnDemand capacity • Tails - xDSL, Fibre/NBN, MetroE, International Circuits - anything Layer 2 • Voice - SIPTrunks, Hosted Voice; Full Enterprise PABXs • DDoS Protection-aaS • VPN, Proxy, Security What can we do? ELASTICISP
- 7. ElasticISP KHNOG MAY2016 • Make it easy for Cheap to start ~$15k (less CapEx, move to OpEx) • Fast to start ~0.5 – 2 days • Minimal risk of loss • No Expertise for Network infrastructure • Professional ISP Engineers doing management and liaise with providers • Legal relationshipremains with ISP (not EIN) • Grow to beyond 1000 customers – can move to physical or hybrid options • EIN can use excess hardware (7200/MX80/switching) • Use Cloud for off-loadafter exceeding hardware capacity ElasticISP – The (Original) Concept ELASTICISP
- 8. ElasticISP KHNOG MAY2016 • Orchestrationis easy (Ansible) • Cloud is awesome (once we found layer 2 cloud provider) • Do not actually need any hardware except Switching - We are using • Open Networking Switching (Cumulus + Dell for 10/40Gb) • Juniper MX80 / Cisco 7200 (all to be retired?) • Scales to massive numbers – millionusers? Capacity? • Can be used for outsourced corporate network core ElasticISP – The Reality ELASTICISP
- 9. ElasticISP KHNOG MAY2016 ELASTICISP The Architecture
- 10. ElasticISP KHNOG MAY2016 • APNIC Membership+ ASN and IPAddress Resources • If not, eintellegowill consult/helpto get them • Transit provider + Peering (IX) • Wholesale Tail/carrier provider (i.e. CFOCN, Telecom, Wicam, SI, etc..) • Own your billingsystem/authenticationservice (we can help find) • $$$ • Support skills (EIN does not do Level 1 support!) ElasticISP – Pre-Requisites ELASTICISP
- 11. ElasticISP KHNOG MAY2016 • BGP Edge Router: Transit and Peering • Core Routing/Switching (IGP) • LNS/LAC: Terminate PPPoE sessions • CGN (if needed) • Firewall - Security if needed • Authentication server – Radius (AAA server) • Anything else of your choosing (Proxy/Cache, Physical hardware, etc) ElasticISP – ISP Equipment ELASTICISP
- 12. ElasticISP KHNOG MAY2016 Physical Topology ELASTICISP Transit CORE-SW LNS FW IX Peering CPE Auth Server Carrier • Example of small/medium ISP • Core Switch/Router • LNS • Firewall • Authentication server
- 13. ElasticISP KHNOG MAY2016 Logical Topology ELASTICISP • Public user access Internet through LNS and Core router • Private user access Internet through firewall by using NAT Transit Core LNS Firewall IX Peering Private CPE Auth Server Public CPE NAT Private Internet session Public Internet session
- 14. ElasticISP KHNOG MAY2016 • The same Core Switch/Router/LNS/FW • But they are inside physical devices • Ex: Vmware inside physical server • You don’t need any hardware • Less budget Physical Network - eISP ELASTICISP Transit CORE-SW LNS FW IX Peering CPE Auth Server Carrier EISP
- 15. ElasticISP KHNOG MAY2016 • The same process as normal ISP • Less cost, less risk and scalable Logical Network eISP ELASTICISP Transit Core-SW LNS Firewall IX Peering Private CPE Auth Server Public CPE NAT Private Internet session Public Internet session EISP
- 16. ElasticISP KHNOG MAY2016 • Only physical switch for connectivity • LNS and FW are in Cloud • Ex: Cisco CRS1kv is free 60 days • Easy to scale as you grow • Also easy to stop if you give up the business Physical Network – Cloud Provider ELASTICISP Transit-01 Wholesale-01 Wholesale-02 Transit-02 IX Peering-01 IX Peering-02 CPE-02 CPE-01 Cloud-01 Cloud-02 EISP CORE-SW01 CORE-SW02 LNS-01 LNS-02 FW-01 FW-02
- 17. ElasticISP KHNOG MAY2016 • Totally the same function as previous ISP • More easier to scale from small/medium tobig ISP Logical Network – Cloud Provider ELASTICISP Transit-01 Wholesale-01 Wholesale-02 Transit-02 IX Peering-01 IX Peering-02 CPE-02 CPE-01 EISP CORE-SW01 CORE-SW02 LNS-01 LNS-02 FW-01 FW-02 Cloud-01 Cloud-01
- 18. ElasticISP KHNOG MAY2016 • User send PPPOE request to LNS • Divide user to two types: private user and public user • LNS checks PPOE request and forward to authenticationserver (Radius) • After authenticating, public user can access Internet directly • Private user access Internet through firewall or CGN • LNS and firewall access Internet through Core router with specific virtual instance (VRF) • Core router setup eBGP with Transit for Internet access for the network • User is able to access Internet ElasticISP – The User Process ELASTICISP
- 19. ElasticISP KHNOG MAY2016 • Cisco CSR1000v • Juniper vSRX • Cumulus VX • Debian Linux as Edge Router (BGP Quagga) • Centos • Racoon (IPSec VPN) • More to come! • LNS ElasticISP – What We’ve Tested ELASTICISP
- 20. ElasticISP KHNOG MAY2016 • Orchestration/ Automation via web portal • More Cloud providers • More Wholesale providers ElasticISP – Plans ELASTICISP
- 21. ElasticISP KHNOG MAY2016 • Elastic Everything • ElasticISPconcept is possible here in KH – more capex though • This will be the future for everywhere, including Cambodia • This is the new way – do not be left behind • Network Engineers need to understand NFV and associatedtechnologies,esp ecially virtualisation,cloud providers and elastic fabrics • Open Networking is going to be a big part due to choice and costs Summary & QA ELASTICISP
- 22. TRY CHHAY THANK YOU. e:skeeve@eintellegonetworks.asia t: @skeevestevens linkedin: /in/skeeve e: try@eintellegonetworks.asia linkedin: /in/trychhay SKEEVE STEVENS eintellegonetworks.asia