Openet: 
Open Networking 
through 
Programmability 
Tal Lavian tlavian@nortelnetworks.com 
Nortel Network, Advanced Technology Lab
Agenda 
 Two Evolutions: computer vs network 
 Openet: open networking 
 ORE and Openet Compositions 
 Typical Applications 
 Related Projects 
 Summary 
10/26/14 Openet 2
Think of computer evolution … 
IBM CDC Digital Amdel 
10/26/14 Openet 3 
Applications 
OSs 
Peripherals 
Hardware 
1980s - Vertical Industry 2000s - Horizontal Industry
What’s network evolution? 
Cisco Nortel Juniper 3Com 
The inflection point is quickly 
approaching … 
10/26/14 Openet 4 
Network & 
Mgmt services 
Embedded 
OS 
System 
ASICs 
“00 Vertical Network Industry Horizontal Network Industry
Why Open Networking? 
 Open network boxes to 
public 
 Current network devices 
are close systems 
 Intelligence to network 
nodes because 
 Internet infrastructure 
evolves slow 
 Customers can not add 
new services 
 Better use of network 
resources 
 Abundant bandwidth 
 Diversified clients’ needs 
Move Turing Machine onto 
Device 
Add local intelligence to 
network devices 
while (true) 
doLocalProcessingOnDevice 
(); 
10/26/14 Openet 5
The Openet Approach 
 Open networking through programming 
 A Service-enabled networking platform 
 Intelligence to commercial network devices 
 Network control and management 
 Packet forwarding and processing 
 Not impeding network performance and reliability 
 Forwarding 
 Security 
 Enabling service creation and deployment 
 Value-added services across network elements 
 Dynamic and downloadable 
 Standards and Partners 
 IEEE, IETF, Active Networks and FAIN 
 Columbia U., UC Berkeley and UPenn 
 MITRE, TASC, NetFuel and CSIRO 
10/26/14 Openet 6
Openet Architecture 
End Apps 
Repository 
Server 
Switch 
ORE 
Control Console (Net Mgr) 
• service initiation and policies 
• network configuration 
• resource administration 
• repository maintenance 
Download 
codes, 
policies, 
configs 
Router 
Control 
& 
Configuration 
Router 
Switch 
10/26/14 Openet 7 
Control 
Data path 
Download 
User request 
End Apps 
• use of service 
• request on the fly 
ORE 
ORE 
ORE
Openet Compositions 
 ORE 
 Service creation and deployment 
 Service lifecycle management 
 Services 
 Every network function is a service 
 Every service provides object APIs 
 ODK 
 Service development and encapsulation 
 Management 
 Service mgmt: initiation, policy and configuration 
 Manager on console and Agents on nodes 
10/26/14 Openet 8
Openet: a node’s view 
Oplet 
Service 
Oplet 
Service 
ORE 
Oplet 
Service 
Oplet 
Service 
Service 
Java Virtual Machine API Extensions 
Hardware 
 Oplet is a program unit wrapping services 
10/26/14 Openet 9
ORE: the Openet Core 
 ORE 
 Object-oriented Runtime Environment 
 Run customized software on network 
nodes 
 Neutral to heterogeneous hardware 
 Secure downloading, installation, and safe 
execution inside JVM 
 Fully implemented using Java 
10/26/14 Openet 10
System Services: JFWD 
 Java Forwarding 
 IP forwarding and routing 
 Diffserv marking 
 Filtering and diverting 
 Forwarding priority 
 Routing 
 Platform-independent APIs 
 Implemented on Passport/Accelar and 
Linux 
10/26/14 Openet 11
Function Services 
 Common use utility 
 Public neutral APIs 
 Examples 
 HTTP: HTTP service 
 Shell: ORE interactive shell 
 Packet: packet handling (IP, TCP, UDP) 
 Logger: service runtime printout 
 OreServlet: Java servlet 
10/26/14 Openet 12
Typical Applications 
 JDiffserv 
 Diffserv forwarding and DSCP marking on Passport 8600 
 OpeCfg 
 Dynamic configuration of optical port interfaces 
 IP filtering 
 Dynamic priority changes on Passport 1100 
 JSNMP and JMIB 
 SNMP/MIB access 
 Passport 1100 and 8600 
 Regatta: Fault recovery 
10/26/14 Openet 13
Challenges and Solution 
 Active Networks requires 
 Open boxes to users 
 Networking programmability 
 Commercial network devices have 
 Ever more use of hardware acceleration 
 Static and well-defined protocols and services 
 Little flexibility to introduce users’ intelligence 
 Allowing configuration rather than value addition 
 Our solution 
 Openet 
 A programmable networking platform across devices 
 Active Services through Openet 
10/26/14 Openet 14
Openet Architecture 
Applications 
System Services 
CPU System 
Control Plane ORE 
Monitor status New rules 
Switching Fabric 
Data Plane 
(Wire Speed Forwarding) 
Traffic Packets 
Forwarding 
Rules 
Forwarding 
Processor 
Statistics 
Monitors 
Forwarding 
Rules 
Forwarding . . . 
Processor 
Statistics 
Monitors 
Forwarding 
Rules 
Forwarding 
Processor 
Statistics 
Monitors 
10/26/14 Openet 15
JDiffserv 
 Goals 
 DSCP marking and re-marking 
 Priority forwarding or dropping 
 Filtering 
 Passport 
 Model: 8600 
 Java 2 
 ORE 
 version 0.4.1 
 JFWD/JDiffserv service 
 URL: “http://www.openetlab.org/downloads/” 
10/26/14 Openet 16
JDiffserv on Passport 
Linux PC 
JDiffserv 
HTTP server 
10/26/14 Openet 17 
Linux PC 
Passport 8600 
Passport 1100B Passport 1100B 
UDP UDP UDP 
UDP sender 
UDP receiver 
Diffserv Monitor 
Device Console 
Linux PC 
Differv-enabled 
Network
JDiffserv Features 
 Marking Types 
 Admission marking 
 condition marking (a.k.a., remarking) 
 Filters 
 IP headers: 5-tuple 
 Source address and port, destination address and port 
 Protocol type 
 DSField: DSCP 
 Interface ports 
 Traffic profile 
 Average rate and bucket size 
 Peak rate and bucket size 
 Action 
 Marking then forwarding 
 3-color marker: R/Y/G,RFC 2697 
 new DSCP 
 Dropping 
10/26/14 Openet 18
Dynamic Classification 
 Objectives 
 Implement flow performance 
enhancement mechanisms 
 without introducing software into 
data forwarding path 
 Service defined packet 
processing in a silicon-based 
forwarding engine 
 packet classifier 
10/26/14 Openet 19
On-the-fly configuration 
Dynamic Apps 
Packet 
Filte 
Forwarding 
Processor 
Forwarding 
Processor 
Packet 
Policy 
Filters 
Packet 
r 
10/26/14 Openet 20
Experimental Setup 
Source 1 
tcp_send() Acclear 
100 Mbps 
Source 2 
tcp_send() 
100 Mbps 
Destination 
1. tcp_recv() 
2. tcp_recv() 
1100B 
Routing 
Switch 
100 Mbps 
10/26/14 Openet 21
Throughput Results 
100 
80 
60 
Start 
2nd Flow 
Change 
Priority 
Mbps 
40 
20 
0 
Seconds Low Priority 
High Priority 
End 
2nd Flow 
0 1 2 3 4 5 6 7 8 9 10 
10/26/14 Openet 22
OpeCfg: Optical Control 
 Content-aware bandwidth allocation 
 Features 
 Content flow interception 
 Dynamic optical control 
 2 Alteon switches, 3 iSD boxes and 2 OM3400 
CO2 App 
For 
ward 
 Goals 
Optical 
BW iSD-2 
Pckt 
Intercept 
NA/SA Opecfg-C 
Packets Filters 
OpeCfg 
Openet 
SNMP 
Redir CLI MIB 
iSD-1 
Switch 
App Server 
Linux-1 Alteon184-1 
Fiber 
OPE 
OM3400-1 
10/26/14 Openet 23
DARPA-Funded Project 
Active Nets Technology Transfer through 
High-Performance Network Devices 
 Exploring new commercial network 
hardware 
 L2-L7 filtering 
 Fast content filtering and redirection 
 Strong and extensible CPU capability 
 Secure partitioning hardware and software 
 Supporting heterogeneous EEs 
 Research platform 
 Server and network collapse 
10/26/14 Openet 24
iSD Architecture 
iSD 
application code 
SSI 
• Clustering 
• Management 
• Registry, CLI, … 
Switch 
Interface: 
NAAP 
Operating System (Alteon Embedded Linux 
Or 
RTIK – Real time Internet Kernel) 
iSD Hardware 
Web Switch 
10/26/14 Openet 25
Alteon API – differentiates itself 
from other boxes 
Alteon API 
Generic 
Has interface functions from L2, L3, L4, and L5+ 
Object Oriented designed 
Can be extended to include future sophisticated functionalities 
Layer 5+ processing and filtering 
Layer 4 processing and filtering 
Layer 3 processing and filtering 
Layer 2 processing and filtering 
iSD or 
other intelligent 
processing devices 
Serial Link Layer 
between Alteon 
and external devices 
Alteon 
Others 
10/26/14 Openet 26 
API 
This slide and other previous slides sent to you illustrate my point. 
You can also see it more clearly if you ask the question “Why don’t I just use a powerful iSD without the Alteon?”
Acceleration Work ? 
Data Enters 
Control 
Tunnel 
s 
10/26/14 Openet 27 
Alteon 
Web 
Switch 
Alteon 
Linux 
Appliance 
(iSD) 
Data Exits 
Application 
Program 
Data Tunnel 
1 
Data 
Tunnel 2 
NAAP 
Communication 
Interface 
Return Path • Use of NAAP interface eliminates TCP overhead between 
switch  server and allows large data blocks (complete 
HTTP request) 
• Server is removed from return data path 
• Switching functions are removed from Linux application 
code and transferred to switch hardware 
• See notes section below for further detail
T1: Programmable content switch 
 Openet on Alteon 
 L2-L7 filtering 
 Fast content filtering and redirection to active 
services 
 Enhanced closely with Alteon features 
 Alteon: new generation of content switch 
 Multiple processors and ASICs 
 Programmable microcode 
 L2-L4 and application filtering and processing 
10/26/14 Openet 28
T2: Research Platform 
 iSD: powerful and extensible computational 
plane 
 Partitioning hardware and software resources 
 Close interfaces to Alteon 
 Cluster computations 
 Network Research Platform 
 Openet: active service enabling 
 Alteon: content filtering in real-time 
 iSD: integral computation inside the network 
Openet 
Local Core 
10/26/14 Openet 29 
iSD 
L2-L7 
filtering 
Content 
processing 
Power 
computing 
OPE 
Passport Alteon 
Optical
Alteon iSD 
S D 
s e t 
Alteon 
184 
Alteon 184 
Alteon iSD 
10.10.130.1/24 
Millennium Network 
Firewall 
10.1.1.2 
10.2.2.1/24 
10.2.2.1/24 
10.1.1.1 
Alteon 
184 
10/26/14 Openet 30 
Ba y N e tw o rk s 
S D 
s e t 
B a y N e tw o r k s 
S D 
s e t 
B a y N e tw o r k s 
S D 
s e t 
B a y N e tw o r k s 
S D 
s e t 
Ba y Ne tw o r k s 
S D 
s e t 
Ba y Ne tw o r k s 
Passport 8606 Passport 8610 
Accelar 1100 
Accelar 1100 
Accelar 1100 
Accelar 1100 
Accelar 1100 
CrashBox5 
Accelar 1100 
10.10.100.2/24 
10.10.100.1 
10.10.110.2/24 
10.10.110.1/24 
10.10.120.2/24 
10.10.120.1/24 
10.10.130.2/24 
10.20.200.2 
10.20.210.2 
10.20.200.1 10.20.210.1 
MLT 
OSPF Area 10.10.0.0 
OSPF Area 10.20.0.0 
OSPF Area 0.0.0.0 
CrashBox1 
CrashBox2 
CrashBox3 
CrashBox4 
CrashBox6 
1Gbps Link 
1Gbps Link 
Alteon 
180e 
Alteon Web Systems 
Alteon 
184 
Alteon 
180e 
Alteon 
184 
Alteon 
180e 
Alteon 184 
Alteon Alteon Web Systems 
iSD 
Alteon 
180e 
Alteon 184 
Alteon iSD 
Nortel- Berkeley Openet Project
Any interest? 
Looking for grant? 
 Interested in summer internship? 
 Talk with me latter 
10/26/14 Openet 31
How Can we Collaborate? 
 Corry is not far from Soda 
 Are we EE+CS or EECS? 
 How can we bridge CS and EE projects? 
 Can we create a virtual lab? How? 
 Openet and SmartNet are supported by 
DARPA 
10/26/14 Openet 32
Summary 
 Industry supports open networking 
 Network evolutions 
 Programmable network devices 
 Openet is a programmable networking 
platform 
 Java 1.1 and Java 2 
 Devices: Alteon/iSD, Passport 1100 and 
8600 
 OS: VxWorks, Linux, Unix and Windows 
10/26/14 Openet 33
Visit us at 
Q  A 
HTTP://www.openetlab.org 
Thank You ! 
10/26/14 Openet 34
Backup 
10/26/14 Openet 35
What’s an Oplet? 
 Oplet: a self-contained downloadable 
unit 
 Encapsulates one or more service objects 
 Contains service attributes, e.g., names 
 Eases secure downloading and service 
installation 
 Use other service oplets 
 Examples 
 Active Networks services: EE 
 Java Forwarding services: JFWD 
 Base services: ODK 
10/26/14 Openet 36
How a service is deployed? 
 Service design and coding 
 Regular Java programming 
 Service package 
 Oplets by ODK 
 JAR files 
 Uploading to downloading servers 
 ORE start at Passport 
 Service activation by ORE 
 Downloading, start and stop 
 Startup service 
 Shell service 
 Service execution 
10/26/14 Openet 37
10/26/14 Openet 38

Open Networking through Programmability

  • 1.
    Openet: Open Networking through Programmability Tal Lavian tlavian@nortelnetworks.com Nortel Network, Advanced Technology Lab
  • 2.
    Agenda  TwoEvolutions: computer vs network  Openet: open networking  ORE and Openet Compositions  Typical Applications  Related Projects  Summary 10/26/14 Openet 2
  • 3.
    Think of computerevolution … IBM CDC Digital Amdel 10/26/14 Openet 3 Applications OSs Peripherals Hardware 1980s - Vertical Industry 2000s - Horizontal Industry
  • 4.
    What’s network evolution? Cisco Nortel Juniper 3Com The inflection point is quickly approaching … 10/26/14 Openet 4 Network & Mgmt services Embedded OS System ASICs “00 Vertical Network Industry Horizontal Network Industry
  • 5.
    Why Open Networking?  Open network boxes to public  Current network devices are close systems  Intelligence to network nodes because  Internet infrastructure evolves slow  Customers can not add new services  Better use of network resources  Abundant bandwidth  Diversified clients’ needs Move Turing Machine onto Device Add local intelligence to network devices while (true) doLocalProcessingOnDevice (); 10/26/14 Openet 5
  • 6.
    The Openet Approach  Open networking through programming  A Service-enabled networking platform  Intelligence to commercial network devices  Network control and management  Packet forwarding and processing  Not impeding network performance and reliability  Forwarding  Security  Enabling service creation and deployment  Value-added services across network elements  Dynamic and downloadable  Standards and Partners  IEEE, IETF, Active Networks and FAIN  Columbia U., UC Berkeley and UPenn  MITRE, TASC, NetFuel and CSIRO 10/26/14 Openet 6
  • 7.
    Openet Architecture EndApps Repository Server Switch ORE Control Console (Net Mgr) • service initiation and policies • network configuration • resource administration • repository maintenance Download codes, policies, configs Router Control & Configuration Router Switch 10/26/14 Openet 7 Control Data path Download User request End Apps • use of service • request on the fly ORE ORE ORE
  • 8.
    Openet Compositions ORE  Service creation and deployment  Service lifecycle management  Services  Every network function is a service  Every service provides object APIs  ODK  Service development and encapsulation  Management  Service mgmt: initiation, policy and configuration  Manager on console and Agents on nodes 10/26/14 Openet 8
  • 9.
    Openet: a node’sview Oplet Service Oplet Service ORE Oplet Service Oplet Service Service Java Virtual Machine API Extensions Hardware Oplet is a program unit wrapping services 10/26/14 Openet 9
  • 10.
    ORE: the OpenetCore  ORE  Object-oriented Runtime Environment  Run customized software on network nodes  Neutral to heterogeneous hardware  Secure downloading, installation, and safe execution inside JVM  Fully implemented using Java 10/26/14 Openet 10
  • 11.
    System Services: JFWD  Java Forwarding  IP forwarding and routing  Diffserv marking  Filtering and diverting  Forwarding priority  Routing  Platform-independent APIs  Implemented on Passport/Accelar and Linux 10/26/14 Openet 11
  • 12.
    Function Services Common use utility  Public neutral APIs  Examples  HTTP: HTTP service  Shell: ORE interactive shell  Packet: packet handling (IP, TCP, UDP)  Logger: service runtime printout  OreServlet: Java servlet 10/26/14 Openet 12
  • 13.
    Typical Applications JDiffserv  Diffserv forwarding and DSCP marking on Passport 8600  OpeCfg  Dynamic configuration of optical port interfaces  IP filtering  Dynamic priority changes on Passport 1100  JSNMP and JMIB  SNMP/MIB access  Passport 1100 and 8600  Regatta: Fault recovery 10/26/14 Openet 13
  • 14.
    Challenges and Solution  Active Networks requires  Open boxes to users  Networking programmability  Commercial network devices have  Ever more use of hardware acceleration  Static and well-defined protocols and services  Little flexibility to introduce users’ intelligence  Allowing configuration rather than value addition  Our solution  Openet  A programmable networking platform across devices  Active Services through Openet 10/26/14 Openet 14
  • 15.
    Openet Architecture Applications System Services CPU System Control Plane ORE Monitor status New rules Switching Fabric Data Plane (Wire Speed Forwarding) Traffic Packets Forwarding Rules Forwarding Processor Statistics Monitors Forwarding Rules Forwarding . . . Processor Statistics Monitors Forwarding Rules Forwarding Processor Statistics Monitors 10/26/14 Openet 15
  • 16.
    JDiffserv  Goals  DSCP marking and re-marking  Priority forwarding or dropping  Filtering  Passport  Model: 8600  Java 2  ORE  version 0.4.1  JFWD/JDiffserv service  URL: “http://www.openetlab.org/downloads/” 10/26/14 Openet 16
  • 17.
    JDiffserv on Passport Linux PC JDiffserv HTTP server 10/26/14 Openet 17 Linux PC Passport 8600 Passport 1100B Passport 1100B UDP UDP UDP UDP sender UDP receiver Diffserv Monitor Device Console Linux PC Differv-enabled Network
  • 18.
    JDiffserv Features Marking Types  Admission marking  condition marking (a.k.a., remarking)  Filters  IP headers: 5-tuple  Source address and port, destination address and port  Protocol type  DSField: DSCP  Interface ports  Traffic profile  Average rate and bucket size  Peak rate and bucket size  Action  Marking then forwarding  3-color marker: R/Y/G,RFC 2697  new DSCP  Dropping 10/26/14 Openet 18
  • 19.
    Dynamic Classification Objectives  Implement flow performance enhancement mechanisms  without introducing software into data forwarding path  Service defined packet processing in a silicon-based forwarding engine  packet classifier 10/26/14 Openet 19
  • 20.
    On-the-fly configuration DynamicApps Packet Filte Forwarding Processor Forwarding Processor Packet Policy Filters Packet r 10/26/14 Openet 20
  • 21.
    Experimental Setup Source1 tcp_send() Acclear 100 Mbps Source 2 tcp_send() 100 Mbps Destination 1. tcp_recv() 2. tcp_recv() 1100B Routing Switch 100 Mbps 10/26/14 Openet 21
  • 22.
    Throughput Results 100 80 60 Start 2nd Flow Change Priority Mbps 40 20 0 Seconds Low Priority High Priority End 2nd Flow 0 1 2 3 4 5 6 7 8 9 10 10/26/14 Openet 22
  • 23.
    OpeCfg: Optical Control  Content-aware bandwidth allocation  Features  Content flow interception  Dynamic optical control  2 Alteon switches, 3 iSD boxes and 2 OM3400 CO2 App For ward  Goals Optical BW iSD-2 Pckt Intercept NA/SA Opecfg-C Packets Filters OpeCfg Openet SNMP Redir CLI MIB iSD-1 Switch App Server Linux-1 Alteon184-1 Fiber OPE OM3400-1 10/26/14 Openet 23
  • 24.
    DARPA-Funded Project ActiveNets Technology Transfer through High-Performance Network Devices  Exploring new commercial network hardware  L2-L7 filtering  Fast content filtering and redirection  Strong and extensible CPU capability  Secure partitioning hardware and software  Supporting heterogeneous EEs  Research platform  Server and network collapse 10/26/14 Openet 24
  • 25.
    iSD Architecture iSD application code SSI • Clustering • Management • Registry, CLI, … Switch Interface: NAAP Operating System (Alteon Embedded Linux Or RTIK – Real time Internet Kernel) iSD Hardware Web Switch 10/26/14 Openet 25
  • 26.
    Alteon API –differentiates itself from other boxes Alteon API Generic Has interface functions from L2, L3, L4, and L5+ Object Oriented designed Can be extended to include future sophisticated functionalities Layer 5+ processing and filtering Layer 4 processing and filtering Layer 3 processing and filtering Layer 2 processing and filtering iSD or other intelligent processing devices Serial Link Layer between Alteon and external devices Alteon Others 10/26/14 Openet 26 API This slide and other previous slides sent to you illustrate my point. You can also see it more clearly if you ask the question “Why don’t I just use a powerful iSD without the Alteon?”
  • 27.
    Acceleration Work ? Data Enters Control Tunnel s 10/26/14 Openet 27 Alteon Web Switch Alteon Linux Appliance (iSD) Data Exits Application Program Data Tunnel 1 Data Tunnel 2 NAAP Communication Interface Return Path • Use of NAAP interface eliminates TCP overhead between switch server and allows large data blocks (complete HTTP request) • Server is removed from return data path • Switching functions are removed from Linux application code and transferred to switch hardware • See notes section below for further detail
  • 28.
    T1: Programmable contentswitch  Openet on Alteon  L2-L7 filtering  Fast content filtering and redirection to active services  Enhanced closely with Alteon features  Alteon: new generation of content switch  Multiple processors and ASICs  Programmable microcode  L2-L4 and application filtering and processing 10/26/14 Openet 28
  • 29.
    T2: Research Platform  iSD: powerful and extensible computational plane  Partitioning hardware and software resources  Close interfaces to Alteon  Cluster computations  Network Research Platform  Openet: active service enabling  Alteon: content filtering in real-time  iSD: integral computation inside the network Openet Local Core 10/26/14 Openet 29 iSD L2-L7 filtering Content processing Power computing OPE Passport Alteon Optical
  • 30.
    Alteon iSD SD s e t Alteon 184 Alteon 184 Alteon iSD 10.10.130.1/24 Millennium Network Firewall 10.1.1.2 10.2.2.1/24 10.2.2.1/24 10.1.1.1 Alteon 184 10/26/14 Openet 30 Ba y N e tw o rk s S D s e t B a y N e tw o r k s S D s e t B a y N e tw o r k s S D s e t B a y N e tw o r k s S D s e t Ba y Ne tw o r k s S D s e t Ba y Ne tw o r k s Passport 8606 Passport 8610 Accelar 1100 Accelar 1100 Accelar 1100 Accelar 1100 Accelar 1100 CrashBox5 Accelar 1100 10.10.100.2/24 10.10.100.1 10.10.110.2/24 10.10.110.1/24 10.10.120.2/24 10.10.120.1/24 10.10.130.2/24 10.20.200.2 10.20.210.2 10.20.200.1 10.20.210.1 MLT OSPF Area 10.10.0.0 OSPF Area 10.20.0.0 OSPF Area 0.0.0.0 CrashBox1 CrashBox2 CrashBox3 CrashBox4 CrashBox6 1Gbps Link 1Gbps Link Alteon 180e Alteon Web Systems Alteon 184 Alteon 180e Alteon 184 Alteon 180e Alteon 184 Alteon Alteon Web Systems iSD Alteon 180e Alteon 184 Alteon iSD Nortel- Berkeley Openet Project
  • 31.
    Any interest? Lookingfor grant?  Interested in summer internship?  Talk with me latter 10/26/14 Openet 31
  • 32.
    How Can weCollaborate?  Corry is not far from Soda  Are we EE+CS or EECS?  How can we bridge CS and EE projects?  Can we create a virtual lab? How?  Openet and SmartNet are supported by DARPA 10/26/14 Openet 32
  • 33.
    Summary  Industrysupports open networking  Network evolutions  Programmable network devices  Openet is a programmable networking platform  Java 1.1 and Java 2  Devices: Alteon/iSD, Passport 1100 and 8600  OS: VxWorks, Linux, Unix and Windows 10/26/14 Openet 33
  • 34.
    Visit us at Q A HTTP://www.openetlab.org Thank You ! 10/26/14 Openet 34
  • 35.
  • 36.
    What’s an Oplet?  Oplet: a self-contained downloadable unit  Encapsulates one or more service objects  Contains service attributes, e.g., names  Eases secure downloading and service installation  Use other service oplets  Examples  Active Networks services: EE  Java Forwarding services: JFWD  Base services: ODK 10/26/14 Openet 36
  • 37.
    How a serviceis deployed?  Service design and coding  Regular Java programming  Service package  Oplets by ODK  JAR files  Uploading to downloading servers  ORE start at Passport  Service activation by ORE  Downloading, start and stop  Startup service  Shell service  Service execution 10/26/14 Openet 37
  • 38.

Editor's Notes

  • #21 <number>
  • #24 Software components involved: 1. Application - client - server 2. iSD Control service - UNI-C / FSM - NASA alternative 3. iSD Data service - Packet processing 4. ASON simulator - UNI-N - CCI client 5. DX simulator - CCI server - DX simulation
  • #28 In a minimal TCP session (with a one packet query and a one packet response) there are 9 packets. All packets with TCP flags (SYN/FIN/RST) must be sent to the firewall in either direction, meaning 4 packets of the 9 are sent through the firewall. In addition, the final ACK also goes through the firewall. This slide only shows the data flow for two packets that go through the firewall and the direct packet forwarding. All packets with TCP flags (SYN, RST or FIN) are sent to FW-1. On first SYN, connection entry is created. FW-1 monitors for SYN/ACK. Data packets are accelerated. Timeout information allows FW-1 to detect connections no longer in use, and delete them. On receipt of 1st FIN, FW-1 makes the connection unidirectional. On receipt of 2nd FIN, FW-1 has the switch redirect all packets to FW-1. On receipt of final ACK, or on 50 second timeout, FW-1 removes the connection entry