Ccie Light, profile picture
Uploaded byCcie Light
PDF, PPTX523 views

Openlab.2014 02-13.major.vi sion

The document provides an overview of the ViSION project, which aims to develop a traffic orchestrator using an HP SDN controller and OpenFlow. It discusses: - The ViSION project started in 2012 as CERN openlab-HP collaboration on SDN research using OpenFlow. The goal later shifted to traffic orchestration. - An outline of the topics covered, including Software Defined Networking, the ViSION traffic orchestrator components, and the development environment. - The ViSION software stack sits above the HP SDN controller and includes a core framework, balancer, health monitor and UI. It aims to orchestrate traffic between client networks and resource pools.

Embed presentation

Download as PDF, PPTX
ViSION Openlab Major Review Stefan Stancu Dan Savu ›  13/02/2014
ViSION Project Context ›  CERN openlab - HP Networking collaboration §  SDN research and development using OpenFlow §  Started in February 2012 §  2 engineers ›  Initial project goal: Virtual services in OpenFlow networks §  traffic slicing and network virtualization §  overlapping with industry (HP’s VAN, NICIRA) ›  Goal reassessment: traffic orchestration §  Scale-out / optimize resource utilization §  Load balancing ›  HP openlab collaboration §  HP’s engagement in openlab phase IV ends with the ViSION project §  In contact with HP for openlab phase V S. Stancu - CERN openlab13/02/2014 2
Outline ›  Software Defined Networking §  OpenFlow in a nutshell §  From traditional networking to SDN §  Protocol, Controller, Switches ›  ViSION traffic orchestrator §  HP SDN Controller §  ViSION Software Stack ̵  Core Framework & Balancer ̵  Health Monitor §  Regressive Testing §  Development Environment ›  Wrap-up §  HPN – California §  Project Timeline §  Conclusion S. Stancu - CERN openlab13/02/2014 3
Tradi&onal  Switch   Specialized Packet Forwarding Hardware (Look-up Tables) ControlPath Routing FIBMAC table ACLs DataPath App (e.g. LLDP) Switch Operating System App App OpenFlow – Decouple Control & Data IP src IP dst Src port Dst port permit ? 137.138.*.* /* * 22 allow * * * * deny IP dst mask gw port 10.1.12.0 /24 192.168.7.1 eth 1/7 0.0.0.0 /0 192.168.1.1 eth 0/1 MAC dst port 00:FC:…. eth 1/7 OO:D1:… eth 0/1                    Openflow  Switch   Specialized Packet Forwarding Hardware (Look-up Tables) DataPathControlPath App (e.g. LLDP) Controller platform (“Network Operating System”) App App Match Rule Action Stats 10+ tuple (MAC, VLAN, IP, …) Forward to port X Pkts, bytes 10+ tuple (MAC, VLAN, IP, …) Forward normal Pkts, bytes 10+ tuple (MAC, VLAN, IP, …) Modify fields (e.g. MAC) Pkts, bytes 10+ tuple (MAC, VLAN, IP, …) Send to controller Pkts, bytes OpenFlow (Control) Agent Flow Table NFlow Table 1 open standardized API External SW Controller S. Stancu - CERN openlab13/02/2014 4
OpenFlow* – Flow Table Entries Switch   Port   MAC   src   MAC   dst   Eth   type   VLAN   ID   IP   Src   IP   Dst   IP   Prot   L4   sport   L4   dport   Rule   Ac&on   Stats   1.  Forward  packet  to  zero  or  more  ports   2.  Encapsulate  and  forward  to  controller   3.  Send  to  normal  processing  pipeline   4.  Modify  Fields   5.  Any  extensions  you  add!   Packet  +  byte  counters   VLAN   pcp   IP   ToS   Switching   *   Switch   Port   MAC   src   MAC   dst   Eth   type   VLAN   ID   IP   Src   IP   Dst   IP   Prot   TCP   sport   TCP   dport   Ac&on   *   00:1f:..   *   *   *   *   *   *   *   port6   Rou&ng   *   Switch   Port   MAC   src   MAC   dst   Eth   type   VLAN   ID   IP   Src   IP   Dst   IP   Prot   TCP   sport   TCP   dport   Ac&on   *   *   *   *   *   5.6.7.8   *   *   *   port6   Examples + mask what fields to match + wildcard bits in selected fields (e.g. IP addresses) S. Stancu - CERN openlab13/02/2014 5 * OpenFlow v 1.0
OpenFlow Evolution ›  ONF (Open Networking Foundation) is the body maintaining the OpenFlow specs. 1.0 •  12/2009 •  Widely deployed •  L1-L4 field matching •  Actions: send to port, rewrite L2-L4 headers, set/strip vlan tag •  Subnet masks •  Vendor Extensions •  Controller failover •  Barrier command 1.1 •  02/2011 •  Multiple tables •  Multi-level VLAN and MPLS tagging •  Virtual ports 1.2 •  12/2011 •  Extensible match support (TLV) •  Basic IPv6 support •  Message bundles 1.3 •  04/2012 •  Next gen ASICs •  IPv6 extension header •  Per-flow meters •  Eviction and vacancy events 1.4 •  08/2013 •  Optical port properties •  IANA TCP port 6653 •  Controller flow monitoring and status events 13/02/2014 S. Stancu - CERN openlab 6
Openflow Switches * Company Switch HP 5400zl, 8200zl, 6200yl 3500 3500yl, 6600 Brocade MLXe, CER, CES Ciena Coredirector w/ firmware 6.1.1 Cisco Cat6k, Catlyst 3750, 6500 series Juniper MX, EX, T-640 Arista EOS, 7050, 7124FX NEC IP8800, PF5240, PF5820 Pronto 3240, 3290, 3295, 3780 Toroki Lightswitch 4810 Dell Z9000, S4810 Quanta LB4G Extreme summit X440, x460, x670 Huawei Openflow capable platform IBM 8264 NetGear 7328SO, 7352SO * most switches have some of the openflow features implemented in software (forwarding capacity drastically reduced) 13/02/2014 S. Stancu - CERN openlab 7
Specialized Packet Forwarding Hardware App App App Operating System Specialized Packet Forwarding Hardware App App App Operating System Specialized Packet Forwarding Hardware App App App Operating System Specialized Packet Forwarding Hardware Operating System App App App Specialized Packet Forwarding Hardware App App App Operating System Closed Traditional Networking ›  Closed equipment §  Software bundled with hardware §  Vendor-specific interfaces ›  Few people can innovate §  Equipment vendors write the code §  Long delays to introduce new features ›  Fully Distributed Protocols Proprietary Moving data Network Control Network Device (switch / router) S. Stancu - CERN openlab13/02/2014 8
Specialized Packet Forwarding Hardware OpenFlow agent Traditional Networking ++ ›  Open equipment §  Software decoupled from hardware §  Standard interface (OpenFlow) ›  Anybody can innovate ›  Fully Distributed Protocols Specialized Packet Forwarding Hardware OpenFlow agent Specialized Packet Forwarding Hardware OpenFlow agent Specialized Packet Forwarding Hardware OpenFlow agent Controller Controller Controller Controller S. Stancu - CERN openlab13/02/2014 9
App Simple  Packet   Forwarding   Hardware   Simple  Packet   Forwarding   Hardware   Simple  Packet   Forwarding   Hardware   App App Simple  Packet   Forwarding   Hardware   Simple  Packet   Forwarding   Hardware   Network  Opera&ng    System   Open  interface  to  hardware  (e.g.  OpenFlow)   •  Anybody  can  innovate   Software Defined Networking (SDN) Centralized Control S. Stancu - CERN openlab13/02/2014 10
SDN Open Source Controllers S. Stancu - CERN openlab 11 Functionally Oriented (little or no support for high availability, scaling, etc) Language Examples C/C++ NOX, Trema (also Ruby) and MUL Java Beacon, Maestro and Floodlight Ocaml Mirage and Frenetic Haskell Nettle, McNettle and NetCore Python POX, RYU and Pyretic JavaScript NodeFlow (for Node.JS) Enterprise Grade Controller Details OpenDaylight (Linux Foundation project) Joint industry effort. Virtually all the big players are contributing members Release v 1.0 (02/2014 ON.LAB ONOS (Open Networking Operating System) Floodlight based Work in progress High availability, distributed, scale-out 13/02/2014
SDN Commercial Controllers S. Stancu - CERN openlab 12 Company SDN Controller HP VAN (Virtual Application Networks) OpenFlow 1.3 support High Availability Infrastructure controller SDN ecosystem Big Switch Networks Big Network Controller Cisco Systems XNC (Extensible Network Controller) IBM Programmable Network Controller NEC ProgrammableFlow Controller NTT Data Virtual Network Controller Netsocket vFlow Controller Nicira (VMware) NVP (Network Virtualization Platform) Nuage Networks VSC (Virtualized Services Controller) Plexxi Inc Plexxi Control Pluribus Networks Netvisor Türk Telekom Group YakamOS 13/02/2014 * List from sdn central directory
Outline ›  Software Defined Networking §  OpenFlow in a nutshell §  From traditional networking to SDN §  Protocol, Controller, Switches ›  ViSION traffic orchestrator §  HP SDN Controller §  ViSION Software Stack ̵  Core Framework & Balancer ̵  Health Monitor §  Regressive Testing §  Development Environment ›  Wrap-up §  HPN – California §  Project Timeline §  Conclusion S. Stancu - CERN openlab13/02/2014 13
HP SDN Controller Overview Base OpenFlow Controller Appliance ›  Virtual Appliance deployed as SW on an Industry standard x86 server ›  OpenFlow 1.3 Controller ›  Built-in Network Services ›  Appliance Administration A Distributed Platform for High- Availability & Scalability ›  Controller Clustering for Load- Balancing and Fail-Over ›  Control State Mirroring across cluster for transparent failure recovery Extensible Platform for SDN Application Developers ›  Embedded Java Application Deployment ›  REST APIs ›  GUI HP Network Infrastructure Standard interfaces and control protocols Openflow 1.3 Engine MS-Lync Partner 3rdpartyApps Federation Sentinel Cloud App Connectors Hadoop Clustering Topology Device Mgmt Provisionin g Security Path Calculation Alerts . . . Backup/Restore App Mgr Diagnostics... ... Customer Applications RESTful API S. Stancu - CERN openlab13/02/2014 14
ViSION Traffic Orchestrator ›  Traffic orchestration §  OpenFlow fabrics interconnect: ̵  Client Networks ̵  Resource pools §  Vision Controller: ̵  “programs” flows through fabrics ̵  collects feed-back from resources ›  OpenFlow fabrics desired functionality: §  (1) Classification §  (2) Load Balancing §  (3) Mirroring §  (4) Fault tolerance ›  OpenFlow 1.0 limitations §  Classification based on port ranges scales poorly §  Uniform load distribution not straight forward ̵  Can’t hash on high entropy bits (e.g. lower IP bits) S. Stancu - CERN openlab13/02/2014 15
ViSION Software Stack HP SDN Controller ViSION Core Framework hp apps APIViSION Balancer ViSION UI OF Fabric HealthMonitor Software Stack S. Stancu - CERN openlab13/02/2014 16
ViSION/ Core Framework •  Traffic orchestration decomposition 1.  Logical layer: high level user goals 2.  Translation layer 3.  Physical layer: the OpenFlow fabric •  Core module •  Implements the first two layers •  Provides support for redundancy by using multiple links/paths •  Allows the higher logical layer to focus on traffic orchestration only Translation Physical Logical S. Stancu - CERN openlab13/02/2014 17
Balancer ›  Allocates flows to resources based on §  Resource capacity §  Resource availability ß Health Monitor §  Resource load ß Traffic Statistics ›  Higher level of abstraction §  Deals with the available resources and consumers §  The core implements its decision into the physical OF fabric ›  Flow allocation §  Static à compromise for stateful resource §  Dynamic ›  High availability §  Relocate flows in case a resource becomes unavailable S. Stancu - CERN openlab13/02/2014 18 Balancer Net Health monitor & Traffic statistics R R R
Regression Testing S. Stancu - CERN openlab13/02/2014 19 RegTest Manager Agents Agents Agents ›  SDN applications §  No established validation and troubleshooting methodologies ›  RegTest application §  Manager: ̵  Coordinates pools of agents ̵  deterministic flows sequence §  Agents ̵  Coordinate and monitors flows ̵  adapted MGEN to inject traffic ›  Enables regression testing for the ViSION traffic orchestrator
Development Environment ›  Mininet §  http://mininet.org/ §  Realistic virtual network environment §  Real kernel, switch and application code on a single VM ›  Open vSwitch §  http://vswitch.org/ §  Production quality virtual switch, OpenFlow §  Multi-server virtualized environment, development and testing §  Part of Linux kernel as of 3.3 ̵  default switch in Xen Cloud Platform ̵  integrated in OpenStack 13/02/2014 S. Stancu - CERN openlab 20
Outline ›  Software Defined Networking §  OpenFlow in a nutshell §  From traditional networking to SDN §  Protocol, Controller, Switches ›  ViSION traffic orchestrator §  HP SDN Controller §  ViSION Software Stack ̵  Core Framework & Balancer ̵  Health Monitor §  Regressive Testing §  Development Environment ›  Wrap-up §  HPN – California §  Project Timeline §  Conclusion S. Stancu - CERN openlab13/02/2014 21
HPN – California ›  HPN on-site reviews §  Architecture ̵  Review and approval ̵  Knowledge transfer to technology group ̵  Implementation technologies assessment §  Implementation ̵  Review and feedback ̵  Development practices §  Brainstorming on applicability/extension to cloud environments 13/02/2014 S. Stancu - CERN openlab 22
ViSION Project Timeline Feb 2012 •  Kick-off •  Initial target: virtual machine mobility •  Technology review May 2012 •  Project definition •  Investigation •  Finalized project scope Sep 2012 •  Design •  OF based ACL pusher prototype •  Testbed setup Jan 2013 •  Development •  Core module prototype implementation •  Architecture review May 2013 •  Development •  New HP controller API •  Visit to HPN •  In depth design review •  Flare update Sep 2013 •  Development •  Service oriented core module implementation •  Health Monitor •  Regressive testing tool Jan 2014 •  Wrap up S. Stancu - CERN openlab13/02/2014 23
Conclusion ›  The ViSION core framework offers a platform for implementing traffic orchestration ›  Outlook – CERN and HP to assess technology applicability §  CERN – scaling firewall system and datacenter flow optimization §  HP – leverage the solution and know-how to expand the SDN platform. ›  Acknowledgements §  Thankful to HP for the excellent collaboration ̵  Benefited from their pioneering experience in OpenFlow/SDN §  Thank you to IT-CS for their support, advice and technical feedback 13/02/2014 S. Stancu - CERN openlab 24
13/02/2014 S. Stancu - CERN openlab 25
Backup 13/02/2014 S. Stancu - CERN openlab 26
ViSION - HP SDN Framework S. Stancu - CERN openlab13/02/2014 27
ViSION/ Health Monitor Module -  Real-time resource status information -  Flexible module system -  Multi-module data aggregation per agent -  Custom agent configuration -  Current modules: -  SNMP -  Ping -  HTTP Web Request -  LinkProbe via OF packet injection Hmon App Agents Data Collection Module(s) Active Probe(s) REST API Resource(s) S. Stancu - CERN openlab13/02/2014 28
ViSION Regressive Testing App Overview: -  adapted mgen used for traffic injection -  agent application to coordinate and monitor a machine’s flows -  manager application to coordinate a pool of agents Status: -  prototype, not yet finalized -  summer student involvement S. Stancu - CERN openlab13/02/2014 29
Controller PC Hardware Layer Software Layer Flow Table MAC src MAC dst IP Src IP Dst TCP sport TCP dport Action OpenFlow Client port 4port 3port 2port 1 1.2.3.45.6.7.8 **5.6.7.8*** port 1 Hardware Forwarding table remotely controlled OpenFlow Example S. Stancu - CERN openlab13/02/2014 30
OpenFlow Features Matrix 13/02/2014 S. Stancu - CERN openlab 31
Openflow Evolution ›  0.2 (Mar 2008) ›  1.0 (Dec 2009): §  match: input port, vlan, mac, ip, transport ports; actions: port ouput, set/strip vlan, set mac, ip, transport ports; slicing (multiple queues per output port); flow cookie; datapath description; match on ip in arp packets; port stats; TLS controller communication; explicit IP fragmentation; subnet masks; IN_PORT; port and link status events; vendor extensions; spanning tree access; modify actions in existing flows; ICMP match; controller failover; barrier command; emergency flows for controller lost handling; VLAN priority match. ›  1.1 (Feb 2011): §  Multiple tables; port groups; multi-level VLAN and MPLS tagging; virtual ports (lag, tunnel); controller connection failure. ›  1.2 (Dec 2011): §  extensible match support (TLV); basic ipv6 support; controller role change mechanism, message bundles. ›  1.3 (Apr 2012): §  Flexible capabilities negotiations and table miss support; ipv6 extension header; per-flow meters; per connection event filtering; auxiliary connections; MPLS BoS match; tunnel-id metadata (e.g. GRE); packet-in cookies; eviction and vacancy events. ›  1.4 (Aug 2013): §  Optical port properties; controller flow monitoring and status events; synchronized tables; IANA TCP port 6653 for Openflow. 13/02/2014 S. Stancu - CERN openlab 32
Technologies ›  Open vSwitch §  http://vswitch.org/ §  Production quality virtual switch, openflow, vlan isolation, qos, monitoring, automated control (e.g. multi-server virtualized environment, development and testing etc) §  Part of linux kernel as of 3.3, the default switch in Xen Cloud Platform, integrated in Openstack etc ›  Openflow reference §  http://archive.openflow.org/wp/downloads/ ›  NOX -> POX §  http://www.noxrepo.org/pox/about-pox/ §  C/ Phython openflow controller ›  Beacon -> Floodlight §  https://openflow.stanford.edu/display/Beacon/Home ›  Nodeflow (js, node.js) §  http://garyberger.net/?p=537 ›  Routeflow §  https://sites.google.com/site/routeflow/ ›  Oflops §  http://archive.openflow.org/wk/index.php/Oflops §  Controller to benchmark openflow switches ›  RYU SDN framework, python §  http://www.osrg.net/ryu/ ›  Flowvisor , network slicing §  https://github.com/OPENNETWORKINGLAB/flowvisor/wiki ›  STS, SDN Troubleshooting Simulator §  http://ucb-sts.github.io/sts/ http://yuba.stanford.edu/~casado/of-sw.html 13/02/2014 S. Stancu - CERN openlab 33
ONF Members S. Stancu - CERN openlab13/02/2014 34

More Related Content

PPT
OpenFlow tutorial
byopenflow
 
PDF
The Challenges of SDN/OpenFlow in an Operational and Large-scale Network
byOpen Networking Summits
 
PDF
Introduction to OpenFlow
byrjain51
 
PPTX
Software Load Balancer for OpenFlow Complaint SDN architecture
byPritesh Ranjan
 
PPTX
OpenFlow
byKingston Smiler
 
PDF
Open Network Operating System
byUmesh Krishnaswamy
 
PPTX
Openflow overview
byopenflowhub
 
PDF
The dark side of SDN and OpenFlow
byDiego Kreutz
 
OpenFlow tutorial
byopenflow
 
The Challenges of SDN/OpenFlow in an Operational and Large-scale Network
byOpen Networking Summits
 
Introduction to OpenFlow
byrjain51
 
Software Load Balancer for OpenFlow Complaint SDN architecture
byPritesh Ranjan
 
OpenFlow
byKingston Smiler
 
Open Network Operating System
byUmesh Krishnaswamy
 
Openflow overview
byopenflowhub
 
The dark side of SDN and OpenFlow
byDiego Kreutz
 

What's hot

PDF
Introduction to OpenFlow
byJoel W. King
 
PPTX
SDN Architecture & Ecosystem
byKingston Smiler
 
PDF
Ch 02 --- sdn and openflow architecture
byYoram Orzach
 
PPTX
Onos overview meetup sdn paris - redux
bySDN_Paris
 
PPTX
SDN Project PPT
byMatthew Chang
 
PDF
SDN (Software Defined Networking) Controller
byVipin Gupta
 
PDF
SDN - OpenFlow protocol
byUlf Marxen
 
PPTX
OpenFlow Overview
byJuniper Developer Resources Cooney
 
PDF
Cisco Openflow
byVijayaguru Jayaram
 
PPTX
Openflow Protocol
byKaliyaperumal Krishnan
 
PDF
Industrial Internet of Things: Protocols an Standards
byJavier Povedano
 
PPTX
Modern Software Architecture
byAhmed Marzouk
 
PPTX
Bharath Ram Chandrasekar_Tele 6603_SDN &NFV
byBharath Ram Chandrasekar
 
PDF
Open stackdaykorea2016 wedge
byJunho Suh
 
PDF
Open Flow Tutorial Series - Set 1
byRadhika Hirannaiah
 
PDF
Open stack with_openflowsdn-torii
byHui Cheng
 
PPTX
Implementing MPLS Services using Openflow
byAPNIC
 
PPTX
OpenFlow Extensions
byUS-Ignite
 
PDF
Onos summit roadmap dec 9
byONOS Project
 
PDF
Understanding OpenFlow
bySaurabh Agarwal
 
Introduction to OpenFlow
byJoel W. King
 
SDN Architecture & Ecosystem
byKingston Smiler
 
Ch 02 --- sdn and openflow architecture
byYoram Orzach
 
Onos overview meetup sdn paris - redux
bySDN_Paris
 
SDN Project PPT
byMatthew Chang
 
SDN (Software Defined Networking) Controller
byVipin Gupta
 
SDN - OpenFlow protocol
byUlf Marxen
 
OpenFlow Overview
byJuniper Developer Resources Cooney
 
Cisco Openflow
byVijayaguru Jayaram
 
Openflow Protocol
byKaliyaperumal Krishnan
 
Industrial Internet of Things: Protocols an Standards
byJavier Povedano
 
Modern Software Architecture
byAhmed Marzouk
 
Bharath Ram Chandrasekar_Tele 6603_SDN &NFV
byBharath Ram Chandrasekar
 
Open stackdaykorea2016 wedge
byJunho Suh
 
Open Flow Tutorial Series - Set 1
byRadhika Hirannaiah
 
Open stack with_openflowsdn-torii
byHui Cheng
 
Implementing MPLS Services using Openflow
byAPNIC
 
OpenFlow Extensions
byUS-Ignite
 
Onos summit roadmap dec 9
byONOS Project
 
Understanding OpenFlow
bySaurabh Agarwal
 

Similar to Openlab.2014 02-13.major.vi sion

PPT
OpenFlow Tutorial
byJa-seop Kwak
 
PDF
OSDC 2014: Yves Fauser - OpenStack Networking (Neutron) - Overview of network...
byNETWAYS
 
PPTX
08-Software Defined Networking Southern Carolina
bycustcharanhp2309
 
PPT
Software defined network and Virtualization
byidrajeev
 
PDF
SDN & NFV Introduction - Open Source Data Center Networking
byThomas Graf
 
PPTX
Software-Defined Networking (SDN) is a transformative networking paradigm
byeticket4403
 
PPTX
Tools and Platforms for OpenFlow/SDN
byUmesh Krishnaswamy
 
PPTX
lect4_SDNbasic_openflow.pptx
byJesicaDcruz1
 
PPTX
Open Flow Protocol
byVishal S M B
 
PDF
An FPGA for high end Open Networking
byrinnocente
 
PPT
Naveen nimmu sdn future of networking
bysuniltomar04
 
PPT
Naveen nimmu sdn future of networking
byOpenSourceIndia
 
PDF
Network Virtualization & Software-defined Networking
byDigicomp Academy AG
 
PDF
SDN/OpenFlow #lspe
byChris Westin
 
PDF
PLNOG 8: Piotr Gierz - Protokół OpenFlow
byPROIDEA
 
PDF
SDN basics
byAnto Joeis
 
PDF
Osdc2014 openstack networking yves_fauser
byyfauser
 
PPTX
Software Defined Networking: Primer
byBangladesh Network Operators Group
 
PDF
M 14ofl
byronsito
 
PPTX
Lecture14 1
byEdwin Castillo
 
OpenFlow Tutorial
byJa-seop Kwak
 
OSDC 2014: Yves Fauser - OpenStack Networking (Neutron) - Overview of network...
byNETWAYS
 
08-Software Defined Networking Southern Carolina
bycustcharanhp2309
 
Software defined network and Virtualization
byidrajeev
 
SDN & NFV Introduction - Open Source Data Center Networking
byThomas Graf
 
Software-Defined Networking (SDN) is a transformative networking paradigm
byeticket4403
 
Tools and Platforms for OpenFlow/SDN
byUmesh Krishnaswamy
 
lect4_SDNbasic_openflow.pptx
byJesicaDcruz1
 
Open Flow Protocol
byVishal S M B
 
An FPGA for high end Open Networking
byrinnocente
 
Naveen nimmu sdn future of networking
bysuniltomar04
 
Naveen nimmu sdn future of networking
byOpenSourceIndia
 
Network Virtualization & Software-defined Networking
byDigicomp Academy AG
 
SDN/OpenFlow #lspe
byChris Westin
 
PLNOG 8: Piotr Gierz - Protokół OpenFlow
byPROIDEA
 
SDN basics
byAnto Joeis
 
Osdc2014 openstack networking yves_fauser
byyfauser
 
Software Defined Networking: Primer
byBangladesh Network Operators Group
 
M 14ofl
byronsito
 
Lecture14 1
byEdwin Castillo
 

Recently uploaded

PDF
DMVPN Tunnels to multi sites in networks
byMahboabAliGhalib
 
PPTX
Coded Agents – with UiPath SDK + LangGraph [Virtual Hands-on Workshop]
byUiPathCommunity
 
PDF
Lab 4.4 More Cloud Logging and Monitoring - 2nd Sight Lab Cloud Security Class
by2nd Sight Lab
 
PDF
Smart Buildings 2025 Wrapped! The Rise of Outcomes-as-a-Service
byMemoori
 
PDF
How to Evaluate a High Performance Database
byScyllaDB
 
PDF
Lab 4.2 Multi-cloud Deployments - 2nd Sight Lab Cloud Security Class
by2nd Sight Lab
 
PDF
100 Insights After the 200th Issue of NewMind AI Journal
byNewMind AI
 
PPTX
Cloud Backup Tips for IT Professionals..
byordersoftwarekeys
 
PPTX
Emancipatory Information Retrieval: Radically Reorienting Information Retriev...
byBhaskar Mitra
 
PDF
API-First Architecture in Financial Systems
bycyy111112
 
PPTX
Blue Futuristic Cyber Security Presentation.pptx
byrdelosreyes538795
 
PDF
10 Things AI-First Apps Do Differently by iProgrammer Solutions
byiProgrammer Solutions Private Limited
 
PPTX
How to make Ai agents using Google Gemini AI.pptx
bypkluffy111
 
PDF
Lab 1.3 Introduction to GCP Automation - 2nd Sight Lab Cloud Security Class
by2nd Sight Lab
 
PDF
Lab 1.1 Introduction to AWS Automation - 2nd Sight Lab Cloud Security Class
by2nd Sight Lab
 
PDF
Six Shifts For 2026 (And The Next Six Years)
byDavid Armano
 
PPTX
Technology Consulting _ by Slidesgo.pptx
byfh82277
 
PDF
Lab 1.5 - Sharing Secrets with GPG ~ 2nd Sight Lab Cloud Security Class
by2nd Sight Lab
 
PPTX
Building Cyber Resilience for 2026: Best Practices for a Secure, AI-Driven Bu...
byYasir Naveed Riaz
 
PDF
Day 4 - Access, Deployments, and Monitoring - 2nd Sight Lab Cloud Security Class
by2nd Sight Lab
 
DMVPN Tunnels to multi sites in networks
byMahboabAliGhalib
 
Coded Agents – with UiPath SDK + LangGraph [Virtual Hands-on Workshop]
byUiPathCommunity
 
Lab 4.4 More Cloud Logging and Monitoring - 2nd Sight Lab Cloud Security Class
by2nd Sight Lab
 
Smart Buildings 2025 Wrapped! The Rise of Outcomes-as-a-Service
byMemoori
 
How to Evaluate a High Performance Database
byScyllaDB
 
Lab 4.2 Multi-cloud Deployments - 2nd Sight Lab Cloud Security Class
by2nd Sight Lab
 
100 Insights After the 200th Issue of NewMind AI Journal
byNewMind AI
 
Cloud Backup Tips for IT Professionals..
byordersoftwarekeys
 
Emancipatory Information Retrieval: Radically Reorienting Information Retriev...
byBhaskar Mitra
 
API-First Architecture in Financial Systems
bycyy111112
 
Blue Futuristic Cyber Security Presentation.pptx
byrdelosreyes538795
 
10 Things AI-First Apps Do Differently by iProgrammer Solutions
byiProgrammer Solutions Private Limited
 
How to make Ai agents using Google Gemini AI.pptx
bypkluffy111
 
Lab 1.3 Introduction to GCP Automation - 2nd Sight Lab Cloud Security Class
by2nd Sight Lab
 
Lab 1.1 Introduction to AWS Automation - 2nd Sight Lab Cloud Security Class
by2nd Sight Lab
 
Six Shifts For 2026 (And The Next Six Years)
byDavid Armano
 
Technology Consulting _ by Slidesgo.pptx
byfh82277
 
Lab 1.5 - Sharing Secrets with GPG ~ 2nd Sight Lab Cloud Security Class
by2nd Sight Lab
 
Building Cyber Resilience for 2026: Best Practices for a Secure, AI-Driven Bu...
byYasir Naveed Riaz
 
Day 4 - Access, Deployments, and Monitoring - 2nd Sight Lab Cloud Security Class
by2nd Sight Lab
 

Openlab.2014 02-13.major.vi sion

  • 1.
    ViSION Openlab Major Review StefanStancu Dan Savu ›  13/02/2014
  • 2.
    ViSION Project Context › CERN openlab - HP Networking collaboration §  SDN research and development using OpenFlow §  Started in February 2012 §  2 engineers ›  Initial project goal: Virtual services in OpenFlow networks §  traffic slicing and network virtualization §  overlapping with industry (HP’s VAN, NICIRA) ›  Goal reassessment: traffic orchestration §  Scale-out / optimize resource utilization §  Load balancing ›  HP openlab collaboration §  HP’s engagement in openlab phase IV ends with the ViSION project §  In contact with HP for openlab phase V S. Stancu - CERN openlab13/02/2014 2
  • 3.
    Outline ›  Software DefinedNetworking §  OpenFlow in a nutshell §  From traditional networking to SDN §  Protocol, Controller, Switches ›  ViSION traffic orchestrator §  HP SDN Controller §  ViSION Software Stack ̵  Core Framework & Balancer ̵  Health Monitor §  Regressive Testing §  Development Environment ›  Wrap-up §  HPN – California §  Project Timeline §  Conclusion S. Stancu - CERN openlab13/02/2014 3
  • 4.
    Tradi&onal  Switch   SpecializedPacket Forwarding Hardware (Look-up Tables) ControlPath Routing FIBMAC table ACLs DataPath App (e.g. LLDP) Switch Operating System App App OpenFlow – Decouple Control & Data IP src IP dst Src port Dst port permit ? 137.138.*.* /* * 22 allow * * * * deny IP dst mask gw port 10.1.12.0 /24 192.168.7.1 eth 1/7 0.0.0.0 /0 192.168.1.1 eth 0/1 MAC dst port 00:FC:…. eth 1/7 OO:D1:… eth 0/1                    Openflow  Switch   Specialized Packet Forwarding Hardware (Look-up Tables) DataPathControlPath App (e.g. LLDP) Controller platform (“Network Operating System”) App App Match Rule Action Stats 10+ tuple (MAC, VLAN, IP, …) Forward to port X Pkts, bytes 10+ tuple (MAC, VLAN, IP, …) Forward normal Pkts, bytes 10+ tuple (MAC, VLAN, IP, …) Modify fields (e.g. MAC) Pkts, bytes 10+ tuple (MAC, VLAN, IP, …) Send to controller Pkts, bytes OpenFlow (Control) Agent Flow Table NFlow Table 1 open standardized API External SW Controller S. Stancu - CERN openlab13/02/2014 4
  • 5.
    OpenFlow* – FlowTable Entries Switch   Port   MAC   src   MAC   dst   Eth   type   VLAN   ID   IP   Src   IP   Dst   IP   Prot   L4   sport   L4   dport   Rule   Ac&on   Stats   1.  Forward  packet  to  zero  or  more  ports   2.  Encapsulate  and  forward  to  controller   3.  Send  to  normal  processing  pipeline   4.  Modify  Fields   5.  Any  extensions  you  add!   Packet  +  byte  counters   VLAN   pcp   IP   ToS   Switching   *   Switch   Port   MAC   src   MAC   dst   Eth   type   VLAN   ID   IP   Src   IP   Dst   IP   Prot   TCP   sport   TCP   dport   Ac&on   *   00:1f:..   *   *   *   *   *   *   *   port6   Rou&ng   *   Switch   Port   MAC   src   MAC   dst   Eth   type   VLAN   ID   IP   Src   IP   Dst   IP   Prot   TCP   sport   TCP   dport   Ac&on   *   *   *   *   *   5.6.7.8   *   *   *   port6   Examples + mask what fields to match + wildcard bits in selected fields (e.g. IP addresses) S. Stancu - CERN openlab13/02/2014 5 * OpenFlow v 1.0
  • 6.
    OpenFlow Evolution ›  ONF(Open Networking Foundation) is the body maintaining the OpenFlow specs. 1.0 •  12/2009 •  Widely deployed •  L1-L4 field matching •  Actions: send to port, rewrite L2-L4 headers, set/strip vlan tag •  Subnet masks •  Vendor Extensions •  Controller failover •  Barrier command 1.1 •  02/2011 •  Multiple tables •  Multi-level VLAN and MPLS tagging •  Virtual ports 1.2 •  12/2011 •  Extensible match support (TLV) •  Basic IPv6 support •  Message bundles 1.3 •  04/2012 •  Next gen ASICs •  IPv6 extension header •  Per-flow meters •  Eviction and vacancy events 1.4 •  08/2013 •  Optical port properties •  IANA TCP port 6653 •  Controller flow monitoring and status events 13/02/2014 S. Stancu - CERN openlab 6
  • 7.
    Openflow Switches * CompanySwitch HP 5400zl, 8200zl, 6200yl 3500 3500yl, 6600 Brocade MLXe, CER, CES Ciena Coredirector w/ firmware 6.1.1 Cisco Cat6k, Catlyst 3750, 6500 series Juniper MX, EX, T-640 Arista EOS, 7050, 7124FX NEC IP8800, PF5240, PF5820 Pronto 3240, 3290, 3295, 3780 Toroki Lightswitch 4810 Dell Z9000, S4810 Quanta LB4G Extreme summit X440, x460, x670 Huawei Openflow capable platform IBM 8264 NetGear 7328SO, 7352SO * most switches have some of the openflow features implemented in software (forwarding capacity drastically reduced) 13/02/2014 S. Stancu - CERN openlab 7
  • 8.
    Specialized Packet Forwarding Hardware AppApp App Operating System Specialized Packet Forwarding Hardware App App App Operating System Specialized Packet Forwarding Hardware App App App Operating System Specialized Packet Forwarding Hardware Operating System App App App Specialized Packet Forwarding Hardware App App App Operating System Closed Traditional Networking ›  Closed equipment §  Software bundled with hardware §  Vendor-specific interfaces ›  Few people can innovate §  Equipment vendors write the code §  Long delays to introduce new features ›  Fully Distributed Protocols Proprietary Moving data Network Control Network Device (switch / router) S. Stancu - CERN openlab13/02/2014 8
  • 9.
    Specialized Packet Forwarding Hardware OpenFlowagent Traditional Networking ++ ›  Open equipment §  Software decoupled from hardware §  Standard interface (OpenFlow) ›  Anybody can innovate ›  Fully Distributed Protocols Specialized Packet Forwarding Hardware OpenFlow agent Specialized Packet Forwarding Hardware OpenFlow agent Specialized Packet Forwarding Hardware OpenFlow agent Controller Controller Controller Controller S. Stancu - CERN openlab13/02/2014 9
  • 10.
    App Simple  Packet   Forwarding   Hardware   Simple  Packet   Forwarding   Hardware   Simple  Packet   Forwarding   Hardware   App App Simple  Packet   Forwarding   Hardware   Simple  Packet   Forwarding   Hardware   Network  Opera&ng    System   Open  interface  to  hardware  (e.g.  OpenFlow)   •  Anybody  can  innovate   Software Defined Networking (SDN) Centralized Control S. Stancu - CERN openlab13/02/2014 10
  • 11.
    SDN Open SourceControllers S. Stancu - CERN openlab 11 Functionally Oriented (little or no support for high availability, scaling, etc) Language Examples C/C++ NOX, Trema (also Ruby) and MUL Java Beacon, Maestro and Floodlight Ocaml Mirage and Frenetic Haskell Nettle, McNettle and NetCore Python POX, RYU and Pyretic JavaScript NodeFlow (for Node.JS) Enterprise Grade Controller Details OpenDaylight (Linux Foundation project) Joint industry effort. Virtually all the big players are contributing members Release v 1.0 (02/2014 ON.LAB ONOS (Open Networking Operating System) Floodlight based Work in progress High availability, distributed, scale-out 13/02/2014
  • 12.
    SDN Commercial Controllers S.Stancu - CERN openlab 12 Company SDN Controller HP VAN (Virtual Application Networks) OpenFlow 1.3 support High Availability Infrastructure controller SDN ecosystem Big Switch Networks Big Network Controller Cisco Systems XNC (Extensible Network Controller) IBM Programmable Network Controller NEC ProgrammableFlow Controller NTT Data Virtual Network Controller Netsocket vFlow Controller Nicira (VMware) NVP (Network Virtualization Platform) Nuage Networks VSC (Virtualized Services Controller) Plexxi Inc Plexxi Control Pluribus Networks Netvisor Türk Telekom Group YakamOS 13/02/2014 * List from sdn central directory
  • 13.
    Outline ›  Software DefinedNetworking §  OpenFlow in a nutshell §  From traditional networking to SDN §  Protocol, Controller, Switches ›  ViSION traffic orchestrator §  HP SDN Controller §  ViSION Software Stack ̵  Core Framework & Balancer ̵  Health Monitor §  Regressive Testing §  Development Environment ›  Wrap-up §  HPN – California §  Project Timeline §  Conclusion S. Stancu - CERN openlab13/02/2014 13
  • 14.
    HP SDN ControllerOverview Base OpenFlow Controller Appliance ›  Virtual Appliance deployed as SW on an Industry standard x86 server ›  OpenFlow 1.3 Controller ›  Built-in Network Services ›  Appliance Administration A Distributed Platform for High- Availability & Scalability ›  Controller Clustering for Load- Balancing and Fail-Over ›  Control State Mirroring across cluster for transparent failure recovery Extensible Platform for SDN Application Developers ›  Embedded Java Application Deployment ›  REST APIs ›  GUI HP Network Infrastructure Standard interfaces and control protocols Openflow 1.3 Engine MS-Lync Partner 3rdpartyApps Federation Sentinel Cloud App Connectors Hadoop Clustering Topology Device Mgmt Provisionin g Security Path Calculation Alerts . . . Backup/Restore App Mgr Diagnostics... ... Customer Applications RESTful API S. Stancu - CERN openlab13/02/2014 14
  • 15.
    ViSION Traffic Orchestrator › Traffic orchestration §  OpenFlow fabrics interconnect: ̵  Client Networks ̵  Resource pools §  Vision Controller: ̵  “programs” flows through fabrics ̵  collects feed-back from resources ›  OpenFlow fabrics desired functionality: §  (1) Classification §  (2) Load Balancing §  (3) Mirroring §  (4) Fault tolerance ›  OpenFlow 1.0 limitations §  Classification based on port ranges scales poorly §  Uniform load distribution not straight forward ̵  Can’t hash on high entropy bits (e.g. lower IP bits) S. Stancu - CERN openlab13/02/2014 15
  • 16.
    ViSION Software Stack HPSDN Controller ViSION Core Framework hp apps APIViSION Balancer ViSION UI OF Fabric HealthMonitor Software Stack S. Stancu - CERN openlab13/02/2014 16
  • 17.
    ViSION/ Core Framework • Traffic orchestration decomposition 1.  Logical layer: high level user goals 2.  Translation layer 3.  Physical layer: the OpenFlow fabric •  Core module •  Implements the first two layers •  Provides support for redundancy by using multiple links/paths •  Allows the higher logical layer to focus on traffic orchestration only Translation Physical Logical S. Stancu - CERN openlab13/02/2014 17
  • 18.
    Balancer ›  Allocates flowsto resources based on §  Resource capacity §  Resource availability ß Health Monitor §  Resource load ß Traffic Statistics ›  Higher level of abstraction §  Deals with the available resources and consumers §  The core implements its decision into the physical OF fabric ›  Flow allocation §  Static à compromise for stateful resource §  Dynamic ›  High availability §  Relocate flows in case a resource becomes unavailable S. Stancu - CERN openlab13/02/2014 18 Balancer Net Health monitor & Traffic statistics R R R
  • 19.
    Regression Testing S. Stancu- CERN openlab13/02/2014 19 RegTest Manager Agents Agents Agents ›  SDN applications §  No established validation and troubleshooting methodologies ›  RegTest application §  Manager: ̵  Coordinates pools of agents ̵  deterministic flows sequence §  Agents ̵  Coordinate and monitors flows ̵  adapted MGEN to inject traffic ›  Enables regression testing for the ViSION traffic orchestrator
  • 20.
    Development Environment ›  Mininet § http://mininet.org/ §  Realistic virtual network environment §  Real kernel, switch and application code on a single VM ›  Open vSwitch §  http://vswitch.org/ §  Production quality virtual switch, OpenFlow §  Multi-server virtualized environment, development and testing §  Part of Linux kernel as of 3.3 ̵  default switch in Xen Cloud Platform ̵  integrated in OpenStack 13/02/2014 S. Stancu - CERN openlab 20
  • 21.
    Outline ›  Software DefinedNetworking §  OpenFlow in a nutshell §  From traditional networking to SDN §  Protocol, Controller, Switches ›  ViSION traffic orchestrator §  HP SDN Controller §  ViSION Software Stack ̵  Core Framework & Balancer ̵  Health Monitor §  Regressive Testing §  Development Environment ›  Wrap-up §  HPN – California §  Project Timeline §  Conclusion S. Stancu - CERN openlab13/02/2014 21
  • 22.
    HPN – California › HPN on-site reviews §  Architecture ̵  Review and approval ̵  Knowledge transfer to technology group ̵  Implementation technologies assessment §  Implementation ̵  Review and feedback ̵  Development practices §  Brainstorming on applicability/extension to cloud environments 13/02/2014 S. Stancu - CERN openlab 22
  • 23.
    ViSION Project Timeline Feb2012 •  Kick-off •  Initial target: virtual machine mobility •  Technology review May 2012 •  Project definition •  Investigation •  Finalized project scope Sep 2012 •  Design •  OF based ACL pusher prototype •  Testbed setup Jan 2013 •  Development •  Core module prototype implementation •  Architecture review May 2013 •  Development •  New HP controller API •  Visit to HPN •  In depth design review •  Flare update Sep 2013 •  Development •  Service oriented core module implementation •  Health Monitor •  Regressive testing tool Jan 2014 •  Wrap up S. Stancu - CERN openlab13/02/2014 23
  • 24.
    Conclusion ›  The ViSIONcore framework offers a platform for implementing traffic orchestration ›  Outlook – CERN and HP to assess technology applicability §  CERN – scaling firewall system and datacenter flow optimization §  HP – leverage the solution and know-how to expand the SDN platform. ›  Acknowledgements §  Thankful to HP for the excellent collaboration ̵  Benefited from their pioneering experience in OpenFlow/SDN §  Thank you to IT-CS for their support, advice and technical feedback 13/02/2014 S. Stancu - CERN openlab 24
  • 25.
    13/02/2014 S. Stancu- CERN openlab 25
  • 26.
    Backup 13/02/2014 S. Stancu- CERN openlab 26
  • 27.
    ViSION - HPSDN Framework S. Stancu - CERN openlab13/02/2014 27
  • 28.
    ViSION/ Health MonitorModule -  Real-time resource status information -  Flexible module system -  Multi-module data aggregation per agent -  Custom agent configuration -  Current modules: -  SNMP -  Ping -  HTTP Web Request -  LinkProbe via OF packet injection Hmon App Agents Data Collection Module(s) Active Probe(s) REST API Resource(s) S. Stancu - CERN openlab13/02/2014 28
  • 29.
    ViSION Regressive TestingApp Overview: -  adapted mgen used for traffic injection -  agent application to coordinate and monitor a machine’s flows -  manager application to coordinate a pool of agents Status: -  prototype, not yet finalized -  summer student involvement S. Stancu - CERN openlab13/02/2014 29
  • 30.
    Controller PC Hardware Layer Software Layer Flow Table MAC src MAC dst IP Src IP Dst TCP sport TCP dport Action OpenFlow Client port4port 3port 2port 1 1.2.3.45.6.7.8 **5.6.7.8*** port 1 Hardware Forwarding table remotely controlled OpenFlow Example S. Stancu - CERN openlab13/02/2014 30
  • 31.
    OpenFlow Features Matrix 13/02/2014S. Stancu - CERN openlab 31
  • 32.
    Openflow Evolution ›  0.2(Mar 2008) ›  1.0 (Dec 2009): §  match: input port, vlan, mac, ip, transport ports; actions: port ouput, set/strip vlan, set mac, ip, transport ports; slicing (multiple queues per output port); flow cookie; datapath description; match on ip in arp packets; port stats; TLS controller communication; explicit IP fragmentation; subnet masks; IN_PORT; port and link status events; vendor extensions; spanning tree access; modify actions in existing flows; ICMP match; controller failover; barrier command; emergency flows for controller lost handling; VLAN priority match. ›  1.1 (Feb 2011): §  Multiple tables; port groups; multi-level VLAN and MPLS tagging; virtual ports (lag, tunnel); controller connection failure. ›  1.2 (Dec 2011): §  extensible match support (TLV); basic ipv6 support; controller role change mechanism, message bundles. ›  1.3 (Apr 2012): §  Flexible capabilities negotiations and table miss support; ipv6 extension header; per-flow meters; per connection event filtering; auxiliary connections; MPLS BoS match; tunnel-id metadata (e.g. GRE); packet-in cookies; eviction and vacancy events. ›  1.4 (Aug 2013): §  Optical port properties; controller flow monitoring and status events; synchronized tables; IANA TCP port 6653 for Openflow. 13/02/2014 S. Stancu - CERN openlab 32
  • 33.
    Technologies ›  Open vSwitch § http://vswitch.org/ §  Production quality virtual switch, openflow, vlan isolation, qos, monitoring, automated control (e.g. multi-server virtualized environment, development and testing etc) §  Part of linux kernel as of 3.3, the default switch in Xen Cloud Platform, integrated in Openstack etc ›  Openflow reference §  http://archive.openflow.org/wp/downloads/ ›  NOX -> POX §  http://www.noxrepo.org/pox/about-pox/ §  C/ Phython openflow controller ›  Beacon -> Floodlight §  https://openflow.stanford.edu/display/Beacon/Home ›  Nodeflow (js, node.js) §  http://garyberger.net/?p=537 ›  Routeflow §  https://sites.google.com/site/routeflow/ ›  Oflops §  http://archive.openflow.org/wk/index.php/Oflops §  Controller to benchmark openflow switches ›  RYU SDN framework, python §  http://www.osrg.net/ryu/ ›  Flowvisor , network slicing §  https://github.com/OPENNETWORKINGLAB/flowvisor/wiki ›  STS, SDN Troubleshooting Simulator §  http://ucb-sts.github.io/sts/ http://yuba.stanford.edu/~casado/of-sw.html 13/02/2014 S. Stancu - CERN openlab 33
  • 34.
    ONF Members S. Stancu- CERN openlab13/02/2014 34