Presentation delivered by David Ward at the Open Networking Summit in October 2011. Details of OpenFlow, New Applications, and how to deliver it to your business. Network engineer & developer focused.

1. Programmable WAN Networking is
SFW
David Ward
CTO & Chief Architect
Platform Systems Division, Juniper Networks

2. The Developer and The Network
Improving user experience by programming the network
Real Problems. Real Revenue. Real Attention.
Programmable
Networking
is
SFW
Copyright
© 2011 Juniper Networks, Inc. www.juniper.net

3. Beyond ferreting the information
Current approximation techniques are barely sufficient and inefficient
APPLICATION WORLD: GUESSING NETWORK WORLD: DERIVING
Applications blindly probe the Networks spy on traffic to try
network to understand what it to understand applications
can deliver
? Network Aware Applications ? ? Application Aware Networking ?
 Game ping-stats, doppler, geo-  Deep Packet Inspection
location, whois  Stateful flow analysis
 Proprietary codecs  Application fingerprinting
 Approximate topology/location  Service specific overlay topologies
Programmable
Networking
is
SFW
Copyright
© 2011 Juniper Networks, Inc. www.juniper.net

4. How to ensure the best experience?
Bringing together the important elements … … enabled via real-time interaction to
influence the experience of the end user
Application: Content: End-User: Network:
Knows end-device Adjusts placement, Knows what it Real-time interaction
capabilities. Proximity selection & insertion wants and is between application,
of end-user to content. of content from directed there content and end-users.
Controls resources. analytics.
Programmable
Networking
is
SFW
Copyright
© 2011 Juniper Networks, Inc. www.juniper.net

5. Let’s talk about why networks &
applications need to work together
Programmable
Networking
is
SFW
Copyright
© 2011 Juniper Networks, Inc. www.juniper.net

6. What brings the two together?
THE APPLICATION WORLD THE NETWORK WORLD
Bi-directional interaction and
programmability
Programmable
Networking
is
SFW
Copyright
© 2011 Juniper Networks, Inc. www.juniper.net

7. Interaction at multiple touch points
Inform network of desired behavior
Inform application of data intrinsically in
the network
THE APPLICATION WORLD THE NETWORK WORLD
Network
Programmability
User service profile Billing profile
Programmable
Enterprise edge Business edge service profile
Touch points
Hypervisor stack VPN/mobile/security gateways
CDN
Programmable
Networking
is
SFW
Copyright
© 2011 Juniper Networks, Inc. www.juniper.net

8. What is possible in this new world?
APPLICATION NETWORK NETWORK APPLICATION
Applications made better by Networks made better by
information from network information from application
 Understanding of end-device  Bandwidth and resource optimization
capabilities  New service topologies
 Real location / topology  Security identification
 Adjust behavior to real-time usage  Service-specific packet treatment
 Billing granularity
Flexibility of service placement Control of resources from
applications
Programmable
Networking
is
SFW
Copyright
© 2011 Juniper Networks, Inc. www.juniper.net

9. How do networks & applications work
together?
Programmable
Networking
is
SFW
Copyright
© 2011 Juniper Networks, Inc. www.juniper.net

10. There’s more than what you are hearing
Software Defined Networks
 Separation of existing protocols from forwarding plane for network devices
 Programming of forwarding plane via centralized orchestration platforms
SOLUTION
No interaction with
existing routing/
Network
Programmability
signaling protocols of
the Internet
 Augment what’s already on the internet
 Integration with routing, signaling and policy logic
 Modular, programmable touchpoints
 Seamless service model via collaborative inputs
 Standards-based approach
Programmable
Networking
is
SFW
Copyright
© 2011 Juniper Networks, Inc. www.juniper.net

11. Application and network interaction
As a developer you will have many ways to influence the network or application
Choices depend on your touch point to the network
Intuiting Info Communicating
Application  OpenStack
Application
programming  CloudStack
deriving network Proprietary control
network  OpenFlow
channels,
pingstats, GSM,  PCE
check-ins,  GenApp
traceroute Dynamic
 Provider-­‐based
interaction
development
plaBorms
Network spying DPI, Netflow, Network informing  ALTO
on application IPDR, IDS application  BGP-­‐TE,
BGP-­‐CDNI
Programmable
Networking
is
SFW
Copyright
© 2011 Juniper Networks, Inc. www.juniper.net

12. How do we make this happen?
Without breaking everything …
THE APPLICATION WORLD THE APPLICATION WORLD
Real-time topology
understanding
(ALTO, BGP-TE) SI
ISV
Service
Research
Enterprise
Partner
Partner
Provider
InsKtuKon
Customer
Steering traffic through
optimal paths Web Services API
(PCE)
Network Orchestration Across Networks
Programmability
Selecting specific traffic
OpenFlow
GENAPP
BGP-TE
(OpenFlow)
ALTO
Mgmt
PCE
Network APIs
…
New touch points:
gateways, billing
collectors, service
appliances, CDN, DPI
THE NETWORK WORLD THE NETWORK WORLD
Programmable
Networking
is
SFW
Copyright
© 2011 Juniper Networks, Inc. www.juniper.net

13. The protocols
Network Intelligence Policy Enforcement /
Function Path Computation Service Location
Query Point Provisioning
Delivery Vehicle ALTO PCE OpenFlow Services Registry
BGP-TE SMI
GENAPP Service Engineered Paths
Network intelligence Path computation and Policy enforcement Service location
query point establishment
Where is “it” in the Path Computation Permit/Deny policy Centralize/Distributed
network Element (PCE) for enforcement through registration for services,
determining traffic path programmable flow filters application resources and
and setup (OpenFlow) / SMI content cache locations
Programmable
Networking
is
SFW
Copyright
© 2011 Juniper Networks, Inc. www.juniper.net

14. ROUTER: CONTROL AND DATA PLANES
AUGMENT CONTROL PLANE, CONTROL PKT. FWDG
Abstraction level:
data plane (low), control plane (high)
PCE Controller ALTO etc.
PCEP OF ALTO, BGP-TE
Router Control Plane
Routing
MPLSOpenFlow
… Protocols
Ingress Packet Packet Egress
Decap RIB, LIB, … Decap
IFL Feature OFF Feature
Execution Execution
IFF Feature Output IFL
Execution Feature Exec
Route lookup
Router
Programmable Networking is SFW Copyright © 2011 Juniper Networks, Inc. www.juniper.net

15. SHIPS IN THE NIGHT VS. INTEGRATED
“Ships-in-the-Night” “Integrated”
Control Control Plane
OpenFlow Plane OpenFlow
Router Router
• A subset of ports controlled by OF, another • Use OF for feature definition – augment the
subset controlled by router’s native CP – native control plane
physical resources are partitioned • No longer partitioning of resources
• Some level of integration: “OF_NORMAL”: • Can operate at different abstraction levels
• Implementer free to define what “normal” is (low-level like OK1.0 or higher level)
• May not be what router normally does
Programmable Networking is SFW Copyright © 2011 Juniper Networks, Inc. www.juniper.net

16. INTEGRATED FORWARDING ZONES
Using a common API, we to have multiple programming entities sharing
the same Layer 1-7 devices
Layer-3 device could have
 IGP/BGP zone (default)
 OpenFlow zone
 PCE/LSP zone
 ALTO zone
Only one zone permitted per logical port with ability to ‘drop through; to
default zone
 The way VRFs work today
Arbitration function necessary to ensure clean resource split – no deadlock
states permitted
Programmable Networking is SFW Copyright © 2011 Juniper Networks, Inc. www.juniper.net

17. Orchestration and Development Platforms
 Tradi&onal
IT:
– OperaKon/Billing
systems
=
device
and
sAPI
Web Services ubscriber
management
• COPS,
Radius,
Diameter,
netconf,
DHCP,
CAPWAP,
GSMP
Orchestration Across Networks
 Emerging
Network
Func&on
Specific
– SLA
monitoring,
OTT
virtualizaKon,
Path
management,
Unified
CommunicaKon
Operation Emerging Emerging New
 Emerging
Service
Specific
Network
Billing Service Provider-
– Systems
Flow
intelligence,
user
telemetry
informaKon,
sensor
networking,
Based
Function Specific service
Specific Platforms
profile
updates,
network
appliance
and
CDN
control
 New
Provider
Based
Development
Pla=orms
– Specific
funcKonality
for
a
specific
customer
set:
mobile
phone,
STB
Programmable
Networking
is
SFW
Copyright
© 2011 Juniper Networks, Inc. www.juniper.net

18. Network Operators Building Development Platforms
Network operator innovation centers around the world
Pla=orm
poten&al:
Reaching
~53%
of
world
popula&on;
Equals
~64%
of
world
GDP
Programmable
Networking
is
SFW
Copyright
© 2011 Juniper Networks, Inc. www.juniper.net

19. Networked application examples
 Content / Service Routing
 Locate best copy of content for the end user, using customer rules
 Managed content distribution
 Content prepositioning to caches
 Live events
 Map-Reduce class of applications
 High-end distributed computing
 Cloud OS network operations
 Move VMs / Apps / Storage between locations
 Cloudburst
 Flexibly, on-demand allocate cloud & network capacity to customers
 Security
 DDoS attack prevention
Programmable
Networking
is
SFW
Copyright
© 2011 Juniper Networks, Inc. www.juniper.net

20. What is a Service Engineered Path?
 Tunneling/switching technology that provides a path to specific service
functions
 Enables selective traffic redirection based upon ephemeral classifiers
 Signaled paths requested via PCE – Path Computation Element
 Standardized API
Ephemeral
Classifiers
Service
Delivery
Ephemeral
Classifiers
Orchestrator
SMI
OpenFlow
OpenFlow
Control
Feedback
Loop
Ephemeral
Service
Engineered
Path1
DPI
Classifiers
MPLS
RSVP/LDP
LSP,
VLAN,
IP
Tunnel
EC
Service
Engineered
Path2
Applica&on
EC
SDK
SEPR
Service
Node
Programmable
Networking
is
SFW
Copyright
© 2011 Juniper Networks, Inc. www.juniper.net

21. Example: service appliance pooling
Pre-­‐SEP
Service
Appliance
Topology
Edge
Router1
Edge
Router2
Edge
Router3
NAT
FW
IDP
NAT
FW
IDP
SBC
DPI
WCCP
Service
Engineered
Paths
Appliance
Pooling
Topologies
Local
Appliance
Pooling
Centralized
Appliance
Pooling
SEPR1
SEPR2
SEPR3
SEPR4
SEPR5
SEPR6
Service
Engineered
Path2
Service
Engineered
Paths
Service
Engineered
Path3
Service
Engineered
Path1
NAT
FW
IDP
SBC
DPI
WCCP
NAT
FW
IDP
SBC
DPI
WCCP
Local
Appliance
Resource
Pool
Centralized
Appliance
Resource
Pool
Programmable
Networking
is
SFW
Copyright
© 2011 Juniper Networks, Inc. www.juniper.net

22. Example: service specific topology
Op&mized
SEP
Path
Streaming
Video
Video
Source
Video
Peering
(SEPR)
Video
Non-­‐op&mized
Path
If
desKnaKon
of
subscriber
matches
“opt-­‐in”
profile
forward
traffic
onto
Service
Engineered
Path
else
use
normal
route
path
Video
Video
SEPR1
 Subscriber traffic flows may be forced across specific service topologies
as dictated by policy
 Video traffic for one set of subscribers follows a specific path that is
engineered to provide the optimal video experience
 Path enabled using Service Engineered Path technology
 Non-subscribing enhanced video traffic follows the normal routed path
Programmable
Networking
is
SFW
Copyright
© 2011 Juniper Networks, Inc. www.juniper.net

23. Example:
Content Request Routing APPLICATION NETWORK NETWORK APPLICATION
From where the user is connected… … to where the content is best served
1
2 Network Based on:
3
 Network proximity
 Network availability
 Network congestion Open standard: ALTO
Application  Content availability Application Layer Traffic
 Content load Optimization
 Content capacity
Chicago
ALTO cost - 200
Content Content Content Amsterdam
ALTO cost - 10
This is new because: London
ALTO cost - 50
 Uses information of the network infrastructure ALTO directs traffic
to best POP based
 Runs across multiple service providers on network
conditions
 Mobile & broadband subscribers
Programmable
Networking
is
SFW
Copyright
© 2011 Juniper Networks, Inc. www.juniper.net

24. Example:
Content Request Routing APPLICATION NETWORK NETWORK APPLICATION
 Server Availability
 Per-network response
times and site availability
DNS and Plug-ins  Server Load
 Server Capacity
New York Chicago Data Center
Answer:
Where do I get  Network Proximity
DNS  Network Availability
Chicago!
my content?
 Network Congestion
ISP A Media Server
ALTO
London London Data Center
DNS
ISP B BGP
BGP
Media Server
Paris ALTO Server Amsterdam Data Center
DNS
Media Server
ISP C
Programmable
Networking
is
SFW
Copyright
© 2011 Juniper Networks, Inc. www.juniper.net

25. Mapping The Traffic Delivery
Amsterdam
Chicago
ALTO
Cost
-­‐
10
ALTO
Cost-­‐
200
London
ALTO
Cost
-­‐
50
ALTO directs traffic to
best POP based on
network conditions
Chicago
ALTO
Cost-­‐
200
With London and
Amsterdam MFCs
overloaded,
traffic is diverted to Chicago
Programmable
Networking
is
SFW
Copyright
© 2011 Juniper Networks, Inc. www.juniper.net

26. Example:
Bandwidth Calendaring NETWORK APPLICATION
Schedule a reserved path for your session… … without having to know the network
Technology used:
 Real-time topology understanding (ALTO, BGP-TE)
 Steering traffic through optimal paths (PCE)
Web Services API
 Reservation transaction (WebServices API)
 Selecting specific traffic (OpenFlow)
Orchestration
What would I use this for?
 Flexibility of service placement
 Scheduled data center backups
 Managed content distribution
Location 1
Network
Location 2  Cloud orchestration
Scheduled application/session specific path in the network
Programmable
Networking
is
SFW
Copyright
© 2011 Juniper Networks, Inc. www.juniper.net

27. Example: Social Networking
Today’s wheel of missed fortune Untapped mine of information
 Access technology and capability
 Mobility events
Collected Content/Gaming Approximate
 Bandwidth, utilization
End User Analytics Platforms
End User  Capabilities of device and network
Information Location
Pure Social  Network location
SN topology platform types  Proximity to caches / servers
Advertising  Bandwidth / billing / usage caps
Commerce  Security profile
Communication
Network
Programmable
Networking
is
SFW
Copyright
© 2011 Juniper Networks, Inc. www.juniper.net

28. Tune in - turn on: Be “in the topology”
Weak architecture = one-legged tap dancing Continuous, real-time streaming of surrounding
content, resources, places, people
And this is
Where am I? I am here! You’re here! around you:
<access> <content>
 AcKve
broadcast
<capability> <resources>
 Game
broadcast
<BW> <places>
 Passive
derivaKon
<profile> <people>
…
!
“Above the topology”
“Visualize the topology” “In the topology”
“Below the topology”
Low value in navigational coordinates APPLICATION NETWORK
Programmable
Networking
is
SFW
Copyright
© 2011 Juniper Networks, Inc. www.juniper.net

29. What did he just say?
UNLEASH THE POTENTIAL! PROGRAMMABLE NETWORKING
Today
the
two
worlds
are
not
interlocked
DEVELOPMENT PLATFORMS EMERGING AND GETTING A LOT OF VC
Enables: Decisions that impact your applications are being made by:
 Flexibility of service placement  IT departments
 Fungibility of assets  Network equipment vendors
 Control of resources  Providers delivering your application
 Derivation of telemetry and proximity  Application developers
Programmable
Networking
is
SFW
Copyright
© 2011 Juniper Networks, Inc. www.juniper.net

30. Network Programmability
This is not a lottery
This is a game of skill
Enhance your skills juniper.ne
t/develop
er
@j u n o s d e
veloper
Enhance your applications
slideshare
.net/juno
sdevelope
r
Programmable
Networking
is
SFW
Copyright
© 2011 Juniper Networks, Inc. www.juniper.net

31. JOIN THE REVOLUTION
CREATE. CODE. DEPLOY. EVERYWHERE THE NETWORK WORKS.
Copyright
© 2011 Juniper Networks, Inc. www.juniper.net