Customize OpenStack for Telco NFV

Transcription

1 Security Level: Customize OpenStack for Telco NFV Tianran Zhou Feng Dong HUAWEI TECHNOLOGIES CO., LTD.

2 Motivation Linux as a general operating system is customized for PC, server, mobile devices, etc. OpenStack as a general cloud OS need to be customized for different scenarios, of which Telco NFV is one. Customize OpenStack by providing a set of consistent and intuitive NBI for the Telco NFV Scenario. NBI is essential to enable the application and MANO innovations by abstracting the NFV capabilities/information and opening the abstract/logic network. HUAWEI TECHNOLOGIES CO., LTD. Page 2

3 OPNFV Architecture Ref: HUAWEI TECHNOLOGIES CO., LTD. Page 3

4 VIM NBI Project in OPNFV OPNFV: Model Oriented Virtualization Interface (Movie) The IaaS service oriented NBI to a more abstract MANO service oriented NBI alternative. MANO Service Oriented NBI NB model NB model NB model Higher level abstractions IaaS Service Oriented NBI Nova Congress Neutron Cinder Telco NFV Enhancement HUAWEI TECHNOLOGIES CO., LTD. Page 4

5 NBI Multiplicity Intent based NBI:What I want Connectivity Flow processing Resource Business workflow Reach ability Technology-neutral and business oriented Tunnel IP-TE E-Line Function oriented and L3VPN L2VPN vlsr (Label Switching Router) technology related Functional NBI:What I can do HUAWEI TECHNOLOGIES CO., LTD. Page 5

6 Intent is what not how Intent definition Why Intent NBI is promising Target users HUAWEI TECHNOLOGIES CO., LTD. Page 6

7 From Intent NBI to Service Template Education domain user Financial domain user Web service provider Big data analysis system Game business provider End user select BOD Template HA Template Cloud Template Big Data Template Realtime Template Face to specific user scenario Develop Service Template Business designer and IT developer Develop specific service template Intent Primitives HUAWEI TECHNOLOGIES CO., LTD. Page 7

8 Intent Expressions in Real World "I want to watch Harry Potter right now in the living room" Intent=Operation+Object "I want to create a DMZ "I want to block the http flow" "I want to adjust the bandwidth to 10G" Node object Flow object Connection object HUAWEI TECHNOLOGIES CO., LTD. Page 8

9 Intent Modeling Node Operation on Object Connection optional optional Flow Condition Constraint Action CRUD Query Notif Allow/block Service chain HUAWEI TECHNOLOGIES CO., LTD. Page 9

10 Example: Service Chaining Apply several virtual network functions, such as firewall, load balancer, WAN optimization between virtual private cloud and the internet. VPC Firewall Load Balancer WoC Internet Create 3 service nodes: Firewall, Load Balancer, WoC Setup the connection between VPC and the internet Operate the connection to go through the 3 service nodes Indentify flows (e.g. web traffic from VIP user ) Operate the flow to go through the connection. HUAWEI TECHNOLOGIES CO., LTD. Page 10

11 Requirement for Telco Scenario BGP MPLS VPN Service Chaining Global Topology Telco Scenario E2E Qos HUAWEI TECHNOLOGIES CO., LTD. Page 11

12 MPLS VPN Building Blocks HUAWEI TECHNOLOGIES CO., LTD. Page 12

13 OpenStack Operations Workflow Using Neutron API extensions Create attachment circuits in each tenant network Treated as a logical interface In L2 networks, they could be represented using a set of VLANs Create MPLS LSP tunnels This step is optional when using dynamic tunnels using LDP signaling Create MPLS VPN service using attachment circuit and LSP tunnels Connectivity between attachment circuits in different data centers using LSP tunnels (Full mesh of LSPs by default with MPLS resiliency enabled) MAC Withdrawal for faster convergence During VM movement/deletion and server consolidation BP link: HUAWEI TECHNOLOGIES CO., LTD. Page 13

14 What is Service chaining (VNF Forwarding Graph)? HUAWEI TECHNOLOGIES CO., LTD. Page 14

15 Service Chain Architecture in NFV Environment - Inherent in NFVI E2E Orchestrator Service Chain Orchestrator NFV Orchestrator Chain Selection Policy Server Virtualized Enabler_a Virtualized Enabler_b Virtualized Enabler_n VNF Manager Service Chain Controller Cloud OS Flow Classifier Virtual Service Switch Virtualized Infrastructure Manager HUAWEI TECHNOLOGIES CO., LTD. Page 15

16 Automatic Service Provisioning in NFV Environment Inherent in NFVI 1. Logical service chain definition Service Chain Orchestrator E2E Orchestrator 1 NFV Orchestrator 2. Request a new vvideoopt. instance 3. Request VIM to allocate a new VM for the instance 4. Create a new VM and, load VideoOpt image and run the 2 3 instance 5. Synchronize the new vvideoopt instance profile and vvideoopt _a vvideoopt _b vvideoopt _n VNF Manager logic service chain definition (e.g. characteristics, status, capacity, address and attached virtual service switch ) to SC Controller Virtual Service Switch (NFV-I) 6 Service Chain Controller Virtualized Infrastructure Manager 6. According the logical service chain definition and the new adding vvideoopt instance resource, SC Controller generates service chain flow tables for the new adding instance and send to the virtual service switch 7. The virtual service switch steers traffic to the new instance according the policy HUAWEI TECHNOLOGIES CO., LTD. Page 16

17 OpenStack Service Chaining The Problems No open interface to integrate Openstack with different vendors service function instance (virtual/physical) SF instances created by many existing service devices need to be included to provide service chaining ecosystem under OpenStack umbrella No well defined open interface to allow registration of 3 rd party s service instance locator, flavor, and capability information Vendors develop proprietary interfaces No normalized interfaces for different vendors service chain drivers Service chaining brings low CAPEX and OPEX by auto provisioning and steering different tenants flows through different sequence of service functions Vendors develop proprietary driver interfaces to Openstack to get service chaining functionality HUAWEI TECHNOLOGIES CO., LTD. Page 17

18 SC Components and Interfaces HUAWEI TECHNOLOGIES CO., LTD. Page 18

19 Global Topology SDN controllers like ONOS have global view of network elements. In NFV case, OpenStack being the VIM, there should also be a global topology with virtualized node and link information. OpenStack should derive some output from ONF NBI and ONOS to form a good model and API for topology. HUAWEI TECHNOLOGIES CO., LTD. Page 19

20 E2E Qos for VNF VNF1 br-int HOST1 Virtual link ether0 to ether 0 VNF2 br-int HOST2 br-tun pathtun pathint pathtun pathint br-tun Virtual Fabric In NFV cloud environment, VNFs may be VMs running on COTS hardware which is connected together by a virtual fabric set up by SDN controller. There is need for ensure the bandwidth/latency/.. between the virtual links of these VNFs. The model and APIs are needed in Neutron. HUAWEI TECHNOLOGIES CO., LTD. Page 20

21 Summary Motivation of customizing OpenStack for Telco NFV from NB point of view Intent base interfaces Functional interfaces Four typical use cases More to go with the community support HUAWEI TECHNOLOGIES CO., LTD. Page 21

22 Thank You