#nwsau17. Future campus design. James Horne. Enterprise Services Technical Consultant Networking, AARNet

Transcription

1 #nwsau17 Future campus design James Horne Enterprise Services Technical Consultant Networking, AARNet

2 JAMES HORNE Technical Consultant Networks AARNet Enterprise Services Currently working on major projects with: Victoria University La Trobe University Australian Catholic University Specialising in design, technical consulting and solution implementation. AARNet Pty Ltd 2

3 Common Pressures & Trends Network as a Platform Unexpected Parallelisation Changing Intra- & Inter-campus Connectivity AARNet Pty Ltd 5

4 COMMON PRESSURES Off-siting DCs Workload Mobility Consistent Policy & Experience Simplicity & Flexibility Device Proliferation Cheaper AARNet Pty Ltd 6

5 COMMON PRESSURES AND RESULTANT TRENDS Off-siting DCs Workload Mobility Consistent Policy & Experience Simplicity & Flexibility Device Proliferation Cheaper Private and Public Cloud, XaaS DCI Technologies, Shared Compute Unified Networks Across LAN/WAN/DC NFV Automation and SDN Broadening the Access Layer definition Centralisation AARNet Pty Ltd 7

6 COMMON PRESSURES AND RESULTANT TRENDS Off-siting DCs Workload Mobility Consistent Policy & Experience Simplicity & Flexibility Device Proliferation Cheaper Private and Public Cloud, XaaS DCI Technologies, Shared Compute Unified Networks Across LAN/WAN/DC NFV Automation and SDN Broadening the Access Layer definition Centralisation AARNet Pty Ltd 8

7 NETWORK AS A PLATFORM

8 TRADITION CAMPUS NETWORK DESIGN 3-Tier, L3 termination at Distribution L3 and FHRP Point AARNet Pty Ltd 10

9 TRADITION CAMPUS NETWORK DESIGN 3-Tier, L3 termination at Distribution, VSS Enabled L3 Point Multi-chassis EC AARNet Pty Ltd 11

10 TRADITION CAMPUS NETWORK DESIGN 3-Tier, L3 termination at Access L3 Point AARNet Pty Ltd 12

11 PROBLEMS REMAIN Despite continued improvement and evolution, there are still common problems: Often inefficient use of addressing, bandwidth and paths Consistent policy and experience is difficult to deliver Lack of agility; slow to adapt and change Routing inflexibility due to IP Client mobility limited or non-existent Responding to business pressures and use-cases often hits a hard wall. AARNet Pty Ltd 13

12 THE CAMPUS NETWORK AS A PLATFORM (For Virtual Network Overlay) L3 Point AARNet Pty Ltd 14

13 THE CAMPUS NETWORK AS A PLATFORM (For Virtual Network Overlay) AARNet Pty Ltd 15

14 THE CAMPUS NETWORK AS A PLATFORM (For Virtual Network Overlay) AARNet Pty Ltd 16

15 TECHNOLOGIES INVOLVED Traditional Service-Provider style or tunneling technologies, such as: MPLS/VPLS VRF-Lite/EVN GRE or mgre Looking Forward Datacentre/fabric style or interconnect technologies, such as: VXLAN LISP AARNet Pty Ltd 17

16 LISP OVERVIEW Location/ID Separation Protocol Defined in RFC 6830 and developed by an IETF working group, it owes much to the ideas raised for a map-andencap protocol in RFC 1955 (1996) Separates network location and endpoint ID information Improved routing scalability Provides host and subnet mobility Avoids changes to endpoint operation Key Terms Routing Locator (RLOC) Endpoint ID (EID) Tunnel Router (ITR, ETR, xtr) Proxy Tunnel Router (PxTR) Re-encapsulating Tunnel Router (RTR) Map Server/Map Resolver (MS/MR) AARNet Pty Ltd 18

17 LISP OVERVIEW AARNet Pty Ltd 19

18 VXLAN OVERVIEW Virtual extensible LAN Defined now in RFC 7348, VXLAN was developed but VMWare, Arista and Cisco to add mobility and scalability to Layer 2 domains in the datacenter. Up to 16 million logical networks Unicast, Multicast and Broadcast support Provides host mobility by stretching Layer 2 domains over IP networks Supported by a wide range of vendors and open platforms Key Terms Virtual Network Identifier (VNI) Virtual Tunnel Endpoint (VTEP) VXLAN Gateway AARNet Pty Ltd 20

19 MOBILITY OVERVIEW AARNet Pty Ltd 21

20 MOBILITY OVERVIEW MS/MR AARNet Pty Ltd 22

21 MOBILITY OVERVIEW AARNet Pty Ltd 23

22 MOBILITY OVERVIEW AARNet Pty Ltd 24

23 COMPLETED OVERLAY LISP VXLAN VLAN/VRF AARNet Pty Ltd 25

24 COMPLETED OVERLAY AARNet Pty Ltd 26

25 VENDOR SIGNALS Vendor support for VXLAN Due to its origins in the datacenter, there is generally good support amongst vendors for VXLAN for such a (relatively) new technology. These include: Cisco Juniper VMWare Arista Huawei Vendor support for LISP As Cisco is the primary driver of the protocol, Cisco and a few implementations of OpenLISP are the only players at this time. However, notable players such as Google, Facebook and NTT have been participating in the LISP beta network. AARNet Pty Ltd 27

26 UNEXPECTED PARALLELISATION

27 A STEP BACK FROM CENTRALISATION The network can t keep up! Insufficient bandwidth Elephant flows strangle corporate traffic Firewalls slow things down eresearch tech isn t secure! Assets don t follow or meet enterprise security standards Researchers don t like firewalls eresearch networks viewed as a back gate AARNet Pty Ltd 29

28 CAMPUS CONNECTIVITY

29 CAPACITY WITHIN AND BETWEEN CAMPUS NETWORKS Rethinking WDW Technology Range of options that are cheaper and simpler than they once were CWDM turns one pair into 8 channels Particularly relevant to institutions that utilise singlemode within the campus or lease dark pairs AARNet Pty Ltd 31

30 THANK YOU