Software Defined Network(SDN) Workshop + Hackathon

Transcription

1 Software Defined Network(SDN) Workshop + Hackathon 軟體定義網路中之虛擬網路設計 陳俊良台灣科技大學電機系 Date: 2015/7/27

2 Outline 1. Introduction to Network Virtualization 2. Example of Network Virtualization Application 3. Example of Virtual Tenant Network Application 4. Discussion and Summary 2

3 Outline 1. Introduction to Network Virtualization 2. Example of Network Virtualization Application 3. Example of Virtual Tenant Network Application 4. Discussion and Summary 3

4 Two virtualization technologies will be discussed Network Virtualization- FlowVisor Layer An experimental software-defined networking controller that enables network virtualization by slicing a physical network into multiple logical networks. Virtual Tenant Network (VTN) An application that provides multi-tenant virtual network on an SDN controller. 4

5 Network Virtualization FlowVisor Layer oftrace oflops openseer ofmonitor Monitoring/ Debugging Tools ENVI (GUI) LAVI n-casting Aggregation Applications NOX Beacon Trema BigSwitch Opendaylight Controller Expedient/ FlowVisor Opt-in Mgr Partition bandwidth and flow table resources Software/Test switches Hardware/Commercial Switches HP, NEC, Pronto, Juniper.. and many more NetFPGA PCEngine WiFi AP OpenWRT OpenvSwitch Software Ref. Switch As Transparent proxy Slicing Software Create slices OpenFlow Switches 5

6 Network Virtualization-FlowVisor Layer Network Virtualization Platform SDN Controller FlowVisor Bandwidth Slice FlowSpace Isolation Network Virtualization Slice 1 Slice 2 Slice N Service 1 Service 2 Service N SDN Networking Virtualize the Network 6

7 Virtual Tenant Network (VTN) Introduction 7

8 Virtual Tenant Network (VTN) Network Applications Orchestrations & Services Controller Platform Abstraction models enable the separation of logical plane from physical plane Southbound Interface & Protocol Plugins Data Plane Elements Source from 8

9 Virtual Tenant Network (VTN) Northbound API Create VTN in ODC; Provide APIs for northbound VTN Applications; Support virtual networks spanning across multiple controllers Multiple Controllers 9

10 Virtual Tenant Network (VTN) Offer virtual node features (such as virtual vbridge mapping to real switch port) End-to-end dynamic path control per VTN VTN Manager Network Policy Isolation Virtual Tenant Network VTN 1 VTN 2 Service 1 Service 2 VTNN Service N SDN Controller SDN Networking The physical topology is not directly virtualized. VTN Manager creates the VTNs. 10

11 FlowVisor vs. VTN VTN 1 VTN Manager OpenFlow Controller OpenFlow Controller 2 FlowVisor Translation Unit Forwarding Unit Resource Allocation Policy Slicing Policy 1 Slicing Policy 2 Slicing Policy N OpenFlow Switch 1 VTN Manager creates the VTN networks 2 Mapping the virtual interfaces to the physical interfaces (methods: VLAN/Port/ MAC Mapping) 1 2 OpenFlow Switch Intercept the OpenFlow messages from controller Use the slicing policy 3 Rewrite the Flow Entry 11

12 Outline 1. Introduction to Network Virtualization 2. Example of Network Virtualization Application Based on FlowVisor technique and operations, an application called as EnterpriseVisor is designed. 3. Example of Virtual Tenant Network Application 4. Discussion and Summary 12

13 Dynamically allocate bandwidth to different slices Guarantee Quality-of-Service Slice 3 Users Requirements Limitation 15 Mbps 40 Mbps 20 Mbps Slice 2 20 Mbps Slice 1 55 Mbps 30 Mbps 60 Mbps 10 Mbps 30 Mbps 20 Mbps Assumptions: Maximal network capacity C=100M 13

14 Isolation Network Virtualization Slice 1 Slice 2 Slice N Service 1 Service 2 Service N Slice 1 Slice 2 Slice N SDN Controller Network Virtualization Platform Configure Communicate with FlowVisor Configure enterprise networks FlowVisor Monitor SDN Networking Virtualize the Network EnterpriseVisor OFPMP_PORT_STATS_Request OFPMP_PORT_DESCRIPTION_Request OFPT_FEATURES_REQUEST 14

15 Network Virtualization Platform OpenFlow Controller Network Virtualization Layer EnterpriseVisor FlowVisor Policy Agent Translation Unit Forwarding Unit Resource Allocation Policy Deployment Analysis Network Monitor Config Database 15

16 Slice 1 Designed Resource Scheduling: Linear Programming Scheme Controller:OpenDaylight Hydrogen Base 1.0 Mininet:Mininet 2.1.0, OpenvSwitch The operation of each slice Slice 2 Slice 3 Slice 4 Four states are defined here. S2: Resource Requester -> if (NU Low & SU High) S3: Resource Provider -> If(NU High & SU Low) 16

17 Network Utilization Slice Utilization SU_High: >80% SU_low <60% Resource Requester Resource Provider S1 S2 S3 S4 S3 S1: Don't change. S2: Request for the resource from other slice. S3: Provide the resource to other slice. S4: Don't change until. 17

18 Requester Provider S1 S2 S3 S4 S3 Provider S2 S3 S4 S2 Provider S1 S3 S2 S4 S2 S1 S3 S2S3 S4 S2, deny S1: Don't change. S2: Request for the resource from other slice. S3: Provide the resource to other slice. S4: Don't change until. Resource Is not enough to provide service 18

19 High Utilization (Requester) Low Utilization (Provider) slice2 slice1 slice4 slice2,3 slice2,3 slice2 slice4 slice4 higher network utilization with only a minor sacrifice of control message latency (0.71ms). 19

20 Slice 3 FlowVisor API Add-slice Slice name Slice 2 Slice 1 Controller id Rate Bandwidth control Controller:OpenDaylight Hydrogen Base 1.0 Mininet:Mininet 2.1.0, OpenvSwitch

21 Slice 3 FlowVisor API Update-slice Slice 2 Slice name Slice 1 Rate Update bandwidth rate Controller:OpenDaylight Hydrogen Base 1.0 Mininet:Mininet 2.1.0, OpenvSwitch

22 Network Virtualization Slice 1 Service 1 Slice 1 Isolation Slice 2 Service 2 Slice 2 Slice N Service N Slice N Add-slice Network Virtualization Platform SDN Controller FlowVisor Configure Monitor EnterpriseVisor Update-slice SDN Networking Virtualize the Network 22

23 Outline 1. Introduction to Network Virtualization 2. Example of Network Virtualization Application 3. Example of Virtual Tenant Network Application Based on VTN technique, an application to achieve the network congestion control is designed..(this is an on-going project) 4. Discussion and Summary 23

24 VTN Manager Offer virtual node features Provide End-to-end path control 24

25 OFS Link SLA 3 Delay : 1ms BW : 100 Mbps Delay : 10ms Congestion Control SLA Commitment A i :The allocated resource of i th routing path U i :The utilization rate of i th routing path. T i :The total traffic of i th routing path. SLA Bandwidth Delay SLA 2 SLA 1 70 Mbps 15 ms SLA 1 SLA 2 50 Mbps 30 ms SLA 3 40 Mbps 40 ms VTN1 VTN2 VTN3 Path1 Path2 Path3 Before policy: Path i = U i = T i A i P1: U 1 = = 160% P2:U 2 = = 0% P3:U 3 = = 0% After policy: Path i = U i = T i A i P1: U 1 = = 70% P2:U 2 = = 50% P3:U 3 = = 40% 25

26 Virtual Tenant Network SDN Controller VTN Manager Collect the SLA information of each VTN Reroute according to the routing schedule (Path Mapping) SLA information collector Network Policy Resource Scheduler Server Designed Scheduling Scheme: Linear Programming Scheme Physical Network User Network Monitor Monitor the network and service status Adjust the PATH resource to avoid the overloading 26

27 Administrator Controller VTN Manger 1 VTN SLA information (Bandwidth, Delay ) SLA Collector 2 Schedule event Network 3 Plan assign Policy 5 Plan assign 4 Reschedule event Resource Scheduler 3 Network Schedule 1 Request message Network Monitor 2 Message response (Bandwidth, Utilization, ) Virtual Tenant Network Physical Network 27

28 Basic operation Without SLA mechanism and network policy SLA mechanism & Network policy SLA Commitment With SLA mechanism and network policy 28

29 Two policy models on VTN network: Flow Filter Model and Path Mapping Model Create policy table Combine Flow Filter +type = {in out} +location One of: vtn vbridge vnode_name+if +statistics General per IF and FFEntry and per flow +flowfilterentries: Flow Filter Entry Select policy table entry * Flow Filter Entry +flowlists: Flow List +sequence number +action_type = {pass, drop, redirect, priority, bandwidth, statistics} +redirect_destination: redir_dst +set = {priority dscp} Mark packets on the wire 1 Policy Target 1 1 Flow List +name: String +flowlistentries: Flow List Entry * Flow List Entry +match Similar to OF match +sequence number Create different sets of traffic 1 Action 1 redir_dst +vnode_name +interface_name +new dst MAC +new src MAC +direction Match Select traffic to apply marking 29

30 Provides more matching conditions for your applications Command Number Description mac-destination-address <mac-address> 1 Destination Mac Address mac-source-address <mac-address> 2 Source Mac Address mac-ether-type <ether-type-number> 3 Ether type mac-vlan-priority <vlan-priority-number> 4 VLAN Priority ip-destination-address <ip-address>/<prefixlength> 5 Destination IP Address ip-source-address <ip-address>/<prefix-length> 6 Source IP Address ip-protocol <protocol-number> 7 Protocol Type ip-dscp <dscp-number> 8 DSCP (Differentiated Services Code Point) l4-destination-port <port-number> [ to <endport> ] 9 Destination Port l4-source-port <port-number> [ to <end-port> ] 10 Source Port 30

31 Provides 6 Actions for your applications Intent Description Behavior Pass Pass packets FlowFilter pass Pass Drop Drop packets FlowFilter drop Drop Redirect Redirect packets to a specified point FlowFilter redirect Redirect Priority Set a priority of packets FlowFilter priority Priority Bandwidth Set policing FlowFilter pass Statistics Collect statistics information FlowFilter statistics Collect Statistics 31

32 Traffic In VTN 1 vbridge vbridge Host vrouter Server Set Policy Action:Bandwidth CIR:Committed information Rate PIR:Peak Information Rate CBS:Committed burst size PBS:Peak burst size CIR: bps { PIR: bps CBS:48128 bytes PBS:64000 bytes 32

33 Path map consists of: Flow condition --- equivalent to flow list in flow filter model Path policy --- defines associated cost for network path Path map --- correlates flow condition to path policy Path policy Path Map SW 1000 SW Path SW 1000 EP1 SW Path2 Path3 SW EP2 SW SW SW 1000 Match1 = Path1 Match2 = Path2 Match3 = Path3 33

34 Policy of one VTN does not affect other VTNs Policy 2 Policy 1 Policy 3 34

35 Outline 1. Introduction to Network Virtualization 2. Example of Network Virtualization Application 3. Example of Virtual Tenant Network Application 4. Discussion and Summary 35

36 Openflow Protocol support FlowVisor Method support uncompleted openflow 1.2 protocol VTN Method support openflow 1.3 protocol Characteristic bandwidth Isolation topology Isolation flowspace Isolation multi-tenant virtual network virtual network isolation network policy isolation Others functional insufficient instability suspend updated functional sufficient stability have release plan (2015) 36

37 Network virtualization Decouple the physical network from the virtual network. Enable multi-tenancy services Allow multiple tenants to occupy the same network infrastructure. Allow isolation of the users traffic. FlowVisor VTN Bandwidth Isolation Topology Virtualization FlowSpace Isolation Network Policy Isolation Create Virtual Network Flow-based Traffic Control

38 Thank You ありがとう 謝謝 38