Enabling Cross-Domain Service Activation. Nickolay Belchugov Systems Engineer, Innovation Edge / Agile Development Team March 2016

Transcription

1 Enabling Cross-Domain Service Activation Nickolay Belchugov Systems Engineer, Innovation Edge / Agile Development Team March 2016

2 Agenda Introduction Key Cisco Orchestration Components NSO ESC Services Assurance Platform Use case: Virtual PE Use case: Virtual IP Multimedia System (vims) ClearWater Wrap-up

3 PNF & NFV Orchestration/Automation What is it and why do we need it?

4 Market Expectations from the SDN NFV evolution? Near Past NOW Near Future Connectivity Location based (Work / Home) Device based Ubiquitous Applications Few Many Lots Time to Deliver New Services Telecom: 18 months Internet: 6 months Social: Overnight Information Disjointed Analytics Intelligence: Network+Analytics+Policy How Does the Networking Operation Evolve?

5 Operations Evolution Drivers OpEx Reduction Agile OSS Orchestration Agility AGILITY NetOps $ New Revenue flows Evolved Programmable Network

6 What are the SDN and NFV operational requirements Agility OPEX Optimization Orchestration Automation Automates complex PNF deployment & configuration Assurance Monitoring Multi-Domain Dynamic monitoring & Collection QoE New Revenue Flows Automates complex VNF deployment & configuration Service Impact Root cause Analyse Self order portal Simplifies Services lifecycle management SLA measured and enforced on per services basis Services Dashboards Expendable, flexible, Agile and scalable to quickly support New Services Services SLA reports Service Evidences

7 Why Orchestration/Automation? What s it all about? Automates complex PNF deployment & configuration Flexible deployment policies Deploy Automates complex VNF deployment & configuration VM relationship, dependencies, bring-up sequencing, affinity rules Flexible deployment policies Simplifies VNF lifecycle management Upgrades with minimal downtime KPI monitoring to ensure high availability and performance Auto-Scaling & Auto-Healing The orchestration expected to be an open solution Support for 3rd party components (VNFs, SDN, Infrastructure) ETSI defined a reference architecture Update Scale / Heal Monitor Configure

8 On-Vi Service Assurance Service Assurance Resource Management Resource Management Service Assurance Resource Management Cisco Orchestration & Automation Solution User Self Service Operator Service Web/App User Portal Self Service Portal Operator Service Web/App Portal Portal BSS BSS OSS / BSS Systems Data Prime Fulfillment NFV Systems Service Service & BSS APIs & BSS APIs Os-Ma Management Center & service Orchestration CPE CPE RAC NSO service Se-Ma CPE models CPE RAC Service, VNF & service VR VFW Internet NSO Network Service CPE CPE models CPE CPE RAC VR VFW device RAC Network Service Lifecycle NSO Internet Infrastructure Description models CPE VWSEC CPE device models Management VR VFW Internet RAC NFV-O Lifecycle VWSEC Network Service CPE CPE models (NFV Orch.) Management device PnP Server RAC (Call Home) Lifecycle EMS 1 EMS Network 2 Element EMS 3 Drivers VWSEC Ve-Vnfm models PnP Server Management (Call Home) Network Element Drivers Nfvo-Vnfm EMS VNF 1 EMS VNF 2 Customer EMS VNF 3 VPN and Service Chain SaaS Physical VPN PnP Server Router Vn-Nf Intrusion Web Virtual Firewall Protection Security ESC VNF-M IaaS (Call Home) Network Element Drivers Customer VPN and Service Chain SaaS Virtual (VNF NFVI Service Physical VPN Intrusion Web Manager)F Lifecycle Router Managers) Virtual Firewall Protection Security Virtual IaaS Switching Management Managers) KVM / ESXi Virtual Storage Virtual Network Compute & Storage Vnfm-Vi Regular Nf-Vi devices Virtualization Physical Layer Network Fabric Virtual Switching Nova PE CPE CPE Compute & Storage Hardware Resources Compute Storage Physical Network Fabric Network Neutron Virtual Infra Manager Glance Data Center Modular architecture that conforms to ETSI NFV framework Model driven design for declarative NFV & PNF orchestration ESC Virtual Service Lifecycle Supports Cisco Management and 3 rd party VNF Managers Supports Cisco and 3 rd party Nova SDN Controllers Neutron Glance Supports Cisco and 3 rd party VNFs & Devices NFVI Scope

9 Understanding NSO Cross-Domain Orchestration/Automation

10 NSO Main Features NSO Tail-f NCS Main Features Model-based architecture Transactional guarantees In-memory storage of configuration states for all services and all devices FastMap * algorithm for service-layer CRUD operations Reactive FastMap * Multivendor physical/virtual Layer 2, Layer 3, and Layer 4-7 Network * Patent No.: US 8,533,303 B2 15

11 NSO Main Feature 1: Model-Based Architecture OSS/BSS NSO Service Models Device Models No hard-coded assumptions about: Network services Network architecture Network devices Instead: Data models written in YANG (RFC 6020) Multivendor physical/virtual Layer 2, Layer 3, and Layer 4-7 Network

12 NSO Main Feature 1: Model-Based Architecture NSO OSS/BSS Service Models Device Models YANG data models for: Network services Network topology Network devices YANG data models drive: Northbound APIs User interfaces Southbound command sequences Benefits: Can be used for all types of services and all types of networks Multivendor physical/virtual Layer 2, Layer 3, and Layer 4-7 Network 17

13 NSO Main Feature 2: Transactional Guarantees NSO OSS/BSS Transactional Integrity Transactional guarantees: Help ensure fail-safe operations (automated handling of exceptions) Keep accurate copy of network configuration state in Tail-f NCS at all times Benefits: Automation can be based on accurate real-time view of service and network state Much higher degree of automation possible Multivendor physical/virtual Layer 2, Layer 3, and Layer 4-7 Network 18

14 NSO Main Feature 3: FastMap* Algorithm CREATE SERVICE UPDATE SERVICE DELETE SERVICE REDEPLOY SERVICE NSO FastMap * FastMap: Only the CREATE operation needs to be specified UPDATE, DELETE and REDEPLOY operations are automatically generated and compute minimal change set needed Benefits: Reduces service implementation code by two orders of magnitude Supports modifications of services at runtime * Patent No.: US 8,533,303 B2 19

15 NSO Main Feature 4: Reactive FastMap * CREATE SERVICE UPDATE SERVICE DELETE SERVICE REDEPLOY SERVICE Benefits: One algorithm supporting: NSO FastMap Changed network state triggers service redeploy Provisioning Orchestration Elasticity Virtual machine and VNF mobility Self-healing network * Patent No.: US 8,533,303 B2 20

16 NSO Architecture OSS/BSS Network Engineer EMS/NMS NETCONF REST CLI Web UI SNMP JAVA/Javascript Script API Developer API NSO AAA Package Manager Alarm Manager Service Manager Core Engine Notification Receiver Mapping Logic Fast Map Templates Device Manager Service Models Device Models Network Element Drivers VNFM NETCONF SNMP REST CLI WS Multi-Vendor Network

17 NSO Function Packs Customer Function Packs 3 rd Party Function Packs Orchestrator Components Cisco Network Services Orchestrator Network Element Drivers (NED s) Physical Network / Virtual Network Cisco Function Packs VNFM Mobility Virtualized Managed Services MANO Function Pack is a package that addresses a specific use-case and is built on top of NSO. Function Packs are not part of NSO and can be added at run-time. Function Packs are customizable by customers and system integrators

18 Production Grade NEDs coverage Vendor Device/Platform Vendor Device/Platform Vendor Device/Platform Adtran Adva Affirmed Networks Alcatel-Lucent Ciena Cisco Total Access 900 Series Carrier Ethernet FSP 150CC Series Acuitas Service Management System 7210 Service Access Switch 7750 Service Router 7450 Ethernet Service Switch 7705 Service Aggregation Router 7750 Service Router 7950 Extensible Routing System 3000 Family 5000 Family ESM ASA IOS ASA 1000V Cloud Firewall ASA 5500-X Series Next-Generation Firewalls 800 Series Routers 1800 Series Integrated Services Routers 1900 Series Integrated Services Routers 2500 Series Routers 2600 Series Multiservice Platforms 2800 Series Integrated Services Routers 2900 Series Integrated Services Routers 3800 Series Integrated Services Routers 7200 Series Routers 3900 Series Integrated Services Routers 7200 Series Routers 7600 Series Routers Catalyst 2900 Series Switches Cisco IOS IOS XE IOS XR NX OS CPS StarOS Catalyst 3550 Series Intelligent Ethernet Switches Catalyst 4500 Series Switches Catalyst 4900 Series Switches Catalyst 6500 Series Switches ME 3400 Series Ethernet Access Switches ME 3600X Series Ethernet Access Switches ME 3800X Series Carrier Ethernet Switch Routers ME 4900 Series Ethernet Switches ubr10000 Series Universal Broadband Routers ASR 900 Series Aggregation Services Routers ASR 1000 Series Aggregation Services Routers CSR 1000V Series ASR 9000 Series Aggregation Services Routers Carrier Routing System IOS XRv Router Nexus 3000 Series Switches Nexus 5000 Series Switches Nexus 6000 Series Switches Nexus 7000 Series Switches Nexus 1000v Series Switches Cisco Policy Suite for Mobile ASR 5000 Series F5 Networks BIG-IP 1600 BIG-IP 3600 BIG-IP 3900 BIG-IP 6400 BIG-IP 8900 BIG-IP Virtual Edition Viprion Chassis Fortinet Huawei Juniper Overture 1400 Palo Alto Networks Quagga FortiGate 200 Series FortiGate 3000 Series FortiGate Series FortiGate Virtual Appliances NE40E Series Quidway S3300 Series Enterprise Network Simulation Platform EX Series Ethernet Switches M Series Multiservice Edge Routers MX Series 3D Universal Edge Routers QFX Series SRX Series Services Gateways Firefly Perimeter (Virtual SRX) PA-2000 Series PA-3000 Series Virtualized Firewalls Quagga Routing Software Suite (BGP module)

19 PoC Grade NEDs coverage Vendor Device/Platform Vendor Device/Platform A10 Networks Accedian Affirmed Networks AX Series High Performance Service Assurance MetroNID Acuitas Service Management System Citrix Clavister Dell Force10 Netscaler 1000v cos Core Networking S-Series Alcatel-Lucent Allied Telesis 5620 Service Aware Manager x210 Series Ericsson EFN324 Series SE family Arista 7150 Series H3C S5800 series Avaya ERS 4000 Series SR 8000 Series VSP 9000 Series Infinera Juniper DTN-X Multi-Terabit Packet Optical Network Platform Contrail Controller Brocade ADX Series MLX Series NetIron CES 2000 Series NEC Nominum ipasolink family DCS Vyatta 5400 vrouter (Vyatta VSE) Open vswitch OVSDB (shell) CableLabs Cisco Converged Cable Access Platform ME-4600 Prime Network Registrar UCS Manager Pulsecom Riverbed Sonus SuperG Steelhead Series SBC 5000 Series

20 NSO Diversity of Use Cases (list not exhaustive ) Multi-Vendor L2-L3 VPN Virtual Managed Services/NFV Data Center Automation Cloud Services Interconnection Source: Cisco Global Segments & Architectures

21 Understanding ESC Generic VNF Manager

22 Cisco Elastic Service Controller ESC Elastic Service Controller for the VNF life cycle Management Open and Modular VNFM Out of the box support for new and 3 rd party VNFs Agentless VM management and monitoring Customizations Across different phases of lifecycle management Service advertisement Monitoring Actions Intelligent rules based actions Simple and complex rules Works at Single VM or coupled VM level Transaction-level visibility, roll-back (Resume work in progress) Out of the box support for both VM and Service-level monitoring Agentless Coupled VM management Open Elastic Services Controller (ESC) Complex actions Customizable Rollback/Re sume

23 Monitor Plugins Cisco Elastic Service Controller - ESC Architectural Diagram Portal NFVO Top Level Orchestration Service Catalogue External Clients VNFD SNMP REST CLI NETCONF XML/JSON XML/JSON ESC ConfD REST Message Bus Core Engine State Transactions Validations Policies WorkFlows Rollbacks Machines VNFM Service Onboarding Framework VIM Driver Service Monitoring and Elasticity Adaptor Rules Analytic Engine PA Events, Actions Custom rules, scripts Monitoring Engine SNMP PING GANGLIA CUSTOM Health Monitor/HA Logging Framework Datastore REST VIM Openstack

24 Cisco Elastic Service Controller ESC functionality Service Provisioning Service Configuration Elastic Services Controller Service Monitor Agent and Agentless mode supported Provision VM VM Bootstrap process VM alive Configure Service Service Bootstrap Process Service alive Service Functional Service Overloaded/Underloaded VM Overloaded/Underloaded Service DEAD Predefined Action Predefined Action Predefined Action Custom Script Action Custom Script Action Custom Script Action Predefined Action Custom Script Action Predefined Action Custom Script Action VM DEAD Predefined Action Custom Script Action List of Events VM Alive Service Alive Upper load threshold crossed Lower load threshold crossed Service Dead VM Dead List of Actions Notify (callback) Advertise Service Withdraw Service Restart VM Scale up (add a VM) Scale down (remove a VM) Individually customizable action(s) for every event Simple Rules Service Alive => advertise VM Dead => withdraw Upper load => scale up Complex Rules Service Alive => Advertise, Notify Upper load => Scale up, Notify, Advertise Service Dead => Withdraw, Notify, Restart

25 Services Assurance Platform

26 Service Assurance is a Service Lifecycle Problem SLA Definition What SLA is required? Service Level Definition Service availability Loss, latency, jitter, Service Placement Where can it be supported? Service Placement Admission Control Workload Placement Orchestration Put it there Service Provisioning Service Availability Monitoring Reporting Service Assurance Verify the service is available and how it is performing Scale-up/-down based upon load Local recovery actions if the VNF is unavailable/underperforming Identify underlying causes and fix them asap Service Monitoring Service Management & Operations Service Elasticity and Availability Service Elasticity and Availability Performance Mgmt Service Level Monitoring Fault management {cause analysis, Impact analysis} Incident / problem mgmt. Remediation

27 Single Root Cause? Incident s Happen! New Services Assurance Service Health - Impact Analysis & Fault and Cause Analysis-Processes Triggers 10 s, 100 s, 1,000 s or 1,000,000 s of Events from Apps, Services, Compute & Network Multiple Real Faults? Dev Sys Admins L2 Situation L1 Storage Network 3. Situation Awareness: Push-Notifies appropriate stakeholders No learned behavior or models necessary 1. Automatically Filters Events 2. Analytics Detects Causal and Impact Anomalies 4. Situation Enabled Workflow Situation Room ChatOps Remediation Diagnostics Workbench 360 o View 5. Run Book / Playbook Automation 6. Knowledge Capture & Recycling

28 Distribution Bus Services Assurance Platform- Service Health - Impact Analysis & Fault and Cause Analysis Orch. Stack UI Assurance Stack VNFs CPEs Log Aggregator Event Aggregator Logs SNMP Traps Source Logs, TCAs SNMP Traps, TCAs Inventory (Customer, virto, Overlay) Service Impact Analysis Fault Analysis Inventory (Customer, virto, Overlay Underlay) Situations & Alarms (Customer, Device, Service) Service Impact (production status, operational status) UI Inventory (Customer, virto, Overlay) Service TCA Service Notification Logs (Customer, Device, Service) VNFI Metric Aggregator Logs Log Analysis UCS Other EMS Cisco and/or its affiliates. All rights reserved. Performance Metrics, Availability & E2E Service Tests Limited or Not Available Metric (Customer, Device, Service) Using Metrics API Cisco Confidential 52

29 Use case: Virtual PE Demonstration of a cross-domain orchestration with NSO/ESC

30 Demo Infrastructure MPLS VPN with P routers and PE routers P3 providing connectivity to Data Center Data Center

31 Fulfillment using a physical PE MPLS VPN with P routers and PE routers Probe CE P3 providing connectivity to Data Center Classic MPLS VPN site with CE connected to PE Data Center

32 Fulfillment using a vpe vpe CSR MPLS VPN with P routers and PE routers P3 providing connectivity to Data Center Classic MPLS VPN site with CE connected to PE Probe CE vpe-sec ASA CSR vpe-mon CSR VTA Hybrid physical/ virtual VPN with a virtual PE vpe vpe-sec-mon vpe comes in 4 models CE ASA CSR VTA Probe

33 Demo Moving Parts Building Blocks Function Vendor NSO ESC Network service orchestration and fulfillment VNF Management ORCHESTRATED FULFILLMENT OpenStack Open vswitch VTS/VPP PPM/SME Active Probes (Netrounds) ZenOSS vcsr vasa F5 ASR9k Juniper MX, ALU 7750 VIM (Virtual Infrastructure Manager) Service Chaining Service Chaining Performance Monitoring Activation test and SLA monitoring Network Assurance (alarm monitoring) Virtual Provider Edge (router) Virtual Firewall Virtual Firewall Physical Provider and Provider Edge Physical Provider Edge

34 Use case: vims ClearWater Multi-VIM Orchestration with NSO/ESC

35 vims Orchestration Prototype Orchestration Overview Cross-Domain Orchestration Web Portal NFV-O Netconf/YANG Prototype Angular.JS/JAVA NSO (Tail-f) Third Party VNFs vims Clearwater Netconf/YANG Ubuntu VNF Management NFVI VMWare VNF-M vcenter ESC DNS Bind9 OpenStack UE1 - Live Testing Ruby Script RH OSP7 Compute Storage Network

36 vims Orchestration Prototype Orchestration Overview NSO ESC vims Clearwater vims Clearwater ESC OpenStack VMWare

37 Takeaways

38 Cisco Solution Value Robust, modern architecture No hard-coding, no predefined templates Full consistency across domains true transactional model Devops/Netops environment across Service Lifecycle Loosely-Coupled Modules No dependency between module: Fully open & documented APIs Inherently Multi-Vendor and Open Platform Field-proven technology Components deployed across Major Tier 1 SPs Massively scalable without sacrificing reliability Vibrant Ecosytem Devnet community Opportunity for Empowerment Extend your Service offer Opportunity for the Cisco customer to provide new services

39