SDN: Software Defined Networks

Transcription

1 SDN: Software Defined Networks Thomas D. Nadeau and Ken Gray O'REILLY* Beijing Cambridge Farnham Köln Sebastopol Tokyo

2 Table of Contents Foreword by David Meyer Foreword by David Ward Preface ix xi xvii 1. Introduction 1 2. Centralized and Distributed Control and Data Planes 9 Introduction 9 Evolution versus Revolution 10 What Do They Do? 11 The Control Plane 11 Data Plane 16 Moving Information Between Planes 18 Why Can Separation Be Important? 20 Distributed Control Planes 28 IP and MPLS 29 Creating the IP Underlay 30 Convergence Time 32 Load Balancing 33 High Availability 34 Creating the MPLS Overlay 34 Replication 37 Centralized Control Planes 37 Logical Versus Literal 38 ATM/LANE 39 Route Servers 42 Conclusions OpenFlow 47 iii

3 Introduction 47 Wire Protocol 50 Replication 53 FAWG (Forwarding Abstraction Workgroup) 54 Config and Extensibility 57 Architecture 62 Hybrid Approaches 63 Ships in the Night 64 Dual Function Switches 65 Conclusions SDN Controllers 71 Introduction 71 General Concepts 72 VMware 75 Nicira 79 VMware/Nicira 83 OpenFlow-Related 84 Mininet 86 NOX/POX 87 Trema 89 Ryu 92 Big Switch Networks/Floodlight 93 Layer 3 Centric 95 L3VPN 96 Path Computation Element Server 101 Plexxi 109 Plexxi Affinity 111 Cisco OnePK 111 Relationship to the Idealized SDN Framework 113 Conclusions Network Programmability 117 Introduction 117 The Management Interface 118 The Application-Network Divide 118 The Command-Line Interface 122 NETCONF and NETMOD 124 SNMP 126 Modern Programmatic Interfaces 132 Publish and Subscribe Interfaces 132 XMPP 135 iv Table of Contents

4 Google's Protocol Buffers 13 7 Thrift 140 JSON 142 I2RS 143 Modern Orchestration 146 OpenStack 147 CloudStack 151 Puppet 153 Conclusions Data Center Concepts and Constructs 157 Introduction 157 The Multitenant Data Center 160 The Virtualized Multitenant Data Center 163 Orchestration 167 Connecting a Tenant to the Internet/VPN 168 Virtual Machine Migration and Elasticity 169 Data Center Interconnect (DCI) 175 Fallacies of Data Center Distributed Computing 176 Data Center Distributed Computing Pitfalls to Consider 177 SDN Solutions for the Data Center Network 184 The Network Underlay 185 VLANs 186 EVPN 188 Locator ID Split (LISP) 191 VxLan 192 NVGRE 195 OpenFlow 197 Network Overlays 199 Network Overlay Types 201 Conclusions Network Function Virtualization 207 Introduction 207 Virtualization and Data Plane I/O 208 Data Plane I/O 210 I/O Summary 213 Services Engineered Path 214 Service Locations and Chaining 217 Metadata 219 An Application Level Approach 220 Scale 222 Table of Contents v

5 NFV at ETSI 223 Non-ETSI NFV Work 228 Middlebox Studies 229 Embrane/LineRate 231 Platform Virtualization 233 Conclusions Network Topology and Topological Information Abstraction 241 Introduction 241 Network Topology 242 Traditional Methods 244 LLDP 248 BGP-TE/LS 252 BGP-LS with PCE 253 ALTO 254 BGP-LS and PCE Interaction with ALTO 255 I2RS Topology 256 Conclusions Building an SDN Framework 261 Introduction 261 Build Code First; Ask Questions Later The Juniper SDN Framework 265 IETF SDN Framework(s) 268 SDN(P) 268 ABNO 270 Open Daylight Controller/Framework 271 API 274 High Availability and State Storage 275 Analytics 276 Policy 279 Conclusions Use Cases for Bandwidth Scheduling, Manipulation, and Calendaring 281 Introduction 281 Bandwidth Calendaring 284 Base Topology and Fundamental Concepts 285 OpenFlow and PCE Topologies 286 Example Configuration 287 OpenFlow Provisioned Example 287 Enhancing the Controller 289 Overlay Example Using PCE Provisioning 290 vi Table of Contents

6 Expanding Your Reach: Barbarians at the Gate 294 Big Data and Application Hyper-Virtualization for Instant CSPF 295 Expanding Topology 297 Conclusions Use Cases for Data Center Overlays, Big Data, and Network Function Virtualization Introduction 299 Data Center Orchestration 299 Creating Tenant and Virtual Machine State 302 Forwarding State 304 Data-Driven Learning 305 Control-Plane Signaling 306 Scaling and Performance Considerations 306 Puppet (DevOps Solution) 308 Network Function Virtualization (NFV) 311 NFV in Mobility 312 Optimized Big Data 315 Conclusions Use Cases for Input Traffic Monitoring, Classification, and Triggered Actions 321 Introduction 321 The Firewall 321 Firewalls as a Service 324 Network Access Control Replacement 326 Extending the Use Case with a Virtual Firewall 330 Feedback and Optimization 333 Intrusion Detection/Threat Mitigation 333 Conclusions Final Thoughts and Conclusions 337 What Is True About SDN? 337 Economics 339 SDN Is Really About Operations and Management 340 Multiple Definitions of SDN 341 Are We Making Progress Yet? 342 Index 345 Table of Contents vii