Software Defined Networks For Service Providers. A Practical Approach

Transcription

1

2 BRKSPG-3683 Software Defined Networks For Providers. A Practical Approach Michael O Gorman Chief Architect Office C Cisco and/or its affiliates. All rights reserved. Cisco Confidential 2

3 Abstract Network Operators need to support a diverse customer base, distribute content and applications/services across multiple geographies, topologies and infrastructure layers while offering secure, reliable, and consistent experiences to their users on any device at any location. Software Defined Networks (SDN) has emerged as a potential solution to this broad new set of customer and user challenges.. BRKSPG Cisco and/or its affiliates. All rights reserved. Cisco Public

4 Market Snapshot Provider Needs Monetize the Network To increase service revenues and improve ROI Optimize the Network To decrease network costs and complexity and speed time to market Maximize Velocity and Business Agility To attract and retain customers BRKSPG Cisco and/or its affiliates. All rights reserved. Cisco Public

5 Open Network Environment Interaction between all components of service creation Program for Optimized Experience Policy & Intent Applications Network Intelligence, Guidance Harvest Network Intelligence s Orchestration Analytics Programmability Network Stats, State & Events BRKSPG Cisco and/or its affiliates. All rights reserved. Cisco Public

6 Cross Connect SxC

7 Goals of SxC Provisioning of dynamic services in a DC for the Provider using a single point of configuration s Cross Connect Network Infrastructure s SP Router DC Compute Customer Facing s BRKSPG Cisco and/or its affiliates. All rights reserved. Cisco Public

8 Compute Connectivity Options for SP Router Router UCS with Openstack OpenStack OpenStack ` 1 Multiple x86 blades running OpenStack connected via a network to a single 10GB port on the ASR9k Minimizes number of data ports needed on the ASR9k Suitable for services that require lower network bandwidth UCS with Openstack OpenStack OpenStack 2 Each UCS blade (running OpenStack) directly connected to a 10G port on the ASR9K Requires a dedicated data port per UCS Suitable for higher services requiring higher network bandwidth Forge Blade OpenStack 3 OpenStack running on the Forge Blade (VSM) Takes up a service blade slot Suitable for small number of services that benefit from being connected to the ASR9K fabric BRKSPG Cisco and/or its affiliates. All rights reserved. Cisco Public

9 Classes of Instances Single Instance Multiple tenants going to same Multiple service instances one per tenant Chains of services Load Balanced set of elastic s Data Center Provider Traffic flow Traffic flow Traffic flow Traffic flow A B C Traffic flow Traffic flow Load Balancer A A BRKSPG Cisco and/or its affiliates. All rights reserved. Cisco Public

10 Points of Configuration Virtual s Config Virtual Overlay Config Virtual Switch Config DC Edge Router Config SP Edge Router Config Data Center Provider Virtual Instance Load Balancer Traffic flow Virtual Instance Virtual Instance BRKSPG Cisco and/or its affiliates. All rights reserved. Cisco Public

11 SXC Components s Cross Connect Provider Network Agent Data Center DC Agent Virtual Instance Load Balancer Traffic flow Virtual Instance Virtual Instance 11 BRKSPG Cisco and/or its affiliates. All rights reserved. Cisco Public 11

12 SXC Network Agent Provider Network Agent s Cross Connect 1. Creating service overlay between SP edge and DC Edge 1. VXLAN 2. L2TPv3 tunnel 3. PWE tunnel 4. L3 VPN 2. Creating Traffic Engineering tunnels between SP and DC Edge (optional) 3. Redirecting traffic from SP Edge to the correct instance in the selected DC TE Tunnel Traffic flow Tunnel (VXLAN, L2TPv3, PWE,L3 VPN) Network Agent PCE ONEPK Openflow IRS BGP-LS NPS BRKSPG Cisco and/or its affiliates. All rights reserved. Cisco Public

13 SXC DC Agent s Cross Connect 1. Provision s via Orchestration Layer 2. Provision Virtual Network overlay (flat or support for chains) 3. Connect Virtual Network to Physical Network (configure VXLAN on Virtual Switch) 4. Monitor the service instance (for failures, elastically grow/shrink) Data Center SXC DC Agent Orchestration Virtual Instance SXC DC Agent OpenStack Ware BRKSPG Cisco and/or its affiliates. All rights reserved. Cisco Public

14 s Cross Connect Provider Data Center PCE ONEPK Openflow IRS Network Orchestration Network Agent DC Agent Orchestration OpenStack CloudStack ware XEN Hyper-V Traffic flow TE Tunnel Tunnel (VXLAN, L2TPv3, PWE,L3 VPN) Virtual Instance Nexus 1000v BRKSPG Cisco and/or its affiliates. All rights reserved. Cisco Public

15 Orchestration Request flow Provider Request s Cross Connect Network Request DC Request DC vlan DC Data Center Network Agent DC Agent Network Orchestration <XML> Topology & Policy s Controller Virtual Instance Tunnel (VXLAN, L2TPv3, PWE,L3 VPN) vlan Load Balancer 15 BRKSPG Cisco and/or its affiliates. All rights reserved. Cisco Public 15

16 Open Network Environment Interaction between all components of service creation Program for Optimized Experience Policy & Intent Applications Network Intelligence, Guidance Harvest Network Intelligence s Orchestration Analytics Programmability Network Stats, State & Events BRKSPG Cisco and/or its affiliates. All rights reserved. Cisco Public

17 Some Demos BRKSPG Cisco and/or its affiliates. All rights reserved. Cisco Public 17

18 BRKSPG Cisco and/or its affiliates. All rights reserved. Cisco Public 18

19 BRKSPG Cisco and/or its affiliates. All rights reserved. Cisco Public 19

20 Elastic s Use Case

21 Elastic s Controller Overview Virtual Machine created in each DC (run in pairs for HA) Provides a Web s API to the UI for all requests (status, upgrade, start/stop services) s Controller K Reports status on all Hardware/ Software events/ and Performance/Load within the Data Center Manages the life-cycle of all services in the DC using the Elastic s Controller BRKSPG Cisco and/or its affiliates. All rights reserved. Cisco Public

22 Elastic s Controller Functionality <service-request> When a service is requested by the high level orchestrator - it gets passed to the s Controller Virtual Machine as an XML file s Controller K Depending on the type of service, it could be a static service, one that requires a specific HA mode or a service that is required to scale elastically based on demand. The XML will contain those parameters DHCP <request-id> DHCP (master) K DHCP (backup) K Openstack The s Controller is responsible for creating and managing the life-cycle of the given service This includes detecting and recovering from local failures with that service (eg. dying, application crashing, etc) and scaling the service based on traffic demands. Hypervisor (K) Host OS (Linux) DC A service may require very specific management rules and so it can provide its own s Controller to manage it. The DC Controller will create an instance of the services own services-controller and pass the request to it BRKSPG Cisco and/or its affiliates. All rights reserved. Cisco Public

23 Elastic s Controller Example <service-request> s Controller K SERVICE_NAME <request-id> Standby Queue K K K K K K K K Openstack Hypervisor (K) Host OS (Linux) DC 1. <service-request> is generated and sent to the s Controller which then creates the active s and hot-standby s 2. starts and reports application stats to the Controller STATUS=OK 3. Load increases and s are getting overloaded STATUS=OVERLOAD 4. s Controller activates 3 of the hot-standby and adds them to the running service causing the load on all s to decrease below the threshold 5. The s controller backfills the hot standby queue by booting 3 new s but not activating them BRKSPG Cisco and/or its affiliates. All rights reserved. Cisco Public

24 THANK YOU!

25 Call to Action Visit the Cisco Campus at the World of Solutions to experience Cisco innovations in action Get hands-on experience attending one of the Walk-in Labs Schedule face to face meeting with one of Cisco s engineers at the Meet the Engineer center Discuss your project s challenges at the Technical Solutions Clinics BRKSPG Cisco and/or its affiliates. All rights reserved. Cisco Public 25

26 BRKSPG Cisco and/or its affiliates. All rights reserved. Cisco Public 26

27

28 Zone A Data Center VPN Connection CSR1000v vsg Vmware/ Zone B Zone C Nexus 1Kv vasa vmware/ Internet C Cisco and/or its affiliates. All rights reserved. Cisco Confidential 28

29 C Cisco and/or its affiliates. All rights reserved. Cisco Confidential 29

30 Virtual Internet Routing Lab - VIRL C Cisco and/or its affiliates. All rights reserved. Cisco Confidential 30

31 C Cisco and/or its affiliates. All rights reserved. Cisco Confidential 31

32 C Cisco and/or its affiliates. All rights reserved. Cisco Confidential 32

33 C Cisco and/or its affiliates. All rights reserved. Cisco Confidential 33

34 IOS-XR (XRVR) Devel Devel Devel Devel Devel Devel Devel Devel Devel CSR1000v IOS-XE/Ultra /vmware IOS Classic Spirit-XR STAR-OS /vmware VPP Load Balancer /bare VPP 4-6 Softwire Concentrator vnam XRVR Route Reflector BGP-LS Devel PCE Devel Devel Devel ALTO Nexus 1000v vnga vdna NX-OS Titanium Spirit-XR vise DDoS Cache Content vnam PRIME vmware vmware Vmware/ Bare?/ Vmware N1kv N1kv N1kv N1kv vasa vesa vwsa vsg WAF - Web Application Firewall PRIME Network PRIME Fullfillment PRIME Performance vmware/ vmware/ Vmware/ Vmware/ Vmware/ Vmware Vmware Vmware C Cisco and/or its affiliates. All rights reserved. Cisco Confidential 35

35 Devel IOS-XR (XRVR) Hypervisors: K Release Target: Release Date: Apr 2013 Devel IOS-XR (XRVR) NX-OS Titanium K K/WAR E K Devel CSR1000v (IOS-XE/ Ultra) WARE Hypervisors: Ware Release Target: x.x.x Release Date: XXX Devel CSR1000v (IOS-XE/ Ultra) K/ WARE Spirit-XR K Devel IOS Classic K Phase I Phase II Phase III C Cisco and/or its affiliates. All rights reserved. Cisco Confidential 36

36 Nexus 1000v Nexus 1000v Nexus 1000v WARE Hyper-V K vasa N1kv vesa N1kv vasa N1kv vesa N1kv vasa N1kv vesa N1kv WARE WARE Hyper-V Hyper-V K K vwsa N1kv N1kv vsg vwsa N1kv N1kv vsg vwsa N1kv N1kv vsg WARE WARE Hyper-V Hyper-V K K WAF - Web Application Firewall WARE WAF - Web Application Firewall Hyper-V WAF - Web Application Firewall K Phase I Phase II Phase III C Cisco and/or its affiliates. All rights reserved. Cisco Confidential 37

37 Devel vasa vesa Security Controller Arbor DDoS vwsa K K??? Bare?/ K Phase I Phase II C Cisco and/or its affiliates. All rights reserved. Cisco Confidential 38

38 Devel Devel Devel Devel Devel Devel VPP Load Balancer VPP 4-6 Softwire Concentrator XRVR Route Reflector BGP-LS PCE vnam vnam /bare Phase I Phase II Phase III C Cisco and/or its affiliates. All rights reserved. Cisco Confidential 39

39 C Cisco and/or its affiliates. All rights reserved. Cisco Confidential 46 4

40 C Cisco and/or its affiliates. All rights reserved. Cisco Confidential 47 4

41