Location. AttoResearch US founded Silicon Valley, US. AttoResearch founded Techno Valley, Seongnam, Korea

Transcription

1

2 Atto Research founded (Silicon Valley, US) Atto Research Korea founded SDN Controller AttNet released R&D center established (Techno Valley, Seongnam, Korea) OpenFlow supporting controller OBelle released OBelle 2.0 released OBelle v2 SDN Controller OBelle Archon: SDN/NFV Management Tool Cloud SDN: SDDC Solution with OpenStack 3D/SDN/big data based network analysis solution Attick: Low latency trading Platform AttoFEP: Low Latency Exchange GW Location AttoResearch US founded Silicon Valley, US AttoResearch founded Techno Valley, Seongnam, Korea 2

3 NIA speed testing site Korea-USA security testbed SDN/NFV Service Provider New IDC for NHN Entertainment with SDN Cloud + SDN Network Virtualization for Cloud / non-cloud SDN/NFV for LTE network NFV for IDC / vcpe Cloud + SDN 3

4 4

5 Robust & secure High Performance Supporting OF 1.0, 1.3 See "Rosemary: A robust, secure, and highperformance network operating system." (ACM CCS 2014) C/Java/Python API Released 2.0 in this summer Supporting active-active clustering 5

6 See "Rosemary: A robust, secure, and high-performance network operating system." (ACM CCS 2014) Objective Robustness & Secureness Resource Management High-Performance Feature Separating Applications from a Network OS Kernel Providing Access Control and Authentication. Safely Restarting the Network OS CPU resource management Memory resource management Application multi-threading Kernel App Support HW acceleration: TCP Offloading 6

7 Application Process Lib U-App Lib Lib U-App Lib Kernel Connection Manager Northbound API K-App Lib Lib Cluster Manager Security Manager Lib K-App Lib Event Manager Process Monitor Resource Monitor Repository Device Abstraction Layer Southbound API A-Sync Tables Network Device Network Device Network Device K-App: Kernel App U-App: User App Lib: Dynamic Linking Library : Event Queue 7

8 Jul Aug Sep Oct Nov Testbed design Testcase setting Env. setting WAN Scale Path Managing Performance Test Failover Test OBelle 2.0 With A-Sync Repository WAN-scale distributed SDN control To see Performance: Throughput / Latency High Availability (HA) performance varying the number of controller instance 8

9 Spec Korea Controller1 Xeon(R) 2.7 GHz x 32Core 64GB Memory Controller2 Host Switches (3) i7 3.5 GHz x 8Core 32GB Memory Okina wa Controller 3 Controller 4 Host Switches QEMU Virtual CPU version GHz x 4Core 8GB Memory, Centec, NEC 9

10 Korea Okinawa Controller1 Controller2 Controller3 Controller4 VPN VPN NEC A-HostA A-HostB O-HostA O-HostB 10

11 Korea Okinawa Controllers Management network /24 Controllers vlan1044 vlan1044 Switches Softether Softether Switches vlan2044 vlan2044 Hosts /24 Data network Hosts 11

12 current solutions are not enough Slow: IPC-based Error-prune: demands cache SDN-agnostic: lacking features to support SDN apps cache only repository architecture Fast: near-native memory access speed Scalable: eventual consistency with sync support Easy to program: no need for complex cache management Programmability: multi-key support / C-Structure composition with SDN flow control Supporting publish/subscribe Req/sec SET GET A-Sync 5,181K 5,617K Redis 288K 286K 12

13 OBelle1 OBelle2 OBelle3 OBelle4 Pub/sub Pub/sub Pub/sub Pub/sub Key-Value Key-Value Publish message (not master) Key-Value Key-Value A-Sync Layer OpenFlow message (master) 13

14 OBelle1 OBelle2 OBelle3 OBelle4 VPN VPN Management network Packet-in Flow-mod Cbench Cbench Cbench Cbench 14

15 OBelle1 OBelle2 OBelle3 OBelle4 VPN VPN Management network 5.2M 5.2M 1.3M 1.9M Cbench Cbench Cbench Cbench Requests/sec 15

16 OBelle1 OBelle2 OBelle3 OBelle4 VPN VPN Management network Cbench Cbench 16

17 bandwidth: 28.2 Mbits/sec latency: 79.4 ms Controller1 Controller2 Controller3 Controller4 VPN VPN Management network 37 thousand 31 thousand Cbench Cbench Requests/sec 17

18 Performance 5.2M, 5.2M, 1.3M, 1.9M requests/sec Management network(vpn) bottleneck is important 4 (2 controllers, 2 hosts) are on the same physical machine!! 18

19 Korea Okinawa Controller1 Controller2 Controller3 Controller4 VPN VPN NEC A-HostA A-HostB O-HostA O-HostB 19

20 Korea Okinawa Controller1 Controller2 Controller3 Controller4 VPN VPN NEC A-HostA A-HostB O-HostA O-HostB 20

21 Korea Okinawa Controller1 Controller2 Controller3 Controller4 NEC A-HostA A-HostB O-HostA O-HostB 21

22 Korea Okinawa Controller1 Controller2 Controller3 Controller4 NEC A-HostA A-HostB O-HostA O-HostB 22

23 Korea Okinawa Controller1 Controller2 Controller3 Controller4 NEC A-HostA A-HostB O-HostA O-HostB 23

24 Korea Okinawa Controller1 Controller2 Controller3 Controller4 NEC A-HostA A-HostB O-HostA O-HostB 24

25 Korea Okinawa Controller1 Controller2 Controller3 Controller4 VPN VPN NEC A-HostA A-HostB O-HostA O-HostB 25

26 Korea Okinawa Controller1 Controller2 Controller3 Controller4 Pica1 NEC A-HostA A-HostB O-HostA O-HostB 26

27 Korea Okinawa Controller1 Controller2 Controller3 Controller4 Pica1 NEC A-HostA A-HostB O-HostA O-HostB 27

28 Korea Okinawa Controller1 Controller2 Controller3 Controller4 NEC A-HostA A-HostB O-HostA O-HostB 28

29 Category Case# Packet Loss Controller Failure 24 cases Link Failure 16 cases Switch Failure 16 cases No loss Mixed Failures 24 cases 29

30 Datapath Manager Link Discovery A-sync key value connection_up connection_down description request packet_out (LLDP) 1. packet_in (LLDP) 2. port_status OBelle Kernel TCP_keepalive LLDP packet out/in Management network (TCP connection) Data network L2 switch 30

31 1ms.vs. 100ms OBelle1 OBelle2 OBelle3 OBelle4 Pub/sub Pub/sub VPN VPN Pub/sub Pub/sub Key-Value Key-Value Key-Value Key-Value A-Sync Layer 1. Heartbeat configuration 2. Adaptive heartbeat limit 31

32 -HW-acceleration -Combination with our monitor/control tools -Performance comparison with ONOS 32

33 Product OBelle v2 OBelle Archon Neo Cloud SDN NFV solution Distributed SDN Controller Web-based monitoring tool SDN/big data/3d visualization based network analysis Supporting gesture-based control SDDC solution with OpenStack Open source based NFV solution 33

34 34

35 Network (OpenFlow/Legacy) Kinect v2 Network Event 3D visualization Command Motion Traffic control App SDN Controller block, detour, tapping netflow sflow SNMP sriflow OpenFlow Chart Server Control Server Command (RestAPI) Data Collector topology, traffic, resource RDB Spout K-V storage Bolt EPL 35

36 36

37 Security aware routing Virtual hosts can migrate between physical hosts. Cloud solution dynamically add middle box in the proper hosts or relocate to satisfy given security conditions 37

38 38

39 feel free to us: 39