OPEN CONTRAIL ARCHITECTURE GEORGIA TECH SDN EVENT

Transcription

1 OPEN CONTRAIL ARCHITECTURE GEORGIA TECH SDN EVENT sdn-and-nfv-technical---georgia-tech---sep v2 Bruno Rijsman, Distinguished Engineer 24 September 2013

2 Use Cases 2 Copyright 2013 Juniper Networks, Inc.

3 CONTRAIL USE CASE 1: CLOUD ENTERPRISE PRIVATE CLOUD Silo'ed resource allocation Manual configuration Static service deployment Physical Service Appliances VLAN Finance HR Marketing 3 Copyright 2013 Juniper Networks, Inc.

4 CONTRAIL USE CASE 1: CLOUD ENTERPRISE PRIVATE CLOUD Silo'ed resource allocation Manual configuration Static service deployment Dynamic resource allocation Automated configuration Dynamic service chains Physical Service Appliances VLAN Virtual Services (NFV) Virtual Network Finance HR Marketing Finance HR Marketing 4 Copyright 2013 Juniper Networks, Inc.

5 CONTRAIL USE CASE 1: CLOUD SERVICE PROVIDER CLOUD (IAAS, VPC) End-to-End Virtual Network Orchestration and Automation Public Cloud Providers, Content Providers,... Service Provider Infrastructure as a Service (IaaS) Service Provider Managed Virtual Private Cloud (VPC) Service Provider L3VPN, E-VPN Enterprise Offices Enterprise Data Center 5 Copyright 2013 Juniper Networks, Inc.

6 CONTRAIL USE CASE 2: NETWORK FUNCTION VIRTUALIZATION (NFV) SERVICE PROVIDER EDGE SERVICES Edge Service Delivery and Orchestration (NFV) Service Provider managed network-hosted Value Added Services (VAS) Application-aware and subscriber aware services and charging for consumers Business Access MX Universal Edge Router Internet Core Broadband Access Private Networks Mobile Access 6 Copyright 2013 Juniper Networks, Inc. Value Added Services Incremental revenue potential Virtual machines on x86 servers (NFV) Dynamic service provisioning Elastic scale-out Service chaining

7 CONTRAIL POTENTIAL FUTURE USE CASE 3: CORE PATH COMPUTATION, BANDWIDTH CALENDARING Topology Discovery Analytics Path Programming Path Computation Element Globally optimal paths Application aware Dynamic (e.g. time of day) Deterministic 7 Copyright 2013 Juniper Networks, Inc.

8 Architecture Overview 8 Copyright 2013 Juniper Networks, Inc.

9 CONTRAIL ARCHITECTURE A GENERAL PURPOSE SDN PLATFORM Orchestration, Automation, Analytics Open source and partner eco system of orchestrators Api and sdk for integration with OSS / BSS OSS Control Plane - Physical, Virtual Open, standards-based, federated controller Scalable and resilient Configuration manager, Automation Control Plane Control Plane Control Plane Virtual Network Overlay Multi-tenancy for private and virtual public clouds Finance HR Marketing Gateway functions - connect to virtual to physical network Service chaining (physical and virtual) Physical Network Interoperability with traditional network devices Any-to-any non-blocking low-latency fabric: Q-Fabric or Clos 9 Copyright 2013 Juniper Networks, Inc.

10 Storage Compute Compute Network ROLE OF CONTRAIL IN A VIRTUALIZED ENVIRONMENT Orchestrator, CloudStack High Level Abstraction "Logically Centralized, Physically Distributed" Low Level Realization Network (Physical and Virtual) Storage Server vrouter Physical Network (Fabric) Physical Network (Gateway) Physical and Virtual Network Services Server 10 Copyright 2013 Juniper Networks, Inc.

11 BUILDING BLOCK: MULTI-TENANCY Physical Topology L3 Network L2 Network L2 Network L3 router L2 Network Logical Topology 11 Copyright 2013 Juniper Networks, Inc.

12 BUILDING BLOCK: GATEWAY FUNCTIONS Internet Tenant VPN Data Center 1 Gateway Router Data Center 2 Gateway WAN Gateway Switch A B A C D B A D Non Virtualized Server 12 Copyright 2013 Juniper Networks, Inc.

13 BUILDING BLOCK: SERVICE CHAINING (NFV) Tenant Network A LB Internet Tenant Network A NAT Tenant Network B Tenant Network A1 Tenant Network A2 13 Copyright 2013 Juniper Networks, Inc.

14 CONTRAIL MULTI-TENANCY IMPLEMENTATION Quantum SDN Configuration Control Analytics Tenant Network A Virtualized Server Virtualized Server IP fabric (underlay network) Tenant Network B Data Center 14 Copyright 2013 Juniper Networks, Inc.

15 CONTRAIL MULTI-TENANCY IMPLEMENTATION Quantum Orchestrator Quantum Plug-in SDN Configuration Control Analytics SDN Virtualized Server Virtualized Server XMPP IP fabric (underlay network) Tenant s K Hypervisor + vrouter VXLAN or MPLS/GRE or MPLS/UDP Underlay switches 15 Copyright 2013 Juniper Networks, Inc.

16 CONTRAIL IS BASED ON MPLS VPN TECHNOLOGY Orchestrator Network Management System (NMS) DMI IBGP Route Reflector IBGP Route Reflector Config Node Control Node IBGP Analytics Node Control Node SDN System XMPP CE PE P P PE MPLS over MPLS CE vrouter Underlay Switch Underlay Switch vrouter MPLS over GRE or VXLAN MPLS L3VPN / E-VPN 16 Copyright 2013 Juniper Networks, Inc.

17 CONTRAIL GATEWAY IMPLEMENTATION Quantum SDN Configuration Analytics Control Tenant Network A Data Center Tenant Network B Virtualized Server Virtualized Server IP fabric (underlay network) Customer A L3VPN Customer B L3VPN L3VPN 17 Copyright 2013 Juniper Networks, Inc.

18 CONNECT PHYSICAL L3VPN TO VIRTUAL NETWORK FOR CLOUD ACCESS AND/OR SERVICE CHAINING BGP Route Reflector Tenant or Service BGP BGP BGP BGP XMPP XMPP Red L3VPN Red VN WAN DC / POP Underlay Green VN Green L3VPN WAN MPLS over TE-LSP Data Center MPLS over GRE 18 Copyright 2013 Juniper Networks, Inc.

19 CONTRAIL SERVICE CHAINING IMPLEMENTATION IN THE DATA CENTER Quantum SDN Configuration Analytics Control Tenant Network A NAT Virtualized Server Virtualized Server IP fabric (underlay network) Tenant Network B Virtualized Server NAT Virtualized Server Data Center 19 Copyright 2013 Juniper Networks, Inc.

20 HIGHLY AVAILABLE SCALE-OUT ARCHITECTURE REST Orchestrator () Analytics Node Configuration Node Analytics Node Configuration Node Logically Centralized (Physically distributed) Horizontally Scalable Highly Available Federated IF-MAP Control Node BGP Control Node XMPP BGP, Netconf Compute Node (Virtualized Server) Gateway Node (MX, EX, QFX,...) Service Node (SRX, Firefly, JSP,...) 20 Copyright 2013 Juniper Networks, Inc.

21 Detailed Walk-Through 21 Copyright 2013 Juniper Networks, Inc.

22 LOGICAL TOPOLOGY VN G Virtual Network Virtual Firewall Tenant Virtual Machines VN R Physical Gateway Router Non-Virtualized (Bare Metal) Server PN Physical Network (Internet, L3VPN,...) 22 Copyright 2013 Juniper Networks, Inc.

23 PHYSICAL TOPOLOGY Nova Neutron Virtualized Server Hypervisor with vrouter Non-Virtualized (Bare Metal) Server Underlay Switches Gateway Router to Internet or L3VPN 23 Copyright 2013 Juniper Networks, Inc.

24 MAPPING OF LOGICAL TO VIRTUAL TOPOLOGY Nova Neutron VN G VN R L3VPN PHYSICAL 24 Copyright 2013 Juniper Networks, Inc. LOGICAL

25 STARTING POINT EMPTY LOGICAL TOPOLOGY Nova Neutron VN G VN R PN PHYSICAL 25 Copyright 2013 Juniper Networks, Inc. LOGICAL

26 CREATE GREEN TENANT CREATE VIRTUAL NETWORK "GREEN" Nova Neutron Create VN G VN G VN R PN PHYSICAL 26 Copyright 2013 Juniper Networks, Inc. LOGICAL

27 CREATE GREEN TENANT CREATE VIRTUAL MACHINE "" Nova Neutron Create Attach to VN G VN G Nova: Create VN R PN PHYSICAL 27 Copyright 2013 Juniper Networks, Inc. LOGICAL

28 CREATE GREEN TENANT CREATE VIRTUAL MACHINE "" Nova Neutron Create Attach to VN G Neutron: Attach to VN XMPP: Create routing-instance VN G VN R PN PHYSICAL 28 Copyright 2013 Juniper Networks, Inc. LOGICAL

29 CREATE GREEN TENANT CREATE VIRTUAL MACHINE "" Nova Neutron Create Attach to VN G VN G Nova: Create VN R PN PHYSICAL 29 Copyright 2013 Juniper Networks, Inc. LOGICAL

30 CREATE GREEN TENANT CREATE VIRTUAL MACHINE "" Nova Neutron Create Attach to VN G Neutron: Attach to VN XMPP: Create routing-instance VN G VN R PN PHYSICAL 30 Copyright 2013 Juniper Networks, Inc. LOGICAL

31 CREATE GREEN TENANT CREATE VIRTUAL MACHINE "" Nova Neutron Create Attach to VN G VN G XMPP: Exchange routes Create tunnels VN R PN PHYSICAL 31 Copyright 2013 Juniper Networks, Inc. LOGICAL

32 CREATE GREEN TENANT FORWARDING TABLES AND ENCAPSULATION Payload Inner IP header Source IP Dest IP MPLS Label GRE Outer IP header Source IP Dest IP Ethernet Source MAC Dest MAC... L2... Server S1 Server S2 Server S1 Server S2 S1 Packet S2 Green routing-instance IP FIB IP prefix Nexthop Virtual ethernet port to Push label L2 + GRE encaps to server S2 Green routing-instance IP FIB IP prefix Nexthop Push label L1 GRE encaps to server S1 Virtual ethernet port to MPLS label Global MPLS FIB Nexthop MPLS label Global MPLS FIB Nexthop L1 Pop + Green routing-instance L2 Pop + Green routing-instance IP prefix Global IP FIB Nexthop IP prefix Global IP FIB Nexthop Server S2 Physical ethernet port Server S1 Physical ethernet port 32 Copyright 2013 Juniper Networks, Inc.

33 CREATE GREEN TENANT CREATE VIRTUAL MACHINE "" Nova Neutron Create Attach to VN G VN G VN R Nova: Create PN PHYSICAL 33 Copyright 2013 Juniper Networks, Inc. LOGICAL

34 CREATE GREEN TENANT CREATE VIRTUAL MACHINE "" Nova Neutron Create Attach to VN G Neutron: Attach to VN VN G VN R XMPP: Create routing-instance PN PHYSICAL 34 Copyright 2013 Juniper Networks, Inc. LOGICAL

35 CREATE GREEN TENANT CREATE VIRTUAL MACHINE "" Nova Neutron Create Attach to VN G VN G XMPP: Exchange routes Create tunnels VN R PN PHYSICAL 35 Copyright 2013 Juniper Networks, Inc. LOGICAL

36 CREATE GREEN TENANT END STATE Nova Neutron VN G VN R PN PHYSICAL 36 Copyright 2013 Juniper Networks, Inc. LOGICAL

37 CREATE RED TENANT SAME STEPS AS GREEN TENANT Nova Neutron VN G VN R PN PHYSICAL 37 Copyright 2013 Juniper Networks, Inc. LOGICAL

38 CONNECT GREEN TO RED TENANT VIA FIREWALL CREATE VIRTUAL MACHINE FOR FIREWALL Nova Neutron Create Attach to VN G Attach to VN R VN G Nova: Create VN R PN PHYSICAL 38 Copyright 2013 Juniper Networks, Inc. LOGICAL

39 CONNECT GREEN TO RED TENANT VIA FIREWALL ATTACH FIREWALL TO RED AND GREEN VIRTUAL NETWORKS Nova Neutron Create Attach to VN G Attach to VN R Neutron: Attach to VNs VN G VN R XMPP: Create routing-instance PN PHYSICAL 39 Copyright 2013 Juniper Networks, Inc. LOGICAL

40 CONNECT GREEN TO RED TENANT VIA FIREWALL APPLY POLICY, EXCHANGE ROUTES, AND CREATE TUNNELS Nova Neutron Apply Policy VN G VN R XMPP: Exchange routes Create tunnels VN G VN R L3VPN PHYSICAL 40 Copyright 2013 Juniper Networks, Inc. LOGICAL

41 CONNECT GREEN TO RED TENANT VIA FIREWALL END STATE Nova Neutron VN G VN R L3VPN PHYSICAL 41 Copyright 2013 Juniper Networks, Inc. LOGICAL

42 CONNECT GREEN TO RED TENANT VIA FIREWALL DATA PLANE: RED GREEN TRAFFIC FORCED THROUGH THE FIREWALL Nova Neutron VN G VN R L3VPN PHYSICAL 42 Copyright 2013 Juniper Networks, Inc. LOGICAL

43 CONNECT RED TENANT TO PHYSICAL L3VPN CONFIGURE L3VPN ROUTING INSTANCE Nova Neutron Apply Policy VN R L3VPN VN G Netconf: Configure routing-instance VN R L3VPN PHYSICAL 43 Copyright 2013 Juniper Networks, Inc. LOGICAL

44 CONNECT RED TENANT TO PHYSICAL L3VPN EXCHANGE ROUTES WITH PHYSICAL ROUTER, CREATE TUNNELS Nova Neutron Apply Policy VN R L3VPN VN G BGP: Exchange routes Create tunnels VN R L3VPN PHYSICAL 44 Copyright 2013 Juniper Networks, Inc. LOGICAL

45 CONNECT RED TENANT TO PHYSICAL L3VPN EXCHANGE ROUTES WITH VROUTERS, CREATE TUNNELS Nova Neutron Apply Policy VN R L3VPN VN G XMPP: Exchange routes Create tunnels VN R L3VPN PHYSICAL 45 Copyright 2013 Juniper Networks, Inc. LOGICAL

46 CONNECT BARE METAL SERVER TO RED TENANT USE TOP-OF-RACK SWITCH AS GATEWAY Nova Neutron VN G VN R L3VPN PHYSICAL 46 Copyright 2013 Juniper Networks, Inc. LOGICAL

47 CONNECT BARE METAL SERVER TO RED TENANT CREATE ROUTING INSTANCE Nova Neutron Attach to VN R using switch S Netconf: Configure routing-instance VN G VN R L3VPN PHYSICAL 47 Copyright 2013 Juniper Networks, Inc. LOGICAL

48 CONNECT BARE METAL SERVER TO RED TENANT EXCHANGE ROUTES WITH PHYSICAL SWITCH, CREATE TUNNELS Nova Neutron Attach to VN R using switch S VN G BGP: Exchange routes Create tunnels VN R L3VPN PHYSICAL 48 Copyright 2013 Juniper Networks, Inc. LOGICAL

49 CONNECT BARE METAL SERVER TO RED TENANT EXCHANGE ROUTES WITH VROUTERS, CREATE TUNNELS Nova Neutron Attach to VN R using switch S XMPP: Exchange routes Create tunnels VN G VN R L3VPN PHYSICAL 49 Copyright 2013 Juniper Networks, Inc. LOGICAL

50 CONNECT BARE METAL SERVER TO RED TENANT END STATE Nova Neutron VN G VN R L3VPN PHYSICAL 50 Copyright 2013 Juniper Networks, Inc. LOGICAL

51 The Importance of Abstraction "SDN as a Compiler" 51 Copyright 2013 Juniper Networks, Inc.

52 THE IMPORTANCE OF ABSTRACTION Nova Neutron PHYSICAL TOPOLOGY Complex Low level of abstraction Many vrouters Many routing-instances Many tunnels Many routes Complex to configure Complex to troubleshoot 52 Copyright 2013 Juniper Networks, Inc.

53 THE IMPORTANCE OF ABSTRACTION LOGICAL TOPOLOGY VN G Simple High level of abstraction Simple to configure Simple to troubleshoot VN R provides abstraction Configure logical layer Mapping to physical layer "SDN as a Compiler" Analytics at physical layer Mapping to logical layer L3VPN 53 Copyright 2013 Juniper Networks, Inc.

54 "SDN AS A COMPILER" High Level Abstraction North-Bound REST APIs North Bound Interface (REST) High Level Data Model (Service Data Model) High Level (Service) Data Model Configuration State Operational State Analytics Transformation Engine Transformation Engine Low Level Data Model (Technology Data Model) Low Level (Technology) Data Model Configuration State Operational State South Bound Interfaces South-Bound Protocols South Bound Protocol 1 South Bound Protocol 2 South Bound Protocol 3 South Bound Protocol N Low Level Realization 54 Copyright 2013 Juniper Networks, Inc.

55 EXTENDING THE CONTROLLER USING PCE AS A HYPOTHETICAL EXAMPLE High Level Abstraction New Service (High Level) Data Models Demand Calendar Constraints North Bound Interface (REST) High Level (Service) Data Model Configuration State Operational State Analytics New Transformation Rules Transformation Engine New Technology Data Models Traffic-Engineered LSP Low Level (Technology) Data Model Configuration State Operational State South Bound Interfaces New South-Bound Protocols PCEP (LSP programming) BGP-LS (Topology Discovery) South Bound Protocol 1 South Bound Protocol 2 South Bound Protocol 3 South Bound Protocol N Low Level Realization 55 Copyright 2013 Juniper Networks, Inc.

56