Identity Management and Resource Allocation in the Network Virtualization Environment

Size: px

Start display at page:

Download "Identity Management and Resource Allocation in the Network Virtualization Environment"

Mary Anthony
5 years ago
Views:

1 Identity Management and Resource Allocation in the Network Virtualization Environment Mosharaf Chowdhury School of Computer Science University of Waterloo January 21,

2 NETWORK VIRTUALIZATION January 21,

3 Why Network Virtualization? Internet is almost ossified Lots of band aids and makeshift solutions (e.g., overlays) A new architecture (aka clean slate) is needed Hard to come up with a one size fits all architecture Almost impossible to predict what future might unleash Why not create an all sizes fit into one architecture instead! Open and expandable Coexistence of heterogeneous architectures January 21,

4 What is Network Virtualization? Transparent abstraction of networking platform and resources Multiple logical interpretations of the physical characteristics Multiple virtual networks (VNs) Additional level of indirection Indirect access to network resources Resource partitioning and isolation Physical and logical Dynamic provisioning and configuration January 21,

5 Network Virtualization Environment January 21,

Challenges Instantiation Concerned with issues related to successful creation of virtual networks Operations Deals with operations of virtual

6 Challenges Instantiation Concerned with issues related to successful creation of virtual networks Operations Deals with operations of virtual networks and virtual components Management Manages co existing virtual networks Identity Management Virtual Network Embedding January 21,

7 Identity Management in the Network Virtualization Environment IMARK January 21,

8 Motivation High level of dynamism Macro Level: Merge/Separate VNs Micro Level: Add/Join/Migration of end hosts and virtual routers Mobility Geographical Logical Überhoming Simultaneously connect to multiple InPs and VNs January 21,

9 Design Principles 1. Separation of Identity and Location Inherent support for mobility and Überhoming 2. Local Autonomy Flexibility of naming and addressing in different VNs Defined interfaces and mechanisms for cooperation 3. Global Identifier Space Local identifiers have no end to end significance January 21,

10 imark Overview Concepts 1. Identifier Spaces 2. Mappings Components 1. Controllers 2. Adapters January 21,

11 Operations: Macro Level Federation Multiple VNs create common administrative domain Controller network Hierarchy Aggregation of mappings in representative controllers Balanced and unbalanced January 21,

12 Join Add mappings Operations: Micro Level Lookup and Connection Setup State setup in the network Leave Remove mappings Mobility Soft handoff January 21,

13 Evaluation Mean Mapping Size Per Controller Mean Lookups Resolved January 21,

14 Intra domain Resource Allocation through Virtual Network Embedding VINEYARD January 21,

15 Virtual Network Embedding a A B b e c d f C D E F G H January 21,

16 Substrate Graph Augmentation 10 b a c 10 a C A B D E F c G 17 H b January 21,

17 For each VN request: D ViNE and R ViNE Augment the substrate graph Solve the resulting LP INITIALIZATION For each virtual node: Calculate the probability for each meta node to be selected for the corresponding virtual node Selection: D ViNE: Select the meta node with the highest probability R ViNE: Select a meta node randomly with the calculated probability NODE MAPPING Use MCF to map virtual edges If the VN request is accepted Update residual capacities of the substrate resources LINK MAPPING FINALIZATION January 21,

18 Acceptance Ratio January 21,

19 Revenue Vs Cost Revenue Cost January 21,

20 Resource Utilization Node Utilization Link Utilization January 21,

21 What have we done? What will we do? SUMMARY January 21,

22 Contributions Survey of Network Virtualization (Submitted + TechReport) Historical perspective Categorization of existing projects Enumeration of open problems Identity Management Framework (IM 09) Interoperability with flexibility to support mobility and Überhoming Virtual Network Embedding Algorithms (INFOCOM 09) Better embedding quality Mathematical foundation January 21,

23 Future Work imark Prototype Development Further evaluation Theoretical Analysis of D ViNE and R ViNE Approximation factors Economic models Inter domain VN embedding January 21,

24 Collaborators Fida E Zaheer (imark) Muntasir Raihan Rahman (ViNEYard) Network Virtualization Project Members January 21,

25 Questions? Mosharaf Chowdhury January 21,

26 BACKUP SLIDES January 21,

27 Related Concepts 1. Virtual Local Area Networks (VLAN) 2. Virtual Private Networks (VPN) 3. Active and Programmable Networks 4. Overlay Networks January 21,

28 Downsides of Overlay Networks Largely used as narrow fixes for specific problems No holistic view Most overlays are designed in the application layer Cannot support radically different concepts Anderson et al. January 21,

29 What is a Virtual Network (VN)? A collection of virtual nodes and virtual links forming a virtual topology Subset of physical topology Basic entity of the NVE A virtual node is hosted on a particular physical node Multiple virtual nodes can coexist A virtual link spans over a physical path Includes a portion of the underlying physical resources January 21,

end services End User SLA End Users Buy and use services from different service providers

30 Business Model Players Infrastructure Providers (InP) Manage underlying physical networks Relationships Service Providers (SP) Create and manage virtual networks Deploy customized end to end services End User SLA End Users Buy and use services from different service providers Brokers Mediators/Arbiters Broker Service Provider NPA Infrastructure Provider IIA SIA EIA January 21,

31 Hierarchy of Roles January 21,

32 Basic Concepts Principles Concurrence Recursion Inheritance Revisitation Design Goals Flexibility Manageability Scalability Isolation Stability and Convergence Programmability Heterogeneity Experimental and Deployment Facility Legacy Support January 21,

33 What is Network Virtualization? (Revisited) Network virtualization is a networking environment that allows multiple service providers to dynamically compose multiple heterogeneous virtual networks that coexist together in isolation from each other, and to deploy customized end toend services on the fly as well as manage them on those virtual networks for the end users by effectively sharing and utilizing underlying network resources leased from multiple infrastructure providers. January 21,

34 Classification Networking technology Targeted technology for virtualization Layer of virtualization Particular layer in the network stack where virtualization is introduced Architectural domain Specific problem domain that virtualization addresses Level of virtualization Granularity at which virtualization is realized January 21,

35 Existing Projects Project Architectural Domain Networking Technology VNRMS Tempest NetScript Genesis Virtual network management Enabling alternate control architectures Dynamic composition of services Spawning virtual network architectures ATM/IP ATM Layer of Virtualization Link Level of Virtualization Node/Link IP Network Node Network Node/Link January 21,

36 Existing Projects (Cont.) Project Architectural Domain Networking Technology VNET VIOLIN X Bone PlanetLab UCLP Virtual machine Grid computing Deploying on demand value added services on IP overlays Automating deployment of IP overlays Deploy and manage overlay based testbeds Dynamic provisioning and reconfiguration of lightpaths Layer of Virtualization Level of Virtualization January 21, Link Node IP Application Node IP Application Node/Link IP Application Node SONET Physical Link

37 Existing Projects (Cont.) Project Architectural Domain Networking Technology AGAVE GENI VINI CABO End to end QoS aware service provisioning Creating customized virtual network testbeds Evaluating protocols and services in a realistic environment Deploying value added end to end services on shared infrastructure IP Heterogeneous Heterogeneous Layer of Virtualization Network Link Level of Virtualization Full January 21,

38 Major Ongoing Projects Project Originated In Link 4WARD Europe project.eu/ AKARI Japan project.nict.go.jp/ CABO USA Clean Slate USA GENI USA NouVeau Canada PlanetLab USA lab.org/ Trilogy Europe project.org/ UCLP Canada VINI USA veritas.net/ January 21,

39 Entities and Identifier Spaces Entities 1. Service Provider 2. Virtual Network 3. Virtual Resource 4. Infrastructure Provider / Physical Network 5. Physical Resource 6. End User Identifier Spaces 1. IDS_ISP 2. IDS_VN 3. IDS_VR 4. IDS_PR 5. IDS_EH January 21,

40 Relationships between Entities January 21,

41 Mappings between Different Identifiers January 21,

42 Sequence Diagram: Join January 21,

43 Sequence Diagram: Lookup January 21,

44 January 21,

45 January 21,

46 D ViNE January 21,

47 R ViNE January 21,

48 Summary of Compared Algorithms January 21,

49 January 21,

50 January 21,

51 January 21,

NETWORK VIRTUALIZATION: PRESENT AND FUTURE

1 NETWORK VIRTUALIZATION: PRESENT AND FUTURE Wednesday, May 21, 2008 Mosharaf Chowdhury Member, envy Project What is Network Virtualization? 2 Network virtualization is a networking environment that allows