edusafe Network Func2on Virtualiza2on lite Lightning

Transcription

1 edusafe Network Func2on Virtualiza2on lite Lightning Brian Bach Mortensen, NORDUnet

2 Challenges TradiAonally a lot of focus have been on catering large science users with Big Pipes Core network funcaons like: BoD Flexible bandwidth guaranteed pipes MD- VPN Flexible HW VPNs However, one of our most problemaac areas for years: Last- mile access Typically at regional or university network Very hard to connect users to above services Requires a lot of the user We need a flexible way to connect these users to our core services and beyond ObjecAves Challenges Achievements Conclusions Q&A 2

3 Mi2ga2on of the last mile problem To enable easier access to our services: The team focused on creaang of a SW- based VPN service Codename: edusafe The service can create a VPN tunnel between end users at universiaes and service instances It can connect to BoD and MD- VPN service instance In a simplisac form it has been used to extend MD- VPN beyond our core networks (to another conanent) And it is piloang 1 generaaon NFV ObjecAves Challenges Achievements Conclusions Q&A 3

4 Mi2ga2on of the last mile problem To enable users easier access edusafe has now been turned into a piloang service CreaAng completely SW based L2/L3 VPNs Providing privacy on unsafe networks (public wifi) Much wider potenaal impact on users Is there anyone who doesn t like privacy? Lower bandwidth than BoD and MD- VPN, but technology advances à Scaling in the cloud environment is (relaavely) easy Candidates that have been tested (OpenSource): SodEther OpenVPN ObjecAves Challenges Achievements Conclusions Q&A 4

5 Achievements Task 1: A Proof- of- concept: edusafe Other network challenges: How can I securely share my hard drive remotely? How do I secure my traffic on public networks? Can I do this in a simple way? 5

6 Scenario 1: Privacy and untrusted networks 6

7 Scenario 1: Privacy and untrusted networks Tunneling to a trusted gateway 7

8 Scenario 1: Privacy and untrusted networks Tunneling to trusted gateways 8

9 Scenario 2: Ad hoc networking edusafe with mulaple users 9

10 Scenario 3: Access to other connec2vity services edusafe and MD- VPN 10

11 Achievements Task 1: A Proof- of- concept: edusafe edusafe is: An edugain- enabled web portal To easily create/join VPNs With or without access to the public Internet Sodware- based VPNs: Complements MD- VPN, CoCo, etc. Scenario 3: extension of hardware- based connecavity services 11

12 edusafe development Currently Beta Version with VMs across Europe and USA CollaboraAon and exchange of ideas with NRENs: eduvpn (SURFnet) Discussion with AArnet Ongoing work for scaling Focus on Scenario 1 in coming months 12

13 Further work and collabora2on Network FuncAon VirtualizaAon Is going to take over a lot of funcaons from tradiaonal HW based devices Placing the network funcaons in a datacenter makes it possible to scale up and down based on demand Serve 99,9% of the NREN users Rather that 0,01% with big pipes (although a corner stone that should not be neglected) ISP and Incumbents are heavy looking in this way For the sake of revenue/profit Plenty of equpment vendors are looking for partners to fill their AppStore with SW StandardizaAon is also taking place hop:// clusters/technologies/nfv No doubt that this is going to be a big business 13

14 Thank you and any ques2ons?