Layer 7 Visibility for vcpe Services

Transcription

1 Layer 7 Visibility for vcpe Services Erik Larsson, VP Marketing April 2016

2 Business Drivers for Enterprise vcpe Services Enterprise Drivers Service Provider Drivers Source: 2015 Virtual Edge Report, SDxCentral An opportunity for service providers to offer network management functions as a value-added service Page 2

3 Deployment Scenarios A Full Spectrum Single Smart CPE Basic Thin CPE Deployment scenarios will have a variable impact on the operator s IT systems and services offered Page 3

4 vcpe Benefits: Webification and Cloudification of the Telco Model Residential Self-service via web-based interfaces Service improvements deployed on a continuous basis Security and parental control for entire household at once Enterprise Lower costs (OPEX & CAPEX) Fewer technicians to manage infrastructure Reduced number and cost of physical hardware WAN optimization More flexible network management Self-service via web-based interfaces Service improvements deployed on a continuous basis Improved security Service Provider Lower OPEX Fewer truck and fewer field technicians Service provisioning and maintenance from a central point Customer self-service; webstore Service improvements deployed on a continuous basis Opportunities for new VAS Reporting, web-content filtering, self-provisioning, etc. Lower CAPEX Reduced number and cost of physical hardware vcpe enables operators to adopt a web-like operational model Page 4

5 What is Layer 7 Application Visibility? Optimize Monetize Protect Policy Control, QoS, Analytics, vcpe, NG Firewall, SIEM, Visibility on thousands of application protocols Extraction of 4,000+ Metadata Caller, called party, jitter, packet loss, latency, call duration, setup time, codec, throughput, mobile ID (IMSI, IMEI), phone number, user login, IP address, MAC address, date & time of login / logoff, subject of / chat / Webmail, sender, receiver, attached documents, response time, data transfer sessions (type, content, time), visited Website, page content, time spent on visit, basket share, referent, etc. Page 5

6 Why L7 Visibility? VNFs in the Data Center or PoP Layer 7 Classification Ethernet / IP / MPLS Dashboards Firewalling Content Filtering Other Services Enables optimization of services delivered to premises based on subscriber and application Enables simpler introduction of VAS All the associated benefits of vcpe (reduced cost, improved security, service agility, easier & faster deployment, etc.) COTS COTS Enterprise vcpe (L2 element) Page 6

7 Where is L7 Application Awareness Needed? Optimizing Service Function Chaining (SFC) Offering new Value-Added Services through a Web interface Firewalling Dashboards Need L7 Content filtering Other Granular and continuous Layer 7 application visibility helps operators overcome challenges associated with vcpe services Page 7

8 Why Add L7 Application Awareness to Service Chaining? Page 8

9 Why Add L7 Application Awareness to Service Chaining? Page 9

10 Why Add L7 Application Awareness to Service Chaining? Page 10

11 Where is the L7 Application Awareness in Service Chaining? Data Center Enterprise Site QoS NAT 2 FW L7 Dashboard L7 3 Layer 7 VPN Tunnels Classification 1 Layer 7 Classification vswitch with conntrack Service Classifier & Service Function Forwarder BENEFITS Service chaining: Optimization of services delivered to premises based on subscriber and application Service functions: firewalling, dashboards, etc. Page 11

12 Use Case #1: Layer 7 Inside the Service Classifier Configuration YAML or JSON Iptables or OpenFlow Service Function n Layer 7 Classification L7 Service Classifier VNF Service Function #1 (e.g Dashboard) Service Function #2 (e.g. FW) ConnTrack App ID or Qosmos IP Traffic Ingress Packet Collection (DPDK or Qosmos DPI Mem) Flow Table (conntrack or Qosmos Flow Table) Rule Chains (OVS or Qosmos rules) Tagged traffic Service Function Forwarder (Hypervisor vswitch) Page 12

13 Where is the L7 Application Awareness in Service Chaining? Data Center Enterprise Site QoS NAT 2 FW L7 Dashboard L7 Layer 7 Classification vswitch with conntrack VPN Tunnels Layer 7 Classification Service Classifier & Service Function Forwarder BENEFITS Service chaining: Optimization of services delivered to premises based on subscriber and application Service functions: firewalling, dashboards, etc. Page 13

14 Use Case #2: Layer 7 Inside a Firewall Configuration YAML or JSON Iptables or OpenFlow FW VM Layer 7 Classification ConnTrack App ID or Qosmos IP Traffic Ingress Packet Collection (DPDK or Qosmos DPI Mem) Flow Table (conntrack or Qosmos Flow Table) Rule Chains (OVS or Qosmos rules) Drop/Pass Rate Limit Mark Linux Server Egress Page 14

15 Where is the L7 Application Awareness in Service Chaining? Data Center Enterprise Site FW Dashboard QoS NAT L7 L7 3 Layer 7 Classification vswitch with conntrack VPN Tunnels Layer 7 Classification Service Classifier & Service Function Forwarder BENEFITS Service chaining: Optimization of services delivered to premises based on subscriber and application Service functions: firewalling, dashboards, etc. Page 15

16 Use Case #3: Layer 7 Inside an Enterprise Customer Dashboard Dashboard Configuration IPFIX, CSV, or OpenStack Ceilometer YAML or JSON Layer 7 Classification (purely passive role) Dashboard VM, virtual probe Copied Packets IP Traffic Ingress Packet Collection (DPDK or Qosmos DPI Mem) IP Traffic Egress Linux Server Page 16

17 Example: Layer 7 Classification Function for vcpe - Sinefa vcpe ready traffic visibility and control function Powered by Qosmos ixengine Available for download now Support for service chaining Cloud-based analytics and dashboards sinefa.com Page 17

18 Summary: Why Layer 7 Visibility for vcpe Services 1. Benefits beyond capex-opex savings 2. Perfectly in line with Webification and cloudification of telco business model 3. Optimized Service Function Chaining (SFC) delivered to premises based on subscriber and application 4. New services delivered through a Web interface (e.g. Firewalling, Dashboards) Layer 7 visibility is an essential ingredient of any vcpe strategy for both equipment vendors and operators Page 18

19 Copyright 2015 Qosmos S.A. All rights reserved. Qosmos, the Qosmos logo, Qosmos Classifier, Qosmos Service Aware Module, Qosmos Service Aware Module for vswitch, Qosmos SAM and Qosmos ixengine are trademarks of Qosmos. Other names and brands may be claimed as the property of others. Non-contractual information. Products and services and their specifications are subject to change without prior notice.