Simulation of SDN/OpenFlow Operations. EstiNet Technologies, Inc.

Transcription

1 Simulation of SDN/OpenFlow Operations EstiNet Technologies, Inc.

2 Agenda: (1) 模擬器簡介 (2) 模擬器的基本操作 (3) 如何建置一個 SDN Topology (5) 如何下達指令並觀察 Flow Table, Group Table 與 Meter Table (5) 如何用 SDN 下達 QoS 指令並觀察結果 (6) 進階範例比較傳統網路 Port-based Operations 與 SDN 網路 Flow-based Operations 之不同

3 Introduction to EstiNet Simulator

4 EstiNet 網路模擬器 (Simulator) 以軟體模擬的方式, 呈現真實網路的組態與封包傳送行為 可在模擬的網路中藉由各式有線與無線的通訊協定來傳遞網路封包 可隨意控制網路狀態, 例如有線網路的封包傳送延遲與封包遺失率, 或是無線網路的封包傳送能量 / 距離等 Switch Router Switch Router Router Switch Router Router Switch 真實網路 EstiNet 網路模擬器 4

5 Ethernet & Wi-Fi Simulation 5

6 SDN Simulator Architecture (Out-of-band Control Plane) 6

7 What does OpenFlow Define? Tables, Messages Tables: Flow Tables, Group Tables, Meter Tables Flow Tables Group Tables Meter Table Flow Identification and Packet Modification & Forwarding (add/ modify /delete) Broadcast, Multicast, VLAN &LAG (Action Set : Bucket) Rate Limiting : Bands 限流 Messages: Controller-to-Switch Messages Asynchronous Messages Symmetric Messages 7

8 OpenFlow Messages (based on version 1.3.4) 8

9 OpenFlow Table Processing (v 1.3.4) Copy Copy Output Action Within Apply-Actions Instruction Output Action Within Apply-Actions Instruction Output Action Within Apply-Actions Instruction Pkt Hdr + Metadata + Action Set + In Port Flow Table 1 Pkt Hdr + Metadata + Action Set + In Port Flow Table 2 Pkt Hdr + Metadata + Action Set + In Port Flow Table n Execute Packet Action Set Put to some queue of some port Meter Instruction Meter Instruction Meter Instruction Group Action Within Apply-Actions Instruction Group Action Within Apply-Actions Instruction Direct Direct Direct Group Action Within Apply-Actions Instruction Meter Table Copy Copy Copy Execute Bucket Action Set Group Table 9

10 Flow Table 10

11 Action Types & Action Set 11

12 Group Table 12

13 Meter Table 13

14 Legacy switch vs SDN switch Legacy switch Port-based Distributed 分散式 Protocols are executed on switches SDN switch Flow-based Centralized 集中式 Protocols are executed on controller Control plan and Data plane are separated Flow-based operations can not only provide forwarding service but also support more advanced networking services, such as QoS. 14

15 用一個小型的 SDN 網路範例 ( 請同學實際操作 ) 來介紹模擬器的 4 個操作模式與 SDN 操作

16 SDN Simulation Simulation Time: E-Tools=> =>Configure Simulation Processes=> Simulation Engine => Set the Duration of Simulation=> ex: 3600 sec(s) Set the Progressing Mode => Try to Synchronize with the Real-world Clock [Node1] Start Time: 2 sec; Stop Time: 3600 secs Controller : [Ryu] ryu-manager /usr/lib/python2.7/site-packages/ryu/app/simple_switch_13.py [NOX] nox_core -i ptcp: switch [tcpdump] tcpdump -i eth0 -U -w controller.pcap [Node3] OpenFlow switch v13: [controller] => Controller IP Address [Flow Table] => Log Flow Table Entries [Node4] Start Time: 10 sec; Stop Time: 3600 secs Sender: ttcp -4 -t -s u -p [Node5] Start Time: 10 sec; Stop Time: 3600 secs Receiver: ttcp -4 -r -s u -p 8000 [Module]=> [MAC8023] Log Packet Statistics => Throughput (KB/sec) of Incoming Packets log tables, wireshark, throughtput 16

17 SDN Operations Outline Controller : Ryu Curl Commands in Ryu Add, Show, Modify and Delete Flow Entry Add, Show, Modify and Delete Meter Add, Show, Modify and Delete Group

18 Controller : Ryu

19 Install Ryu in Fedora 24 Perform the following commands in terminal with root privilege. 1. yum update 2. yum install python-pip 3. yum install python-devel 4. yum install python-eventlet 5. yum install python-routes 6. yum install python-webob 7. yum install python-paramiko 8. pip install ryu 9. pip install six --upgrade Verify the Installation

20 Setup Ryu for EstiNet 1. Find ryu-manager binary in your system whereis ryu-manager 2. Find Ryu workdir in your system ryu-manager Ctrl + C

21 Flow, Meter, Group Tables

22 OpenFlow Table Processing (v 1.3.4) Copy Copy Output Action Within Apply-Actions Instruction Output Action Within Apply-Actions Instruction Output Action Within Apply-Actions Instruction Pkt Hdr + Metadata + Action Set + In Port Flow Table 1 Pkt Hdr + Metadata + Action Set + In Port Flow Table 2 Pkt Hdr + Metadata + Action Set + In Port Flow Table n Execute Packet Action Set Put to some queue of some port Meter Instruction Meter Instruction Meter Instruction Group Action Within Apply-Actions Instruction Group Action Within Apply-Actions Instruction Direct Direct Direct Group Action Within Apply-Actions Instruction Meter Table Copy Copy Copy Execute Bucket Action Set Group Table

23 Curl Commands in Ryu

24 Curl command in Ryu curl -X POST -d '{"dpid": "3", "cookie":1, "priority":"0", "match":{"in_port":2}, "actions":[{"type":"output", "port":5}]}' Syntax : Check /usr/lib/python2.7/site-packages/ryu/app/ofctl_rest.py Check /usr/lib/python2.7/site-packages/ryu/lib/ofctl_v1_3.py

25 Add, Show, Modify and Delete Flow Entry

26 Topology

27 Unidirectional UDP Traffic Arrangement 01_Ryu_Simulation_FlowTable.xtpl Sender : - At Node 4 - ttcp -4 -t s -u -p Receiver : - At Node 7 - ttcp -4 -r -s u -p 8007

28 Get Switch s DPID Curl Command : #./get_dpid.sh curl

29 Add Flow Entries Flow entry 1 : Forward packets from port 2 to port 5 #./a_p2_p5.sh curl -X POST -d '{"dpid": "3", "cookie":1, "priority":"0", "match":{"in_port":2}, "actions":[{"type":"output", "port":5}]}' Flow entry 2 : Forward packets from port 5 to port 2 #./a_p5_p2.sh curl -X POST -d '{"dpid": "3", "cookie":1, "priority":"0", "match":{"in_port":5}, "actions":[{"type":"output", "port":2}]}' Flow Table 0 Entry 1 Entry 2 Pkt

30 Show Flow Entries Curl Command : #./show_flow.sh <Format> curl IP:8080/stats/flow/DPID <Example> curl

31 Modify Flow Entry Modify Flow entry 2 : Drop the packets from port 5 #./d_p5.sh curl -X POST -d '{"dpid": "3", "cookie":1, "priority":"0", "match":{"in_port":5}, "actions":[]}' Recover Flow entry 2 #./ma_p5_p2.sh curl -X POST -d '{"dpid": "3", "cookie":1, "priority":"0", "match":{"in_port":5}, "actions":[{"type":"output", "port":2}]}' Flow Table 0 Entry 1 Entry 2 Pkt

32 Delete Flow Entries Curl Command #./clear_all.sh <Format> curl -X DELETE IP:8080/stats/flowentry/clear/DPID <Example> curl -X DELETE

33 Add, Show, Modify and Delete Meter

34 Meter Type Type 1 : DROP Type 2 : DSCP_REMARK

35 Type 1: Drop

36 Bidirectional UDP Traffic Arrangement 02_Ryu_Simulation_Meter_Drop.xtpl Sender : - At Node 4 - ttcp -4 -t s u -p Receiver : - At Node 7 - ttcp -4 -r s -u -p 8007 Receiver : - At Node 4 - ttcp -4 -r -s u -p 8004 Sender : - At Node 7 - ttcp -4 -t -s u -p

37 Add Meter Entries Type 1 : DROP Meter entry 1 : 6 Mbps limit #./m1_6m.sh curl -X POST -d '{"dpid": "3", "meter_id":1, "flags":"kbps", "bands":[{"type":"drop", "rate":6000}]}' Meter entry 2 : 2 Mbps limit #./m2_2m.sh curl -X POST -d '{"dpid": "3", "meter_id":2, "flags":"kbps", "bands":[{"type":"drop", "rate":2000}]}' Entry 1 Entry 2 Meter Table

38 Show Meter Entries Curl Command #./show_meter.sh <Format> curl IP:8080/stats/meter/DPID <Example> curl

39 Add Flow Entries with Meter Flow Table 0 Entry 1 Entry 2 Flow entry 1 : Forward packets from port 2 to port 5 & limit throughput to 6 Mbps #./a_m1_p2_p5.sh curl -X POST -d '{"dpid": "3", "cookie":1, "priority":"0", "match":{"in_port":2}, "actions":[{"type":"meter", "meter_id":1}, {"type":"output", "port":5}]}' Flow entry 2 : Forward packets from port 5 to port 2 & limit throughput to 2 Mbps #./a_m2_p5_p2.sh Pkt Entry 1 Entry 2 Meter Table curl -X POST -d '{"dpid": "3", "cookie":1, "priority":"0", "match":{"in_port":5}, "actions":[{"type":"meter", "meter_id":2}, {"type":"output", "port":2}]}'

40 Add Flow Entries for ARP Flow entry 3: Assign ARP packets from port 2 to go out to port 5 #./f3_a_arp_p2_p5.sh curl -X POST -d '{"dpid": "3", "cookie":1, "priority":"1", "match":{"in_port":2, "arp_tpa":" "}, "actions":[{"type":"output", "port":5}]}' Flow entry 4: Assign ARP packets from port 5 to go out to port 2 #./f4_a_arp_p5_p2.sh curl -X POST -d '{"dpid": "3", "cookie":1, "priority":"1", "match":{"in_port":5, "arp_tpa":" "}, "actions":[{"type":"output", "port":2}]}'

41 Modify Meter Entry Modify Meter entry 1 Change meter band from 6 Mbps to 2 Mbps #./m_m1_6m_2m.sh curl -X POST -d '{"dpid": "3", "meter_id":1, "flags":"kbps", "bands":[{"type":"drop", "rate":2000}]}'

42 Delete Meter Entries Delete Meter entry 1 #./d_m1.sh curl -X POST -d '{"dpid": "3", "meter_id":1, "flags":"kbps", "bands":[{"type":"drop", "rate":2000}]}' Delete Meter entry 2 #./d_m2.sh curl -X POST -d '{"dpid": "3", "meter_id":2, "flags":"kbps", "bands":[{"type":"drop", "rate":2000}]}'

43 Type 2: DSCP_REMARK

44 DSCP Remark Table 0 Table 1 Packets Match : in port = 2 Action : DSCP remark Go to Table 1 Match : DSCP Action : Meter drop out port = 5

45 Unidirectional UDP Traffic Arrangement 03_Ryu_Simulation_Meter_DSCP_REMARK.xtpl Sender : - At Node 4 - ttcp -4 -t -s u -p Receiver : - At Node 7 - ttcp -4 -r s -u -p 8007

46 Add Meter Entries Type 2 : DSCP_REMARK Meter entry 1 : Remark DSCP to 1 if throughput reaches 8 Mbps #./m1_dscp1_8m.sh curl -X POST -d '{"dpid": "3", "meter_id":1, "flags":"kbps", "bands":[{"type":"dscp_remark", "rate":8000, "prec_level":1}]}' Meter entry 2 : 6 Mbps limit #./m2_6m.sh curl -X POST -d '{"dpid": "3", "meter_id":2, "flags":"kbps", "bands":[{"type":"drop", "rate":6000}]}' Entry 1 Entry 2 Meter Table

47 Add Flow Entries with Meter Flow Table 0 Entry 1 Flow Table 1 Entry 2 Flow entry 1 on Table 0: Assign packets from port 2 to go to Table 1 & Remark DSCP to 1 if throughput reaches 8 Mbps #./f1_a_m1_dscp1_p2_t1.sh curl -X POST -d '{"dpid": "3", "cookie":1, "priority":"0", "match":{"in_port":2}, "actions":[{"type":"meter", "meter_id":1}, {"type":"goto_table", "table_id":1}]}' Flow entry 2 on Table 1: Assign packets from Table 0 to go out to port 5 & limit throughput to 6 Mbps if DSCP is 1 #./f2_a_m2_dscp1_t1_p5.sh curl -X POST -d '{"dpid": "3", "cookie":1, "priority":"0", "table_id":1, "match":{"ip_dscp":1}, "actions":[{"type":"meter", "meter_id":2}, {"type":"output", "port":5}]}' Pkt Entry 1 Entry 2 Meter Table

48 Add Flow Entries for ARP Flow Table 0 Entry 1 Entry 3 Entry 4 Flow Table 1 Entry 2 Pkt Flow entry 3 on Table 0: Assign ARP packets from port 2 to go out to port 5 #./f3_a_arp_p2_p5.sh curl -X POST -d '{"dpid": "3", "cookie":1, "priority":"1", "match":{"in_port":2, "arp_tpa":" "}, "actions":[{"type":"output", "port":5}]}' Flow entry 4 on Table 0: Assign ARP packets from port 5 to go out to port 2 #./f4_a_arp_p5_p2.sh curl -X POST -d '{"dpid": "3", "cookie":1, "priority":"1", "match":{"in_port":5, "arp_tpa":" "}, "actions":[{"type":"output", "port":2}]}' Entry 1 Entry 2 Meter Table

49 Add, Show, Modify and Delete Group

50 Group Type Type 1 : ALL Type 2 : SELECT Type 3 : INDIRECT Type 4 : Fast Failover

51 Type 1: ALL Type 3: INDIRECT

52 Unidirectional UDP Traffic Arrangement 04_Ryu_Simulation_Group_ALL_INDIRECT.xtpl Sender : - At Node 4 - ttcp -4 -t -s u -p Receiver : - At Node 7 - ttcp -4 -r -s u -p 8007

53 Add Group Entry Type 1 : ALL Group entry 1 : Output to port 3, Output to port 4 #./g1_out_p3_p4.sh curl -X POST -d '{"dpid": "3", "type":"all", "group_id":1, "buckets":[{"actions":[{"type":"output", "port":3}]}, {"actions":[{"type":"output", "port":4}]}]}' Flow entry 1 : Output to port 5 & Go to Group table #./f1_a_g1.sh curl -X POST -d '{"dpid": "3", "cookie":1, "priority":"0", "match":{"in_port":2}, "actions":[{"type":"output", "port":5}, {"type":"group", "group_id":1}]}' Pkt Flow Table 0 Entry 1 Copy ALL, Port 3 & Port 4 Group Table

54 Show Group Entry Curl Command #./show_group.sh <Format> curl IP:8080/stats/group/DPID <Example> curl

55 Modify Group Entry Type 3 : INDIRECT Group entry 1 : Define one bucket only #./m_g1_indirect_p4.sh curl -X POST -d '{"dpid": "3", "type":"indirect", "group_id":1, "buckets":[{"actions":[{"type":"output", "port":4}]}]}' Pkt Flow Table 0 Entry 1 Copy INDIRECT, Port 4 Group Table

56 Delete Group Entry Delete Group entry 1 : curl -X POST -d '{"dpid": "3", "type":"indirect", "group_id":1, "buckets":[{"actions":[{"type":"output", "port":4}]}]}'

57 Type 2: SELECT

58 Unidirectional CBR UDP Traffic Arrangement 05_Ryu_Simulation_Group_SELECT.xtpl Sender : - At Node 4 - stg -4 -s stg_cbr_1sec.conf p 8007 Receiver : - At Node 7 - rtg -4 -u -p 8007

59 ADD Group Entry Type 2 : SELECT Group entry 1 : Round Robin output to port 3 and port 4 #./g1_runrobin_p3_p4.sh curl -X POST -d '{"dpid": "3", "type":"select", "group_id":1, "buckets":[{"weight":1, "actions":[{"type":"output", "port":3}]}, {"weight":1, "actions":[{"type":"output", "port":4}]}]}' Flow entry 1 : Output to port 5 & Go to Group table #./f1_a_g1r.sh curl -X POST -d '{"dpid": "3", "cookie":1, "priority":"0", "match":{"in_port":2}, "actions":[{"type":"output", "port":5}, {"type":"group", "group_id":1}]}' Pkt Flow Table 0 Entry 1 Copy SELECT, Port 3 & Port 4 Group Table Check results at Play Back mode

60 Type 4: Fast Failover

61 Unidirectional CBR UDP Traffic Arrangement 06_Ryu_Simulation_Group_Fast_Failover.xtpl Sender : - At Node 4 - stg -4 -s stg_cbr_1sec.conf p 8007 Receiver : - At Node 7 - rtg -4 -u -p 8007 Port 3 fails during 50 to 70 seconds.

62 Pkt Modify Group Entry Type 4 : Fast Failover Group entry 1 : Fast failover #./g1_ff_p3_p4.sh curl -X POST -d '{"dpid": "3", "type":"ff", "group_id":1, "buckets":[{"watch_port":3, "actions":[{"type":"output", "port":3}]}, {"watch_port":4, "actions":[{"type":"output", "port":4}]}]}' Flow entry 1 : Output to port 5 & Go to Group table #./f1_a_g1ff.sh curl -X POST -d '{"dpid": "3", "cookie":1, "priority":"0", "match":{"in_port":2}, "actions":[{"type":"output", "port":5}, {"type":"group", "group_id":1}]}' Flow Table 0 Entry 1 Copy FF, Port 3 & Port 4 Group Table

63 USE CASES OF SDN SIMULATION APPLICATIONS

64 在區域網路中 用 SDN 技術來提供 QOS 服務

65 傳統的區域網路不會特意提供 QoS 服務 互聯網中有八個伺服器分別傳送資料給位於區域網路的八個使用者 若由網管人員根據動態需求去修改網路設定來提供 QoS 服務, 容易發生設定錯誤的情況, 且不容易提供即時的服務 65

66 當大頻寬網段進入小頻寬網段時, 會形 成頻寬瓶頸 25 Mbps 1000 Mbps 80 Mbps 66

67 當網路有頻寬瓶頸時, 會導致使用者端的 資料接收量呈現不穩定的情況 ( 因自由競爭有限頻寬 ) 67

68 導入 SDN 技術後, 區域網路也可以提供 QoS 服務 C A B A. 導入 SDN Controller 與 SDN Switch 設備 B. SDN Controller 可自動分配頻寬給不同的使用者 C. 使用者可被分群, 來提供不同等級的 QoS 服務 68

69 SDN Controller 控制 SDN Switch 來管制 經過 Switch 的所有網路連線所能使用 的頻寬量 69

70 頻寬使用量經過管制後, 使用者端的資 料接收量就會呈現穩定的情況 頻寬保證 頻寬保證 頻寬分享 頻寬保證 頻寬分享 頻寬分享 頻寬分享 頻寬競爭 頻寬分享 頻寬競爭 頻寬競爭 70

71 進階範例比較傳統網路 Port-based Operations 與 SDN 網路 Flow-based Operations 之不同 ( 包含 Firewall 與 NFV +SDN SFC, Port-based Mirror 與 Flow-based Mirror, RSTP 與 SDN Path Optimization) 模擬設定與封包行為說明

72 Thank you for using EstiNet!