Managing a Virtual Network Function using SDN and Control Theory

Size: px

Start display at page:

Download "Managing a Virtual Network Function using SDN and Control Theory"

Milo Dawson
6 years ago
Views:

1 Managing a Virtual Network Function using SDN and Control Theory GENI Summer TAMU May 24 th, 2017 Ibrahim Matta Joint work with Nabeel Akhtar and Yuefeng Wang

2 GENI resources that we need Network Sliver Controller Sliver GENI tesbed

3 So before we get started Login to GENI at and select the GRW- Summer- Camp- TAMU project Create two new slices for network and controller Ryu version: Follow Step 3 (Obtain resources: 3.1 & 3.2) under Design/Setup Bind your resources to an InstaGENI rack Reserve your resources Later we will login to these VMs

4 Control Theory

5 Control Theory

6 Control Theory 90% of the real world applications are based on 10% of the existing control methods and theory Dimitry Gorinevsky Stanford University

Examples of Control Theory in CS TCP/IP Analysis and systematic design was developed some 20 years later QoS in Caching Apache QoS differentiation See: Optimizing and Modeling Dynamics in

7 Examples of Control Theory in CS TCP/IP Analysis and systematic design was developed some 20 years later QoS in Caching Apache QoS differentiation See: Optimizing and Modeling Dynamics in Networks. In Hamed Haddadi and Olivier Bonaventure, editors, ebook on Recent Advances in Networking, volume 1. ACM SIGCOMM, August Licensed under a CC- BY- SA Creative Commons license.

8 Managing NFV using SDN & Control Theory RINA PI Controller OVS Controller Use- case: VNF- IDS load balancing

9 System Overview Network Sliver Controller Sliver VNF1 SNORT IDS GENI tesbed RINA App RINA Network RIB controller CDAP DAF RINA App RIB Load Balancer OVS controller OF rules IDS load info load balancing info RIB RINA App VNF2 SNORT IDS

10 Network Traffic Network Sliver Controller Sliver GENI tesbed

11 Network Traffic Network Sliver Controller Sliver GENI tesbed

12 Snort as IDS Open source IDS system widely deployed InfoWorld's Open Source Hall of Fame as one of the "greatest open source software of all time Protocol analysis, content searching and content matching

13 RINA

14 Recursive InterNetwork Architecture (RINA) Clean slate Future Internet Architecture Networking is Inter- process communication (IPC) Old principle applied (e.g., TCP RFC 793, 1981) DIF (Distributed IPC Facility) processes cooperating to provide IPC DAF processes cooperating to perform a certain function App1 IPC1 (sender/ receiver) (N-1)-level DIF DAF (Shared State) N-level DIF (Shared State) IPC2 (sender /relay/ receiver) App2 IPC3 (sender/ receiver) (N-1)-level DIF See GEC19 Tutorial: JEs

15 Controller

16 Proportional Integral (PI) Controller

17 Proportional Integral (PI) Controller

18 PI- based OVS Controller

19 PI- based OVS Controller

20 OVS Ryu controller (1) In the _packet_in_handler method, the code below decides on the type of controller, and which VNF instance the flow should be forwarded: However, if the source of the IP packet is in the blacklist, then the_packet_in_handler method drops the packet by exiting the method call:

21 OVS Ryu controller (2) If PI controller is selected, then the PISelection method decides to which VNF instance the flow should be forwarded:

22 Round Robin based OVS Controller

23 Round Robin vs PI Control based load balancer

24 Scaling VNF- 1 VNF- 2 VNF- 3 VNF- 4...

25 DEMO

26 Conclusion First work that combines Control Theory with SDN/NFV management Control Theory can play crucial role in SDN/NFV management Use case: Load balancer for IDS (VNF) GENI test- bed is used for realistic experimentation RINA based distributed application is used for monitoring PI- Controller Scaling

27 Tutorial to reproduce results: POX version: Ryu version: Our paper: Nabeel Akhtar, Ibrahim Matta and Yuefeng Wang. "Managing NFV using SDN and Control Theory". IEEE/IFIP International Workshop on Management of the Future Internet (ManFI 2016), co- located with NOMS 2016, Istanbul, Turkey, April [Technical Report: TR pdf ] [Demo at NOMS 2016: ]

Programming Routing Policies for Video Traffic

Programming Routing Policies for Video Traffic Yuefeng Wang Nabeel Akhtar Ibrahim Matta Computer Science Department, Boston University Boston, MA 02215 {wyf, nabeel, matta}@bu.edu Technical Report BUCS-TR-2014-005