How DPI enables effective deployment of CloudNFV. David Le Goff / Director, Strategic & Product Marketing March 2014

Transcription

1 How DPI enables effective deployment of CloudNFV David Le Goff / Director, Strategic & Product Marketing March 2014

2 Key messages of this presentation 1. DPI (Deep Packet Inspection) is critical for effective orchestration 2. Qosmos DPI technology supplies both App-ID and detailed metadata 3. CloudNFV is a practical illustration of ETSI NFV recommendations Page 2

3 Qosmos Creates and Information Layer for Network Applications NoC Monitoring Mobile QoS/QoE Policy Management Analytics Tiered Services Customer Applications DPI and Network Intelligence components: -Feeds applications with detailed visibility on all network-based activity -Single, unified DPI technology used for several applications Information Infrastructure: - Proprietary or X86-based COTS hardware Infrastructure Page 3

4 Applications and Networks are Service Aware NoC Monitoring Mobile QoS/QoE Policy Management Analytics Tiered Services Customer Applications Visibility on thousands of applications Network Intelligence: -Feeds applications with detailed visibility on all network-based activity -Single, unified DPI technology used for several applications Extraction of thousands of metadata Information Caller, User-agent, called party, jitter, packet loss, latency, call duration, setup time, codec, throughput, mobile ID (IMSI, IMEI), phone number, user login, IP address, MAC address, date & time of login / logoff, subject of / chat / Webmail, sender, receiver, MOS, response time, data transfer sessions (type, content, time), visited Website, codecs, page content, time spent on visit, basket share, referent, etc. Infrastructure: - Proprietary or X86-based COTS hardware Infrastructure Perfectly in line with SDN & NFV Page 4

5 Reminder: The ETSI NFV Call For Action (October 2012) DPI is critical for effective orchestration! Source: Network Functions Virtualization Introductory White Paper, Page 5

6 CloudNFV: Unifying Open Innovation, SDN and NFV Page 6

7 CloudNFV Approach Build a unified data model that can incorporate both service and resource data and policies, and that can be updated from and reflected through virtually any interface Build an orchestration process that optimizes resource assignments and service composition based on arbitrarily rich policies Incorporate management in a distributed, multi-context, way. Page 7

8 CloudNFV: Partner Architecture Page 8

9 Qosmos Service Aware Module (SAM) for vswitch Qosmos SAM DPI module Integrates with any virtual switch to provide detailed, real-time traffic intelligence Classifies flows and extracts metadata at the hypervisor level Configurable at runtime/cli or using upcoming OpenFlow version Conveys application & protocol information in-band or out-of-band Example of integration: Intel DPDK vswitch A fork of the open source Open vswitch multilayer virtual switch from High performance with DPDK acceleration Benefits Short time to market for solution developers Built-in real-time intelligence at the infrastructure layer Consistent description of DPI analysis fed to all VMs OpenStack (or similar) Tenant Virtual Machine Qosmos SAM Orchestrator Tenant Virtual Machine Neutron Nova Hypervisor Infrastructure Virtual Machine Intel DPDK Virtual Switch Physical Server / Infrastructure Controller Example of implementation principle Page 9

10 Example of Use Case: Optimized VM Placement in Data Center Challenges Due to unpredictable traffic between application Virtual Machines (VMs), service providers typically have to over-dimension systems to deal with traffic peaks and to ensure dynamic resource allocation This results in a sub-optimal distribution of VMs across available physical servers Solution Qosmos SAMs placed in each host drastically improve the orchestrator s ability to understand application traffic in real time and thereby to optimize VM placement Virtual Machine Management & Orchestration (MANO) Qosmos SAM Virtual Machine Virtual Machine Virtual Switch Benefits Consolidation of VMs with similar contexts onto a single hosts Ability to anticipate scaling needs (up, down, out) Improved quality of service with e.g. preventive redundancy Hypervisor Physical Server / Host Traffic Page 10

11 Qosmos Virtualized DPI (VNFC) Principle Qosmos DPI Virtual Network Function Component (VNFC) runs DPI software Protocol classification and metadata extraction in a VM form factor Standard ETSI-compliant Seamless integration with ETSI VNF products Ready for OpenStack Conveys application & protocol information in-band (packet tagging) or out-of-band (API) Benefits Short time-to-market for solution developers Safe implementation: VNFCs de-correlated from DPI software and signature updates Improved flexibility (VM migration) Elastic scalability (up & out) OpenStack (or similar) VNFC Orchestrator Qosmos DPI VNFC Neutron Nova Virtual Switch Hypervisor VNFC Virtual Network Function (VNF) Physical Server / Infrastructure Controller Example of implementation principle Page 11

12 Example of Use Case: Elastic DPI for Virtual Evolved Packet Core (vepc) Challenges Performance when DPI is using same processing power as network functions Long development cycles to embed DPI in each function (silo-based approach) Solution Qosmos DPI provides protocol classification and metadata extraction in an ETSI-compliant VNFC-format Benefits Short time to market for solution developers High performance with elastic DPI scalability for vepc Safe implementation: PDN-GW service function is decorrelated from DPI software and signature updates Enables multiple use cases: monitoring (SLAs), policy enforcement, tiered pricing, analytics, parental control, application gating (government regulations) vmme vdsc OSS / BSS Management & Orchestration (MANO) vgw vdpi vdpi Qosmos DPI Network Functions Virtualization Infrastructure (NFVI) Page 12

13 Benefits of DPI and Network Intelligence in SDN & NFV 1. Feed the orchestration system to provide intelligence and application awareness Deployed in strategic point of the network Active Loopback mechanism Page 13

14 Benefits of DPI and Network Intelligence in SDN & NFV 1. Feed the orchestration system to provide intelligence and application awareness Deployed in strategic point of the network Active Loopback mechanism 2. Simplified deployment of network services Thanks to standardized, consistent DPI operation Scalable, elastic compute resources by design Page 14

15 Benefits of DPI and Network Intelligence in SDN & NFV 1. Feed the orchestration system to provide intelligence and application awareness Deployed in strategic point of the network Active Loopback mechanism 2. Simplified deployment of network services Thanks to standardized, consistent DPI operation Scalable, elastic compute resources by design 3. Service Providers can save costs and grow revenue Optimize costs with real time automation systems Grow in revenue with application intelligence over their networks Page 15

16 Key messages of this presentation 1. DPI is critical for effective orchestration 2. Qosmos DPI technology supplies both App-ID and detailed metadata 3. CloudNFV is a practical illustration of ETSI NFV recommendations Page 16

17 Qosmos, Qosmos ixengine, Qosmos ixmachine and Qosmos DeepFlow are trademarks or registered trademarks in France and other countries. Other company and products name mentioned herein are the trademarks or registered trademarks of their respective owners. Copyright Qosmos Non-contractual information. Products and services and their specifications are subject to change without prior notice Qosmos