EVOLUTION OF SUBSCRIBER AND APPLICATION CONTROL : BRIDGING THE GAP BETWEEN NETWORK AND APPLICATIONS. Jacopo Pianigiani September 18 th, 2012

Transcription

1 EVOLUTION OF SUBSCRIBER AND APPLICATION CONTROL : BRIDGING THE GAP BETWEEN NETWORK AND APPLICATIONS Jacopo Pianigiani September 18 th, 2012

2 AGENDA The evolution of control in Service providers services Juniper reference architecture Use cases for Service providers monetization 2 Copyright 2012 Juniper Networks, Inc.

3 THE EVOLUTION OF CONTROL IN SERVICE PROVIDERS 3 Copyright 2012 Juniper Networks, Inc.

4 NEW WAYS TO MONETIZE THE NETWORK Personalization of services Tiered Subscriptions Guaranteed Delivery Location Based Services Turbo Performance Long-Tail Applications Self Care Virtual Reality Zero Rating Turbo Button Assured Tele-presence The New Network Innovative Business Models Targeted Advertising Micro SLA Revenue Share with Content Providers by service exposure Capitalize on the Internet of things Secure Mobile Banking Smart-Grid, M2M $ 4 Copyright 2012 Juniper Networks, Inc.

5 AN EVOLVING RELATIONSHIP BETWEEN USER, NETWORK AND APPLICATIONS Subscriber User to network relationship Service Provider Service Applications Provider over a connected network Subscriber User to content relationship Service Provider WWW Service Provider Subscriber User to user through applications User to applications 6 Copyright 2012 Juniper Networks, Inc.

6 EVOLUTION OF CONTROL IN SP NETWORKS WiFi as PC add-on Limited bandwidth on shared channels Single PDP Usage control 3G device as modem Separate voice and data infrastructures Feature phones predominant MTC devices Vulnerabilities AppStores YouTube FB Skype Availability of WiFi in devices and locations Smartphones and smart devices High access bandwidth Personalization Session based charging Usage Control Application awareness and control Network context awareness Sponsored charging, split charging Usage context awareness Federated identity management for delegated service control Control and exposure to application functions, in house and external 7 Copyright 2012 Juniper Networks, Inc.

7 JUNIPER REFERENCE ARCHITECTURE 8 Copyright 2012 Juniper Networks, Inc.

8 FIRST PHASE: SERVICE AWARENESS AND CONTROL APPLICATION PLANE End user application logic Media portal In house applications Selfcare portal Branded App RCS MMTEL Open Garden Applications Gaming Media events Surveillance Hosted Enterprise Remote training CONTROL PLANE Decision layer NETWORK PLANE Network Capabilities For detection and control CHARGING CONTROL POLICY AND APPLICATION CONTROL RG RG UE UE Wired Access Network Wireless Access Network SERVICE EXPOSURE SUBSCRIBER / NETWORK / SERVICE STATE BNG epc Subscriber edge SUBSCRIBER IDENTITY MANAGEMENT AND PROFILING DPI TDF SERVICE PROFILING FW Opt Proxy Network VAS Cache FW SERVICE DELIVERY, ACTIVATION AND MANAGEMENT CONTROL 9 Copyright 2012 Juniper Networks, Inc.

9 SOLUTION ARCHITECTURE PCC REFERENCE MODEL Collapsed Scenario: Separated Scenario: Juniper MX MobileNext MBG or MX Internal BNG Web Svc SOAP,Rx as PCEF Juniper MobileNext MBG or MX BNG as PCEF SOAP,Rx with integrated TDF (application detection apps and Application detection and control on the MX SDG as TDF, Network / RAN PCRF control) additional specific application Rx functions AF as second-tier of CongestionMgmt HSS/SPR Application specific TDF functions orchestrated by application specific TDF OCS subscriber edge (PCEF) capabilities Sp OCS Sy Network access Subscriber Edge GGSN/PGW,BNG 10 Copyright 2012 Juniper Networks, Inc. Gx Gx/Sd PCEF with or without colocated TDF Gy Gx TDF SDG Gy HTTP TDF App#1 AppSvr Application-specific (HTTP) TDF with per subscriber Internet Policy and charging Web controls Standalone TDF with enhanced ADC controls (QoS, per application steering, usage controls) and Application-Based Charging

10 COMBINING APPLICATION AWARENESS WITH EDGE DISTRIBUTION OF CONTROL AND ENFORCEMENT FUNCTIONS [Access Network] Bearers Bearers VLANs Gx PCRF Subs Edge MobileNext MBG, MX BNG PCEF VAS Gx/Sd Sy Gy TDF (Integrated DPI) Session and application events correlation Sessions linking Policy control (usage control, events, OCS time based controls, QoS, ADC, integration with IT Portals) Coordination of policy and charging (Sy) Gy Charging control Exposure of service controls APIs App Detection and Control and VAS (SOAP) to apps or Web Svc Gateway 3 party HTTP Proxy + Optimizer Internal Apps, content, portals Policy control and Charging control at session and application level Steering at L4 or L7 (e.g. HTTP URL) Detection of events Policy control (and eventually charging) for specific flows (HTTP video, software downloads etc) External Apps/ content /web MobileNext SDG (Routing, forwarding and interconnect) 11 Copyright 2012 Juniper Networks, Inc.

11 DISTRIBUTED EDGE AND APPLICATION CONTROL DISTRIBUTION OF CONTROL AND ENFORCEMENT FUNCTIONS [Access Network] Gx PCRF Subscriber Edge Gx/Sd Gx/Sd Sy Gy Session and application events correlation Sessions linking OCS Policy control (usage control, events, time based controls, QoS, ADC, integration with IT Portals) Coordination of policy and charging (Sy) Gy Charging control Exposure of service controls APIs (SOAP) to apps or Web Svc Gateway App Detection and Control and VAS Bearers Bearers VLANs MobileNext MBG, MX BNG PCEF VAS MobileNext SDG TDF 3 party HTTP Proxy + Optimizer Internal Apps, content, portals VAS Policy control and Charging control at session level (if appllicable for use case) Detection of events Policy and charging control at L4 to L7 Per subscriber steering (L4 to L7) Policy control (and eventually charging, limited to specific use cases) for specific flows (HTTP optimized video, software downloads etc) External Apps/ content /web MobileNext SDG (Routing, forwarding and interconnect) 12 Copyright 2012 Juniper Networks, Inc.

12 APPLICATION AWARE NETWORKING BUILDING FOUNDATIONS FOR CONTROL Juniper MobileNext Control Gateway SGSN, MME MME S6a Converged PCRF Converged OCS HSS AAA Juniper J Pulse client SSL, Access selection, device control and detection Wifi Access Wifi Access 2G/3G Access 4G Access Wireline Access Juniper MobileNext Broadband Gateway SGW, PGW-GGSN, SaMOG Gateway Juniper MX BNG Broadband Gateway BNG, WiFi AG Juniper MX Service Delivery Gateway Enhanced TDF IPS, SFW, CGNAT, IPSEC, FW Policy controlled services 13 Copyright 2012 Juniper Networks, Inc. and ADC Gx Gx Gy Sy Gy Gx, Sd Gx, Sd Juniper MFC Cache Caching HTTP TDF CDN CGNAT FW Caching Tunnel svc Gx / Sd Policy mediation Sgi/Gi/AA Firewall IPS Juniper MX/SRX Network Firewall Enhanced Security and app detection TDF WWW Cloud

13 2 ND STEP OF SERVICE ARCHITECTURE EVOLUTION FROM INTEGRATED SERVICES, TO NETWORK-DISTRIBUTED Universal edge / VAS node Hardware accelerated throughput Open Development environment on Juniper platform Distributed edge / VAS architecture Virtual plane on/off box, OS/Language of choice Integration of third party native software as onboard services 17 Copyright 2012 Juniper Networks, Inc.

14 SECOND STEP TOWARD VAS DISTRIBUTION RG RG Wired Access Network Physical element BNG DPI Subscriber edge Physical element TDF/ DPI FW Network VAS Physical element Proxy FW Data Center End user Application End user Portals UE UE Wireless Access Network Physical element epc DPI Opt Physical element Cache Content Metro edge sites (10-100) Core sites (2-8) DataCenter sites (2-8) Independence of physical nodes vs. logical functions Independent software modules implementing Application aware capabilities and application specific functions Capacity at scale Service velocity Elasticity 18 Copyright 2012 Juniper Networks, Inc.

15 Ingress MPC Anchor MPC Egress MPC DATA PLANE WITH JunosV APP ENGINE Service Engineered Path (SEP) tethers Services plane to the MX Tethered Services appear identical to integrated onboard Services JunosV orchestrates SEPs from MX to VM applications SEPs built using stateless GRE MX COTS Juniper App Other App Routing Engine (RE) Virtual Junos Linux (Guest OS) KVM Hypervisor Centos (Host OS) VSE Appliance SEP Mobile 19 Traffic Copyright 2012 Juniper Networks, Inc. Service Engineered Paths

16 SERVICE CHAINING WITH JunosV & SEP Support of in house or third party VAS on COTS hardware via JunosV Appengine JunosV enables VM to VM connectivity through SEP s Service Chaining optimizes VM VM traffic MX-switched tunnels supported today Juniper DPI Virtual Junos COTS SEP KVM Hypervisor Centos (Host OS) VSE Appliance 3 rd party VAS e.g.http Proxy Linux (Guest OS) Subscriber Anchor/ edge Subscriber Anchor (IP) 20 Copyright 2012 Juniper Networks, Inc.

17 USE CASES 3RD PARTY CHARGE, DYNAMIC QOS, DYNAMIC PRICING, TIME SHIFT CONTENT DELIVERY 21 Copyright 2012 Juniper Networks, Inc.

18 CUSTOMER SATISFACTION 3 RD PTY /SPONSORED CHARGING Third party paid connectivity Application for specific control application flows Allocation of specific PCC / ADC rules for sponsored flows Usage Monitoring and reporting at sponsor connectivity level QCI/QoS mapping to applicaiton Accounting logs of API interaction Different rating groups / service Ids for sponsored-non sponsored flows network access Usage of sponsor identity and ASP Identity in Rx Query user by IP Internal SOAP,Rx SOAP based sponsored connectivity SOAP,Rx apps PCRF Rx HSS/SPR SAE GW MBG 23 Copyright 2012 Juniper Networks, Inc. Gx Sp Gx/Sd Sy Gy Gx TDF SDG OCS HTTP TDF Web Svc AF Application detection and control Internet Visited network Preconfigured access PCC rule with L7 detection of app X1 (HTTP, other non encrypted apps, encryted apps) or Dynamic ADC rules Charging on MBG (combined edge and DPI) or on SDG for distibuted scenario App#1 AppSvr Web

19 CUSTOMER SATISFACTION ZERO RATING / DROP RATING / GRACE PERIOD / SHARED DATA Allow zero rated or discounted usage for specific content and apps up to a certain volume Bolt-on data plan: PCC rulebase (including PCC rule for identifying the zero rated app) By day/hour: ToD procedures within PCC rule (e.g. App#1 For Grace period) For specific app Preconfigured PCC rule definition with AppID = X1, QoS App#2 network access - HSS/ SPR Gx Edge PGW, BNG Sp PCRF Gx/Sd Sy Gy Gx OCS Gy Different rating groups Different rating group based on customer Internet data, ToD, topup/boost, applications TDF HTTP TDF SDG Volume Cap or Balance shared across multiple subscriptions Shared Data cap across community members Shared tarif plan App#1 AppSvr App#2 AppSvr Classification of user traffic at application level App#3 Preconfigured PCC rule with L7 detection of app X1 (HTTP, other non encrypted apps, encryted apps), Dynamic ADC rules PCC Rules with UM for volume cap at app level (e.g. Facebook free up to 100MB) 24 Copyright 2012 Juniper Networks, Inc. Usage monitoring control applied to PCC/ADC rule Or OCS Gy Usage Control (e.g. Separate Service Id or Rating Group) for zero rated / discounted content

20 CUSTOMER SATISFACTION BUSY HOUR VIDEO QUALITY CONTROL/DRIPCASTING Allow the user lower cost viewing experience (deferring access to content in BH or controlling the quality of content being delivered) Bolt-on data plan: a) PCC rulebase combining other PCC features (e.g. Volume caps via UM for video and fore rest of traffic) By App#1 day/hour: a) ToD procedures within PCC rule to define BH / non BH slots for activation of specific BH/ non BH rules For specific content App#2 network Preconfigured PCC rule definition access with AppID = X1 e.g. Netflix URL, Port 80, Enabling/Restricting Access Gating or strict/ loose QoS controls on PCC rule Engagement (BH, non BH) layer communicate with user: App#3 Provide options for users to select Video overlay with messages to user HSS/SPR SAE GW MBG PCRF OCS 28 Copyright 2012 Juniper Networks, Inc. Gx Sp Gx/Sd Sy Gy Gx TDF SDG HTTP TDF Internet App#1 AppSvr App#2 AppSvr Dynamic (e.g. BH, non BH) policy control on optimization Per subscriber per AppId steering -Video(e.g. trancoding URL=Netflix) and trans-rating steering and PCC/ADC Controls. -Image compression Charging control via Gy on MBG -e.g. or BH SDG optimized, (depending non BH=unoptimized whether TDF is integrated or distributed) - Per subscriber policy controlled restriction on content access (e.g. BH Optional Gy charging on HTTP restricted, TDF: (charging non BH on non volume restricted) of unoptimized video) -Eventually, charging on optimized content

21 WHAT ABOUT SDN? 30 Copyright 2012 Juniper Networks, Inc.

22 SERVICE CONTROL A TIERED TIME-SCOPE Subscriber lifetime Services Network mgmt Online and offline ntw controls Modifcation Activation Provisioning Prov. Mgmt Config Mgmt Offline e.g. analytics Online e.g PCRF or OCS session Application centric behaviours mandate a closed loop control between control layers which are separate, today User Behaviours App 4,5 App1,2 App 3 App6 31 Copyright 2012 Juniper Networks, Inc.

23 ARCHITECTURAL CHALLENGES DOES SDN ADDRESS THE FULL SCOPE? applications Applications A A W O R K F L O W NMS / Provisioning NMS / Provisioning network Controller (optional) Z Z Network Make networks relevant to applications and v.v. They interact through orchestration Network APIs unlock useful information Augment and enable existing workflows A larger scope than SDN The biggest problem to be solved is the near non-existent feedback loop between applications and the network. 32 Copyright 2012 Juniper Networks, Inc.

24 PROGRAMMABLE NETWORK MODEL Application In network Application SOAP, SAML, Diameter, REST Control Plane RADIUS, Diameter, COPS, CLI, OpenFlow Data Center Network 33 Copyright 2012 Juniper Networks, Inc.

25 PUTTING SDN & OPENFLOW IN CONTEXT SDN focus OpenFlow focus focus 34 Copyright 2012 Juniper Networks, Inc.

26 OUR DIFFERENTIATORS 35 Copyright 2012 Juniper Networks, Inc.

27 OUR DIFFERENTIATORS Personalization and monetization support Flexible Deployment scenarios Creating the basis for virtualization Full support of monetization use cases. Esisting ones, more challenging ones based on dynamic PCC e.g. Network congestion, dynamic charging, sponsored usage The architecture allows flexible deployment scenarios while ensuringoptimization of resource usage for subscriber and application control The principles of dynamic service orchestration and steering allow service providers to evolve their architecture toward a virtualized service-delivery infrastructure without forklift changes in the architecture design 36 Copyright 2012 Juniper Networks, Inc.

28

29 MEDIUM TERM 2015 APPLICATION ABSTRACTION VIEW - TOP VIEW OPEN GARDEN / SERVICE FEDERATION DOMAIN Device Device Application 1..n Application 1..k Browser Telstra Device Application 1..k IN HOUSE APPLICATIONS Telstra Device Application 1..k Browser STB GUI USER AND APPLICATION LAYER WEB APPSERVER APP 1 WEB SVCS PARLAYX API WEB SERVICES REST WEB APPSERVER APP N Partner API FUTURE SELFCARE PORTALS TELSTRA WEB PORTALS TELSTRA WEB SERVICES / APPS WEB SERVICES LAYER WEB SVCS PARLAY X REST WEB EXPOSED ZONE Identity Content Delivery control User Location Service activation status User Status and change Charging Control FCAPS exposure, Service quality mgmt NETWORK ENABLERS PCRF POLICY OCS OFCS NETWORK ASSETS GGSN/PGW GMLC PRESENCE P-CSCF/ SOFT SW SIP, Diameter, INAP/CAP, SMPP, MLP, ICAP, ISUP IT ENABLERS ANALYTICS CRM / WORKFLOW IMS AS QoS Control Network Status Control Messaging Rich Comm Control SERVICE ACTIVATION / MODIFY SERVICE EXPOSURE NETWORK IT PROTOCOL LAYER CONTENT SVRS Application Identity Application Usage SLA NETWORK SERVICE INVENTORY SOAP/XML, CORBA, LDAP, SQLNet, etc. SMSC 38 BNG LEGACY VAS/IN DNS/ENUM Copyright CDN / CACHE 2012 Juniper MMSC Networks, Inc. DPI PROXY OSS ENABLERS PERFORMANCE MGMT FAULT MGMT PROVISIONING MGMT SERVICE CATALOG CONTENT CATEGORIZATION CS CALL CTRL HTTP, RTP, RTSP, RTCP, etc.. Subscriber and Service State Datastore Online Status Historic Knowledge Base SERVICE QUALITY MANAGEMENT AAA HLR SPR HSS NP SECURE WEB ZONE Subscriber DB SECURE NETWORK /IT/OSS ZONE