Network Virtualization for Future Internet Research

Transcription

1 Network Virtualization for Future Internet Research Mauro Campanella - GARR On behalf of the FEDERICA project Internet2 Fall Meeting New Orleans, October 14th, 2008

2 Agenda FEDERICA at a glance, vision and principles Description and status Network Virtualization details Boundaries 2

3 FEDERICA at a glance What: European Community co-funded project in its 7 th Framework Program in the area Capacities - Research Infrastructures 3.7 MEuro EC contribution, 5.2 ME budget, 461 Man Months When: 1 st January June 2010 (30 months) Who: 20 partners, based on stakeholders on network research and management: 11 National Research and Education Networks, DANTE (GÉANT2), TERENA, 4 Universities, Juniper Networks, 1 small enterprise (MARTEL), 1 research centre (i2cat) - Coordinator: GARR (Italian NREN) Where: Europe-wide e-infrastructure, open to external connections 3

4 FEDERICA Partners National Research & Education Networks (11) CESNET Czech Rep. DFN Germany FCCN Portugal GARR (coordinator) Italy GRNET Greece HEAnet Ireland NIIF/HUNGARNET Hungary NORDUnet countries Nordic PSNC Poland Red.es Spain SWITCH Switzerland Small Enterprise Martel Consulting Switzerland NREN Organizations TERENA The Netherlands DANTE United Kingdom Universities - Research Centers i2cat Spain KTH Sweden ICCS (NTUA) Greece UPC Spain PoliTO Italy System Vendor Juniper Networks Ireland 4

5 FEDERICA Vision Create by fall 2008 an e-infrastructure for all researchers on Future Internet. Allow researchers complete control of resources in a slice, enabling disruptive experiments. Support research in virtualization of e-infrastructures integrating network resources and nodes capable of virtualization (V-Nodes). In particular on multi(virtual)domain control, management and monitoring, including virtualization services and user oriented control in a federated environment Pave the way, research and create experience for the next generation of the European Research and Education Networks. 5

6 FEDERICA Principles 1. Create an agnostic and neutral (transparent) infrastructure 2. Create slices which are a set of (virtual) network and computing resources according to user s request and are disruptible 3. Provide to the user complete control within a slice down to the lowest possible layer (in particular allow any application and protocol) 4. Strive/engineer for reproducibility of experiments, i.e. given the same initial conditions, the results of an experiment are the same 5. Allow slices (if requested) to connect to the general Internet, to access external services/nodes (e.g. for content/delivery, specialized HW) 6. Ensure isolation between slices maintaining the possibility to crossconnect slides on request 7. Allow simultaneous use without conflict 8. Force/be exposed to topology changes (various level of resiliency) 9. Open to interconnect / federate with other e-infrastructures 10. Access granted through a User Policy Board 6

7 Agenda FEDERICA at a glance, vision and principles Description and status Network Virtualization details Boundaries 7

8 Design Principles: - Virtualization - Network and systems resources - Almost clean slate - Simultaneous use - Interconnection with general Internet - Extensible, open to federate and to host users resources 8

9 GN2 project The GÉANT2 network European NRENs Backbone based on dark fibers operated by DWDM at multiple 10 Gb/s 9

10 FEDERICA e-infrastructure 10

11 Topology NORDUNET SUNET KTH SE Legenda HEAnet IE DFN DE PSNC PL Core Nodes 1 Physical GbE from GN2+ 1 GbE VLAN or L2MPLS 1 Physical GbE tbd SWITCH CH RENATER FR FCCN PT i2cat ES GARR IT Red.es ES CESNET CZ GRNET GR Hungarnet HU Jan 2008 Oct 2008 Feb 2010 Slices Month 10 11

12 Agenda FEDERICA at a glance, vision and principles Description and status Network Virtualization details Boundaries 12

13 Pictorial of Slices Creation The user requests an Infrastructure made of L2 circuits, un-configured virtual nodes, to test a new BGP version. NRENs and Global Internet Slice 1 FEDERICA substrate FEDERICA Network Layer substrate FEDERICA Data Link layer substrate FEDERICA Physical Layer substrate Virtual Router/Switch Virtual node 13

14 Slicing the Core (Substrate) FEDERICA substrate Switches: Juniper MX480, (virtual and logical routing, MPLS, VLANs, IPv4 v6, QoS linecards) V-Nodes: Up to 8-16 images/node, Unix OS, 4-8 Ethernet NICs, ~ 1 TB disk, 4core CPUs 14

15 Sample FEDERICA PoP Out-Of-Band Terminal server Other FEDERICA PoPs Notes: - Each PC has many Gb Ethernet interfaces - The FastEthernet Interfaces are to decouple the control and data plane - OOB is not mandatory FEDERICA Computing Node (PC) FEDERICA Network switch BGP Peering NREN Production Network Management Legenda GigabitEthernet FastEthernet RS-232 The FEDERICA substrate (physical infrastructure and Single IP AS public number) 15

16 Network virtualization in FEDERICA A simple case of a slice containg only two hosts connected by a single circuit is discussed here for simplicity. Creating a virtual circuit between the two virtual system requires the as main steps: - Connect the network interface(s) in the virtual hosts to one of the physical interface(s) in the hosting platform. - Create a virtual circuit from one host the other, with a specified assured capacity or with a best effort quality. The following slides describes the architectural decision to optimize reproducibility in slice behaviour. 16

17 Network virtualization (V-nodes) Virtual slice Physical substrate To avoid contention at the V-Node level, more than one physical interface is installed in the V-Nodes. This to allow to preferably assign only one virtual interface to each physical interface. Also in the virtualization software to the logical interface of each nodes is assigned a single (software) bridge. 17

18 Network virtualization (network) Virtual slice Physical substrate There are various technologies available in FEDERICA to slice the 1 Gbps physical capacity between the two switches. The main distinction is whether assured capacity is requested or only reachability with no capacity guarantees. 18

19 Network virtualization (network) initial technologies MPLS Technology Ethernet VLAN Physical circuit IP packet based policers Non assured Capacity no limitation 4K vlans Very few Limited to IP Capacity Guarantees Without HW With HW assistance It is assumed that the switch has line rate switching capabilities for all its ports and that the V- Nodes contain HW capable of supporting full line rate in each interface. 19

20 Network Virtualization Although the mentioned technologies all work well on a single point to point link, in the case of assured capacity requests, the extension to a multi-hop meshed virtual network requires additional planning to avoid congestion. A careful engineering of each virtual network topology and hardware assistance can provide, on a the FEDERICA scale, capacity assurances for virtual networks in each slice. For these reasons it is not possible to allow, at least in the first phase of the project, complete open access to researchers. The request will instead be served through the NOC. 20

21 Agenda FEDERICA at a glance, vision and principles Description and status Network Virtualization details Boundaries 21

22 Initial Boundaries Scalability IPv6 to be enabled according to users requests Ethernet framing (large MTUs) as data link Packet switching and statistical multiplexing assumed by default Less powerful switches outside the core Initial manual provisioning Not all technologies available (e.g. wireless, nomadic nodes) Larger virtual slices can be obtained reducing the number of concurrent users, user s equip. may be added Equipment is ready for IPv6 Not considered a limiting factor, can be overcame later using WDM equipment Hardware QoS is available on two Juniper MX480 switches Rely more on software emulation Slower initial provisioning, matching the decision process Equipment hosting, federation with other testbed 22

23 Thank you for your attention 23