Service Assurance in the Era of Virtualization

Transcription

1 Service Assurance in the Era of Virtualization Sébastien Grognuz, Swisscom Dr Vikram Saksena, NetScout 2017 TM Forum 1

2 We need a story to virtualize our network functions! Comms/EPC AFG CSCF MRS Access 2G 3G 4G Small cells (P)WLAN BB W+ BSC RNC C-RAN Evolved Packet Core SGSN MME epdg Wireline DNS AAA AAA-FE GGSN S-GW PWLAN Core Business CPE WLC DHCP SPT-Clus. BNG MPLS-PE PCRF P-GW ISG LDAP DPI VPN RAS Firewall MCAR RCAR BBSC SDN-C EFS Proxy CGNAT Virtual Router LI Load Balancer CGNAT 6RD Signal./Roaming DSC Comms/CS MGW MSC-S Comms/UDM CUDB HLR-FE HSS-FE Comms/Solution Factory (Core & Service) Device Mgmt SBG VHE SIP Core Service Broker STP Farew.SMS Comms/Volume Factory-Core 6 6 BSF DNS NAF I-CSCF S-CSCF E-CSCF BGCF MRFP BGF WebRTC MRFC SBG IBCF ATCF P-CSCF SIP Trunk 6 6 NP DB LI SESM MS EIR Comms/Regulatory MTAS BCON RCS AS IP Loc. LBS Comms/Volume Factory-Service MMVAS HET AS SMSC MMSC SCCAS espin/ Srv. B ker UC IM & P MMI VPC SIS ENUM-FE MPS SMPC GMPC Voice Mail Televote MVR HET AS WebRTC 2017 TM Forum 2

3 Why do we need to virtualize? Enable rapid inovation More openess Higher return on investment New Business Business Network Services vcpe Economy of scale One infrastructure for several organizations Consolidate hardware, power, cooling systems and cabling Automation Shorter time-to-market for new services Simplified scale-up/down procedures Improved service resilience New Revenue Lower OPEX Lower CAPEX More flexibility Test services with lower risk 2017 TM Forum 3

4 How, can we to virtualize the network functions? ETSI NFV Reference Architecture Cloud Manager (ECM) E/// vepc E/// vims 3PP HDS-8000 Cloud Execution Environment (ECEE) SDN-C 2017 TM Forum 4

5 Step 1 of the journey : VoLTE Network Slice Swisscom aims to migrate its entire mobile packet core into a carrier-grade cloud provided by. The first stage consists to deploy a vp-gw, vpcrf and vepdg to produce the VoLTE and Wifi-Calling services. HLR-FE HSS-FE AAA PCRF Gb Iu S1 Gr S6a Rad Gx SGSN MME Gn S-GW P-GW Gi Swisscom is facing monitoring blind spots because inter-vm traffic never reaches the top of the rack. Monitoring of the east-west traffic prevents security and performance issue. NETSCOUT is today a major partner of Swisscom for the monitoring of the physical network function. Together with we want to demonstrate that 100% visibility of inter- VM traffic is possible. Radio Access Untrusted Wi-Fi Telco Cloud NFVI (OpenStack based) SWu vepdg S2b S5 vpcrf Gx vp-gw SGi Rx WWW IMS 2017 TM Forum 5

6 Service Assurance Challenges in the New Era Hybrid Networks Prevail Visibility Gaps Real-Time Monitoring Automation & Orchestration Adding virtual network elements to the mix raises the level of complexity. How do you get visibility across intra-host and inter-host traffic Auto-scaling of s requires capture and analysis of KPIs in a timely manner. Critical to ensure the success of NFV deployments. What s needed? What s needed? What s needed? What s needed? A complete view across your entire network with end-to-end correlation between physical & virtual elements. A solution that provides a comprehensive view of all traffic across service chains. A tool that can monitor and compute metadata and KPIs in real-time to enable auto-scaling. s require well-defined APIs to enable seamless integration with open source and commercial orchestration tools TM Forum 6

7 Virtual Instrumentation Options Smart vtap Smart vtap Smart vtap Smart vtap vswitch Hypervisor vswitch Hypervisor vswitch Hypervisor Virtual Probe runs in its own VM Deployed on shared or dedicated host Packet capture through vswitch port mirroring ( tap-as-a-service ) Smart vtap deployed on the same as, vswitch agnostic Provides basic set of KPIs Enables visibility in public cloud Smart vtap deployed with Selective packet forwarding from vtap for full analysis by No mirroring required on the vswitch 2017 TM Forum 7

8 Service Assurance Continuity Physical Gateway & Probe Service Assurance IMS Core IP Backbone Virtual Gateway & Probe Complete visibility across physical and virtual networks Common metadata from all probes facilitates seamless integration at the analytics layer Enables disruption-free evolution End to End VoLTE Call 2017 TM Forum 8

9 Assurance of New On-demand Services Business ucpe Service Assurance Metro Ethernet End to End SLA Operator Edge Cloud Fabric Switch vdns vfw vper vper Complete visibility from customer premises to the Operator Edge Cloud for SLA enforcement A small footprint can be remotely configured on the ucpe Dynamic configuration of instrumentation options as services are spun-up on demand 2017 TM Forum 9

10 Seamless Migration from Private to Public Cloud Public Cloud Internet Service Assurance Operator Private Cloud Fabric Switch Migrate applications into the Public Cloud without losing visibility The in the Public Cloud is deployed as a microservice embedded within the application End to end monitoring and assurance across Private and Public Clouds 2017 TM Forum 10

11 Smart Analytics drives Closed-Loop Assurance Descriptive o what happened Diagnostic o why it happened Predictive o what may happen Prescriptive o what actions to take Smart Analytics (Rules Engine, Machine Learning, Artificial Intelligence) High-Value Metadata High-Value Metadata Orchestration Platform Smart Instrumentation Network Auto-Configures without Human Intervention 2017 TM Forum 11

12 Summary Virtualized networks is the next major evolution in networking Operators gain control of service creation and are able to innovate faster in response to customer and market needs Networks become more agile and elastic, better managed and orchestrated, lowering the total cost of ownership Service Assurance is a critical bridge to this new network End-to-end visibility across the physical and virtual network infrastructures as the network makes this transition Migration to Public Cloud and enablement of new on-demand services Smart analytics for service delivery automation and just-in-time resource management 2017 TM Forum 12