Download software defined networking: a path to programmable

SOFTWARE DEFINED NETWORKING:
A PATH TO PROGRAMMABLE
NETWORKS
Jason Kleeh
September 27, 2012
What if you could …
Build your next
data center
optimized for
highest demands
in flexibility,
reliability, and
scale
Virtualize your
network starting
now for greater
responsiveness
and increased
asset utilization
Create and
deliver
customized
services and new
offerings at the
speed of
customer need
© 2012 Brocade Communications Systems, Inc. PROPRIETARY AND CONFIDENTIAL— Discussed under NDA Only
Unlock the
intelligence from
your network for
real-time
orchestration
and analytics
2
Why can’t you do these things today?
Traditional Network
• Network changes are
difficult, slow, and risky
• Can’t handle rapid
swings in traffic
demands
Hierarchical
Monolithic
Closed
North/SouthInflexible
optimized
• New services requires
too new specialized
skills
© 2012 Brocade Communications Systems, Inc. PROPRIETARY AND CONFIDENTIAL— Discussed under NDA Only
3
What is Software-Defined Networking
(SDN)?
• Software abstraction layer on top of networking
infrastructure
• Allows external “controller” to control how packets are
forwarded by routers and switches
• Key customer benefits:
• Decouple network application innovation from dependency on new router OS
releases
• Accelerate automation of network changes to increase service velocity
© 2012 Brocade Communications Systems, Inc. PROPRIETARY AND CONFIDENTIAL— Discussed under NDA Only
4
Brocade Cloud-Optimized Networking
Architecture for building the software-defined network
Cloud-Optimized
Network Stack
Enabling
Technologiesn
Key
Benefits
Cloud Management Layer
Cloud APIs: OpenStack, VMware,
Microsoft, CloudStack, etc.
Automation and
orchestration
Services Layer
Programmatic Control:
OpenFlow; OpenScript
Personalization and
monetization
Network Virtualization Layer
Overlay Networking:
VXLAN, NVGRE, STT; MPLS
Flexibility and efficient
asset utilization
Network Fabric Layer
Any-to-any connectivity:
Ethernet Fabrics; TRILL; IP routing
Reliability and
simplicity
© 2012 Brocade Communications Systems, Inc. PROPRIETARY AND CONFIDENTIAL— Discussed under NDA Only
5
Who is behind Software Defined Networking?
Open Networking Foundation (ONF)
Orchestration
• ONF launched publicly in March, 2011
App
App
App
Virtualization
• Support from more than 70 major
companies
• The ONF defines OpenFlow and API
specifications
App
Network OS
OpenFlow
Features
Physical
Network
OS
Hardware
Features
Features
OS
OS
Hardware
Features
Hardware
OS
Features
Hardware
OS
Hardware
• Founding members of ONF:
ONF SDN Model
(simplified)
x
© 2012 Brocade Communications Systems, Inc. PROPRIETARY AND CONFIDENTIAL— Discussed under NDA Only
6
Software Defined Networking and IETF
Similar Goals, Similar Architecture
• “SDN Problem Statement and Use Cases
for Data Center Applications”
• draft-pan-sdn-dc-problem-statement-and-usecases-02.txt
• Flexible in terms of provisioning protocols
• OpenFlow, NetConf, PCE
App
App
App
App
SDN Layer
(Network Virtualization, Programmability,
and Monitoring
Provisioning Protocols
Features
Physical
Network
OS
Hardware
Features
Features
OS
OS
Hardware
Features
Hardware
OS
Features
Hardware
OS
Hardware
SDN-enabled Network
© 2012 Brocade Communications Systems, Inc. PROPRIETARY AND CONFIDENTIAL— Discussed under NDA Only
7
OpenFlow Basics
© 2012 Brocade Communications Systems, Inc. PROPRIETARY AND CONFIDENTIAL— Discussed under NDA Only
8
OpenFlow Overview
• Protocol that enables communication between
an OpenFlow controller and an OpenFlow router
Control Plane
OpenFlow Controller
• Control plane routing decisions are made by the
controller, which typically runs on a server
• Data plane forwarding is still done by the router
• Router and controller communicate via the
OpenFlow protocol, which defines messages
• Router maintains flow tables, which are
maintained by the controller using APIs
© 2012 Brocade Communications Systems, Inc.
OpenFlow
Client
Control Plane
Router OS
Flow
Table
Data Plane
9
OpenFlow Router Operation
• Flow table contains entries that define a flow based on the packet header
• Flows are sorted by priority as defined by the controller, highest priority flows
match first
Flow Table
Ingress
Port
MAC
DA
?
Flow
Action
Counters
Flow
Action
Counters
Flow
Action
Counters
Flow
Action
Counters
Flow
Action
Counters
Does the packet belong to this flow?
MAC
SA
Layer 2
Ether
Type
© 2012 Brocade Communications Systems, Inc.
VLAN
ID
802.1p
Bits
IP
Src
IP
Dst


Add, Remove, Modify VLAN Tag
Forward to a Port List
Drop
Send Packet to Controller
Forward Via Control Plane*
Layer 3
IP
IP
TCP/UDP TCP/UDP
Protocol DSCP Src Port Dst Port
10
OpenFlow Applications
What can we do with OpenFlow?
• OpenFlow itself does not define or mandate any specific application
• OpenFlow enables a large set of applications due to its flexibility
• Supported applications should increase over time as new functionality
is added to the OpenFlow specification
• E.g., flow policing/rate limiting
• Ideal for automating common operations
• E.g. security via ACLs, isolation via VLANs or VRFs etc.
© 2012 Brocade Communications Systems, Inc. PROPRIETARY AND CONFIDENTIAL— Discussed under NDA Only
11
SDN USE CASE
WAN Traffic Engineering with OpenFlow
Example SDN Use Case
© 2012 Brocade Communications Systems, Inc. PROPRIETARY AND CONFIDENTIAL— Discussed under NDA Only
12
Internet2
BROCADE OPENFLOW ENABLED 100G NATIONWIDE BACKBONE
Seattle
Olympia
Spokane
Missoula
Dickinson
Fargo
Albany
Billings
Portland
Bozeman
Eugene
Miles
City
Boise
Bismarck
Minneapolis
Detroit
Madison
Indianapolis
Ashburn
Sacramento
Salt Lake
City
Sunnyvale
Denver
Kansas
City
Las Vegas
San Luis Obispo
Los Angeles
San Diego
Tulsa
Albuquerque
St. Louis
Memphis
Dallas
El Paso
IP router node
Optical add/drop facility
San
Antonio
New
York (2)
Washington
DC
Cincinnati
Louisville
Nashville
Chattanooga
Phoenix
Tucson
Cleveland
Pittsburgh Philadelphia
Chicago (3)
Reno
Boston
Buffalo
Raleigh
Charlotte
Atlanta
Jacksonville
Houston (2)
© 2012 Brocade Communications Systems, Inc. PROPRIETARY AND CONFIDENTIAL— Discussed under NDA Only
Internet 2
• 49 Custom Location
Facilities
• 15,500 miles of dark Fiber
Jackson
Baton Rouge
Exchange Point
• 8.8 Tbps of Optical Capacity
• Hybrid Mode with protected
OpenFlow traffic
13
Research and Education Network (REN) WAN Use
Case
“Protected” Production IP Network with OpenFlow Overlay
Features (Applications)
Network Controller
Protection
Layer
OpenFlow Overlay
Traditional MPLS/IP Routing
WAN Physical Infrastructure
© 2012 Brocade Communications Systems, Inc. PROPRIETARY AND CONFIDENTIAL— Discussed under NDA Only
• Hybrid port mode
• OpenFlow overlay runs
concurrently with traditional
MPLS/IP routing
• OpenFlow enabled on existing
production network without
disruption
• Protected
• OpenFlow experimentation by
researchers does not affect
production traffic
• OpenFlow/Production traffic
isolation in hardware
14
SDN USE CASE
Large-Scale Data Center and
Network Virtualization
© 2012 Brocade Communications Systems, Inc. PROPRIETARY AND CONFIDENTIAL— Discussed under NDA Only
15
Cloud-Optimized Networks via SDN
are the Solution
Brocade delivers a clear path to Software Defined Networking
Cloud
Management
System
VM
VM
PHY
VM
VM
• Network changes are quick
and easy
Network
Controller
PHY
VM
VM
PHY
PHY
VM
PHY
VM
VM
PHY
• Flexible, on demand networks
Network Fabric
Open
Automated
Flexible
• Rapid deployment of new
services
Personalized
More Resilient
• Highly automated
environments
© 2012 Brocade Communications Systems, Inc. PROPRIETARY AND CONFIDENTIAL— Discussed under NDA Only
16
Cloud Providers Will Face Same
Challenges
Increasing virtualization in cloud providers’ environments
Number of VMs in Use as Service Providers’
Cloud IaaS Offerings
© 2012 Brocade Communications Systems, Inc. PROPRIETARY AND CONFIDENTIAL— Discussed under NDA Only
Source: Gartner, March 2011
17
Network Virtualization Using L2 over L3 Tunnels
An Industry Trend for Hyper-Scale Data Centers
VM PHY VM VM PHY Tunnels
VM PHY VM VM VM PHY Tunnels
L2 over L3 Tunnels
PHY VM VM PHY Tunnels
SP Physical Infrastructure
© 2012 Brocade Communications Systems, Inc. PROPRIETARY AND CONFIDENTIAL— Discussed under NDA Only
 Network Virtualization
created using L2 over L3
tunnels
 Programmatic interface
may use OpenFlow
 Requires additional
management protocols
beyond OpenFlow to
provision tunnels
18
Network Virtualization Using L2 over L3 Tunnels
TUNNEL TECHNOLOGY: RECENT INDUSTRY PROPOSALS
• VxLAN (IETF draft, August 2011)
• Author: VMware
• NVGRE (IETF draft, September 2011)
• Author: Microsoft
L2 over L3 tunnel
L2
L2
Payload
L3
L2
Tunnel header
• STT (IETF draft, March 2012
• Author: Nicira
BROCADE SOLUTIONS WILL BE TUNNEL AGNOSTIC
© 2012 Brocade Communications Systems, Inc. PROPRIETARY AND CONFIDENTIAL— Discussed under NDA Only
19
Thank You
© 2012 Brocade Communications Systems, Inc. PROPRIETARY AND CONFIDENTIAL— Discussed under NDA Only
20