programmable network platform of activity in industry
TRANSCRIPT
Programmable Network Platform of activity in Industry
APAN 32nd India, 24th Aug 2011Y hihik K iYoshihiko KanaumiNEC Corporation
(C) Copyright of NEC Corporation
OutlineOutline
▐ Trials of NEC OpenFlow Switch (ProgrammableFlow Switch)Switch)
▐ ProgrammableFlow Product Overview▐▐ P bl Fl d i I T kP bl Fl d i I T k▐▐ ProgrammableFlow demonstration on Interop Tokyo ProgrammableFlow demonstration on Interop Tokyo
2011 ShowNet2011 ShowNet▐ Commercial Customers of ProgrammableFlow
system▐ NEC’s Open Source based OpenFlow Controller
Platform: Trema
Page 2 (C) Copyright of NEC Corporation
Trials of NEC OpenFlow SwitchTrials of NEC OpenFlow Switch-- PFlow SwitchPFlow Switch
Page 3 (C) Copyright of NEC Corporation
OpenFlow trial in Stanford OpenFlow trial in Stanford ▐ OpenFlow switch trial from Jan.2009▐ OpenFlow spec 1.0 compliant, and
interoperable with HP.
▐ OpenFlow Mobility trial from Jan. 2009 ▐ Use 90 Wifi BS, 2 NEC WiMAX BS▐ Trial of Wifi-WiMAX vertical H/Ointeroperable with HP.
▐ Coexist with production network and OpenFlow networks isolated by multiple virtual hardware switches Wireless APs deployed in Gates (30 APs)
▐ Trial of Wifi-WiMAX vertical H/O,▐ potential use of dynamic flow control
multiple virtual hardware switches Gates104
NEC OFSOn wiring tray along the corridorMobile WiMAX Basestation (NEC)
• 2.496-2.690 GHz• Tx power (Max): 40dBm (10W)
Antenna (3dBi)ASN-GW (Linux PC)
• Tx power (Max): 40dBm (10W)• Bandwidth: 5 or 10MHz• FCC Experimental License : Upto 27dBm (502.1mW)
Basestation
Wiring closet in Gates building
Client card (CardBus)Page 4 (C) Copyright of NEC Corporation
GENI OpenFlow Campus TrialGENI OpenFlow Campus Trial
▐ GENI 9th Conference @ Washington D.C. (Nov.2010)
GENI OpenFlow Campus Interconnect Demo
OpenFlow Campus Demo was done among 8+alpha universities(Stanford, (GeorgiaTech, Indiana, Wisconsin, Purdue, Princeton, Univ. ofPrinceton, Univ. of Washington, Duke, Rutgers)NEC OpenFlow Switches are being used in GENI Trialbeing used in GENI Trial Network.
NEC’s OpenFlow Switches
http://groups.geni.net/geni/wiki/GEC9_snapshots
Page 5 (C) Copyright of NEC Corporation
IPIP--TV Broadcast Trial with OpenFlow in JGN2plus (Feb. 2010)TV Broadcast Trial with OpenFlow in JGN2plus (Feb. 2010)
Th Fi t O Fl b d i l i t i l b d WANThe First OpenFlow based commercial service trial based on WAN ▐ 30 NEC PFS-es are allocated in Sapporo, Tokyo, Osaka, Fukuoka and etc on JGN2Plus in
conjenction with NICT▐ Joint trial with NIC on JGN2Plus to broadcast baseball games and Sapporo Snow Festival▐ Joint trial with NIC on JGN2Plus to broadcast baseball games and Sapporo Snow Festival
・Sapporo snow festival・HBC・HTB・HTBHOTnet
・TJB・
KOREN
TV Broadcast as OpenFlow application
・NTT Kyushu
・NTT Tokyo
KOREN
・P2P / P2MP transmission of SDTV/HDTV・Bi/tri casting for reliable transfer
application・KDDI Tokyo
・MBSABC ・Bi/tri-casting for reliable transfer
・Network slicing and virtualization
Flow setup in 7msec flow
・ABC・CKP・NTT
・Okinnawa
Flow setup in 7msec flowDynamic flow visualization
Page 6 (C) Copyright of NEC Corporation
ProgrammableFlow Product OverviewProgrammableFlow Product Overviewgg
Page 7 (C) Copyright of NEC Corporation
Introducing the ProgrammableFlow Product LineIntroducing the ProgrammableFlow Product Line
Open, Scalable, Simple Fast NetworkingProgrammableFlow Network Fabric provides a scalable and extensible platform for integrating network management and control with the rest of IT Infrastructure.integrating network management and control with the rest of IT Infrastructure. ProgrammableFlow allows network administrators dramatically improved control over the network infrastructure compared to other legacy platforms. ProgrammableFlow Network Fabric:g
Provides centralized control and visibility at every level of network infrastructureUnlocks the power of OpenFlow switching through open interfacesIs a scalable and extensible network control platform with fine grained networkIs a scalable and extensible network control platform with fine grained network control capabilities
PF series
ProgrammableFlow Controller (PFC) ProgrammableFlow Switch (PFS)
le le
Prog
rammab
lFlow
Con
troller
Prog
rammab
lFlow
Man
ager
OF Switch Licenses
Page 8 (C) Copyright of NEC Corporation
First OpenFlow Products (Controller and switch)First OpenFlow Products (Controller and switch)-- New ProgrammableFlow productsNew ProgrammableFlow products
▐ ProgrammableFlow Switch (PFS) PF5240Port Counts: 1GbE x 48 + (10GbE(SFP+) or 1GbE(SFP)) x 4Large Flow Entry model (beyond 100K entries)Large Flow Entry model (beyond 100K entries)OpenFlow 1.0 supportWire-rate forwarding of OpenFlow traffic with flow entry search and its actions specified by controller
ProgrammableFlow Switch PF5240▐ ProgrammableFlow Controller (PFC) Software
Active / Standby RedundancyActive / Standby RedundancyOpenFlow 1.0 support
g
p ppTopology discovery, L2/L3 virtualized network design (VTN), Multipath routing/load balancing, Automatic failure recovery, Waypoint integration to network Softwareappliance (NAT/firewall/traffic shaper/load balancers/proxy web servers) etc.
▐ ProgrammableFlow Management Console ProgrammableFlow Controller
Console of PFC
Page 9 (C) Copyright of NEC Corporation
ProgrammableFlow demonstration on ProgrammableFlow demonstration on Interop Tokyo 2011 ShowNetInterop Tokyo 2011 ShowNetInterop Tokyo 2011 ShowNetInterop Tokyo 2011 ShowNet
Page 10 (C) Copyright of NEC Corporation
Demonstration on InteropTokyo2011 ShowNet
Multiple switch over between Data Centers and effective utilization of Private and
PublicVirtual HQ (NEC booth)Virtual HQ (NEC booth)
for Business Continuity Public
for Business Continuity ●Building a network to look
like one virtual network on ShowNetlike one virtual network on multiple data centers
●Available for load balancing and changing the route on not
l DC b t FLOW
ShowNetNW pool NW pool
only DC but FLOW
●Accommodation of IT resource
For exampleStorageL
BFW
Server StorageLB
FW Server
●Switch over DC for saving on electricity and disaster discovery
●Accommodation of IT resource on Hybrid Cloud
B WServer poolAppliance pool
BServer poolAppliance pool
ShowNet Virtual Osaka DC
ShowNet Virtual Osaka DC
ShowNet Virtual Tokyo DC(Private Cloud)
ShowNet Virtual Tokyo DC(Private Cloud)discovery
Point of this demonstration・Enable to leverage the duplicative IP address on multi DC to easily move servers and simply
establish network
DC(Public Cloud)
DC(Public Cloud)
(Private Cloud)(Private Cloud)
・Enable to pool security appliance by using virtual Fire wall and Load Balancer with the multi tenant function
・Enable to normally leverage the resource of two DC by controlling flow and switch over DC if meet disaster
Page 11
Hybrid cloud model including private cloud and public cloud
Switching over between virtual DCs, after stopping the function of a virtual DC1 ShowNet virtual Tokyo DC (private cloud) virtual Osaka DC
Virtual HQ (NEC booth)Virtual HQ (NEC booth)
1. ShowNet virtual Tokyo DC (private cloud) – virtual Osaka DC (Public cloud)
2. Virtual HQ (NEC booth) – virtual Osaka DC (Public cloud)
ShowNet②NW pool NW pool ②
StorageLB FW Serve
Server poolAppliance pool
StorageLB FW Server
Server poolAppliance pool
Sh N t Virt l T k DCSh N t Virt l T k DC ShowNet Virtual DC(Public Cloud)ShowNet Virtual DC(Public Cloud)
ShowNet Virtual Tokyo DC(Private Cloud)ShowNet Virtual Tokyo DC(Private Cloud)
①Page 12
Feature of deploying OpenFlow to the existing network
To deploy a network virtualization for Cloud Computing, It’s necessary to be beyond the legacy switching function
NEC release ProgammableFlow series products
y y g y g
NEC release ProgammableFlow series products
for the new architecture with OpenFlow function
Divide of the network function between physical and logicalDivide of the network function between physical and logicalDivide of the network function between physical and logical Divide of the network function between physical and logical
1.1. Enable to install the multiEnable to install the multi--logical network on one physical networklogical network on one physical networkg p yg p y2.2. Enable to establish the just one physical network if there are DCs Enable to establish the just one physical network if there are DCs
for long distancefor long distance
Page 13
Physical Diagram of the demonstration on ShowNet
Virtual security Appliance
Page 14
Logical Diagram of the demonstration on ShowNet
vBr
vRouter
x.x.x.x/24 x.x.x.x/24 x.x.x.x/24
VM1
VM2LB_OSK2
OsakaDC
vBr3ShowNet
FW HQ1
FW_OSK1 vBr2-1
LB HQ1
LB_OSK1
VM3
vBr1vR0
FW_HQ2
FW_HQ1 vBr2-2
LB_HQ2
LB_HQ1 VM4
HQPC
Load balancer
Page 15
Firewall
Map of the physical and logical diagram on ShowNet
LogicalVM1 VM2 VM3 VM4VM1 VM2 VM3 VM4VM1 VM2 VM3 VM4VM3VM1 VM2
Mapping 4 logical networks to physical network in Tokyo, Osaka and Virtual HQ Mapping 4 logical networks to physical network in Tokyo, Osaka and Virtual HQ
vBR3Logical NW 1
vBR3Logical NW 2ShowNet vBR3
Logical NW 3ShowNet
Logical NW 4
vBR1 LBFWShowNet vR
vBR2vBR1
LBFWShowNet vR
vBR2vBR1
vR FW LBvBR2
Logical NW 3
vBR1
Logical NW 4
Physical
PCPC PCPC
Physical
LB
FW
ServerLB
FW
ServerLB
FW
Server
FW
PFS
FW
PFS
FW
PFS ShowNet Tokyo DC(Private Cloud)ShowNet Osaka DC
Virtual HQ(NEC booth)
(Public Cloud)
Page 16
Commercial customers of PFlow systemCommercial customers of PFlow systemyy
Page 17 (C) Copyright of NEC Corporation
Customer Case StudyCustomer Case Study▐▐ Networking Challenges
Nippon Express built a common datacenter in order to gain efficiency and improve IT governancep gLarge numbers of virtual servers were created after server consolidation. The network had to be redesigned and reconfigured after each migration, driving operational costs and complexity
Reduction in operational costReduction in operational cost
p p y
` Customer Goals
(1) Changing the culture of network operation.(2) Reducing the operational/maintenance cost caused by migration.(1) Changing the culture of network operation.(2) Reducing the operational/maintenance cost caused by migration.
B fit R li dB fit R li dSignificantly reduce the load of operation by simplifying network throughcentralized control.Significantly reduce the load of operation by simplifying network throughcentralized control.
Benefits RealizedBenefits Realized
Realize the multi-tenant network virtualization environment easily without physical restriction. The cause of failures in communication path and quality deterioration are visually
Realize the multi-tenant network virtualization environment easily without physical restriction. The cause of failures in communication path and quality deterioration are visually
Page 18
The cause of failures in communication path and quality deterioration are visuallyfound instantly through network visualization.The cause of failures in communication path and quality deterioration are visuallyfound instantly through network visualization.
(C) Copyright of NEC Corporation
Customer Case StudyCustomer Case Study▐▐ Genesis Hosting Solutions provides one of the most flexible hosted
computing service available today. Genesis ‘build-your-own cloud environments' enables customers to build and provision customized, highly available virtual machine clustersavailable virtual machine clusters.
▐ Networking ChallengesTime to implement and complexity of network reconfigurationsInconsistent protocol support across network gear
Customer Goals
(1) Create Strategy for Mass Scale without increasing network complexity(2) Add new services without hardware upgrades(3) Maintain and improve network SLAs
(1) Create Strategy for Mass Scale without increasing network complexity(2) Add new services without hardware upgrades(3) Maintain and improve network SLAs( ) p( ) p
Interoperability with existing InfrastructureInteroperability with existing Infrastructure
Decision FactorsDecision Factors
p y gIndependent IP Range and IP Gateway address assignmentsScalable, robust network without need to change existing network design
p y gIndependent IP Range and IP Gateway address assignmentsScalable, robust network without need to change existing network design
Page 19
Ability to create new per tenant network servicesAbility to create new per tenant network services
(C) Copyright of NEC Corporation
NEC’s Open Source basedNEC’s Open Source basedOpenFlow Controller Platform: TremaOpenFlow Controller Platform: TremaOpenFlow Controller Platform: TremaOpenFlow Controller Platform: Trema
Page 20 (C) Copyright of NEC Corporation
Open Source OpenFlow Controller: TremaOpen Source OpenFlow Controller: Trema
▐ Free Software “Trema” as GPLv2Open to public at Apr.2011p p pRepository: https://github.com/trema/ML [email protected] @trema_news
▐ OpenFlow controller platformPlatform for researcher andPlatform for researcher and developer≠ commercial controller
▐ Software Developer’s EnvironmentIncludes network emulator for d b idebuggingTDD (Test Driven Development) FrameworkSupport C and Ruby
Page 21 (C) Copyright of NEC Corporation
Trema overviewTrema overview
▐ Trema + User’s own application = OpenFlow controllerTrema main body @ https://github.com/trema/tremay @ p gSample application @ https://github.com/trema/apps
Routing control, topology discovery,
OpenFlow Controller TremaTremaUser moduleUser module User moduleUser module User moduleUser module
g , p gy y,Authentication-driven application
Core modulesCore modules Interactive Interactive ShellShell
D bD bBasic librariesBasic libraries OpenFlow protocol stackOpenFlow protocol stack
OpenFlowS
DebuggerDebugger
Controller Controller and network and network Integrated
SwitchHost
configurationconfigurationg
network emulator
Real network
Page 22 (C) Copyright of NEC Corporation
Summary
▐ Trials of NEC OpenFlow Switch▐ Product Overview▐ Product Overview▐▐ Demonstration on Interop Tokyo 2011 ShowNetDemonstration on Interop Tokyo 2011 ShowNet▐ Commercial Customers of ProgrammableFlow
system▐ NEC’s Open Source based OpenFlow Controller
Platform: Trema
(C) Copyright of NEC Corporation
Page 24 (C) Copyright of NEC Corporation
True Network Virtualization enabled by OpenFlowTrue Network Virtualization enabled by OpenFlow▐▐ Provides
Multiple L2/L3 to L4/L7 virtual networks and its design tool (CLI and GUI)Visualize and control any flows in both virtual and physical networksVisualize and control any flows in both virtual and physical networks
vBridge
通信経路表示
Vi t l t k
vRouter Firewall Load Balancer
Virtual networks Physical network
Page 25 (C) Copyright of NEC Corporation
Virtual Network Design for L2/L3 to L4/L7Virtual Network Design for L2/L3 to L4/L7
▐ Allows us to design any L2/L3 to L4/L7 network by components of vRouters, vBridges, Network appliances, and server/terminals in any fl ibl f hiflexible fashion.
VTN1 (SubNetwork1)
vRouter
Isolated VTN1 (SubNetwork1)
vRouter vBridge vBridgeVirtual Networks
VTN2(SubNetwork2)
Physical Network
PFC
Fi llOpenFlowProtocol
FirewallNAT Load
Balancer
Switch Pool Network Appliance Pool Server Pool
Page 26 (C) Copyright of NEC Corporation