ONF Showcase Demo Theme: Data Center SDN Title: NFV Orchestration for SLA guarantee services Luxoft Team: Adrian loan Istrate (aIstrate@luxoft.com) Ash Bhalgat (abhalgat@luxoft.com) Partners: Qosmos: David Le-Goff Certes Networks: Adam Boone www.luxoft.com Cloud SP Use Case Description Tenant Participants: Luxoft SuperCloud NFV Orchestrator, Luxoft Firewall, Certes vCEP VPN engine, Qosmos SAM DPI engine Qosmos SAM DPI on-switch service provides network intelligence NFV Orchestrator that there is existing recreational video traffic (you tube) in the network that's consuming high bandwidth VNF Control SDKAPI Tenant request comes to Luxoft SuperCloud Orchestrator for SLA guarantee VPN traffic between 2 remotes sites H1 & H3 TNM vCEP SuperCloud’s BWoD feature does nail up network connectivity vCEP FW VPN automatically between sites. It also throttles bandwidth for recreational traffic to honor tenant SLA H1 H3 Certes Network’s VPN VNF service encrypts traffic only for tenant's subscribed network path as directed by SuperCloud GW Youtube, Video Firewall VNF service that's chained after VPN, allows this traffic to pass through at both sites Firewall allows remote site (H3) traffic access only through VPN www.luxoft.com DPI H2 Demonstration Goals SuperCloud’s ability to orchestrate NFV services as per ETSI NFV standard architecture • VNF On-boarding • VNF lifecycle management SuperCloud’s ability to orchestrate service chains for tenant paid service path SuperCloud’s BWoD capability to intelligently allocate bandwidth to honor SLAs SuperCloud integration with Qosmos DPI service to classify traffic based on application ID SuperCloud’s ability to provide secure connectivity for corporate traffic in cloud-like environment via integration with Certes vCEP VPN VNF service • www.luxoft.com L2-based encryption of the traffic between H1 and H3 Cloud SP Use Case Demo Steps Tenant SuperCloud Roles and Responsibilities: - ADMIN: Infrastructure Provider– owns/manages switches, SDN Controller, VDUs - PROVIDER: Service Provider – owns/manages hosts, network services - USER: Tenant or End user – uses hosts to connect Admin starts topology (switches, hosts, and SDN controller) Admin(/Provider) performs DPI & vCEP image onboardin From the web interface, Provider defines the service graph consisting of VNFs (DPI, vCEP1 and vCEP2) and Endpoints (H1, NFV Orchestrator TNM vCEP vCEP FW VPN H1 Youtube/Video Traffic Secure Traffic Regular Traffic VNF Control SDKAPI H3 H2, H3, GW-Internet/YouTube/Video) if that does not exist. From the web interface, Provider instantiates the service based on GW Youtube, Video template User initiates various traffic flows to available destinations (H1 H3, H1 YouTube, H1 Internet) www.luxoft.com DPI H2 References Luxoft SuperCloud NFV Orchestration Platform: http://supercloud.luxoft.com Qosmos SAM DPI: http://www.qosmos.com/products/dpi-modulefor-vswitch/ Certes Networks Cryptoflow VPN:http://certesnetworks.com/solutions/cryptoflows/ www.luxoft.com THANK YOU www.luxoft.com