Software Defined Networking Workshop March 2, 2014 Jeff “Z” Szczerbinski, CCIE #4052 David Spears We see three big infrastructure trends….. Securit y Serve rs Converged Infrastructure Manageme nt Storage Services Networ k Facilitie s Software Defined Data Center Cloud … the Network services all three… Network 2 © Copyright 2013 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice. … and SDN drives new value Software-defined Network Drivers and Impact Private cloud is not just about cost reduction. Agility will be a key benefit1 HUMAN MIDDLEWARE 1 Gartner G00238288, Five Things That Private Cloud Is Not, 3 August 2012,Thomas J. Bittman 3 By 2020, 50 billion devices will be SDN/OpenFlow market will grow to almost $2 billion by 2016 connected to wireless networks2 … driven by the growing need for scalability & network programmability3 DEVICE SECURITY PROGRAMMABILITY 2Ericsson white paper, “More Than 50 Billion Connected Devices,” February 2011 3 IDC #235074, “Technology Assessment: The Impact of OpenFlow on Data Center Network Architectures” June 2012 © Copyright 2013 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice. Gartner does not endorse any vendor, product or service depicted in its research publications, and does not advise technology users to select only those vendors with the highest ratings. Gartner research publications consist of the opinions of Gartner's research organization and should not be construed as statements of fact. Gartner disclaims all warranties, expressed or implied, with respect to this research, including any warranties of merchantability or fitness for a particular purpose. Legacy network human middleware can’t scale for cloud Time and resource intensive, not suited for cloud scale 10,000 provisions per day x 50,000 users 20 commands per change 200,000 commands per day x 1 minute per command 3,333 hours of effort Source: HP 4 © Copyright 2013 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice. and 420 network admins HP’s Vision for the Future of Networking HP Virtual Application Network Focus less on managing infrastructure… …and more on quality of business experience 5 © Copyright 2013 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice. Software-defined networks deliver agility SIMPLIFICATION Aligns the network with business objectives Flexibility in network usage 6 © Copyright 2013 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice. Rapid application deployment Lower operating complexity, expense HP commitment to software-defined networks SIMPLIFICATION Software-defined Network Leadership Open Network Foundation 7 OpenFlow Leadership © Copyright 2013 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice. NFV Leadership OpenStack Leadership SDN Architecture Defining Software-defined Networking 8 Application Control Infrastructure Deliver open programmable interfaces to orchestrate network service automation Separate control and data plane; abstract control plane of many devices to one Open standard-based programmatic access to infrastructure © Copyright 2013 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice. Source: opennetworking.org Software-defined Network Components SDN Architecture Delivering the functions of an SDN Architecture 9 Application Control Infrastructure Deliver open interfaces Cloud programmable SDN Applications toOrchestration orchestrate network service automation Open Programmable APIs plane; Separate control and data Controller abstract control plane of many devices to one Open Programmable Interface Open standard-based programmatic Network Network Network access toDevice infrastructureDevice Device © Copyright 2013 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice. HP SDN investments leading the industry HP Continues to Deliver SDN Applications HP Develops Lighthouse SDN Customers; Delivers SDN Controller & Applications HP Delivers Commercial OpenFlow HP Scales Lighthouse Customers to 60 HP Earn First 10 OpenFlow Lighthouse Customers HP Demos OpenFlow-enabled Switch HP Labs & Stanford Collaborate on Ethane 10 © Copyright 2013 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice. 2007 2008 2009 2010 2011 2012 OpenFlow and SDN: History and Foundation © Copyright 2012 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice. Evolution of Server Architectures App Proprietary Applications Proprietary Operating Systems App Innovation! App … Standard interfaces and programming languages Standard Operating Systems (Linux, Windows, etc) Standard interfaces Proprietary Hardware Standard Intel x86-based systems 12 © Copyright 2013 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice. Evolution of Network Architectures Innovation! Network features (applications) MCast OS-Integrated Features Routing QoS … Open interfaces and programming languages Centralized Control Plane Proprietary OS Standard interfaces and control protocols Proprietary Hardware Standard “programmable” systems 13 © Copyright 2013 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice. Definitions • Software Defined Networking (SDN) – New network architecture – Separates the network control plane from the forwarding hardware. – Allows the data plane to be defined by a logically centralized controller (or set of controllers). • OpenFlow – Standard protocol used between the control and data planes – environment that allows for experimentation of networking protocols and traffic flows without interrupting the operation of the “production” network. 14 © Copyright 2013 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice. 1 APPLICATION NETWORK OS HARDWARE ABSTRACTION LAYER HARDWARE OpenFlow Protocol Overview © Copyright 2013 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice. 1 CONTROLLER(s) APP 15 APP • A controller can use this API to control or selectively modify the forwarding of traffic flows in the network • It is a standard defined by the Open Networking Foundation (ONF) APP • OpenFlow is a protocol specification defining an API to the switch forwarding plane • It enables selective centralization of flow control with variable grain flow control Pro-Active and/or Reactive Flow Table CONTROLLER APP 1 APP © Copyright 2013 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice. APP 16 APP APP APP CONTROLLER OpenFlow 1.0 Table Rules Action Stats Packet + Byte Counters 1. 2. 3. 4. 5. Switch Port 17 VLAN ID VLAN pcp Forward packet to zero or more ports Encapsulate and forward to controller Send to normal processing pipeline Modify fields Add extensions MAC src © Copyright 2013 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice. 1 MAC dst Eth type IP Src IP Dst + Mask for Field Match IP ToS IP Prot L4 sport L4 dport OpenFlow Switch Flow Table Example CONTROLLER Both fine and coarse grain flow control possible. SWITCH match rules TCP Port 80 from 01:23:45:67:89:ab 18 actions Forward to IDS Tunnel Port TCP Port 16384 Rate Limit, Forward Normal * (wildcard) Forward Normal © Copyright 2013 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice. OpenFlow Protocol Version History Version Release Date Key Enhancements 1.0 December 2009 First Official Specification 1.1 February 2011 MPLS, QinQ, multi-table 1.2 December 2011 IPv6, more extensibility 1.3 April 2012 QoS, Tunneling 19 © Copyright 2013 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice. OpenFlow 1.0 and 1.3 Features Benefits OpenFlow 1.0- Single Table Simple programming model, validation of SDN value proposition, early proof of concepts OpenFlow 1.3 Multiple table Increase performance and scalability. Groups Allows for multipathing or redundancy. Tags: MPLS & VLAN Flexibility in programing Virtual Ports additional flexibility in programing the forwarding plane with rules that can match against more information contained in Ethernet packets. Controller connection Failure Simpler modes to deal with the loss of connectivity with the controller Extensible Match support Dramatically increases flexibility. Controller role-change mechanism allows the switch to be aware of a controller’s role – eg failover from primary controller to the secondary IPV6 Support OpenFlow 1.3 provides IPV6 support Per-flow meters Measure and control the rate of packets. 20 © Copyright 2013 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice. Transforming the Industry with Softwaredefined Networks © Copyright 2012 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice. HP leads in software-defined networking 1H 2013 2H 2012 UC&C SDN Architecture Application Control Infrastructure 23 Virtual Cloud Sentinel Load Balancing Virtual Cloud Virtual Application Networks SDN Controller 25 OpenFlow switches Over 15M installed ports WAN Bursting Sentinel Load Balancing Virtual Application Networks SDN Controller 40 OpenFlow switches Over 20M installed ports © Copyright 2013 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice. Virtual Application Networks deliver automation, agility Industry’s most complete software-defined data center network fabric VAN SDN Manager Application Virtual Cloud Load Balancing Sentinel VAN Resource Automation Mgr UC&C WAN Bursting Control Virtual Application Networks SDN Controller Infrastructure 40 Switches – over 20 million ports 24 VAN Server Connect Manager © Copyright 2013 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice. Traditional & 3rd party Intelligent Management Center SDN Architecture Management Virtual Cloud Network application Network virtualization for scalable multitenant data centers SDN Architecture Application Control Tenant 2 Virtual Cloud Tenant 1 Network App VAN SDN Controller Infrastructure 25 © Copyright 2013 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice. • Scalable cloud automation • Scalable cloud multitenancy • Private-public cloud integration Dynamic WAN bandwidth provisioning Delivering new revenue opportunities for service provider cloud data centers HP Operations Orchestration SDN Architecture Application VM VM VM Hypervisor Service Provider DC 26 • On-demand scalability VAN SDN Controller Control Infrastructure • Automated provisioning VM VM VM Hypervisor Customer DC © Copyright 2013 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice. • Disaster avoidance UC&C SDN application for Lync Automating policy for campus enterprise business applications SDN Architecture Application Control UC&C SDN Application SDN API POC VAN SDN Controller Infrastructure 27 Watch Demo © Copyright 2013 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice. • Simplified policy Deployment • Dynamic prioritization • Enhanced user experience Portscope security application TippingPoint Enabling real-time threat detection across enterprise campus networks SDN Architecture Application Control Sentinel Security App RepDV Database VAN SDN Controller • Unprecedented Visibility • Better than antivirus alone Infrastructure Malicious-site.com 28 • Secure BYOD © Copyright 2013 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice. Virtual Application Network SDN Controller Open and extensible platform HP VAN SDN Controller: • • • • • 29 Extensible, scalable, resilient platform Provides centralized automation for your SDN-enabled network Controls policy and forwarding decisions Compliant with OpenFlow 1.0 and 1.3 protocols Enables HP and 3rd party SDN applications © Copyright 2013 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice. Northbound API The REST interfaces that external applications use to interact with the network External Applications 3rd party application OpenStack …virtual cloud UC&C application HP VAN SDN Controller Northbound APIs (RESTful) Internal Applications … Partner Dev Network Virtualization application VAN SDN Controllerxx Internal APIs (Java) SDN Protocols Southbound API 30 Flow based traffic eng RESTful APIs enable the VAN SDN controller to have support for: • Third party applications • Open-source applications • Unified communications and control application • OpenStack virtual cloud applications • Full management platforms such as IMC © Copyright 2013 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice. Internal API The Java interfaces that the internal applications use to control the network SDN Business Applications 3rd party application OpenStack …virtual cloud UC&C application HP VAN SDN Controller Northbound APIs (RESTful) Network Control Applications … Partner Dev Network Virtualization application VAN SDN Controllerxx Internal APIs (Java) Flow based traffic eng Internal APIs enable VAN SDN controller to have support for: • Partner developed applications • Security service applications • Flow based traffic engineering • Optimized data path selection SDN Protocols Southbound API 31 © Copyright 2013 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice. Southbound API The interface that the controller uses to interact with the infrastructure SDN Business Application s 3rd party application OpenStack …virtual cloud UC&C application HP VAN SDN Controller Northbound APIs (RESTful) Network Control Application s Network Partner Dev Virtualizatio application n VAN SDN Controllerxx Internal APIs (Java) … SDN Protocols Southbound API 32 Flow based traffic eng VAN SDN controller supports OpenFlow enabled infrastructure: • HP 50 OpenFlow enabled devices • Compliant with OpenFlow 1.0 & 1.3 • Available to work with any OpenFlow enabled switch from other vendors • Extensible to support future SDN standards © Copyright 2013 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice. IMC Virtual Application Networks SDN Manager Industry’s first comprehensive SDN management tool SDN Architecture IMC SDN Manager 33 Application • Completes the SDN architecture with management • Configuration, monitoring & policy mgmt for all SDN layers • OpenFlow switch management Controller • SDN controller performance management Infrastructure • One application for managing SDN and traditional environments 10X acceleration of 50% less management SDN deployments complexity © Copyright 2013 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice. 1Compared with Cisco Nexus 1010 Virtual Services Appliance OpenFlow Network Management • Controller management uses the HP REST API to manage the OpenFlow infrastructure • Management functionality includes managing OpenFlow resources , flow policies, traffic monitor, reporting, troubleshooting, and APP management 34 © Copyright 2013 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice. HP-VMware Networking Solution Open, interoperable solution unifying physical and virtual SDN & Network Virtualization HP Cloud OS Delivers dynamic cloud orchestration 35 ConvergedContr apps Unifies underlay & overlaySDN visibility & control ol SDN Manager Provides Federation Enables interoperability and SDN extensibility via VAN SDN VMware NSX Controller federation Overlay Extends network virtualization toServer physical servers © Copyright 2013 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice. Underla y single paneof-glass vCenter Plug-in dmanagement orchestration for physical & Intelligent virtual Management Center (IMC) networks SDN Ecosystem: Why? The value of a platform is dependent on the applications that exist within that ecosystem We have to build the best ecosystem for developers and drive SDN standards to ensure the ecosystem grows the market for all vendors and developers 36 © Copyright 2013 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice. HP SDN Software Development Kit (SDK) Develop • RESTful APIs • Developer guide • Sample code 37 Simulate & Certify • SDN simulator • SDN virtual lab • Validation test Collaborate • Community portal • Knowledge base • Training, services © Copyright 2013 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice. Open SDN portfolio, SDK, App Store enable Ecosystem Programmable network aligned to business application delivers agility Virtual Cloud Load Balancing UC&C Sentinel Partner Apps ConvergedContr ol SDN Architecture Application Control Virtual Application Networks SDN Controller Infrastructure Over 25 million ports across 50 Switches 38 © Copyright 2013 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice. 10 Routers Design Implementation & Support Services Software-Defined Network Services Simplify, Transform, Evolve Network Cloud Optimization Service Transformation Experience Workshop SDN Strategy & Roadmap Services Virtual Network Protection Service SDN Baseline Discovery SDN Design and Implementation Services Network Infrastructure Optimization Services Virtual Application Network Proof of Concept Cloud-ready Network Services Support Services 39 © Copyright 2013 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice. HP Software-Defined Network Ecosystem Vision Business Applications Deliver open programmable interfaces to automate orchestration of network services Application Layer Network Virtualization Security WAN bursting Control Layer SDN Controller UC & C Visibility & Control Customer & Partner Apps 3rd-party Apps Federation APIs 3rd-party Controllers SDN Controller VAN SDN Controller Open Infrastructure Layer Network Device standard-based programmaticOpenFlowaccess Network Device enabled to infrastructure vSwitche s Data Center WAN HP 40 Campus/Branch Infrastructure 3rd-party Infrastructure 3rd Party Ecosystem © Copyright 2013 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice. Make it Simple Make it Matter Make History Thank you © Copyright 2013 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice.