Post on 05-May-2018
© 2012 Cisco and/or its affiliates. All rights reserved. Cisco Connect 1
Warm up !!!!!
Control Plane
Data Plane
Abstraction: Process by which concepts are derived by reducing the information content of a concept …
Riyadh,Saudi Arabia Febuary 5th , 2013
Software Defined Networking
The Future of Networks & Protocols
Zubair Khan Solutions Architect
© 2012 Cisco and/or its affiliates. All rights reserved. Cisco Connect 3
“…In the SDN architecture, the control and data planes are decoupled, network intelligence and state are logically centralized, and the underlying network infrastructure is abstracted from the applications…”
3
https://www.opennetworking.org/images/stories/downloads/white-papers/wp-sdn-newnorm.pdf
“…open standard that enables researchers to run experimental protocols in campus networks. Provides standard hook for researchers to run experiments, without exposing internal working of vendor devices……”
http://www.openflow.org/wp/learnmore/
© 2012 Cisco and/or its affiliates. All rights reserved. Cisco Connect 4
“Will OpenFlow commoditize networks? Impact Cisco margins?” —Several media publications, Bloggers
“Google revamps networks with OpenFlow” —ZDnet Headlines
“Hype around SDN/OpenFlow getting way out of Control. Where have I seen this before…” —Ethereal mind, Blogger
“.We share a more pragmatic view, noting Cisco (for example) is likely to view SDN as a TAM expansion opportunity…” —Deutsche Bank Research note, Wired, April 2012
“SDN needs a bigger definition” —Lippis report, 2012
“Prediction: OpenFlow Is Dead by 2014; SDN Reborn in Network Management” —Mike Fratto, Network Computing
© 2012 Cisco and/or its affiliates. All rights reserved. Cisco Connect 5
“A platform for developing new control planes”
“An open solution for VM mobility in the Data-Center”
“An open solution for customized flow forwarding control in the Data-Center”
“A means to do traffic engineering without MPLS”
“A way to scale my firewalls and load
balancers”
“A solution to build a very large scale layer-2 network”
“A way to build my own security/encryption solution, avoiding RSA”
“A way to reduce the CAPEX of my network
and leverage commodity switches”
“A way to define virtual networks with specific topologies for my multi-tenant
Data-Center”
“A means to scale my fixed/mobile gateways and
optimize their placement”
“A solution to build virtual topologies with optimum
multicast forwarding behavior”
“A way to optimize link utilization in my network, through new multi-path algorithms”
“A way to avoid lock-in to a single networking vendor”
“A way to distribute policy/intent, e.g. for DDoS prevention, in the network”
“A way to configure my entire network as a whole rather than individual
devices” “A solution to get a global view of the
network – topology and state”
“Develop solutions software speeds: I don’t want to work with my network vendor or go through
lengthy standardization.”
© 2012 Cisco and/or its affiliates. All rights reserved. Cisco Connect 6
Edge
Core Mobile
CPE
Appliance
Service
Service Service
Service
Towards Programmatic Interfaces to the Network Approaching Today’s Application Developer Dilemma
6
§ Many Network Applications today: • OTT – for speed and agility
• Avoid network interaction – complex and slow innovation
§ New Model for Network Applications • Keep speed and agility • Full-duplex interaction with
the network across multiple planes – extract, control, leverage network state
A New Programming Paradigm is Needed
CLI(s)
“Fast” App App
“Slo
w” “N
ew”
© 2012 Cisco and/or its affiliates. All rights reserved. Cisco Connect 7
Open Network Environment for SDN
• Enable modularization and componentization of network control- and data-plane functions, with associated open interfaces. This allows for optimized placement of these components (network devices, dedicated servers, application servers) and close interlock between applications and network functions.
• Anticipated benefits include: Closely align the control plane with the needs of applications, enable a clear control-/data-plane split, improve performance and robustness, enhance manageability, operations and consistency
Implementation Perspective: Evolve the Control-Plane Architecture Traditional Control Plane
Architecture Control Plane Architecture with SDN (Examples)
…
Control-plane component(s) Data-plane component(s) Application Component(s)
© 2012 Cisco and/or its affiliates. All rights reserved. Cisco Connect 8
Open Network Environment – Approaching a Definition
Server Server
Physical
Physical
virtual
virtual virtual
virtual
virtual
Resource Orchestration and Analytics “Network Middleware”
Integrated Physical and Virtual Infrastructure
API
API
API
API API API
© 2012 Cisco and/or its affiliates. All rights reserved. Cisco Connect 9
a
Cisco Open Network Environment Industry’s Most Comprehensive Networking Portfolio
Hardware + Software Physical + Virtual Network + Compute
Network
Platform APIs
Controllers and Agents
Virtual Overlays
Applications
www.cisco.com/go/one
API /One PK
SDN: SW Controller Open Flow
Virtualization
© 2012 Cisco and/or its affiliates. All rights reserved. Cisco Connect 10
Open Network Environment Qualities Programmatic APIs
Programmatic APIs
Resource Orchestration-
Controllers
Network Infrastructure Virtualization
© 2012 Cisco and/or its affiliates. All rights reserved. Cisco Connect 11
The Need for Abstractions
• Data-plane Abstractions – ISO/OSI Layering • Examples
• Local best effort delivery (e.g., Ethernet) • Global best effort delivery (e.g., IP) • Reliable byte-stream (e.g., TCP)
• Data plane abstractions are key to Internet’s success
• Abstractions for the other planes (control, services, management, orchestration,..) … are missing
• Consequences include: • Notorious difficulty of e.g. network management solutions • Difficulty of evolving software for these planes
Abstractions in Networking
“Modularity based on abstraction is the way
things get done”
Barbara Liskov Turing Award Winner
© 2012 Cisco and/or its affiliates. All rights reserved. Cisco Connect 12
APIs make Abstractions available to Programmers Example: Cisco’s onePK (one Programming Kit) – Get your build on!
Any Cisco Router or
Switch
Applications That YOU
Create
onePK
Flexible development environment to: • Innovate
• Extend
• Automate
• Customize
• Enhance
• Modify
© 2012 Cisco and/or its affiliates. All rights reserved. Cisco Connect 13
onePK Architecture
C, JAVA Program
onePK API Presentation
onePK API Infrastructure
IOS / XE (Catalyst, ISR, ASR1K)
NXOS (Nexus Platforms)
IOS XR (ASR 9K, CRS)
© 2012 Cisco and/or its affiliates. All rights reserved. Cisco Connect 14
Container
Network OS
onePK Apps
Process Hosting
Container
onePK Apps
Network OS
Bla
de
Blade Hosting
onePK Apps E
xter
nal
Ser
ver
Network OS
End-Point Hosting
Write Once, Run Anywhere
onePK Application Hosting Options
© 2012 Cisco and/or its affiliates. All rights reserved. Cisco Connect 15
Not all Networking APIs are created the same
• Classify Networking APIs based on their scope • API Scopes:
Location independent; Area; Particular place; Specific device
• Alternate approaches like device/network/service APIs difficult to associate with use cases
• Location where an API is hosted can differ from the scope of the API
• Different network planes could implement different flavors of APIs, based on associated abstractions
Classes of Networking APIs following their Scope
15
Utility
Area/Set
Place in the Network
Element
Example: Get Auth, Publish Log,.. Scope: Location independent
Example: Domain, OSPF-area,.. Scope: Group/Set/Area
Example: Edge Session, NAT Scope: Specific place/location
Example: interface statistics Scope: Specific element
© 2012 Cisco and/or its affiliates. All rights reserved. Cisco Connect 16
Custom Routing Application
Data Center
Data Center
Path A
Path B
Policy
Unique Data Forwarding Algorithm Highly Optimized for the Network Operator’s Application
onePK
onePK
onePK API presentation layer
Example: Custom Routing Data Center Traffic Forwarding Based on a Custom Algorithm
Business Data
© 2012 Cisco and/or its affiliates. All rights reserved. Cisco Connect 17
Custom Routing Initial Setup: Default routing using EIGRP
© 2012 Cisco and/or its affiliates. All rights reserved. Cisco Connect 18
Custom Routing Routing for Dollars: Application driven routes installed in network
© 2012 Cisco and/or its affiliates. All rights reserved. Cisco Connect 19
Custom Routing Tracing the application installed route – using the developer and element services
© 2012 Cisco and/or its affiliates. All rights reserved. Cisco Connect 20
One PK and Agent Framework ( Open Flow,IRS ontop of One PK)
© 2012 Cisco and/or its affiliates. All rights reserved. BRKRST-2051 Cisco Public
onePK and Agent Framework Enabling specific solutions/protocols (OpenFlow, IRS,…) on top of onePK
IOS / XE NX-OS IOS-XR
onePK APIs Presentation
onePK API Infrastructure
Agent Framework
Agent Implementation (e.g. OpenFlow)
Application Framework / Controller Agent Communication
Component
Solu?on"defined"protocol"(e.g."OpenFlow)"
Cisco"Confiden?al"
© 2012 Cisco and/or its affiliates. All rights reserved. Cisco Connect 21
Open Network Environment Qualities Agents and Controllers: Logically centralized and fully distributed Control
Programmatic APIs
Resource Orchestration -
Controllers
Network Infrastructure Virtualization
© 2012 Cisco and/or its affiliates. All rights reserved. Cisco Connect 22
Orchestration: Agents and Controllers Consolidate State Across Multiple Network Elements • Some network delivered functionality benefits from
logically centralized coordination across multiple network devices • Functionality typically domain, task, or customer specific • Typically multiple Controller-Agent
pairs are combined for a network solution • Controller
• Process on a device, interacting with a set of devices using a set of APIs or protocols
• Offer a control interface/API • Agent
• Process or library on a device, leverages device APIs to deliver a task/domain specific function
• Controller-Agent Pairs offer APIs which integrate into the overall Network API suite
Controller Agent APIs
Agent APIs
Agent APIs
Agent APIs
APIs
Analyze
Act
Observe Notify
Gather
Controller
Agent
© 2012 Cisco and/or its affiliates. All rights reserved. Cisco Connect 23
“Subsidiarity is an organizing principle that matters ought to be handled by the smallest, lowest or least centralized competent authority.”
23
http://en.wikipedia.org/wiki/Subsidiarity
© 2012 Cisco and/or its affiliates. All rights reserved. Cisco Connect 24
Deployment Considerations – Applying Subsidiarity to Networking • Control loop requirements differ per function/
service and deployment domain • “As loose as possible, as tight as needed” • Latency, Scalability, Robustness, Consistency,
Availability • Different requirements per use case
• Example: Topology for Visualization (Network Management) vs. Topology for Path-Computation/Routing
• How to decide which functionality is well suited a particular control paradigm?
Exploring the tradeoff between Agents and Controllers – and fully distributed Control
24
Fully distributed
Logically centralized (using Controller-Agent pairs)
Data-Plane
Control-Plane
Services-Plane
Note: Example only – Not all network planes shown
© 2012 Cisco and/or its affiliates. All rights reserved. Cisco Connect 25
Orchestration: Controllers and Agents Task Specific Solutions and Generic Controller Infrastructure
• Networking already leverages a great breath of Agents and Controllers • Current Agent-Controller pairs always serve a specific task (or set of tasks) in a specific domain
• System Design: Trade-off between Agent-Controller and Fully Distributed Control • Control loop requirements differ per function/service and deployment domain • “As loose as possible, as tight as needed” • Latency, Scalability, Robustness, Consistency, Availability
Session Border Control
Wireless LAN Control
Path Computation
SIP-proxy/ SBC WLC
AP AP AP PCC PCC PCC
PCE
H.248 CAPWAP PCEP
Generic Controller Infrastructure
SBC B2BUA
SBC B2BUA
SBC B2BUA onePK
OF-Agent OF-Agent OF-Agent onePK onePK
App App App Control Programs leveraging the ONE Controller
ONE Controller
© 2012 Cisco and/or its affiliates. All rights reserved. Cisco Connect 26
Open Network Environment Qualities Network Infrastructure Virtualization
Programmatic APIs
Agents and Controllers
Network Virtual Overlays
© 2012 Cisco and/or its affiliates. All rights reserved. Cisco Connect 27
Network Abstractions support Virtualization Blurring the lines between physical and virtual entities – networks and services
• Virtual Overlay Networks • custom endpoint addressing
(e.g. for simple endpoint mobility) • custom topologies/segmentation • custom service chains
• Example: vPATH
• Virtual Service Appliances/Gateways • VSG, vWAAS
“In computing, virtualization is the creation of a virtual (rather than actual) version of something, such as a hardware platform, operating system, storage device, or network resources.”
http://en.wikipedia.org/wiki/Virtualization
Common Abstractions and common APIs across physical and virtual network elements
© 2012 Cisco and/or its affiliates. All rights reserved. Cisco Connect 28
Physical | Virtual | Cloud Journey
PHYSICAL WORKLOAD
VIRTUAL WORKLOAD
CLOUD WORKLOAD
• One app per Server • Static • Manual provisioning
• Many apps per Server • Mobile • Dynamic provisioning
• Multi-tenant per Server • Elastic • Automated Scaling
HYPERVISOR VDC-1 VDC-2
CONSISTENCY: Policy, Features, Security, Management, Separation of Duties
Nexus 1000V, VM-FEX
vWAAS, VSG, ASA 1000V, vNAM**
UCS for Virtualized Workloads
Nexus 7K/5K/3K/2K
WAAS, ASA, NAM
UCS for Bare Metal
Cloud Services Router (CSR 1000V) ASR, ISR
Switching
Routing
Services
Compute
** 1H 2013
© 2012 Cisco and/or its affiliates. All rights reserved. Cisco Connect 29
Virtual Overlay Networks Example: Virtual Overlay Networks and Services with Nexus 1000V • Large scale L2 domains:
Tens of thousands of virtual ports • Common APIs
• Incl. OpenStack Quantum API’s for orchestration
• Scalable DC segmentation and addressing • VXLAN
• Virtual service appliances and service chaining/traffic steering • VSG (cloud-ready security),
vWAAS (application acceleration), vPATH • Multi-hypervisor platform support: ESX, Hyper-V, OpenSource Hypervisors • Physical and Virtual: VXLAN to VLAN Gateway
Nexus 1000V
OpenStack Quantum API REST API
Any Hypervisor
Tenant 1
Virtual Services vWAAS
VSG ASA 1KV
Tenant 3
ASA 55xx
Physical Workloads
Physical (VLAN) Network
VXLAN Gateway
Virtual Workloads
Tenant 2
© 2012 Cisco and/or its affiliates. All rights reserved. Cisco Connect 30
Open Network Environment – Summary
• Evolutionary step for networking – evolve the Network Control Plane where needed • Approach centered around delivering open, programmable environment for
real-world use cases • No one-size-fits-all • Cisco will support Network Virtualization, APIs and Agents/Controllers • Joint learning with industry and academia
• Technology-agnostic • Not predicated on a particular technology or standard • Draw from Cisco technologies and industry standards
• Delivered as incremental functionality • Many customers will use hybrid implementations • Build upon existing infrastructure with investment protection
Cisco’s approach
30
For More information Open Network Environment www.cisco.com/go/one One PK www.cisco.com/go/onepk www.cisco.com/go/getyourbuildon
Thank you.