Tech Talk: Introduction to SDN/NFV Assurance (CA Virtual Network Assurance)
Virtual CPE NFV Solution Development for Security...
2
CALSOFTLABS VIRTUAL CPE NFV SOLUTION DEVELOPMENT FOR SECURITY SERVICES THE CLIENT The client is a recognized leader in cloud managed virtual networking services. They developed the world's first cloud managed network services platform for both on premise hardware and hosted services. Today over 3,000 companies in over 60 countries, across industry verticals leverage client solutions for virtualized network services. ALTEN Calsoft Labs designed and developed a Virtual CPE NFV solution targeting telecom operators to provide security services and management. We were also instrumental in developing an OpenStack orchestration with Northbound interface to Service Provisioning platform of Service Providers. OVERVIEW THE CHALLENGE The client wanted to develop a platform to provide virtualized security services and management for telecom operators. The platform should also support an OpenStack orchestration for Virtual CPEs. INNOVATE INTEGRATE TRANSFORM Development of a centralized controller based on virtualized infrastructure (VMware and KVM) for performing remote and SMB customer related services Virtualization of security SSL termination, IDS/IPS, content filtering, antivirus and firewall, utilizing open source and proprietary implementations Expandable platform for various types of networking functions virtualization Development of a management stack System testing & integration with various CPE devices THE SOLUTION Centralized NFV Controller for Telecom Operators CASE STUDY www.altencalsoftlabs.com Remote User Remote User Customer HQ Public Internet Services Management Layer Orchestration Layer M G M T Virtualized Infrastructure Layer(VMware ESXi/KVM) SSL IDS IPS Filtering Anti Virus Security Services Layer (Firewall, Policy) V A P P S
Transcript of Virtual CPE NFV Solution Development for Security...
CALSOFTLABS
VIRTUAL CPE NFV SOLUTION DEVELOPMENT
FOR SECURITY SERVICES
THE CLIENT
The client is a recognized leader in cloud managed
virtual networking services. They developed the
world's first cloud managed network services
platform for both on premise hardware and hosted
services. Today over 3,000 companies in over 60
countries, across industry verticals leverage client
solutions for virtualized network services.
ALTEN Calsoft Labs designed and developed a
Virtual CPE NFV solution targeting telecom
operators to provide security services and
management. We were also instrumental in
developing an OpenStack orchestration with
Northbound interface to Service Provisioning
platform of Service Providers.
OVERVIEW
THE CHALLENGE
The client wanted to develop a platform to provide
virtualized security services and management for
telecom operators. The platform should also
support an OpenStack orchestration for Virtual
CPEs.
INNOVATE INTEGRATE TRANSFORM
Development of a centralized controller based on virtualized infrastructure (VMware and KVM)
for performing remote and SMB customer related services
Virtualization of security SSL termination, IDS/IPS, content filtering, antivirus and firewall, utilizing
open source and proprietary implementations
Expandable platform for various types of networking functions virtualization
Development of a management stack
System testing & integration with various CPE devices
THE SOLUTION
Centralized NFV Controller for Telecom Operators
CASE STUDY
www.altencalsoftlabs.com
Remote User Remote User Customer HQ
Public Internet
Services ManagementLayer
Orchestration Layer
M
G
M
T
Virtualized Infrastructure Layer(VMware ESXi/KVM)
SSL IDS IPS FilteringAnti Virus
Security Services Layer (Firewall, Policy)
V
A
P
P
S
CALSOFTLABSINNOVATE INTEGRATE TRANSFORM
CASE STUDY
www.altencalsoftlabs.com
Anti Virus, Firewall, Site to Site VPN, Remote Access & Mobility, Content Filtering, Intrusion
Detection & Prevention, QoS
Multi-tenant
Virtualized Infrastructure Layer (KVM / ESXi)
Service Provisioning Tool
Web Services Layer
OpenStack
VNF-1 VNF-2 VNF-3 VNF-n
Public Internet
Customer #1 Customer #n
Nova Glance
Cinder
Horizon
Keystone Neutron
Development of orchestration functions for compute and network virtualization based
on OpenStack
Mediation layer provides authentication and image management services
OpenStack services used for instance creation, configuration, monitoring, load balancing,
DHCP, routing/switching, etc.
Enhancements to ensure high availability
System testing based on different scenarios
OpenStack Based Orchestration for Virtual CPEs
PLATFORM COMPONENTS DEVELOPED
ALTEN Calsoft Labs' extensive experience in virtual appliance instantiation and orchestration was
leveraged for providing the solution.
TECHNOLOGY AND RESOURCES
Integrated Security
OS: Linux
Virtualized Infrastructure: VMware ESXi, Red Hat KVM
OpenStack Components Used:
Team size: 30
Nova, Glance, Horizon, Keystone, Neutron & Cinder
![Virtual Security as a Service for 5G Verticals · SDN, NFV and cloud computing. ETSI NFV [20] has defined a reference architecture for enabling NFV orchestration and VNF management](https://static.fdocuments.us/doc/165x107/5ed155bbefd7b2537304c8fb/virtual-security-as-a-service-for-5g-sdn-nfv-and-cloud-computing-etsi-nfv-20.jpg)
