Framework for the New IP - Phil O'Reilly
- 1. © 2015 BROCADE COMMUNICATIONS SYSTEMS, INC. COMPANY PROPRIETARY INFORMATION Framework for the New IP
- 2. The Task at Hand • As networks consolidate across Federal, how to centralize and scale configurations, situational awareness, policy enforcement and control? • How can Federal networks respond rapidly to changing conditions such as cyber attacks, geo political events, etc.? • How do Federal networks become flexible and dynamic enough to accommodate mobility, machine-to-machine communications, virtualized apps, and continually changing traffic patterns? • How can the OMA and OPA (CapEx and OpEx) costs of running Federal networks be lowered? © 2015 BROCADE COMMUNICATIONS SYSTEMS, INC. COMPANY PROPRIETARY INFORMATION 2
- 3. The New IP Framework © 2015 BROCADE COMMUNICATIONS SYSTEMS, INC. 3 ORCHESTRATION CONTROL ORCHESTRATION SERVICES CONTROL HARDWARE Network Functions Virtualization Software Defined Networking API API API Portals Catalogue and Service Management Line of Business Applications System & Application Development Business Systems & Analytics IT
- 4. The New IP Architecture 4© 2015 BROCADE COMMUNICATIONS SYSTEMS, INC. COMPANY PROPRIETARY INFORMATION • Virtualized Network Functions – Router, FW, VPN, ADC • Open Daylight SDN Controller • Comprehensive monitoring & troubleshooting tools vEPC Mobile Backhaul Network SP or Cloud Data Center vCE • Mobile Carrier NFV Solutions – LTE Analytics – vEPC Service Orchestration Enterprise Campus SP/Carrier Backbone vCPE Orchestration Virtual Analytics Platform Network Packet Broker Network Services MLXe X86 COTS Hypervisor Subscriber Analytics Application Analytics Network Analytics Device Analytics SDN Engine Vyatta NVA LTE RAN
- 5. YANG Tools 5© 2015 BROCADE COMMUNICATIONS SYSTEMS, INC. COMPANY PROPRIETARY INFORMATION Brocade Vyatta Controller Model-Driven Service Abstraction Layer Functional Abstraction Layer Common Network Services Standard Control Protocols and Vendor-Specific Plugins SNMP4 SDN OVSDB OpenFlow 1.0 / 1.3 NETCONF / YANG BGP-LS / PCEP Legacy Switch/Router OpenFlow Switch or Whitebox Non-Brocade Switch/Router Non-Brocade VNF OVS / vswitch Brocade Third-Party API API API API API API API API API API API API API API API API Normalized REST API Brocade Analytics Application OSS / BSS Service Provider Integration Brocade Other Future Applications Brocade ARB (Application Resource Broker) Policy and Rules Engine OpenStack and / or NFVI Orchestrator Brocade Vyatta Virtual Router Brocade ICX Edge Switch Brocade VDX Data Center Switch Brocade vADC Virtual Application Delivery Controller Brocade MLX Core/Edge Router YANG Models YANG Models YANG Models Auto- Generated Code
- 6. Network Hardware Underlay Supporting SDN-enabled architectures © 2015 BROCADE COMMUNICATIONS SYSTEMS, INC. 6SUPPORTING SDN ENABLED ARCHITECTURES • High performance, low cost • Shift to “stackables on steroids” • Flexible non-blocking building blocks for high bandwidth networks • Scale out architecture: 10G, 25G/50G, 50G and 100G • Virtual distributed chassis simplifies and automates Network Processor- based Switches • Ethernet and Fiber channel Fabrics • Built-in intelligence, automation and performance • Custom ASICs Fabric Switches • Intel or Merchant Silicon platforms • Optimized for Virtualized Network Functions White Box Switches
- 7. Network Functions Virtualization (NFV) On-Demand Network Function Deployment Economics • Reduces CAPEX by shifting L3-7 requirements to commodity x86 HW • Reduces OPEX by automating provisioning and configuration Range of services • Routing, application delivery control, VPN, security, load balancing, call manager, evolved packet core, etc. ON-DEMAND NETWORK FUNCTION DEPLOYMENT © 2015 BROCADE COMMUNICATIONS SYSTEMS, INC. 7 X86 COMPUTE HYPERVISOR NETWORK FUNCTIONS X86 COMPUTE NETWORK FUNCTIONS Virtualized Network Appliance Virtual Machine 2008 2010 2012 2014 10X 1X 100X 1,000X PacketThroughput Nehalem Westmere Sandy Bridge Cave Creek Single Socket Performance
- 8. Virtualized Network Functions Brocade Vyatta 5600 vRouter • New Architecture – vPlane architecture – Up to 10Gbps per Core on bare metal – 10Gbps+ on VM with SRIOV or PCI pass-through • Target Use Case: NFV – High Performance Routing, Firewall, NAT, etc. • VMware, KVM, Hyper-V, Bare Metal © 2015 BROCADE COMMUNICATIONS SYSTEMS, INC. COMPANY PROPRIETARY INFORMATION 8 Feature Highlights Routing IPv4, IPv6, Static, PBR, OSPF, RIP, BGP, Multicast Security IPv4, IPv6, Stateful Firewall, NAT VPN IPSec, SSL, Route-based, L2- bridging, DMVPN System Management CLI, RESTful API, GUI IP Services SSH, DHCP, DNS, SNMP High Availability VRRP, Stateful Failover, Config Sync Platforms VMware, KVM, XEN, Hyper-V, x86
- 9. The OpenDaylight Project Foundation for the Brocade Vyatta Controller • Linux Foundation initiative • The leading open-source SDN controller – More than 200 developers from 41 member companies AND individuals from user organizations – 1.7+ million lines of code • Open industry forum: most networking providers, many SDN ecosystem firms • Addresses service provider and enterprise needs • Platform-independent “narrow waist”—standardization point that allows for optimization and innovation above and below FOUNDATION FOR THE BROCADE VYATTA CONTROLLER © 2015 Brocade Communications Systems, Inc. Company Proprietary Information Service Abstraction LayerCommon Services Standardized REST API Standard Interfaces and Plugins BGP-LS PCE-P Customer Developed Applications Vendor Developed Applications NETCONF YANG OVSDBSNMP OpenFlow 1.0 / 1.3 Neutron Plugin Vendor-Specific Plugins Applications Services OSS/BSS Orchestration Physical Switches and Routers Virtual Switch and Routers Network Policy
- 10. Brocade Networking and OpenStack Self-Service, On-Demand Fabric Provisioning • OpenStack orchestration decreases time-to-deploy data center resources • All Brocade product lines supported • Brocade leading industry efforts to champion: – OpenStack support of Fibre Channel SAN Zoning • Partnering with Red Hat, Rackspace and Piston Cloud for commercial distros © 2015 Brocade Communications Systems, Inc. Company Proprietary Information 10 BROCADE ZERO-TOUCH SCALE-OUT INFRASTRUCTURE Brocade Plugins • VCS • vADX • Vyatta vRouter • MLX Scalable & Open Cloud APIs Brocade Vyatta vRouter ADX vADC MLX FC SANVDX Brocade Extensions • Fibre Channel
- 11. Service Provider Use Case: vCPE, vCE, vPE © 2015 Brocade Communications Systems, Inc. Company Proprietary Information 11 SDN Benefits: Network and traffic flow visibility Centralized Advanced Policy management Common controller for legacy to NFV transition NFV benefits: Agility: Click of button provisioning for new services rather than truck rolls Flexibility: Easy to scale out or repurpose Lower cost: Lower CAPEX running VNF on COTS versus dedicated appliances; lower OPEX from automated provisioning and typically pay as you use vRouter Customer Premises Access / Aggregation Core / Peering / Internet Edge CPE L2-CPE Vyatta Controller NFV Infra Orchestration LAN L2-CPE LAN LAN CPE Compute Vyatta vCPE LAN MLX MLX MLX Vyatta vCE Vyatta vPE NFV Infra
- 12. SDN/NFV in Tactical Networks Possible Insertion Points © 2015 BROCADE COMMUNICATIONS SYSTEMS, INC. COMPANY PROPRIETARY INFORMATION 12NIE 14.2 HIGH LEVEL ROUTING ARCHITECTURE NFV replacement of LAN Router Utilize SDN to perform QoS normalization NFV WAN Router — NETCONF/YANG programmability Compact Server Class platforms for high VM/NFV density DiffServ PHB Network Controller Voice UDP Data TCP Data User TCP Proxy LANR QED INE Multicast OGPF TCP UDP PEP PEP SECRET UNCLASS QED QED INE INE WANR Cipher Text NCW MAR MPM 1000 TCP Acceleration, Delta Based Caching and Compression Classify / Mark All Traffic Based on Application Type Encapsulate Packets and Preserve DSCP from Inner to Outer Header Admit/Block/Preempt Flows Congestive Severity Derived from Measurement Based Admission Control (MBAC) Algorithm Juniper J6350 -> MPM1000 Queuing = JuniperQueuing MPM1000 -> NCW Queuing = InternalQoS INE Boundary Juniper J6350 -> MAR Queuing = None MAR -> HNW Queuing = CiscoQueuing RadiotoRouter= PPPOE GRE (24) QED (2O) INE (73) HNW
- 13. Dense Virtualization at Tactical Edge Brocade Concept Platform • Existing tactical server platforms are Intel Core i5/i7 – Limited to 2 cores/4 threads (few VMs) – Multiple units required to support application workloads – Not optimized for virtualized network functions • Alternative compact server platform – Xeon class server (10+ core) – Capable of hosting multiple high performance applications • UC, MC applications, NFV, VDI, etc… • Commodity HW building blocks – Integrated compact switch provides 1 GbE user access © 2015 BROCADE COMMUNICATIONS SYSTEMS, INC. COMPANY PROPRIETARY INFORMATION 13
- 14. Network Visibility and Analytics (NVA) © 2015 Brocade Communications Systems, Inc. Company Proprietary Information 14 Radio Access Network (RAN) Mobile Operator’s Data Center (MPC/EPC) Backbone/ Internet Radius/ Diameter RNC/ MME IP/MPLS Router GGSN/ P-GW SGSN/ S-GW Orchestration Virtual Analytics Platform Network Packet Broker Network Services MLXe X86 COTS Hypervisor Subscriber Analytics Application Analytics Network Analytics Device Analytics SDN Engine Vyatta NVA Architecture • Virtual • Programmable • Open Components • Network Packet Broker: MLXe • Virtual Analytics Platform • NFV-based Architecture • Intelligent SDN Engine • Orchestration Engine ODL and Openstack
- 15. Software Defined Intelligence (SDI) SDN + Machine Learning • SDI foundations: Data Science and Machine Learning • First applications will be in “Network Learning” – More generally: “Predictive” Security – Predict eminent DDOS rather than reacting to an existing DDOS • “The probability you will experience a DDOS is 0.05” – Detecting spam prefixes in the Internet routing table based on various data sources • Larger goal: Uncover new relationships and structure in network data • Trivial example: “Better Data Centers Through Machine Learning” – Google PUE example
- 16. © 2015 BROCADE COMMUNICATIONS SYSTEMS, INC. COMPANY PROPRIETARY INFORMATION
- 17. © 2015 BROCADE COMMUNICATIONS SYSTEMS, INC. COMPANY PROPRIETARY INFORMATION Thank you
Editor's Notes
- #4: The shift to The New IP will also impact and create business opportunities through a set of enabling technologies that will be required at the architectural levels. We believe it begins with a move to a software-defined network (SDN) architecture that decouples the control and data elements of a network in favor of an open, centralized management model. We also believe that The New IP should embrace a flexible choice of physical underlays that underpin the architecture. Specifically, Brocade will support a wide variety of storage and data center fabrics, server hardware, and even commodity off-the-shelf platforms This gives customers the benefit of architectural choice. The New IP must also support new classes of network visibility and analytics tools to tap into big data applications and other use cases. Jason will follow me and provide more details and updates on some important advancements we’re delivering in the area of storage networking, fabrics, and network visibility and analytics. The New IP will also enable a variety of network functions delivered virtually through software that supplements single-function hardware appliances. Brocade is already a major player in the NFV space with more than a million downloads of our software. We also recently introduced an open virtual platform called the Vyatta Services Platform that will enable (Vyatta means “open”) The New IP also supports open approaches to network control through SDN technologies. In fact, we introduced the Brocade Vyatta Controller that is built on the latest OpenDaylight Project software code. Kelly will follow Jason and give details on the advancements we’re making in both SDN and NFV. Full support for open control and orchestration systems that are available today and will be developed in the future. Therefore, it is critical that the New IP architecture has to open by design for investment protection and for seamless upgradeability. The adoption of these New IP technologies will shift spending power to organizations who will deliver capacity and resources at scale. This includes large enterprises and SPs as I explained earlier. Jeff Lindholm, our SVP of Worldwide Sales will follow Kelly to explain how Brocade has evolved our sales strategy and organization to take advantages of the business opportunities in The New IP. Finally, Dan will follow Jeff to provide an update on the financial model and outlook. [next slide]
- #8: As the name implies, Network Functions Virtualization (NFV) takes networking functions, such as routing and load balancing, and puts them in software that runs on general-purpose x86 based machines. At Brocade we call this software networking. This movement towards software is largely being driven by the improvements in packet processing capability in Intel processors. In late 2012, over twenty of the world’s largest telecommunications service providers formed an Industry Specification Group (ISG) within the European Telecommunications Standards Institute (ETSI) to define Network Functions Virtualization (NFV) This group included companies like, AT&T, Verizon, Deutsche Telekom, NTT, and Telecom Italia And again, this initiative was also not initially led by networking equipment companies I’ve pointed this out a few times now to emphasize the momentum behind these trends. These are not new features being pushed by the network industry to sell more boxes, but are developing solutions to meet real business challenges being pushed by the organizations facing those challenges. The motivation behind NFV is that network operators and service providers are facing serious challenges with the variety of hardware-based appliances they have to maintain Launching new network services often requires yet another hardware appliance and finding space and power to accommodate such boxes is becoming increasingly difficult, not to mention the additional operational complexity of integrating and deploying these physical devices in a network. These challenges restrict the speed at which innovative new application services can be offered and the ROI of the service infrastructure. This can make it inherently harder to deploy new services. The goal of NFV is to help address and solve such issues and ultimately reduce the costs of doing this significantly. Of additional benefit to Federal Government operators is the value of reduced Size, Weight, and Power in emergency (1st responder) and tactical networks. Where as previously multiple separate appliances were required at a remote terminal or communications node, to preform functions such as routing, WAN acceleration, and encryption; these services can now be performed on a few ruggedized, compact, virtualized server systems.
- #11: We are actively working with the OpenStack community to ensure all Brocade data center technologies, including VCS fabrics, fibre channel fabrics and our NFV portfolio which are fully provisionable by OpenStack. The industry-leading level of automation native to a VCS Fabric, combined with the abstraction and ease of provisioning provided by OpenStack, will allow customers to deploy network capacity in their cloud-based data centers far more quickly than is possible with legacy network architectures and provisioning tools. We have contributed a VCS plugin to the OpenStack repository and it is included in the “Grizzly” release of OpenStack. We’re now working with several leading distribution vendors, such as Red Hat, who are delivering to the market commercial-grade versions of OpenStack with full support and services. Brocade is also taking a leadership role and working with key partners and customers to drive the addition of fibre channel SAN provisioning into OpenStack. Our goal is to ensure that fibre channel customers who choose to adopt OpenStack for their cloud architecture can easily move their mission-critical SANs into the orchestration environment provided by OpenStack.
- #15: The NOVA solution as you can see will connect to the network operators EPC or Mobile Data center network through the various gateways. Now that we have looked at the architectural framework and the types of analytics that the solution supports lets look a the use cases we have targeted which are based on customer requirements as well as where this solution best fits. RAN: Radio Access Network RNC: Radio Network Controller MME: Mobile Management Entity SGSN: Serving GPRS Support Node GGSN: Gateway GPRS Support Node P-GW: Packet Gateway