SlideShare a Scribd company logo

Network Function Virtualisation (NFV) BoF

APNIC, profile picture
APNIC

The document outlines topics to be discussed at an NFV BOF meeting at APRICOT 2015, including advanced NFV topics like data plane connectivity models for VNFs, overlay encapsulation for MPLS operators, NFV service assurance, service chaining, and the applicability of Linux containers. It also includes basics like an NFV introduction. The organizer seeks active participation from attendees on these and other topics.

Internet
1 of 36
Downloaded 188 times
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
Network Functions Virtualization (NFV) Santanu Dasgupta Sr. Consulting Engineer – Service Provider Network Architecture BOF Meeting – APRICOT 2015 3rd March, 2015
Cisco Confidential 2© 2013-2014 Cisco and/or its affiliates. All rights reserved. APRICOT 2015 NFV BOF Outline §  At APRICOT 2014, the NFV BOF meeting that I hosted was focused around some of the basic and introductory concepts of NFV §  For APRICOT 2015, the focus area would be a few advanced topics §  However, we can go back to some basics too – there is a section at the end of this slide §  Please jump on with your top of the mind issues that you want to discuss §  Need active participations from everyone
Cisco Confidential 3© 2013-2014 Cisco and/or its affiliates. All rights reserved. APRICOT 2015 NFV BOF – Topics For Discussion §  The State of Service Provider NFV and Major Use Cases §  Data Plane Connectivity Models for VNFs / VMs to achieve high performance §  Overlay Encapsulation in the DC for MPLS Operators §  NFV Service Assurance §  Service Chaining in NFV §  Applicability of Linux Container Technology in NFV §  The skillset evolution requirement for engineers §  Other topics you want to discuss §  NFV Introduction – as a placeholder
Cisco Confidential 4© 2013-2014 Cisco and/or its affiliates. All rights reserved. The SP NFV Landscape and Major Use Cases §  Top of mind for most / all Service Providers §  Lot of expectations – §  CAPEX & OPEX reduction §  Agility with end-to-end automation and cloud centric service delivery models §  Faster time to market for new services §  Architecture transformation §  Increased use of generic hardware and open source software, §  Higher openness and standardization §  Lets have a Reality Check Done with the folks in the meeting §  Overall the state of technology and deployment at still in primitive stage §  Major areas of focus §  Cloud Centric Managed Services (Managed CPE, Security, VPN, Value Added Services…) §  Virtualized Mobile Packet Core and Virtualized Gi-LAN §  SP Infrastructure NFV (Virtual BRAS/BNG, Virtual RR, Virtual DNS, Virtual PE…) §  Do you guys have any other major use case that is important to you? Topic #1
Cisco Confidential 5© 2013-2014 Cisco and/or its affiliates. All rights reserved. Data Plane Connectivity Models for VNFs / VMs vSwitch Tenant VM Tenant VM KVM NIC Multi-tenanted vRouter / vSwitch vSwitch Tenant VM Tenant VM KVM NIC Tenant VM Tenant VM §  Multi-tenanted vSwitch (such as OVS) in kernel, may be with additional extension to do routing §  Performance may be typical concern §  Other possible concerns – Fault tolerance, kernel recertification needs … §  High performance multi-tenanted vRouter/ vSwitch in the user space §  vSwitch in the kernel as patch panel for tenant VM connectivity §  Concern – the vSwitch patch panel performance Topic #2 Multi-tenanted vSwitch vSwitch (as Patch Panel)
Cisco Confidential 6© 2013-2014 Cisco and/or its affiliates. All rights reserved. Data Plane Connectivity Models for VNFs / VMs …contd High Performance Multi-tenanted vRouter/vSwitch Tenant VM Tenant VM KVM NIC Tenant VM Tenant VM vSwitch Tenant VM Tenant VM KVM NIC Multi-tenanted vRouter / vSwitch vHost User §  Move that high performance multi-tenanted vRouter / vSwitch in the kernel space §  Remove the need of additional vSwitch as patch panel §  But fault tolerance, other kernel related issues are back here in this model §  Retain the high-performance multi-tenanted vRouter/vSwitch in the user space §  Use vhost-user process for inter-VM traffic by direct memory copy – no hypervisor involved §  Need to ensure proper memory copy operation to ensure security, stability etc Topic #2 vSwitch (as Patch Panel)
Cisco Confidential 7© 2013-2014 Cisco and/or its affiliates. All rights reserved. Data Plane Connectivity Models for VNFs / VMs …contd vSwitch Tenant VM Tenant VM KVM NIC Tenant VM Tenant VM TOR Switch 802.1q VXLAN / MPLSoGRE SR-IOV Tenant VM Tenant VM KVM NIC Tenant VM Tenant VM TOR Switch 802.1q VXLAN / MPLSoGRE §  No multi-tenanted vRouter/vSwitch anymore §  Use a TOR switch for VXLAN – VLAN mapping §  Appropriate VLANs mapped to the VMs through the vSwitch in the kernel §  Scalable Layer 3 service chaining may be a challenge to implement §  No vSwitch anywhere! §  Use a TOR switch for VXLAN – VLAN mapping §  SR-IOV to map the traffic from PNIC to the appropriate VMs §  Scalable Layer 3 service chaining may be a challenge to implement Topic #2
Cisco Confidential 8© 2013-2014 Cisco and/or its affiliates. All rights reserved. Encapsulation within the DC / NFV POD for MPLS Operators vNAT vFW VXLAN / MPLSoGRE / MPLSoUDP IPIP MPLS vNAT vFW MPLS (Segment Routing / LDP) IPIP MPLS Current Approaches Possible Alternate ? End-to-end common encap, uniform OAM, easy operations and troubleshooting But now, the DC/NFV POD underlay devices need to run label switching CPE CPE PE DCI DCI DCIDCIPE Topic #3
Cisco Confidential 9© 2013-2014 Cisco and/or its affiliates. All rights reserved. NFV Service Assurance A huge topic, but appeared to be on back burner for a long time Service Level Management Collection NFVI Performance Management Fault Management Analytics Planning and Optimization Operator’s Console, DashboardsKey Capabilities: Key Capabilities: Key Capabilities: Key Capabilities: Topic #4
Cisco Confidential 10© 2013-2014 Cisco and/or its affiliates. All rights reserved. Service Chaining in NFV §  Many thoughts across the industry and technical communities §  Different solutions emerging – §  Network Service Header (NSH) – being standardized at IETF §  L3 Routed Service Chain (orchestrated) along with BGP for WAN integration §  Segment Routing based service chaining §  VLAN stitching §  NSH gaining traction and has a lot of promise §  Extensive metadata capabilities to carry rich set of policies §  In-band OAM becoming a possibility – the IP and Ethernet generation had missed it so far §  However some feedback are coming around its complexity §  True benefit of NSH may require all VNFs to support it across industry •  There may be some issue with time to market, performance impact etc. Topic #5
Cisco Confidential 11© 2013-2014 Cisco and/or its affiliates. All rights reserved. Service Chaining with Remote DC & Across Multiple Sites Layer 3 and BGP Capabilities are Critical (MPLS Environment) POD 2/DC 2 Underlay R2 R4 PE2 PE3 2.2.2.0/24 4.4.4.0/24 SDN Controller RT 2:200 RT 4:400 Import 2:200 Import 4:400 4.4.4.0/24, via PE3 Route Leak with modified NH Import4:400 VRF_A1 VRF_A2 VRF_A1 VRF_A2 VRF_A VRF_A For Outgoing traffic from Server: 2.2.2.0/24, via DCI, Label 100 4.4.4.0/24, via DCI, Label 200 For Incoming traffic to Sever: 2.2.2.0/24, via VIF2, Label 300 4.4.4.0/24, via VIF1, Label 400 vSwitch Out In vFW2 VIF1 VIF2 vSwitch In Out vFW1 VIF2 VIF1 POD 1/DC 1 Underlay SDN Controller VRF_A1 VRF_A2 VRF_A1 VRF_A2 IP/MPLS 4.4.4.0/24, via vPE-F 2 DCI2DCI1 4.4.4.0/24, via DCI2 Import2:200 Route Leak with modified NH 4.4.4.0/24, via vSwitch 4.4.4.0/24, via DCI1 2.2.2.0/24, via PE2 2.2.2.0/24, via vPE-F 1 2.2.2.0/24, via DCI1 2.2.2.0/24, via vSwitch For Outgoing traffic from Server: 2.2.2.0/24, via DCI, Label 100 4.4.4.0/24, via DCI, Label 200 For Incoming traffic to Sever: 2.2.2.0/24, via VIF2, Label 300 4.4.4.0/24, via VIF1, Label 400 2.2.2.0/24, via DCI2 Topic #5 BGP RR
Cisco Confidential 12© 2013-2014 Cisco and/or its affiliates. All rights reserved. NSH May Help Simplify This With Decoupling of Service & Transport Layer POD 2/DC 2 Underlay R2 R4 PE2 PE3 2.2.2.0/24 4.4.4.0/24 SDN Controller RT 2:200 RT 4:400 VRF_A2 VRF_A VRF_A vSwitch vFW2vFW1 vSwitch POD 1/DC 1 Underlay SDN Controller IP/MPLS DCI2DCI1 4.4.4.0/24, via PE3 2.2.2.0/24, via PE2 Classifier: If <policy-match> -> PathID 10, SI 3 PathID = 10 -> vFW1, vFW2 vFW1 NH vSwitch 4.4.4.x NSH 10, 3 4.4.4.x NSH 10, 3 4.4.4.x NSH 10, 2 vPE-F1 vPE-F1 vPE-F2 4.4.4.x NSH 10, 2 vPE-F2 4.4.4.x BGP RR Topic #5
Cisco Confidential 13© 2013-2014 Cisco and/or its affiliates. All rights reserved. Linux Container Technology in NFV §  Linux Container and/or Docker like technologies are gaining a lot of traction in the virtualization space §  Can help address some performance concerns §  Security issues associated with Container in a multi-tenanted environment ? §  How to containerize §  Network Function by Network Function ? §  Or a whole Virtualized Product (OS) ? Topic #6
Cisco Confidential 14© 2013-2014 Cisco and/or its affiliates. All rights reserved. NFV – How to build / Augment Operations skillsets •  Most existing technologies, protocols and associated skills are equally required •  On top of that, there are needs for acquisition of New Skills •  x86 Server Virtualization •  Virtualization on Linux (and KVM/QEMU) Environment •  Cloud Orchestration Systems – such as OpenStack •  Virtual Switches – OVS, Netmap/VALE, Snabbswitch, Vendor Specific etc •  SDN Controllers – OpenDayLight, Vendor Specific •  Device Programmability and APIs – NETCONF, Yang, RESTCONF, REST APIs, OF…. •  Service Function Chaining – specially NSH (Network Service Header) •  Network based Virtual Overlay transport – VXLAN, MPLSoGRE/UDP, LISP, L2TPv3….. •  Automation Tools – puppet / chef etc. •  Management, Orchestration, OSS Fundamentals, •  ….. Topic #7
Cisco Confidential 15© 2013-2014 Cisco and/or its affiliates. All rights reserved. Open Forum For Other Topics That Are on Top of Your Mind Topic #8
Cisco Confidential 16© 2013-2014 Cisco and/or its affiliates. All rights reserved. NFV Introduction Placeholder Topic #9
Cisco Confidential 17© 2013-2014 Cisco and/or its affiliates. All rights reserved. “Network Functions” in SP Network Architecture Landscape LTE Smartphone Access xDSL WiFi Smartphone PC RNC2G 3G Ethernet CE NodeB eNodeB AP Small Cell FAP Gateways / Service Edge OSS/BSS Subsystems and Control Data Plane Voice Video Data Core Network Infrastructure IMS xDSLHFC PGWSGW 2/3G GGSN 2/3G SGSN MME ePDG eWAG PE Metro Network Infrastructure NAT FW IPSec DPICGNCaching Opt MSC-SMGW A-SBC I-SBC BGCF MGCF PS / RLS DRA Video ingestion DRM Video Network EMS Provisioning Analytics Billing Radius DNS DHCP S-CSCF P-CSCF I-CSCF Trans- coding Cache Control Policy Parental control HLR HSS ENUM TAS SMS-C Services OCS MMS-C HCSRMS xDSLDSLAM DSL/ FTTX BNG Core Routing Metro Ethernet Biz CPE Consumer CPE Cable Modem CMTS Capacity Planning WLC SecGW HNB-GW Policy SDN Controller BGP server Metro Ethernet Data CenterCore and Data Center Network Infrastructure
Cisco Confidential 18© 2013-2014 Cisco and/or its affiliates. All rights reserved. Virtualization of “Network Functions” Existing Hardware / Appliance based Network Functions (NFs) Virtualized NFs running as VM on x86 Server Platform Step 1: Decouple software from underlying hardware Step 2: Port it as a VM on x86 Server platform running as a Network Function Ethernet Switches Storage Hypervisor FW Routing DPI LB
Cisco Confidential 19© 2013-2014 Cisco and/or its affiliates. All rights reserved. Telco  Service   Providers   $$   $$   Service   Consumers   Enterprises   Public   Sector   Consumer   $$   $$   Cloud  /  OTT  Service   Providers   IaaS   PaaS   SaaS   OTT   $$   many networks, technologies and systems massive growth of IP traffic $   $$   $$   $$   $$   converged and private networks PPPoE IPv4 IPv6 MPLS MPLS-TPOTN DWDMATMSDH xGE tunnel VPN MP-BGP ISIS/OSPF MPLS-TE DHCP EOAM IPOAM LACP SNMP CLI XML t revenue cost $ 1.  Lean  &  Agile  OTT  players  with   economies  of  scale   2.  Highly-­‐automated  operaEons   3.  Fast-­‐paced  innovaEon   1.  Complex  and  silo’d  networks   2.  High  cost  to  operate   3.  Lack  of  agility,  huge  Eme  required  to  create  new  services   4.  ExponenEal  growth  of  bandwidth   1.  User  Experience   2.  Cloud  Centric   ConsumpEon  Models    /   Pay-­‐as-­‐you-­‐go   Need to Understand SP Challenges to realize Why NFV
Cisco Confidential 20© 2013-2014 Cisco and/or its affiliates. All rights reserved. SP’s Expectations from NFV §  NFV will help them to reduce cost (TCO) §  NFV will bring the much needed agility in the Service Creation & delivery process §  On-boarding a new service will be much easier with NFV §  SP’s can now afford to go wrong – decommissioning a failed service wont be expensive §  Services now can be scaled up and down elastically §  NFV will help drive more Openness and Standardization
Cisco Confidential 21© 2013-2014 Cisco and/or its affiliates. All rights reserved. §  NFV – It is a Service Provider driven Initiative. §  Initiative announced at “SDN and OpenFlow World Congress”, Darmstadt, Oct 2012 §  Industry Specification Group (ISG) group within ETSI §  Not defining standards -deliver white papers and liaising with standards bodies §  First ETSI meeting was held in January, 2013 §  Technically not related to SDN, conceptually different §  But may utilize SDN concepts – Programmability, Orchestration §  Type of network function mostly determine where virtualization makes sense §  Careful analysis is required on Network Function by Network Function NFV = Transition of network infrastructure services to run on virtualised compute platforms – typically x86 Network Function Virtualization (NFV) Initiative
Cisco Confidential 22© 2013-2014 Cisco and/or its affiliates. All rights reserved. Key Factors To Determine Potential Virtualization Targets Packet / Data Plane Performance Requirements Control Plane Performance Requirements Deviation from Standard Server build (e.g. interface type, density) Economics of On-boarding if Virtualized Power Efficiency requirement of the System Development, Ease of Integration, Service Elasticity Needs 1 2 3 4 5 6
Cisco Confidential 23© 2013-2014 Cisco and/or its affiliates. All rights reserved. The Fundamental Electrical Building Blocks General Purpose Processors (x86, ARM, PPC) •  Wide range of capabilities (including packet processing) •  Evolving multi-core capability (10+ processors per die) •  Support virtualization and easy to program Network Processor Units (NPUs) •  Designed for flexible packet processing •  Multi-threaded (100s) / n/w acceleration / integrated memory •  Programmable in high level languages Fixed function ASICs •  Very low cost •  Integrated s/w, very efficient but relatively inflexible All based on CMOS technology – All subject to Moore’s Law
Cisco Confidential 24© 2013-2014 Cisco and/or its affiliates. All rights reserved. Characteristics of Network Elements High Capacity Plumbing: (L0-3 : e.g. IPv4/v6, MPLS, VPNs, ACLs, optical devices …) •  High throughput / BW •  Many flows needing isolation, significant traffic management needed •  Stateless functions •  Mostly predictable traffic •  Interface-specific functions (2-stage forwarding) Network Services: (L4+ : e.g. DPI, vFW, CGN, DDOS, BNG, mobility, …) •  Throughput - varies •  # of flows (traffic management) – varies •  Stateful functions •  Unpredictable traffic •  No i/f-specific functions Low compute + High BW è  Good fit for NPU è  Poor fit for x86/CPU Poor fit for x86/CPU Good fit for x86/CPUYes (%) No (%) High Compute + Low BW
Cisco Confidential 25© 2013-2014 Cisco and/or its affiliates. All rights reserved. Business CPE Service Appliances (L4-L7) Core Backbone Routing, CE Access-Aggregation and DC switching Wireline GWs Home CPE Wireless GWs Network Functions – Requirements & today’s approaches CPU Reqs 0 10Mbps 100Mbps 1Gbps 10Gbps 100Gbps 1Tbps 10Tbps 100Tbps 1Pbps High Low Distributed: CPUs + Lots of NPUs Distributed: Lots of CPUs + NPUs Centralized: CPU + NPU CPU Centralized: CPU or SoC Variable CPU / FPGA / NPU OSS/BSS, subsystem and N/W control
Cisco Confidential 26© 2013-2014 Cisco and/or its affiliates. All rights reserved. Mapping Back to the Service Provider Landscape LTE Smartphone Access xDSL WiFi Smartphone PC RNC2G 3G Ethernet CE NodeB eNodeB AP Small Cell FAP Gateways / Service Edge OSS/BSS Subsystems and Control Data Plane Voice Video Data Core Network Infrastructure IMS xDSLHFC PGWSGW 2/3G GGSN 2/3G SGSN MME ePDG eWAG PE Metro Network Infrastructure NAT FW IPSec DPICGNCaching Opt MSC-SMGW A-SBC I-SBC BGCF MGCF PS / RLS DRA Video ingestion DRM Video Network EMS Provisioning Analytics Billing Radius DNS DHCP S-CSCF P-CSCF I-CSCF Trans- coding Cache Control Policy Parental control HLR HSS ENUM TAS SMS-C Services OCS MMS-C HCSRMS xDSLDSLAM DSL/ FTTX BNG Core Routing Metro Ethernet Biz CPE Consumer CPE Cable Modem CMTS Capacity Planning WLC SecGW HNB-GW Policy SDN Controller BGP server Metro Ethernet Data Center No Appeal No Appeal High Appeal High Appeal Depends HighAppeal Very High Appeal High Appeal No Appeal
Cisco Confidential 27© 2013-2014 Cisco and/or its affiliates. All rights reserved. The Role of SDN and Orchestration Partial list, just a few main ones are mentioned here Ethernet Switching Network Underlay Hypervisor Hypervisor Hypervisor NAT Firewall DPI Orchestration and SDN Control Function Storage Server 1 Server 2 Server 3 Firewall DPI VM / VNF Lifecycle Management in End-to-end manner Network Plumbing to orchestrate dynamic topologies Configuration Management of the VNFs Integration with Other DC/POD And the WAN OAM, Assurance, Analytics Standard APIs NAT
Cisco Confidential 28© 2013-2014 Cisco and/or its affiliates. All rights reserved. Computing Hardware Storage Hardware Network Hardware Hardware resources Virtualisation Layer Virtualised Infrastructure Manager(s) VNF Manager(s) VNF 2 OrchestratorOSS/BSS NFVI VNF 3 VNF 1 Execution reference points Main NFV reference pointsOther reference points Virtual Computing Virtual Storage Virtual Network NFV Management and Orchestration EMS 2 EMS 3 EMS 1 Service, VNF and Infrastructure Description Or-Vi Or-Vnfm Vi-Vnfm Os-Ma Se-Ma Ve-Vnfm Nf-Vi Vn-Nf Vl-Ha NFV Reference Architecture from ETSI NFV ISG
Cisco Confidential 29© 2013-2014 Cisco and/or its affiliates. All rights reserved. Major Service Providers Driving the ETSI NFV ISG * Partial List
Cisco Confidential 30© 2013-2014 Cisco and/or its affiliates. All rights reserved. NFV Use Cases •  Simple ones – Virtualized Route Reflector •  Virtualized CPE for Business VPN services •  Virtualized Mobile Packet Core •  Virtualized Managed Services (CPE, FW, UTM…..) •  Virtualized Home CPEs •  Virtualized Gateways (BRAS, BNG, mobile gateways, Wi-Fi gateways) •  ….
Cisco Confidential 31© 2013-2014 Cisco and/or its affiliates. All rights reserved. Metro&and&Access& Core&&&Edge&&CPE& Data&Centers& vPE-F VNF Instances vPE-F VNF Instances VNF VNF VNF VNF DCI DCI Servers Storage Bare Metal Workload PE DCI DCI PE Web VM DB VM FWWAAS vCPE vFW vWAAS L2 NID Backhaul End-to-End Orchestration Metro&and&Access& Core&&&Edge&&CPE& Data&Centers& vPE-F VNF Instances vPE-F VNF Instances VNF VNF VNF VNF DCI DCI Servers Storage Bare Metal Workload PE DCI DCI PE Web VM DB VM FWWAAS vFW vESA vWAAS L3 CPE / vCPE Backhaul End-to-End Orchestration
Cisco Confidential 32© 2013-2014 Cisco and/or its affiliates. All rights reserved. Business VPN CPE in a Overlay Transport Model Cloud IPVPN with FW and Remote Access to Internet §  vFW with NAT and Policy §  vFW with IPSec/SSL Remote Access including Remote End-Host posture verification CPE CPE CPE Internet Router vFW SP CLOUD Internet Cloud-Hosted Management Scalable, elastic, on-demand Overlay Packet Tunnels §  Keyed IPv6 tunnels - mesh, hub&spoke; §  IPSec tunnels – mesh, hub&spoke if keyed IPv6 tunnels not supported; VR
Cisco Confidential 33© 2013-2014 Cisco and/or its affiliates. All rights reserved. Where to Place the VNFs ? §  Candidate location types in the network – §  Centralized Data Centers à Easier to manage §  Fully Distributed – POP’s, Edge / Anchor Points / Peering locations à Higher scale & performance §  Hybrid – Mix of the above §  Some factors that may need to be considered here – §  The Use Case to deploy the VNFs §  Cost of transporting traffic across core §  Network Architecture / design §  Chance of Sub-optimal routing, impact on SLA (e.g. delay) §  Management Ease vs. Scalability Metro&and&Access& Core&&&Edge&&CPE& Data&Centers& vPE-F VNF Instances vPE-F VNF Instances VNF VNF VNF VNF DCI DCI Servers Storage Bare Metal Workload PE
Cisco Confidential 34© 2013-2014 Cisco and/or its affiliates. All rights reserved. Metro&and&Access& Core&&&Edge&&CPE& Data&Centers& vPE-F VNF Instances vPE-F VNF Instances VNF VNF VNF VNF DCI DCI Servers Storage Bare Metal Workload PE DCI DCI PEL2 Backhaul vCPE vCPE Metro&and&Access& Core&&&Edge&&CPE& Data&Centers& vPE-F VNF Instances vPE-F VNF Instances VNF VNF VNF VNF DCI DCI Servers Storage Bare Metal Workload PE DCI DCI Web VM DB VM FWWAAS L2 Backhaul Web VM DB VM FWWAAS vCPE vCPE Metro&and&Access& Core&&&Edge&&CPE& Data&Centers& vPE-F VNF Instances vPE-F VNF Instances VNF VNF VNF VNF DCI DCI Servers Storage Bare Metal Workload PE DCI DCI PE vCPE vFW vWAAS L2 NID / L2 Backhaul Web VM DB VM FWWAAS Centralized Higher Traffic Across Core Sub-optimal routing Higher e2e delay Better performance / scale More Complex to manage Better performance / scale More Complex to manage Distributed Distributedwith ServiceChain
Cisco Confidential 35© 2013-2014 Cisco and/or its affiliates. All rights reserved. NFV – How to build / Augment Operations skillsets •  Most existing technologies, protocols and associated skills are equally required •  On top of that, there are needs for acquisition of New Skills •  x86 Server Virtualization •  Virtualization on Linux (and KVM/QEMU) Environment •  Cloud Orchestration Systems – such as OpenStack •  Virtual Switches – OVS, Snabbswitch, Netmap/VALE, Vendor Specific etc •  SDN Controllers – OpenDayLight, Vendor Specific •  Device Programmability and APIs – NETCONF, Yang, RESTCONF, REST APIs, OF…. •  Service Function Chaining – specially NSH (Network Service Header) •  Network based Virtual Overlay transport – VXLAN, MPLSoGRE/UDP, LISP, L2TPv3….. •  Management, Orchestration, OSS Fundamentals •  …..
Thank you.

More Related Content

PDF
OpenStack Paris Meetup on Nfv 2014/10/07
Nicolas (Nick) Barcet
 
PDF
NFV and OpenStack
Marie-Paule Odini
 
PDF
Nfv open stack-shuo-yang
OW2
 
PDF
NFV for beginners
Dave Neary
 
PDF
Network Function Virtualization (NFV) BoF
APNIC
 
PDF
Cto’s guide to sdn, nfv and vnf
Paulo R
 
PDF
Network Softwerization Impact, NFV, SDN
Marie-Paule Odini
 
PDF
NFV & Openstack
Marie-Paule Odini
 
OpenStack Paris Meetup on Nfv 2014/10/07
Nicolas (Nick) Barcet
 
NFV and OpenStack
Marie-Paule Odini
 
Nfv open stack-shuo-yang
OW2
 
NFV for beginners
Dave Neary
 
Network Function Virtualization (NFV) BoF
APNIC
 
Cto’s guide to sdn, nfv and vnf
Paulo R
 
Network Softwerization Impact, NFV, SDN
Marie-Paule Odini
 
NFV & Openstack
Marie-Paule Odini
 

What's hot (20)

PPTX
Acronym Soup – NFV, SDN, OVN and VNF
Emulex Corporation
 
PDF
Network Function Virtualization Orchestration LI
Krishnamoorthy Arvind
 
PPTX
Network Function Virtualization : Infrastructure Overview
sidneel
 
PDF
Nfv short-course-sbrc14-full
Christian Esteve Rothenberg
 
PDF
Openstack meetup NFV
Marie-Paule Odini
 
PDF
The NFV, SDN & Wireless Network Infrastructure Market: 2015 - 2020 - Opportun...
LeeSam111
 
PPTX
Introduction to SDN and NFV
CoreStack
 
PPTX
Software-Defined Networking(SDN):A New Approach to Networking
Anju Ann
 
PPTX
Network Function Virtualization : Overview
sidneel
 
PPTX
The Next Step of OpenStack Evolution for NFV Deployments
Dirk Kutscher
 
PDF
NFV SDN for carriers
Marie-Paule Odini
 
PPTX
SDN and NFV: Friends or Enemies
Justyna Bak
 
PDF
Presentación Laboratorio NFV de Telefónica de Antonio Elizondo
videos
 
PPTX
Iben from Spirent talks at the SDN World Congress about the importance of and...
Iben Rodriguez
 
PDF
Ch 05 --- nfv basics
Yoram Orzach
 
PDF
Non-Fluff Software Defined Networking, Network Function Virtualization and IoT
Mark Ryan Castellani
 
PPTX
Nfv
Ahmad Hijazi
 
PDF
NFV Linaro Connect Keynote
Linaro
 
PDF
Building the New Telefónica Core with NFV
Francisco Javier Ramón Salguero
 
PPTX
Introduction to OpenFlow, SDN and NFV
Kingston Smiler
 
Acronym Soup – NFV, SDN, OVN and VNF
Emulex Corporation
 
Network Function Virtualization Orchestration LI
Krishnamoorthy Arvind
 
Network Function Virtualization : Infrastructure Overview
sidneel
 
Nfv short-course-sbrc14-full
Christian Esteve Rothenberg
 
Openstack meetup NFV
Marie-Paule Odini
 
The NFV, SDN & Wireless Network Infrastructure Market: 2015 - 2020 - Opportun...
LeeSam111
 
Introduction to SDN and NFV
CoreStack
 
Software-Defined Networking(SDN):A New Approach to Networking
Anju Ann
 
Network Function Virtualization : Overview
sidneel
 
The Next Step of OpenStack Evolution for NFV Deployments
Dirk Kutscher
 
NFV SDN for carriers
Marie-Paule Odini
 
SDN and NFV: Friends or Enemies
Justyna Bak
 
Presentación Laboratorio NFV de Telefónica de Antonio Elizondo
videos
 
Iben from Spirent talks at the SDN World Congress about the importance of and...
Iben Rodriguez
 
Ch 05 --- nfv basics
Yoram Orzach
 
Non-Fluff Software Defined Networking, Network Function Virtualization and IoT
Mark Ryan Castellani
 
Nfv
Ahmad Hijazi
 
NFV Linaro Connect Keynote
Linaro
 
Building the New Telefónica Core with NFV
Francisco Javier Ramón Salguero
 
Introduction to OpenFlow, SDN and NFV
Kingston Smiler
 
Ad

Similar to Network Function Virtualisation (NFV) BoF (20)

PDF
DEVNET-1155 Branch Virtualization
Cisco DevNet
 
PDF
BRKCRS-2110.pdf
Asif Qureshi
 
PDF
Challenges of L2 NID Based Architecture for vCPE and NFV Deployment
Bangladesh Network Operators Group
 
PPTX
Achieving Network Deployment Flexibility with Mirantis OpenStack
Eric Zhaohui Ji
 
PDF
Cisco at v mworld 2015 theater presentation brfarnha
ldangelo0772
 
PDF
PLNOG14: Service orchestration in provider network, Tail-f - Przemysław Borek
PROIDEA
 
PPTX
Netsft2017 day in_life_of_nfv
Intel
 
PDF
Openstack v4 0
sprdd
 
PDF
 Network Innovations Driving Business Transformation
Cisco Service Provider
 
PDF
PLNOG16: Kreowanie usług przez operatorów – SP IWAN, Krzysztof Konkowski
PROIDEA
 
PDF
PLNOG16: Automatyzacja kreaowania usług operatorskich w separacji od rodzaju ...
PROIDEA
 
PPTX
Cisco Evolving virtual switching to applications & cloud
solarisyougood
 
PDF
Cisco SDN/NVF Innovations (SDN NVF Day ITB 2016)
SDNRG ITB
 
PPTX
Vxlan control plane and routing
Wilfredzeng
 
PPTX
The Data Center Network Evolution
Cisco Canada
 
PDF
OVHcloud Hosted Private Cloud Platform Network use cases with VMware NSX
OVHcloud
 
PDF
[OpenStack Day in Korea 2015] Track 2-3 - 오픈스택 클라우드에 최적화된 네트워크 가상화 '누아지(Nuage)'
OpenStack Korea Community
 
PDF
#NSD14 - Sécuriser l'infrastructure réseau des datacenters
NetSecure Day
 
PDF
Open v ran
Rajasa Pramudya Wardhana
 
PDF
Cisco Secure SD-WAN 2023 UMBRELLA SIG TALOS
sssmantri
 
DEVNET-1155 Branch Virtualization
Cisco DevNet
 
BRKCRS-2110.pdf
Asif Qureshi
 
Challenges of L2 NID Based Architecture for vCPE and NFV Deployment
Bangladesh Network Operators Group
 
Achieving Network Deployment Flexibility with Mirantis OpenStack
Eric Zhaohui Ji
 
Cisco at v mworld 2015 theater presentation brfarnha
ldangelo0772
 
PLNOG14: Service orchestration in provider network, Tail-f - Przemysław Borek
PROIDEA
 
Netsft2017 day in_life_of_nfv
Intel
 
Openstack v4 0
sprdd
 
 Network Innovations Driving Business Transformation
Cisco Service Provider
 
PLNOG16: Kreowanie usług przez operatorów – SP IWAN, Krzysztof Konkowski
PROIDEA
 
PLNOG16: Automatyzacja kreaowania usług operatorskich w separacji od rodzaju ...
PROIDEA
 
Cisco Evolving virtual switching to applications & cloud
solarisyougood
 
Cisco SDN/NVF Innovations (SDN NVF Day ITB 2016)
SDNRG ITB
 
Vxlan control plane and routing
Wilfredzeng
 
The Data Center Network Evolution
Cisco Canada
 
OVHcloud Hosted Private Cloud Platform Network use cases with VMware NSX
OVHcloud
 
[OpenStack Day in Korea 2015] Track 2-3 - 오픈스택 클라우드에 최적화된 네트워크 가상화 '누아지(Nuage)'
OpenStack Korea Community
 
#NSD14 - Sécuriser l'infrastructure réseau des datacenters
NetSecure Day
 
Open v ran
Rajasa Pramudya Wardhana
 
Cisco Secure SD-WAN 2023 UMBRELLA SIG TALOS
sssmantri
 
Ad

More from APNIC (20)

PPTX
APNIC Report, presented at APAN 60 by Thy Boskovic
APNIC
 
PDF
APNIC Update, presented at PHNOG 2025 by Shane Hermoso
APNIC
 
PDF
RPKI Status Update, presented by Makito Lay at IDNOG 10
APNIC
 
PDF
The Internet -By the Numbers, Sri Lanka Edition
APNIC
 
PDF
Triggering QUIC, presented by Geoff Huston at IETF 123
APNIC
 
PDF
DNSSEC Made Easy, presented at PHNOG 2025
APNIC
 
PDF
BGP Security Best Practices that Matter, presented at PHNOG 2025
APNIC
 
PDF
APNIC's Role in the Pacific Islands, presented at Pacific IGF 2205
APNIC
 
PDF
IPv6 Deployment and Best Practices, presented by Makito Lay
APNIC
 
PDF
Cleaning up your RPKI invalids, presented at PacNOG 35
APNIC
 
PDF
The Internet - By the numbers, presented at npNOG 11
APNIC
 
PDF
Transmission Control Protocol (TCP) and Starlink
APNIC
 
PDF
DDoS in India, presented at INNOG 8 by Dave Phelan
APNIC
 
PDF
Global Networking Trends, presented at the India ISP Conclave 2025
APNIC
 
PDF
Make DDoS expensive for the threat actors
APNIC
 
PDF
Fast Reroute in SR-MPLS, presented at bdNOG 19
APNIC
 
PDF
DDos Mitigation Strategie, presented at bdNOG 19
APNIC
 
PDF
ICP -2 Review – What It Is, and How to Participate and Provide Your Feedback
APNIC
 
PDF
APNIC Update - Global Synergy among the RIRs: Connecting the Regions
APNIC
 
PDF
Measuring Starlink Protocol Performance, presented at LACNIC 43
APNIC
 
APNIC Report, presented at APAN 60 by Thy Boskovic
APNIC
 
APNIC Update, presented at PHNOG 2025 by Shane Hermoso
APNIC
 
RPKI Status Update, presented by Makito Lay at IDNOG 10
APNIC
 
The Internet -By the Numbers, Sri Lanka Edition
APNIC
 
Triggering QUIC, presented by Geoff Huston at IETF 123
APNIC
 
DNSSEC Made Easy, presented at PHNOG 2025
APNIC
 
BGP Security Best Practices that Matter, presented at PHNOG 2025
APNIC
 
APNIC's Role in the Pacific Islands, presented at Pacific IGF 2205
APNIC
 
IPv6 Deployment and Best Practices, presented by Makito Lay
APNIC
 
Cleaning up your RPKI invalids, presented at PacNOG 35
APNIC
 
The Internet - By the numbers, presented at npNOG 11
APNIC
 
Transmission Control Protocol (TCP) and Starlink
APNIC
 
DDoS in India, presented at INNOG 8 by Dave Phelan
APNIC
 
Global Networking Trends, presented at the India ISP Conclave 2025
APNIC
 
Make DDoS expensive for the threat actors
APNIC
 
Fast Reroute in SR-MPLS, presented at bdNOG 19
APNIC
 
DDos Mitigation Strategie, presented at bdNOG 19
APNIC
 
ICP -2 Review – What It Is, and How to Participate and Provide Your Feedback
APNIC
 
APNIC Update - Global Synergy among the RIRs: Connecting the Regions
APNIC
 
Measuring Starlink Protocol Performance, presented at LACNIC 43
APNIC
 

Recently uploaded (20)

PDF
WebRTC in SignalWire - troubleshooting media negotiation
Giacomo Vacca
 
PPTX
Introduction to Information and Communication Technology
AkmadArzieAyao1
 
PPT
tcp ip networks nd ip layering assotred slides
pakadamfdp
 
PPTX
Digital Literacy And Online Safety on internet
riksa rifqi
 
PPTX
artificial intelligence overview of it and more
yafotin445
 
PPTX
introduction about ICD -10 & ICD-11 ppt.pptx
naveenithkrishnan
 
PPTX
Introduction about ICD -10 and ICD11 on 5.8.25.pptx
naveenithkrishnan
 
PDF
Sims 4 Historia para lo sims 4 para jugar
lolpopy34
 
PPTX
Slides PPTX World Game (s) Eco Economic Epochs.pptx
Steven McGee
 
PPTX
international classification of diseases ICD-10 review PPT.pptx
naveenithkrishnan
 
PPTX
522797556-Unit-2-Temperature-measurement-1-1.pptx
msar8888
 
PPTX
PptxGenJS_Demo_Chart_20250317130215833.pptx
itruongva
 
PDF
Automated vs Manual WooCommerce to Shopify Migration_ Pros & Cons.pdf
CartCoders
 
PPTX
INTERNET------BASICS-------UPDATED PPT PRESENTATION
poonam62133
 
PPTX
presentation_pfe-universite-molay-seltan.pptx
yahyamohibme
 
PPTX
Module 1 - Cyber Law and Ethics 101.pptx
anantyakhrisna1
 
DOCX
Unit-3 cyber security network security of internet system
shivangisharma636228
 
PPTX
SAP Ariba Sourcing PPT for learning material
NKKumar16
 
PPT
Design_with_Watersergyerge45hrbgre4top (1).ppt
DiogoRibeiro730590
 
PDF
Cloud-Scale Log Monitoring _ Datadog.pdf
MuhammadDhomanhuriMa
 
WebRTC in SignalWire - troubleshooting media negotiation
Giacomo Vacca
 
Introduction to Information and Communication Technology
AkmadArzieAyao1
 
tcp ip networks nd ip layering assotred slides
pakadamfdp
 
Digital Literacy And Online Safety on internet
riksa rifqi
 
artificial intelligence overview of it and more
yafotin445
 
introduction about ICD -10 & ICD-11 ppt.pptx
naveenithkrishnan
 
Introduction about ICD -10 and ICD11 on 5.8.25.pptx
naveenithkrishnan
 
Sims 4 Historia para lo sims 4 para jugar
lolpopy34
 
Slides PPTX World Game (s) Eco Economic Epochs.pptx
Steven McGee
 
international classification of diseases ICD-10 review PPT.pptx
naveenithkrishnan
 
522797556-Unit-2-Temperature-measurement-1-1.pptx
msar8888
 
PptxGenJS_Demo_Chart_20250317130215833.pptx
itruongva
 
Automated vs Manual WooCommerce to Shopify Migration_ Pros & Cons.pdf
CartCoders
 
INTERNET------BASICS-------UPDATED PPT PRESENTATION
poonam62133
 
presentation_pfe-universite-molay-seltan.pptx
yahyamohibme
 
Module 1 - Cyber Law and Ethics 101.pptx
anantyakhrisna1
 
Unit-3 cyber security network security of internet system
shivangisharma636228
 
SAP Ariba Sourcing PPT for learning material
NKKumar16
 
Design_with_Watersergyerge45hrbgre4top (1).ppt
DiogoRibeiro730590
 
Cloud-Scale Log Monitoring _ Datadog.pdf
MuhammadDhomanhuriMa
 

Network Function Virtualisation (NFV) BoF

  • 1. Network Functions Virtualization (NFV) Santanu Dasgupta Sr. Consulting Engineer – Service Provider Network Architecture BOF Meeting – APRICOT 2015 3rd March, 2015
  • 2. Cisco Confidential 2© 2013-2014 Cisco and/or its affiliates. All rights reserved. APRICOT 2015 NFV BOF Outline §  At APRICOT 2014, the NFV BOF meeting that I hosted was focused around some of the basic and introductory concepts of NFV §  For APRICOT 2015, the focus area would be a few advanced topics §  However, we can go back to some basics too – there is a section at the end of this slide §  Please jump on with your top of the mind issues that you want to discuss §  Need active participations from everyone
  • 3. Cisco Confidential 3© 2013-2014 Cisco and/or its affiliates. All rights reserved. APRICOT 2015 NFV BOF – Topics For Discussion §  The State of Service Provider NFV and Major Use Cases §  Data Plane Connectivity Models for VNFs / VMs to achieve high performance §  Overlay Encapsulation in the DC for MPLS Operators §  NFV Service Assurance §  Service Chaining in NFV §  Applicability of Linux Container Technology in NFV §  The skillset evolution requirement for engineers §  Other topics you want to discuss §  NFV Introduction – as a placeholder
  • 4. Cisco Confidential 4© 2013-2014 Cisco and/or its affiliates. All rights reserved. The SP NFV Landscape and Major Use Cases §  Top of mind for most / all Service Providers §  Lot of expectations – §  CAPEX & OPEX reduction §  Agility with end-to-end automation and cloud centric service delivery models §  Faster time to market for new services §  Architecture transformation §  Increased use of generic hardware and open source software, §  Higher openness and standardization §  Lets have a Reality Check Done with the folks in the meeting §  Overall the state of technology and deployment at still in primitive stage §  Major areas of focus §  Cloud Centric Managed Services (Managed CPE, Security, VPN, Value Added Services…) §  Virtualized Mobile Packet Core and Virtualized Gi-LAN §  SP Infrastructure NFV (Virtual BRAS/BNG, Virtual RR, Virtual DNS, Virtual PE…) §  Do you guys have any other major use case that is important to you? Topic #1
  • 5. Cisco Confidential 5© 2013-2014 Cisco and/or its affiliates. All rights reserved. Data Plane Connectivity Models for VNFs / VMs vSwitch Tenant VM Tenant VM KVM NIC Multi-tenanted vRouter / vSwitch vSwitch Tenant VM Tenant VM KVM NIC Tenant VM Tenant VM §  Multi-tenanted vSwitch (such as OVS) in kernel, may be with additional extension to do routing §  Performance may be typical concern §  Other possible concerns – Fault tolerance, kernel recertification needs … §  High performance multi-tenanted vRouter/ vSwitch in the user space §  vSwitch in the kernel as patch panel for tenant VM connectivity §  Concern – the vSwitch patch panel performance Topic #2 Multi-tenanted vSwitch vSwitch (as Patch Panel)
  • 6. Cisco Confidential 6© 2013-2014 Cisco and/or its affiliates. All rights reserved. Data Plane Connectivity Models for VNFs / VMs …contd High Performance Multi-tenanted vRouter/vSwitch Tenant VM Tenant VM KVM NIC Tenant VM Tenant VM vSwitch Tenant VM Tenant VM KVM NIC Multi-tenanted vRouter / vSwitch vHost User §  Move that high performance multi-tenanted vRouter / vSwitch in the kernel space §  Remove the need of additional vSwitch as patch panel §  But fault tolerance, other kernel related issues are back here in this model §  Retain the high-performance multi-tenanted vRouter/vSwitch in the user space §  Use vhost-user process for inter-VM traffic by direct memory copy – no hypervisor involved §  Need to ensure proper memory copy operation to ensure security, stability etc Topic #2 vSwitch (as Patch Panel)
  • 7. Cisco Confidential 7© 2013-2014 Cisco and/or its affiliates. All rights reserved. Data Plane Connectivity Models for VNFs / VMs …contd vSwitch Tenant VM Tenant VM KVM NIC Tenant VM Tenant VM TOR Switch 802.1q VXLAN / MPLSoGRE SR-IOV Tenant VM Tenant VM KVM NIC Tenant VM Tenant VM TOR Switch 802.1q VXLAN / MPLSoGRE §  No multi-tenanted vRouter/vSwitch anymore §  Use a TOR switch for VXLAN – VLAN mapping §  Appropriate VLANs mapped to the VMs through the vSwitch in the kernel §  Scalable Layer 3 service chaining may be a challenge to implement §  No vSwitch anywhere! §  Use a TOR switch for VXLAN – VLAN mapping §  SR-IOV to map the traffic from PNIC to the appropriate VMs §  Scalable Layer 3 service chaining may be a challenge to implement Topic #2
  • 8. Cisco Confidential 8© 2013-2014 Cisco and/or its affiliates. All rights reserved. Encapsulation within the DC / NFV POD for MPLS Operators vNAT vFW VXLAN / MPLSoGRE / MPLSoUDP IPIP MPLS vNAT vFW MPLS (Segment Routing / LDP) IPIP MPLS Current Approaches Possible Alternate ? End-to-end common encap, uniform OAM, easy operations and troubleshooting But now, the DC/NFV POD underlay devices need to run label switching CPE CPE PE DCI DCI DCIDCIPE Topic #3
  • 9. Cisco Confidential 9© 2013-2014 Cisco and/or its affiliates. All rights reserved. NFV Service Assurance A huge topic, but appeared to be on back burner for a long time Service Level Management Collection NFVI Performance Management Fault Management Analytics Planning and Optimization Operator’s Console, DashboardsKey Capabilities: Key Capabilities: Key Capabilities: Key Capabilities: Topic #4
  • 10. Cisco Confidential 10© 2013-2014 Cisco and/or its affiliates. All rights reserved. Service Chaining in NFV §  Many thoughts across the industry and technical communities §  Different solutions emerging – §  Network Service Header (NSH) – being standardized at IETF §  L3 Routed Service Chain (orchestrated) along with BGP for WAN integration §  Segment Routing based service chaining §  VLAN stitching §  NSH gaining traction and has a lot of promise §  Extensive metadata capabilities to carry rich set of policies §  In-band OAM becoming a possibility – the IP and Ethernet generation had missed it so far §  However some feedback are coming around its complexity §  True benefit of NSH may require all VNFs to support it across industry •  There may be some issue with time to market, performance impact etc. Topic #5
  • 11. Cisco Confidential 11© 2013-2014 Cisco and/or its affiliates. All rights reserved. Service Chaining with Remote DC & Across Multiple Sites Layer 3 and BGP Capabilities are Critical (MPLS Environment) POD 2/DC 2 Underlay R2 R4 PE2 PE3 2.2.2.0/24 4.4.4.0/24 SDN Controller RT 2:200 RT 4:400 Import 2:200 Import 4:400 4.4.4.0/24, via PE3 Route Leak with modified NH Import4:400 VRF_A1 VRF_A2 VRF_A1 VRF_A2 VRF_A VRF_A For Outgoing traffic from Server: 2.2.2.0/24, via DCI, Label 100 4.4.4.0/24, via DCI, Label 200 For Incoming traffic to Sever: 2.2.2.0/24, via VIF2, Label 300 4.4.4.0/24, via VIF1, Label 400 vSwitch Out In vFW2 VIF1 VIF2 vSwitch In Out vFW1 VIF2 VIF1 POD 1/DC 1 Underlay SDN Controller VRF_A1 VRF_A2 VRF_A1 VRF_A2 IP/MPLS 4.4.4.0/24, via vPE-F 2 DCI2DCI1 4.4.4.0/24, via DCI2 Import2:200 Route Leak with modified NH 4.4.4.0/24, via vSwitch 4.4.4.0/24, via DCI1 2.2.2.0/24, via PE2 2.2.2.0/24, via vPE-F 1 2.2.2.0/24, via DCI1 2.2.2.0/24, via vSwitch For Outgoing traffic from Server: 2.2.2.0/24, via DCI, Label 100 4.4.4.0/24, via DCI, Label 200 For Incoming traffic to Sever: 2.2.2.0/24, via VIF2, Label 300 4.4.4.0/24, via VIF1, Label 400 2.2.2.0/24, via DCI2 Topic #5 BGP RR
  • 12. Cisco Confidential 12© 2013-2014 Cisco and/or its affiliates. All rights reserved. NSH May Help Simplify This With Decoupling of Service & Transport Layer POD 2/DC 2 Underlay R2 R4 PE2 PE3 2.2.2.0/24 4.4.4.0/24 SDN Controller RT 2:200 RT 4:400 VRF_A2 VRF_A VRF_A vSwitch vFW2vFW1 vSwitch POD 1/DC 1 Underlay SDN Controller IP/MPLS DCI2DCI1 4.4.4.0/24, via PE3 2.2.2.0/24, via PE2 Classifier: If <policy-match> -> PathID 10, SI 3 PathID = 10 -> vFW1, vFW2 vFW1 NH vSwitch 4.4.4.x NSH 10, 3 4.4.4.x NSH 10, 3 4.4.4.x NSH 10, 2 vPE-F1 vPE-F1 vPE-F2 4.4.4.x NSH 10, 2 vPE-F2 4.4.4.x BGP RR Topic #5
  • 13. Cisco Confidential 13© 2013-2014 Cisco and/or its affiliates. All rights reserved. Linux Container Technology in NFV §  Linux Container and/or Docker like technologies are gaining a lot of traction in the virtualization space §  Can help address some performance concerns §  Security issues associated with Container in a multi-tenanted environment ? §  How to containerize §  Network Function by Network Function ? §  Or a whole Virtualized Product (OS) ? Topic #6
  • 14. Cisco Confidential 14© 2013-2014 Cisco and/or its affiliates. All rights reserved. NFV – How to build / Augment Operations skillsets •  Most existing technologies, protocols and associated skills are equally required •  On top of that, there are needs for acquisition of New Skills •  x86 Server Virtualization •  Virtualization on Linux (and KVM/QEMU) Environment •  Cloud Orchestration Systems – such as OpenStack •  Virtual Switches – OVS, Netmap/VALE, Snabbswitch, Vendor Specific etc •  SDN Controllers – OpenDayLight, Vendor Specific •  Device Programmability and APIs – NETCONF, Yang, RESTCONF, REST APIs, OF…. •  Service Function Chaining – specially NSH (Network Service Header) •  Network based Virtual Overlay transport – VXLAN, MPLSoGRE/UDP, LISP, L2TPv3….. •  Automation Tools – puppet / chef etc. •  Management, Orchestration, OSS Fundamentals, •  ….. Topic #7
  • 15. Cisco Confidential 15© 2013-2014 Cisco and/or its affiliates. All rights reserved. Open Forum For Other Topics That Are on Top of Your Mind Topic #8
  • 16. Cisco Confidential 16© 2013-2014 Cisco and/or its affiliates. All rights reserved. NFV Introduction Placeholder Topic #9
  • 17. Cisco Confidential 17© 2013-2014 Cisco and/or its affiliates. All rights reserved. “Network Functions” in SP Network Architecture Landscape LTE Smartphone Access xDSL WiFi Smartphone PC RNC2G 3G Ethernet CE NodeB eNodeB AP Small Cell FAP Gateways / Service Edge OSS/BSS Subsystems and Control Data Plane Voice Video Data Core Network Infrastructure IMS xDSLHFC PGWSGW 2/3G GGSN 2/3G SGSN MME ePDG eWAG PE Metro Network Infrastructure NAT FW IPSec DPICGNCaching Opt MSC-SMGW A-SBC I-SBC BGCF MGCF PS / RLS DRA Video ingestion DRM Video Network EMS Provisioning Analytics Billing Radius DNS DHCP S-CSCF P-CSCF I-CSCF Trans- coding Cache Control Policy Parental control HLR HSS ENUM TAS SMS-C Services OCS MMS-C HCSRMS xDSLDSLAM DSL/ FTTX BNG Core Routing Metro Ethernet Biz CPE Consumer CPE Cable Modem CMTS Capacity Planning WLC SecGW HNB-GW Policy SDN Controller BGP server Metro Ethernet Data CenterCore and Data Center Network Infrastructure
  • 18. Cisco Confidential 18© 2013-2014 Cisco and/or its affiliates. All rights reserved. Virtualization of “Network Functions” Existing Hardware / Appliance based Network Functions (NFs) Virtualized NFs running as VM on x86 Server Platform Step 1: Decouple software from underlying hardware Step 2: Port it as a VM on x86 Server platform running as a Network Function Ethernet Switches Storage Hypervisor FW Routing DPI LB
  • 19. Cisco Confidential 19© 2013-2014 Cisco and/or its affiliates. All rights reserved. Telco  Service   Providers   $$   $$   Service   Consumers   Enterprises   Public   Sector   Consumer   $$   $$   Cloud  /  OTT  Service   Providers   IaaS   PaaS   SaaS   OTT   $$   many networks, technologies and systems massive growth of IP traffic $   $$   $$   $$   $$   converged and private networks PPPoE IPv4 IPv6 MPLS MPLS-TPOTN DWDMATMSDH xGE tunnel VPN MP-BGP ISIS/OSPF MPLS-TE DHCP EOAM IPOAM LACP SNMP CLI XML t revenue cost $ 1.  Lean  &  Agile  OTT  players  with   economies  of  scale   2.  Highly-­‐automated  operaEons   3.  Fast-­‐paced  innovaEon   1.  Complex  and  silo’d  networks   2.  High  cost  to  operate   3.  Lack  of  agility,  huge  Eme  required  to  create  new  services   4.  ExponenEal  growth  of  bandwidth   1.  User  Experience   2.  Cloud  Centric   ConsumpEon  Models    /   Pay-­‐as-­‐you-­‐go   Need to Understand SP Challenges to realize Why NFV
  • 20. Cisco Confidential 20© 2013-2014 Cisco and/or its affiliates. All rights reserved. SP’s Expectations from NFV §  NFV will help them to reduce cost (TCO) §  NFV will bring the much needed agility in the Service Creation & delivery process §  On-boarding a new service will be much easier with NFV §  SP’s can now afford to go wrong – decommissioning a failed service wont be expensive §  Services now can be scaled up and down elastically §  NFV will help drive more Openness and Standardization
  • 21. Cisco Confidential 21© 2013-2014 Cisco and/or its affiliates. All rights reserved. §  NFV – It is a Service Provider driven Initiative. §  Initiative announced at “SDN and OpenFlow World Congress”, Darmstadt, Oct 2012 §  Industry Specification Group (ISG) group within ETSI §  Not defining standards -deliver white papers and liaising with standards bodies §  First ETSI meeting was held in January, 2013 §  Technically not related to SDN, conceptually different §  But may utilize SDN concepts – Programmability, Orchestration §  Type of network function mostly determine where virtualization makes sense §  Careful analysis is required on Network Function by Network Function NFV = Transition of network infrastructure services to run on virtualised compute platforms – typically x86 Network Function Virtualization (NFV) Initiative
  • 22. Cisco Confidential 22© 2013-2014 Cisco and/or its affiliates. All rights reserved. Key Factors To Determine Potential Virtualization Targets Packet / Data Plane Performance Requirements Control Plane Performance Requirements Deviation from Standard Server build (e.g. interface type, density) Economics of On-boarding if Virtualized Power Efficiency requirement of the System Development, Ease of Integration, Service Elasticity Needs 1 2 3 4 5 6
  • 23. Cisco Confidential 23© 2013-2014 Cisco and/or its affiliates. All rights reserved. The Fundamental Electrical Building Blocks General Purpose Processors (x86, ARM, PPC) •  Wide range of capabilities (including packet processing) •  Evolving multi-core capability (10+ processors per die) •  Support virtualization and easy to program Network Processor Units (NPUs) •  Designed for flexible packet processing •  Multi-threaded (100s) / n/w acceleration / integrated memory •  Programmable in high level languages Fixed function ASICs •  Very low cost •  Integrated s/w, very efficient but relatively inflexible All based on CMOS technology – All subject to Moore’s Law
  • 24. Cisco Confidential 24© 2013-2014 Cisco and/or its affiliates. All rights reserved. Characteristics of Network Elements High Capacity Plumbing: (L0-3 : e.g. IPv4/v6, MPLS, VPNs, ACLs, optical devices …) •  High throughput / BW •  Many flows needing isolation, significant traffic management needed •  Stateless functions •  Mostly predictable traffic •  Interface-specific functions (2-stage forwarding) Network Services: (L4+ : e.g. DPI, vFW, CGN, DDOS, BNG, mobility, …) •  Throughput - varies •  # of flows (traffic management) – varies •  Stateful functions •  Unpredictable traffic •  No i/f-specific functions Low compute + High BW è  Good fit for NPU è  Poor fit for x86/CPU Poor fit for x86/CPU Good fit for x86/CPUYes (%) No (%) High Compute + Low BW
  • 25. Cisco Confidential 25© 2013-2014 Cisco and/or its affiliates. All rights reserved. Business CPE Service Appliances (L4-L7) Core Backbone Routing, CE Access-Aggregation and DC switching Wireline GWs Home CPE Wireless GWs Network Functions – Requirements & today’s approaches CPU Reqs 0 10Mbps 100Mbps 1Gbps 10Gbps 100Gbps 1Tbps 10Tbps 100Tbps 1Pbps High Low Distributed: CPUs + Lots of NPUs Distributed: Lots of CPUs + NPUs Centralized: CPU + NPU CPU Centralized: CPU or SoC Variable CPU / FPGA / NPU OSS/BSS, subsystem and N/W control
  • 26. Cisco Confidential 26© 2013-2014 Cisco and/or its affiliates. All rights reserved. Mapping Back to the Service Provider Landscape LTE Smartphone Access xDSL WiFi Smartphone PC RNC2G 3G Ethernet CE NodeB eNodeB AP Small Cell FAP Gateways / Service Edge OSS/BSS Subsystems and Control Data Plane Voice Video Data Core Network Infrastructure IMS xDSLHFC PGWSGW 2/3G GGSN 2/3G SGSN MME ePDG eWAG PE Metro Network Infrastructure NAT FW IPSec DPICGNCaching Opt MSC-SMGW A-SBC I-SBC BGCF MGCF PS / RLS DRA Video ingestion DRM Video Network EMS Provisioning Analytics Billing Radius DNS DHCP S-CSCF P-CSCF I-CSCF Trans- coding Cache Control Policy Parental control HLR HSS ENUM TAS SMS-C Services OCS MMS-C HCSRMS xDSLDSLAM DSL/ FTTX BNG Core Routing Metro Ethernet Biz CPE Consumer CPE Cable Modem CMTS Capacity Planning WLC SecGW HNB-GW Policy SDN Controller BGP server Metro Ethernet Data Center No Appeal No Appeal High Appeal High Appeal Depends HighAppeal Very High Appeal High Appeal No Appeal
  • 27. Cisco Confidential 27© 2013-2014 Cisco and/or its affiliates. All rights reserved. The Role of SDN and Orchestration Partial list, just a few main ones are mentioned here Ethernet Switching Network Underlay Hypervisor Hypervisor Hypervisor NAT Firewall DPI Orchestration and SDN Control Function Storage Server 1 Server 2 Server 3 Firewall DPI VM / VNF Lifecycle Management in End-to-end manner Network Plumbing to orchestrate dynamic topologies Configuration Management of the VNFs Integration with Other DC/POD And the WAN OAM, Assurance, Analytics Standard APIs NAT
  • 28. Cisco Confidential 28© 2013-2014 Cisco and/or its affiliates. All rights reserved. Computing Hardware Storage Hardware Network Hardware Hardware resources Virtualisation Layer Virtualised Infrastructure Manager(s) VNF Manager(s) VNF 2 OrchestratorOSS/BSS NFVI VNF 3 VNF 1 Execution reference points Main NFV reference pointsOther reference points Virtual Computing Virtual Storage Virtual Network NFV Management and Orchestration EMS 2 EMS 3 EMS 1 Service, VNF and Infrastructure Description Or-Vi Or-Vnfm Vi-Vnfm Os-Ma Se-Ma Ve-Vnfm Nf-Vi Vn-Nf Vl-Ha NFV Reference Architecture from ETSI NFV ISG
  • 29. Cisco Confidential 29© 2013-2014 Cisco and/or its affiliates. All rights reserved. Major Service Providers Driving the ETSI NFV ISG * Partial List
  • 30. Cisco Confidential 30© 2013-2014 Cisco and/or its affiliates. All rights reserved. NFV Use Cases •  Simple ones – Virtualized Route Reflector •  Virtualized CPE for Business VPN services •  Virtualized Mobile Packet Core •  Virtualized Managed Services (CPE, FW, UTM…..) •  Virtualized Home CPEs •  Virtualized Gateways (BRAS, BNG, mobile gateways, Wi-Fi gateways) •  ….
  • 31. Cisco Confidential 31© 2013-2014 Cisco and/or its affiliates. All rights reserved. Metro&and&Access& Core&&&Edge&&CPE& Data&Centers& vPE-F VNF Instances vPE-F VNF Instances VNF VNF VNF VNF DCI DCI Servers Storage Bare Metal Workload PE DCI DCI PE Web VM DB VM FWWAAS vCPE vFW vWAAS L2 NID Backhaul End-to-End Orchestration Metro&and&Access& Core&&&Edge&&CPE& Data&Centers& vPE-F VNF Instances vPE-F VNF Instances VNF VNF VNF VNF DCI DCI Servers Storage Bare Metal Workload PE DCI DCI PE Web VM DB VM FWWAAS vFW vESA vWAAS L3 CPE / vCPE Backhaul End-to-End Orchestration
  • 32. Cisco Confidential 32© 2013-2014 Cisco and/or its affiliates. All rights reserved. Business VPN CPE in a Overlay Transport Model Cloud IPVPN with FW and Remote Access to Internet §  vFW with NAT and Policy §  vFW with IPSec/SSL Remote Access including Remote End-Host posture verification CPE CPE CPE Internet Router vFW SP CLOUD Internet Cloud-Hosted Management Scalable, elastic, on-demand Overlay Packet Tunnels §  Keyed IPv6 tunnels - mesh, hub&spoke; §  IPSec tunnels – mesh, hub&spoke if keyed IPv6 tunnels not supported; VR
  • 33. Cisco Confidential 33© 2013-2014 Cisco and/or its affiliates. All rights reserved. Where to Place the VNFs ? §  Candidate location types in the network – §  Centralized Data Centers à Easier to manage §  Fully Distributed – POP’s, Edge / Anchor Points / Peering locations à Higher scale & performance §  Hybrid – Mix of the above §  Some factors that may need to be considered here – §  The Use Case to deploy the VNFs §  Cost of transporting traffic across core §  Network Architecture / design §  Chance of Sub-optimal routing, impact on SLA (e.g. delay) §  Management Ease vs. Scalability Metro&and&Access& Core&&&Edge&&CPE& Data&Centers& vPE-F VNF Instances vPE-F VNF Instances VNF VNF VNF VNF DCI DCI Servers Storage Bare Metal Workload PE
  • 34. Cisco Confidential 34© 2013-2014 Cisco and/or its affiliates. All rights reserved. Metro&and&Access& Core&&&Edge&&CPE& Data&Centers& vPE-F VNF Instances vPE-F VNF Instances VNF VNF VNF VNF DCI DCI Servers Storage Bare Metal Workload PE DCI DCI PEL2 Backhaul vCPE vCPE Metro&and&Access& Core&&&Edge&&CPE& Data&Centers& vPE-F VNF Instances vPE-F VNF Instances VNF VNF VNF VNF DCI DCI Servers Storage Bare Metal Workload PE DCI DCI Web VM DB VM FWWAAS L2 Backhaul Web VM DB VM FWWAAS vCPE vCPE Metro&and&Access& Core&&&Edge&&CPE& Data&Centers& vPE-F VNF Instances vPE-F VNF Instances VNF VNF VNF VNF DCI DCI Servers Storage Bare Metal Workload PE DCI DCI PE vCPE vFW vWAAS L2 NID / L2 Backhaul Web VM DB VM FWWAAS Centralized Higher Traffic Across Core Sub-optimal routing Higher e2e delay Better performance / scale More Complex to manage Better performance / scale More Complex to manage Distributed Distributedwith ServiceChain
  • 35. Cisco Confidential 35© 2013-2014 Cisco and/or its affiliates. All rights reserved. NFV – How to build / Augment Operations skillsets •  Most existing technologies, protocols and associated skills are equally required •  On top of that, there are needs for acquisition of New Skills •  x86 Server Virtualization •  Virtualization on Linux (and KVM/QEMU) Environment •  Cloud Orchestration Systems – such as OpenStack •  Virtual Switches – OVS, Snabbswitch, Netmap/VALE, Vendor Specific etc •  SDN Controllers – OpenDayLight, Vendor Specific •  Device Programmability and APIs – NETCONF, Yang, RESTCONF, REST APIs, OF…. •  Service Function Chaining – specially NSH (Network Service Header) •  Network based Virtual Overlay transport – VXLAN, MPLSoGRE/UDP, LISP, L2TPv3….. •  Management, Orchestration, OSS Fundamentals •  …..