Network Softwarization on KREONET: KREONET-S
1 like254 views
KREONET is deploying an SD-WAN called KREONET-S* based on ONOS to softwarize its network. It aims to provide a virtualized, dynamic and flexible environment compared to its previous hardware-based fixed network. KREONET-S* is being rolled out in phases starting with two regional centers in 2015 and expanding from there. It uses ONOS controllers and OpenFlow/OpenStack technologies. Initial applications include Virtual Dedicated Networks and user visibility tools. The goal is to provide advanced services, user-defined networks, and new user experiences through the programmable SDN infrastructure.
Network Softwarization on KREONET: KREONET-S
- 1. KREONET SOFTWARIZATION - KREONET SD-WAN Deployment based on ONOS- Dongkyun Kim, KISTI mirr@kisti.re.kr November 19th Open Networking Korea 2015
- 2. • Introduction & Background • KREONET-S* as the Next KREONET • Deployment Status of KREONET-S* • Applications Development:VDN & UoV • Conclusions 2
- 3. Provide Research Infrastructures Do the Research As a national institute focused on S&T information,supercomputing,and research networking, KISTI plays a key role in facilitating the national R&D competitiveness 3
- 4. ≪ Nationwide 17 Regional Centers in Korea (~100Gbps),3 International Connections to the US and China (~20Gbps),Global Research Network Collaborations (GLIF & GLORIAD), ~200 member institutions,Supercomputing/Advanced Application Services≫ *** 24 x 7 Network Operations Center *** 4 Toward Software and User drivenVirtualized, Dynamic, and Flexible Environment from Hardware-based Fixed, Closed Network Infra & Services
- 5. 5 Astronomy High Energy Physics Medical Science New Medicine/Bio Weather & Climate SupercomputingCulture & Art Constructions Future Internet Education & Collaboration Deterministic Network Performance and QoS for ~100G Data Transfer Very Reliable and Security- guaranteed Networks for Collaborative Research User-oriented Dynamic & Flexible Networks for Time-to-Research & Time-to-Collaboration
- 6. 6Source: ONOS ICONA Project, SC14 Demos, StarLight’s SDX Project New Network Environment for Global and Domestic Experimenters & Researchers
- 7. 7 • KREONET-S* Main Goals – Carrier-grade Reliable “Public SD-WAN” Operations • Distributed Controls and 24 x 7 Network Operations – New User Interfaces, Services, and Experiences – Multi-vendor and Multi-layer Network Infrastructure • Principal Building Blocks – Northbound (Apps & Services):VDN, UoV, vSciZ,etc. – Southbound: OpenFlow,TL1, NETCONF, etc. – East-Westbound: Distributed Controls • KISTI/KREONET - ONOS Affiliate (in a joint effort with KAIST) • Service Composition: KREONET COREEN Platform,etc.
- 8. 8 Controller Domain Controller Domain Controller Domain KREONET-S* Applications & Services: High Performance,Advanced Security, New User Services & Experiences VDN (Virtual Dedicate Network) UoV (User oriented Visibility) vSciZ (Virtual Science DMZ) KREONET COREEN SD-WAN Technology & NOC SDN- IP Multi- Layer NFV/ NFaaS NMS, etc. KREONET-S* Controller Infrastructure: Carrier-grade High Availability/Failover and Scalability KREONET-S* Hardware Infrastructure: Multi-vendor and Multi-layer to CapEX/OpEX Savings
- 9. 9 • Embracing Open Technologies – OpenFlow, OVS, OPNFV, OpenStack, Many others.. – ONOS Affiliate • Technical collaborations for ONOS deployment • Setting up discussion channel for operational experiences • Applying various SDN applications on KREONET-S* Source: Introducing ONOS, http://onosproject.org/software/
- 10. 10 First Year (2015) Seoul, Daejeon RCs 2~ User Sites SecondYear (2016) Two National RCs 10~ User Sites ThirdYear (2017) Two National/International RC/GigaPoP 30~ User Sites
- 11. 11 Pure SDN Services - Deterministic QoS & Performance - Virtually Isolated User Group Networks - Enhanced Security & New User Experiences - User-centric Open Networking Environment SDN-IP Services - SDN-to-Internet Extended Connectivity - Traffic-engineeredASTransit (DC to DC) - Partial Guarantee of QoS & Performance - Partial Security,but still New User Experiences Federated SDN Services - Inter-SDN Connectivity & Federated Resources - Virtually Isolated Networks on Inter-Cluster SDN - Deterministic Guarantee of QoS & Performance - Enhanced Security & New User Experiences - Extended Connectivity with SDN-IP SDN Control Domain (KREONET-S) SDN Control Domain (KREONET-S) Research Internet Domains (GLORIAD, TEIN, etc.) SDN Control Domain (KREONET-S) SDN Control Domains (Internet2, etc.) Org-S1 Org-S2 Org-I* Org-S3 Org-S* Org-S* Org-S*
- 12. 12 Core Node Core Node Edge Node Edge Node Edge/ Access Node Server VM Server VM Server VM Server VM Server VM Server VM Server VM Server VM Server VM Server VM OVS and Experiments User Organization(s) User Organization(s) Daejeon RC Seoul RCn*10G n*10G n*1G n*1G n*1G, n* 10G n*1G, n*10G n*1G n*1G n*1G n*10G ONOS VM (B) ONOS VM ONOS VM ONOS Controller Instances in Daejeon ONOS VM PM-1 PM-2 ONOS VM ONOS VM ONOS VM ONOS Controller Instances in Seoul ONOS VM PM-3 PM-4 OVS and Experiments Edge/ Access Node n*10G n*10G
- 13. 13 • Softwarization of KREONET: Daejeon and Seoul Centers Controller Servers OVS/Experiment Servers Mgmt./Ctrl. SW Edge Node (AR) Core Node (BR)
- 14. 14 • Deployment Status as of Today KREONET-S* 7-Node ONOS Cluster: Distributed Controls Build_VM Deploy_VM#1 Daejeon ONOS Instances Seoul ONOS Instances Deploy_VM#2 Deploy_VM#3 Deploy_VM#4 Deploy_VM#5 Deploy_VM#6 Deploy_VM#7 Ciena 5410 (Optical) Ciena 5410 (Optical) Brocade MLXe-8 (Core Node) Brocade MLXe-8 (Core Node) Arista 7050SX (Edge Node) Arista 7050SX (Edge Node) 10Gbps x 1 1Gbps x 10 Master Stand-by (slave) PM#1 PM#2 PM#3 PM#4
- 15. 15 Brocade MLXe-8 Arista 7050sx Brocade MLXe-8 Arista 7050sx Seoul Daejeon Multiple links (10G * 1, 1G * 10) OVS OVS OVS OVS OVS OVS OVS OVS OVS OVS Deajeon SeoulSeoul KREONET-S* Operations & Simulation VDN/UoV Experiments
- 16. 16 • Virtual Dedicate Network (VDN) & User-oriented Visibility (UoV) – VDN: OpenFlow/ONOS-based Dedicate Bandwidth Provisioning Network for User Groups on Demand – UoV:Virtual NetworkVisualization & Monitoring • Virtual ScienceDMZ – Very High Performance Distributed Science Cloud & Advanced Experimental Environment (being designed) • ONOS SDN Apps & Use Cases – SDN-IP (being experimented & deployed) – Packet-Optical, Segment routing (planning)
- 17. 17 • Design Principles – User-Group based Authentication/Authorization • Root user *controls*, General users *use* – Easy-to-Use User Interface • Simple and Rapid: several-click Easy,ms Fast – User-oriented NetworkVisualization and Monitoring • Virtual NetworkTopology and OperationalAttributes
- 18. 18 Seoul Daejeon OVS OVS OVS OVS OVS OVS OVS OVS OVS OVS OVS VDN-1 VDN-2 Each User Group can See & Manipulate ONLY their ownVDN
- 19. 19 • KISTI-KAIST Joint Development – VDN Prototype I Design and Implementation (2015) – VDN management modules, dedicate & isolated network allocation: being applied to KREONET-S*
- 20. 20 • KISTI-ON.Lab Joint Deployment & Experiment – Daejeon-Seoul Experimental Testbed (2015) – End-to-End Communications via KREONET-S SDN and BGP Network Domains KREONET-S* SDN Domain (Traffic-engineered/QoS-guaranteed) A BGP Domain in Daejeon A BGP Domain in Seoul End Users End Users Legacy IP Network Domain
- 21. 21 • Testbed Configurations in Detail – eBGP and iBGP peerings between BGP speakers, external routers & ONOS SDN-IP applications External-Router02External-Router01 Edge Node (AR) in Daejeon Core Node (BR) in Daejeon Core Node (BR) in Seoul Edge Node (AR) in Seoul End-Host01 End-Host02 10.10.10.0/24 10.10.20.0/24 AS65001 AS65002 AS65003 10.100.10.1 10.100.20.1 PortID: 6 BGP-Speaker01 BGP-Speaker02 PortID: 5 PortID: 5 PortID: 6 KREONET-S* ONOS/SDN-IP & BGP Speakers 10.100.10.2 10.100.20.2 AS65001 eBGP eBGP iBGP iBGP
- 22. KREONET/GLORIAD Network Infrastructure Distributed Computing & Storage Resources IP Network SDN Network Open SDN/NFV Control Platform COREEN Platform SDN/non- SDN Infrastructure Operations & Management SW Infra HW Infra SDN/NFV Apps & Services COREEN/ SDN/NFV Apps & Services COREEN/ IP/SDN-IP Apps & Services SDN/NFV & vScience DMZ Services Services Users SD-NOC Advanced Apps/Users Researchers & Experimenters General Users/Operators 2 2
- 23. 23 • KREONET-S* Making HAPPEN – New SDN Service Provider Network Deployment – Distributed Controls and Resilient SDN Operations – VDN & UoV for New User Services and Experiences • Further Work – Keep Testing and Experimenting on Distributed Controls • Failover & Operational Issues,Performance,etc. – VDN & UoV Enhancement: UI, Performance, Stability – New Technology Deployment & Experiments with ON.Lab – Global Project &Testbed Participations with KAIST, PRP, etc.
- 24. 24 Questions and/or Comments to mirr@kisti.re.kr