SDN use cases_2014
1 like847 views
This document discusses software defined networking (SDN) and provides four use cases for SDN: 1) an application delivery network (ADN) that virtualizes firewall, load balancing, and routing functions, 2) simulated central policy control that allows network changes to be tested without disrupting live traffic, 3) tapping network traffic for monitoring using OpenFlow switches instead of additional hardware, and 4) using SDN in wide area networks to inject layer 3-7 services and gain traffic engineering benefits like auto-routing. The document positions a company's SDN product which will launch on an HP SDN app store and be demonstrated at the INTEROP conference in Las Vegas.
![Jan 2014
S o f t w a r e D e f i n e d N e t w o r k [ S D N ]
Nimit
Shishodia
nimit@ecodenetworks.com
+44(0)7889167936
Copyright
©
2014
ECODE
Networks.
All
Rights
Reserved
R e a l L i f e U s e C a s e s !](https://image.slidesharecdn.com/sdnusecases2014-150304094752-conversion-gate01/85/SDN-use-cases_2014-1-320.jpg)
SDN use cases_2014
- 1. Jan 2014 S o f t w a r e D e f i n e d N e t w o r k [ S D N ] Nimit Shishodia nimit@ecodenetworks.com +44(0)7889167936 Copyright © 2014 ECODE Networks. All Rights Reserved R e a l L i f e U s e C a s e s !
- 2. Index • SDN: Change in Paradigm • Use Case 1: ApplicaOon Delivery Network (ADN) • Use Case 2: Simulated Central Policy Control • Use Case 3: TAP AggregaOon, IDP • Use Case 4: SDN in WAN (NaaS) • Product PosiOoning • Value PreposiOons Copyright © 2014 ECODE Networks. All Rights Reserved
- 3. AUTOMATION CENTRALISED CONTROL END TO END VISIBILITY TradiOonal Network SoVware Defined Network (SDN) • Distributed control plane • Protocol complexity • Complex design • Difficult to manage • Lack of innovaOon • Boxed mainframe mindset • Vendor ‘feature’ limitaOon • Centralised control plane • Simple flow based structure • Abstracted design • Easy to deploy and maintain • Rapid innovaOon • Open architecture • Networking ‘feature’ Apps Standards SDN: Change in the paradigm Northbound Southbound protocol protocol protocol protocol protocol API API
- 4. Use Case 1: Applica<on Delivery Network (ADN) With L-‐4-‐7 Service injec<on 1. Vendor lockdown, box per feature (firewalling/load balancing). 2. Packets have to pass through a minimum of 3 different vendor devices. 3. High CAPex/Opex with complexity. 4. Lack of automation and agility. ConvenOonal ADN Challenges Copyright © 2014 ECODE Networks. All Rights Reserved
- 5. User Data Transaction Server Farm Hardware Switching Internet Hardware Load balancing Hardware Firewalling/Routing Network_VM SDN Controller Internet User Data Transaction OrchestraOon Virtualized Firewall Virtualized Load Balancer Virtualized RouOng Tradi<onal Network SoJware Defined Network (SD-‐ADN) Physical OF Switches connected to Application Servers Orchestration Use Case 1 : Applica<on Delivery Network (ADN) Copyright © 2014 ECODE Networks. All Rights Reserved SSL SSL encrypted tunnel Intel X86 Server ApplicaOon_VMs
- 6. SD-‐ADN Value Preposi<ons • Create dynamic chains of L4-7 services on a per tenant basis to accommodate self-service L4-7 service selection or policy-based L4-7 (DDoS protection in response to attacks, self-service firewall, IPS services in hosting environments, DPI in mobile WAN environments). • Low CAPEx/OPEx with soft firewalling, load balancing and packet forwarding (± 60-70 % reduction). • Improved agility and self-service. • Facilitate faster deployments and ease of troubleshooting. • Openflow based path optimization, fault detection and resolution. • Simpler architecture with automated operations. Copyright © 2014 ECODE Networks. All Rights Reserved
- 7. 1. Stringent change control process. 2. No prior simulation, high implementation risk. 3. Lack of visibility. 4. Lack of automation. 5. Device by device configuration. 6. Redundant and non-complaint policies. 7. Security policy loopholes. ConvenOonal Firewall Policy Challenges Copyright © 2014 ECODE Networks. All Rights Reserved Use Case 2: Simulated Central Policy Control
- 8. Client Server Physical Network Topology (PNT) OF Physical Switch Virtual Switch Client Server Virtual Switch OF Physical Switch Simulated Network Topology (SNT) OrchestraOon Use Case 2: Simulated Central Policy Control Change SimulaOon Service InjecOon Firewall Loadbalancer Flow Copyright © 2014 ECODE Networks. All Rights Reserved
- 9. Use Case 3: TAP Aggrega<on, IDP 1. Additional expensive hardware is required. 2. Causes network disruption. 3. Requires a lot of monitoring devices. 4. Port mirroring or software network tap requires configuration and places load on the network devices. 5. Additional points of failure into the network. 6. Channel bonding duplex issues. ConvenOonal Taping Challenges Copyright © 2014 ECODE Networks. All Rights Reserved
- 10. Use Case 3: TAP Aggrega<on, IDP Standard Non-‐OF Switch OF Switch OF Switch Server Client Controller AnalyOcs Data Traffic Port Mirror IDP Packet Capture TCP + OFP Packets TradiOonal Network Openflow Island Copyright © 2014 ECODE Networks. All Rights Reserved
- 11. Use Case 4: SDN in WAN 1. New service creation or service change requires changes in *Control Plane protocols or creating the new protocols, which is lengthy and time consuming process. 2. Data plane mechanisms remains the same i.e. PUSH, SWAP and POP. ConvenOonal MPLS Challenges *Control Plane protocols i.e. OSPF-TE, LDP, i-BGP, RSVP-TE, LMP, MP-BGP, MPLS-TE, Copyright © 2014 ECODE Networks. All Rights Reserved
- 12. VPN B VPN B VPN A VPN A VPN B VPN A Use Case 4: SDN in WAN CE CE CE CE CE CE PE PE PE PE P P P P MPLS_POP Layer-‐3 Service InjecOon MPLS_PUSH Layer-‐4-‐7 OrchestraOon Flat L-‐2 Network Customer Portal OSS/BSS RouOng, Discovery, Label DistribuOon, Recovery MPLS-‐TE MPLS VPN MPLS_SWAP Firewalling, Load balancing DDoS MiOgaOon Layer -‐2 TAP Metering Billing Copyright © 2014 ECODE Networks. All Rights Reserved Client Proxy Client DST SRC/DST/8080 Proxy Server
- 13. • Auto-‐route, Auto-‐bandwidth, PrioriOes, Load-‐ Share, Diffserv aware Traffic Engineering (DS-‐ TE, Re-‐opOmizaOon Timers. • Provide dynamic(secure) programmable access to flow-‐level bypass using APIs to network switches and routers • Low CAPex in 10Gbps or 100Gbps L4-‐7 firewalls, load-‐balancers, IPS/IDS that process unnecessary traffic. SDN in WAN Value Preposi<ons Copyright © 2014 ECODE Networks. All Rights Reserved
- 14. Copyright © 2014 ECODE Networks. All Rights Reserved NFV Customer Portal SDN Controllers (Open source/ Commercial) NMS Order Management OSS/BSS Metering Billing OrchestraOon Monitoring AutomaOon AnalyOcs Fault ResoluOon Product Posi<oning • March 2014 • On HP SDN App Store • In INTEROP, Las Vegas Product Launch
- 15. • Live Demo in INTEROP, Las Vegas with HP controller. • ONF Compliant, Stanford's “NaOve SDN” approach. • London based first SDN startup. • Vendor AgnosOc. • Team availability in mulOple Ome zones. • Product nominated for “Networking Product of the Year” DCS awards and “VirtualizaOon Product of the Year” in SVC awards. • Successfully executed the SDN conference in UK, showcasing SDN Live! on HP switches with HP and Floodlight controller. Ecode’s Unique Preposi<ons Copyright © 2014 ECODE Networks. All Rights Reserved
- 16. • Formed 2012 • Angel Investor Funded. • Offices in UK, India. • Collaborated with major vendors and researchers. Structure & SDN Research Copyright © 2014 ECODE Networks. All Rights Reserved
- 17. Product • evolve : Management, Control & OrchestraOon SoluOons • SDN Use Cases Managed Service • Networking as a Service (NaaS) Product, SoluOon & Service (PSS) Copyright © 2014 ECODE Networks. All Rights Reserved Business Model
- 18. Copyright © 2014 ECODE Networks. All Rights Reserved Twirer: @ecodenetworks YouTube: ecodeSDN LinkedIn Group: SDN 4 Dummies Follow us: