Summit 16: Service Function Chaining: Demo and Usage
3 likes1,366 views
The document discusses a demonstration of service function chaining using OPNFV, including an overview of service function chaining and the network service header encapsulation, a demo network topology using OpenStack and OpenDaylight, and a use case applying a chain of services for parental control traffic classification and filtering. Additional reference materials are provided in the appendices about service function chaining specifications, the OPNFV SFC implementation, and an example use case diagram.
Summit 16: Service Function Chaining: Demo and Usage
- 1. June 20–23, 2016 | Berlin, Germany
- 2. Service Function Chaining Demo and Usage Brady Johnson, Ericsson Manuel Buil, Ericsson
- 3. What is Service Function Chaining • Service Chaining Downstreamed from OpenDaylight • Open Daylight Service Function Chaining (ODL SFC) • Implementation of the NSH and SFC IETF specification drafts • Integrates SFC into NFV Cloud Data Center environments • Use Cases addressed with SFC • Transparently apply a configurable set of Service Functions to tenant traffic • Any sort of Dynamic Service Insertion
- 4. The VNF Manager • The technical definition of a VNF Manager • Lifecycle management of VNF instances • Overall coordination and adaption role for configuration and event reporting between NFV-Infrastructure and Network management system (NMS) • What do we need a VNF Manager for in OPNFV SFC? • Coordinating Service Function VM Lifecycle management • In Brahmaputra, we use the OpenStack Tacker VNF Mgr
- 5. OPNFV SFC Demo Network Topology Compute Node VM SF1 VM SF2 SFF VM Clients VM Servers Legend VxLAN tunnel SF/SFF Classifier creates the VxLAN tunnel OpenFlow 1.3/OVSDB Original packets, no encap OVS OVS Egress Classifier Ingress Classifier Control Node Top Of Rack Switch ODL SFC OpenStack Neutron, Nova, … VNF Mgr
- 6. OPNFV SFC Demo Use Case 1. Update/create chains SDN network ODL SFC 1) Can NOT do HTTP 2) Can do SSH 1) Can do HTTP 2) Can NOT do SSH 2. Classification rules SFF Legend: SFF: Service Function Forwarder SF: Service Function RSP: Rendered Service Path, a Service Chain SF Firewall SF Firewall Classifier RSP1 RSP2 Simple HTTP/SSH Server Expected Results based on Classifier configuration Block HTTP Block SSH Source: Ericsson
- 7. Additional Information • OPNFV SFC wiki • https://wiki.opnfv.org/display/sfc/Service+Function+Chaining+Home • OPNFV SFC Colorado Release Planning • https://wiki.opnfv.org/display/sfc/OPNFV+SFC+Colorado+Release+Plan • OPNFV SFC discussion slides • https://docs.google.com/presentation/d/1gbhAnrTYbLCrNMhMXin0lxjyg7IHNPjrlBT IjwAzys/edit?usp=sharing • OPNFV JIRA • https://jira.opnfv.org/browse/SFC/?selectedTab=com.atlassian.jira.jira- projectsplugin:summary-panel
- 8. Appendices
- 9. Appendix A: Service Function Chaining Encapsulation Network Service Headers (NSH) • Reusable classification for pre-programmed paths Service Function Forwarder NSH Classify once: Encapsulate Chain info with every packet SDN network Service Function Service Function Forwarder NSH Service Function NSH Tunnel Switch on NSH fields: NSP – NSH Path (Chain ID) NSI – NSH index (Hop in chain) ACL Classifier Source: Ericsson
- 10. Appendix B: Service Function Chaining with NSH Outer Eth hdr Outer IP hdr VxLAN NSH NSH Base Header Service Path (24 bit) / Index Optional Metadata Network Services Header Example: NSH encapsulated in VXLAN-GPE Inner Eth hdr Inner IP hdr Payload Outer UDP hdr Service Path: The Service Chain ID Index: The hop in the Service Chain Advantages Challenges • Forwarding complexity is much simpler • Optional Metadata can be sent with packets • Supports flexible encapsulation (Ethernet, MPLS, VXLAN, etc) • Limited support in switches, kernels, and applications • Service Function needs to become NSH-aware
- 11. Appendix C: Service Function Chaining Use Case: Parental Control 1. Update/create chains ODL SFC GUI ODL SFC Operator 2. Classification rules HTTP Content Filtering (Block URLs) SF HTTP SF NAT Legend: SFF: Service Function Forwarder SF: Service Function RSP: Rendered Service Path, a Service Chain RSP1 RSP2 Parental control, block certain URLs No control for parents SDN network SFF Internet Classifier Source: Ericsson