Matt Davy

Software Defined 

Networking 

Matthew Davy, Indiana University 

September 8th, 2011 

Thursday, September 8, 2011

Outline 

• Drivers for Software Defined Networking 

• SDN/OpenFlow Architecture 

• OpenFlow Basics 

• Example Use Cases 

• NDDI 

• SDN and Universities 


Thursday, September 8, 2011 

Drivers for SDN


Drivers for SDN

Drivers for SDN 

• Massively Large Data Centers 




• Yahoo (Igor Gashinsky @ Interop) 





• Phase 1 of New Data Center 






• 120,000 servers - 2.4M VMs 






• 120,000 servers - 2.4M VMs 

• Estimate 3,000 to 6,000 Ethernet switches 



Scaling Challenges

Scaling Challenges 

• Scaling Network Management 




• VM Mobility (L2 Scaling) 





• Bandwidth Scaling (East-West Traffic) 





• Bandwidth Scaling (East-West Traffic) 

• Control-Plane Scaling (Flood-Learn) 



Flexibility Challenges

Flexibility Challenges 

• Computer/Storage Highly Flexible and 

Programmable 




Programmable 

• Rich, Open APIs for Provisioning 




Programmable 


• Network Configured through Legacy, 

Proprietary Mechanisms 




Programmable 


• Network Configured through Legacy, 

Proprietary Mechanisms 

• Inability to Customize Service Offering 



Similar Problem Space

Similar Problem Space 

• Some Similarities to Wi-Fi Scaling Problem 




• Controller-Based WiFi Solutions 





• Single Point of Management 






• Single Control-Plane 






• Single Control-Plane 

• Network Virtualization 



Cost Pressures

Cost Pressures 

• 3K-6K Switches in 1 Phase of 1 DC 




• TOR Switch Costs 





• Traditional Vendor: $8K-$15K 






• Budget Vendor: $4K-$6K 







• White Label Vendor: $2K 







• White Label Vendor: $2K 

• http://www.nyquistcapital.com/2007/11/16/ 

googles-secret-10gbe-switch/ 



Pillars of SDN

Pillars of SDN 

• http://www.aristanetworks.com/en/blogs/? 

p=582 




p=582 





p=582 


• Single Image L2/L3 Control Plane 




p=582 



• Network-wide Virtualization 




p=582 




• Multi-Path 




p=582 




• Multi-Path 

• Programmability (my addition) 


SDN/OpenFlow 

Architecture 


App App App App 

Operating System 

Packet-Forwarding 

Hardware 




Hardware 





Hardware 



Hardware 


Network Operating System 




Hardware 




Hardware 





Hardware 



Hardware 


Network Operating Operating System 

System 




Hardware 


Hardware 




Hardware 


Hardware 



Network Operating Operating System 

System 


Hardware 


Hardware 


Hardware 


Hardware 




Openflow Firmware 


Hardware 



Hardware 



Hardware 



Hardware 




Openflow 



Hardware 



Hardware 



Hardware 



Hardware 



Published API 


Openflow 



Hardware 



Hardware 



Hardware 



Hardware 


Computer Industry 

Apps Apps Apps 

Windows 

Windows 

Windows 

Windows 

Windows 

Linux 

Windows 

Windows 

FreeBSD 

Virtualization 

x86 




Windows 

Windows 

Windows 

Windows 

Windows 

Linux 

Windows 

Windows 

FreeBSD 


x86 



Network Industry 



Windows 

Windows 

Windows 

Windows 

Windows 

Linux 

Windows 

Windows 

FreeBSD 

Network Windows 

Windows 

OS 

Windows 

Windows 

NOX 

Windows 

Windows 

Beacon 



x86 

Openflow 



Origins

Origins 

• Stanford Clean Slate Project 


Origins 


• Network Researchers Looking for Ways to 

Run Experiments at Scale 


Origins 




• PC-based Switches 


Origins 





• Custom Hardware 


Origins 





• Custom Hardware 

• Manipulate Forwarding Tables in Existing 

Switches from Software on a PC ! 



Current Status

Current Status 

• Switches Available from HP, NEC, Pronto. 




• Many Other Switch Vendors w/Prototypes 





• 4+ Open-Source Controllers, 1 

Commercial Controller Available. Others 

in Development 





• 4+ Open-Source Controllers, 1 

Commercial Controller Available. Others 

in Development 

• IU, Internet2, NLR and 6 Other Campuses 

have OpenFlow Deployments 



Trend

Trend 

• Strong SDN Interest in Commercial Sector 


Trend 


• Open Networking Foundation Created 


Trend 



• Board: Deutche Telekom, Facebook, Google, 

Microsoft, Verizon, Yahoo 


Trend 



• Board: Deutche Telekom, Facebook, Google, 

Microsoft, Verizon, Yahoo 

• Members: Broadcom, Brocade, Ciena, 

Cisco, Citrix, Dell, Ericsson, Force10, HP, 

IBM, Juniper, Marvell, NEC, Netgear, NTT, 

Riverbed, VMware 


“We’re not using (OpenFlow) yet in 

production, but we’re spending a lot of time 

experimenting with it and we plan to 

implement it” 

- Urs Hoelzle, Senior VP of Engineering at Google 

“SDN would give network operators the 

ability to virtualize network resources, being 

able to dynamically improve latency or 

security on demand” 

- Paul McNab, VP and CTO of Cisco Switching and Services 

Group 



Potential Impacts

Potential Impacts 

• Open Access to Innovate at Network Core 




• Decreased Innovation Cycle from Lab to 

Production 





Production 

• Return to Early Days of Networking When 

Researchers Had Direct, Near-Term Impact 

on Network 





Production 

• Return to Early Days of Networking When 

Researchers Had Direct, Near-Term Impact 

on Network 

• Cost Reduction From Commodity HW & 

Open-Source SW 



OpenFlow Basics


Published API 


Openflow 



Hardware 



Hardware 



Hardware 



Hardware 


!"#$%&'(1234*,415671 

A:"&'*+1+-#1B'(1+3C&#1*$14(*+,-#4D1/'9+#/4D13$

!"#$%&'(1234*,415671 

89&#1 

5#:3,+1;1(*&?#T,'9$+1 

)?3&&1$9?@#/1'A1B:#'$41 

#.0.19$*,34+C1?,34+C1?3"D+'DE9#9#C1

!"#$%&'(1:39*,91;


Example Use Cases


Possible Uses

Possible Uses 

• VM Mobility 


Possible Uses 


• Redirect Specific Application Traffic to a 

Remote Server 


Possible Uses 



Remote Server 

• Ethernet VLAN Provisioning 


Possible Uses 



Remote Server 


• Ethernet VLAN provisioning currently 

done through SNMP Writes/Scripted SSH 


Possible Uses 



Remote Server 


• Ethernet VLAN provisioning currently 

done through SNMP Writes/Scripted SSH 

• Vendor Specific 



Security Uses

Security Uses 

• 1k-3k TCAM Entries in Typical IDF Switch 


Security Uses 


• Difficult to Take Advantage Of: 


Security Uses 



• Manual Config, SNMP Writes, RADIUS 


Security Uses 




• Limited Actions (Allow/Deny) 


Security Uses 







Security Uses 






• What if I could program w/standard API ? 



Security Uses

Security Uses 

• NAC 


Security Uses 

• NAC 

• Inject Policies into IDF Switches 


Security Uses 

• NAC 


• Remote Packet Capture & Injection 


Security Uses 

• NAC 



• Data Analysis Network 


Security Uses 

• NAC 



• Data Analysis Network 

• Stripe Traffic Across IDS Sensors 



NDDI

What is NDDI ? 

• Network Development & Deployment 

Initiative 

• Internet2, IU, and Clean Slate Program at 

Stanford University 

• Mission: Create a new network platform 

and complementary software, which 

together will support global scientific 

research in a revolutionary new way 

• www.internet2.edu/nddi 



Motivation

Motivation 

• AOAC Charged Internet2 with Developing 

Layer-2 Service 


Motivation 



• Access via very inexpensive 10GbE ports 


Motivation 




• Built on very dense, inexpensive, 

“throwaway” switches 


Motivation 






• OpenFlow support should be investigated 


Motivation 






• OpenFlow support should be investigated 

• Priority queuing & scavenger - but most 

traffic best-effort 



Motivation

Motivation 

• GENI Project - SDN/OpenFlow Key Enabler 


Motivation 


• Commercial SDN/OpenFlow Market Developing 


Motivation 


• Commercial SDN/OpenFlow Market Developing 

• Internet2 Seven Focus Areas 

• Advanced Network Leadership 

• Research Community Development and 

Engagement 

• Industry Partnership Development and Engagement 



Goals

Goals 

• Instantiate NDDI Substrate, an advanced 

Software Defined network, and OS³E, an 

advanced network service 


Goals 




• Lead R&E Community in Development of atscale, 

production Software Defined Networks 


Goals 




• Lead R&E Community in Development of atscale, 

production Software Defined Networks 

• Extend Reach of NDDI and OS³E Globally 

Through Strategic Collaborative Engagement 



Goals

Goals 

• Build OS³E user base centered on data intensive 

researchers who utilize the services of OS³E 


Goals 



• Engage network research community in NDDI 

as place to pursue at-scale network research 


Goals 





• Engage commercial community in definition of 

SDN and impact the development of 

commercial SDN products 


Goals 





• Engage commercial community in definition of 

SDN and impact the development of 

commercial SDN products 

• Create foundation for open-source project 

through which R&E community can develop 

SDN-based services 



Goals Accomplished By:

Goals Accomplished By: 

• Deploying/Operating Set of 30-40 Low-Cost 

switches at Locations Around Country 

Controlled Through Open-Source OpenFlow 

Software Developed by NDDI 







• Building L2 Service that Meets Needs of 

Domain Science and Humanities Researcher 

Communities 







• Building L2 Service that Meets Needs of 

Domain Science and Humanities Researcher 

Communities 

• Precipitating Complementary Activity Globally 

to Extend Reach of NDDI and OS³E 

Internationally 



TimeLine

TimeLine 

• April 20th: Announcement at Spring Member 

Meeting 


TimeLine 


Meeting 

• May: Project Organization, Community 

Engagement, Defining Requirements (controller 

& switches) 


TimeLine 


Meeting 



& switches) 

• June: Vendor Engagement, SW Dev. Plan, 

Controller/Switch Evaluation 


TimeLine 


Meeting 



& switches) 

• June: Vendor Engagement, SW Dev. Plan, 

Controller/Switch Evaluation 

• July: Close to Announcing Controller/Switch 

Selection, SW Dev. Beginning 



Timeline

Timeline 

• Internet2 Fall Member Meeting 


Timeline 


• Prototype Deployment/Demo. of NDDI and 

OS³E 


Timeline 



OS³E 

• ION Enhanced to Support Permanent 

Reservations 


Timeline 



OS³E 


Reservations 

• End of 2011 


Timeline 



OS³E 


Reservations 

• End of 2011 

• Early Adopters and Testers 


Timeline 



OS³E 


Reservations 

• End of 2011 

• Early Adopters and Testers 

• First Release of NDDI/OS³E Open-Source 

Software 


SDN Benefits for 

Universities 



SDN/Universities

SDN/Universities 

• Universities run large, complex networks 




• Facing many difficult challenges 





• wireless scaling 






• security 






• security 

• virtualization 






• security 

• virtualization 

• Often Build Home-Grown Network 

Management Tools 



SDN/Universities


• Universities also have a research and 

education mission 





• Researchers looking for relevant 

networking problems to research 







• Students looking for hands-on network 

experience that is well-connected to 

their studies 







• Students looking for hands-on network 

experience that is well-connected to 

their studies 

• Talented network engineers 



SDN/Universities


• OpenFlow/SDN Presents Opportunity to 

Bring Groups Together To: 





• Improve the production university 

networks 






networks 

• Provide stronger, more relevant 

education to our students 






networks 

• Provide stronger, more relevant 

education to our students 

• Drive Network Innovation 



How ?

How ? 

• “You can do that today with features X, Y & 

Z configured through SNMP, NetConf, etc” 


How ? 



• How is OpenFlow/SDN Different ? 


How ? 




• API to directly control forwarding tables 


How ? 





• Multi-Vendor Interoperabilty 


How ? 





• Multi-Vendor Interoperabilty 

• Controller-Based 


Summary 

• Solve challenging network management 

problems 

• Provide training opportunity for 

students...increasing talent pool for 

network engineers and researchers 

• Encourage environment for innovation 


InCNTRE 

• Indiana Center for Network Translational 

Research and Education 

• incntre.iu.edu 

• SDN Lab 

• Education (Internship/Training) 

• Network Research Partnerships

Matt Davy

You also want an ePaper? Increase the reach of your titles

Delete template?

Save as template?