ViSION Status Update. Dan Savu Stefan Stancu. D. Savu - CERN openlab

Transcription

1 ViSION Status Update Dan Savu Stefan Stancu D. Savu - CERN openlab 1

2 Overview Introduction Update on Software Defined Networking ViSION Software Stack HP SDN Controller ViSION Core Framework Load Balancer Module The Health Monitor Module The Regressive Testing Application D. Savu - CERN openlab 2

3 The ViSION Project CERN openlab - HP Networking collaboration Traffic orchestration Software Define Networking approach Based on OpenFlow Started in February engineers, 3 years CERN IT/CS recognized the need to scale CERN s perimeter firewall capacity to cope with the increase of internet traffic. D. Savu - CERN openlab 3

4 SDN: Centralized controller implementation App App App Network Operating System Simple Packet Forwarding Hardware Open interface to hardware (e.g. OpenFlow) Anybody can innovate Simple Packet Forwarding Hardware Simple Packet Forwarding Hardware Simple Packet Forwarding Hardware Simple Packet Forwarding Hardware D. Savu - CERN openlab 4

5 OpenFlow/SDN update Still a very dynamic area ONF is active in refining existing versions and defining new ones: (TB ratified) 12/2009 2/ / / / / /2013 Controllers: Open source: Beacon, Floodlight, NOX & POX, Trema, Ryu, Open Daylight, Open Contrail Commercial: Big Network Controller (Big Switch), Programmable Flow (NEC), Contrail Cloud orchestration integration: Neutron/Quantum Core part of the OpenStack platform, enabling network as a Service Modular plugin design allows interfacing to SDN controller platforms D. Savu - CERN openlab 5

6 OpenFlow new controllers POX Python only version of NOX (initial OpenFlow controller) Targeted largely at research and education. Suited for rapid prototyping Open Daylight (04/2013) Linux Foundation project open source Joint industry effort. Virtually all the big players are contributing members Juniper launches SDN controller (09/2013) Based on Contrail Systems acquisition from 12/2012 Open source (OpenContrail) and commercial (Contrail code + service and support) Virtualization controller (network overlays) HP Virtual Application Network SDN Controller October 21 st product release (codename Flare) OpenFlow 1.3 support High Availability Infrastructure controller (physical OF network fabric) D. Savu - CERN openlab 6

7 Overview Introduction Update on Software Defined Networking ViSION Software Stack HP SDN Controller ViSION Core Framework Load Balancer Module The Health Monitor Module The Regressive Testing Application D. Savu - CERN openlab 7

8 ViSION - HP SDN Framework D. Savu - CERN openlab 8

9 ViSION Openflow Fabric OpenFlow fabrics desired functionality: (1) Classification (2) Load Balancing (3) Mirroring (4) Fault tolerance External Net Potential limitations (early days for OF) No mirroring support in early OF versions Classification based on port ranges scales poorly Uniform load distribution not straight forward Can t hash on high entropy bits (e.g. lower IP bits) Adaptive load distribution is complex Requires API for synchronizing the FW s state Stateful Firewalls OpenFlow Fabric OpenFlow Fabric Trusted Bypass Investigating migration to OF 1.3 with HP to address some of these limitations Internal Net D. Savu - CERN openlab 9

10 ViSION Software Stack ViSION UI External Net Health Monitor ViSION Balancer API ViSION Core Framework hp apps HP SDN Controller Stateful Firewalls OpenFlow Fabric OpenFlow Fabric Trusted Bypass OF Fabric Software Stack Internal Net D. Savu - CERN openlab 10

11 HP SDN Controller Overview Base OpenFlow Controller Appliance Virtual Appliance deployed as SW on an Industry standard x86 server OpenFlow 1.3 Controller Built-in Network Services Appliance Administration A Distributed Platform for High-Availability & Scalability Controller Clustering for Load-Balancing and Fail-Over Control State Mirroring across cluster for transparent failure recovery Cloud App Connectors Clustering Security Sentinel MS-Lync Federation RESTful API Backup/Restore Topology Device Mgmt Path Calculation Provisionin g Openflow 1.3 Engine Alerts Customer Applications Hadoop Partner 3 rd party Apps App Mgr Diagnostics Extensible Platform for SDN Application Developers Embedded Java Application Deployment REST APIs GUI Standard interfaces and control protocols HP Network Infrastructure D. Savu - CERN openlab 11

12 ViSION/ Core Framework Traffic orchestration decomposition Physical 1. Physical layer 2. Translation layer 3. Logical layer Translation Logical Core module Implements the first two layers Provides support for redundancy by using multiple links/paths Allows the higher logical layer to focus on traffic orchestration only Integrated with latest HPN Controller Status: code development to end this sprint final package to be delivered before our visit to HPN (mid October) D. Savu - CERN openlab 12

13 Balancer Allocates flows to resources based on Resource capacity Resource availability Resource load User Interface Int. Network Higher level of abstraction Deals with the available resources and consumers The core implements its decision into the physical OF fabric Flow allocation Static compromise for stateful firewalls Dynamic High availability Relocate flows in case a resource becomes unavailable Health monitor & Traffic statistics Balancer Balancer Ext. Network D. Savu - CERN openlab 13

14 ViSION Software Stack ViSION UI External Net Health Monitor ViSION Balancer API ViSION Core Framework hp apps HP SDN Controller Stateful Firewalls OpenFlow Fabric OpenFlow Fabric Trusted Bypass OF Fabric Software Stack Internal Net D. Savu - CERN openlab 14

15 ViSION/ Health Monitor Module - Real-time resource status information - Flexible module system - Multi-module data aggregation per agent - Custom agent configuration - Current modules: - SNMP - Ping - HTTP Web Request - LinkProbe via OF packet injection - Status - finalized, ready for hp code review - summer student involvement Data Collection Module(s) REST API Hmon App Agents Resource(s) Active Probe(s) D. Savu - CERN openlab 15

16 ViSION/ Health Monitor Module E.g.: the link-probe module using OF packet injection OpenFlow Network OF Controller Fw1 Fw2 Fw3 OpenFlow Network D. Savu - CERN openlab 16

17 Overview Introduction Update on Software Defined Networking ViSION Software Stack HP SDN Controller ViSION Core Framework Load Balancer Module The Health Monitor Module The Regressive Testing Application D. Savu - CERN openlab 17

18 ViSION System Level Testing a. Regressive Testing b. Mirroring VM Farm OF Fabric OF Fabric Production Network Section VM Farm D. Savu - CERN openlab 18

19 ViSION Regressive Testing App ViSION UI External Net Health Monitor ViSION Balancer API ViSION Core Framework hp apps HP SDN Controller Stateful Firewalls OpenFlow Fabric OpenFlow Fabric Trusted Bypass RegTest OF Fabric Software Stack Internal Net D. Savu - CERN openlab 19

20 ViSION Regressive Testing App Overview: - adapted mgen used for traffic injection - agent application to coordinate and monitor a machine s flows - manager application to coordinate a pool of agents Status: - prototype, not yet finalized - summer student involvement D. Savu - CERN openlab 20

21 ViSION Project Timeline Feb 2012 May 2012 Sep 2012 Jan 2013 May 2013 Sep 2013 Kick-off Project definition Design Development Development Development Initial target: virtual machine mobility Technology review Investigation Finalized project scope OF based ACL pusher prototype Testbed setup Core module prototype implementation Architecture review New HP controller API Visit to HPN In depth design review Flare update Service oriented core module implementation Health Monitor Regressive testing tool Jan 2014 May 2014 Sep 2014 Feb 2015 Proof of concept Prototype Testing Productization Load balancer Refine User Interface Persistency support High availability D. Savu - CERN openlab 21