GEORGIA TECH SDN EVENT - Juniper...

OPEN CONTRAIL ARCHITECTURE GEORGIA TECH SDN EVENT

sdn-and-nfv-technical---georgia-tech---sep-2013---v2

Bruno Rijsman, Distinguished Engineer

24 September 2013

Contrail Use Cases

CONTRAIL USE CASE 1: CLOUD

ENTERPRISE PRIVATE CLOUD

Finance HR Marketing

Physical

Service

Appliances

Silo'ed resource allocation

Manual configuration

Static service deployment

ENTERPRISE PRIVATE CLOUD

Finance HR Marketing Finance HR Marketing

Physical

Service

Appliances

Virtual

Network

Virtual

Services

Silo'ed resource allocation

Manual configuration

Static service deployment

Dynamic resource allocation

Automated configuration

Dynamic service chains

SERVICE PROVIDER CLOUD (IAAS, VPC)

Service Provider

Infrastructure as a Service (IaaS)

Service Provider

L3VPN, E-VPN

Public Cloud Providers,

Content Providers, ...

Service Provider

Managed Virtual Private Cloud (VPC)

Enterprise Offices

End-to-End Virtual Network Orchestration and Automation

Enterprise Data Center

CONTRAIL USE CASE 2: NETWORK FUNCTION VIRTUALIZATION (NFV)

SERVICE PROVIDER EDGE SERVICES

Edge Service Delivery and Orchestration (NFV)

• Service Provider managed network-hosted Value Added Services (VAS)

• Application-aware and subscriber aware services and charging for consumers

Business

Access

Broadband

Access

Mobile

Access

Internet

Private

Networks

Universal

Edge Router

Value Added Services • Incremental revenue potential

• Virtual machines on x86 servers (NFV)

• Dynamic service provisioning

• Elastic scale-out

• Service chaining

CONTRAIL POTENTIAL FUTURE USE CASE 3: CORE

PATH COMPUTATION, BANDWIDTH CALENDARING

Path Computation Element • Globally optimal paths

• Application aware

• Dynamic (e.g. time of day)

• Deterministic

Topology Discovery

Analytics Path Programming

Contrail Architecture Overview

CONTRAIL ARCHITECTURE A GENERAL PURPOSE SDN PLATFORM

Physical Network Interoperability with traditional network devices

Any-to-any non-blocking low-latency fabric: Q-Fabric or Clos

Virtual Network Overlay Multi-tenancy for private and virtual public clouds

Gateway functions - connect to virtual to physical network

Service chaining (physical and virtual)

Marketing HR Finance

Control Plane - Physical, Virtual Open, standards-based, federated controller

Scalable and resilient

Control Plane

Configuration manager, Automation

Control Plane Control Plane

Orchestration, Automation, Analytics Open source and partner eco system of orchestrators

Api and sdk for integration with OSS / BSS

ROLE OF CONTRAIL IN A VIRTUALIZED ENVIRONMENT

Orchestrator OpenStack, CloudStack

Contrail Controller "Logically Centralized, Physically Distributed"

Physical Network

(Fabric)

Physical

Virtual

Network

Services

Server Server

Storage

Physical Network

(Gateway)

Network (Physical and Virtual)

High Level Abstraction

Low Level Realization

Contrail

vRouter

BUILDING BLOCK: MULTI-TENANCY

L3 Network L2 Network L3 router L2 Network L2 Network

Physical Topology

Logical Topology

BUILDING BLOCK: GATEWAY FUNCTIONS

B A C A

Data Center 1

B D D A

Data Center 2

Tenant VPN

Internet

Gateway Router Gateway

Non Virtualized

Server

Gateway Switch

BUILDING BLOCK: SERVICE CHAINING (NFV)

FW LB Tenant

Network A

Internet

NAT Tenant Network

Tenant Network

CONTRAIL MULTI-TENANCY IMPLEMENTATION

Contrail SDN Controller

OpenStack

Configuration Analytics

Control

Virtualized Server

VM VM VM

Virtualized Server

VM VM VM IP fabric (underlay network)

Quantum

VM VM VM

Data Center

VM VM VM

Tenant Network

VM VM VM

Tenant Network

CONTRAIL MULTI-TENANCY IMPLEMENTATION

OpenStack

Control

Virtualized Server

VM VM VM

Virtualized Server

Quantum

OpenStack Orchestrator

Quantum Plug-in

KVM Hypervisor + Contrail vRouter

Underlay switches

Tenant VMs

VXLAN or MPLS/GRE or MPLS/UDP

CONTRAIL IS BASED ON MPLS VPN TECHNOLOGY

P P PE PE

Route Reflector

Underlay Switch

vRouter

Control Node

Underlay Switch

vRouter VM VM

MPLS over MPLS

MPLS over GRE or VXLAN

Network Management System (NMS)

DMI Config Node

Orchestrator

Analytics Node

SDN System

MPLS L3VPN / E-VPN Contrail

CONTRAIL GATEWAY IMPLEMENTATION

OpenStack

Control

Virtualized Server

VM VM VM

Virtualized Server

Quantum

VM VM VM

Tenant Network

VM VM VM

Tenant Network

Customer A L3VPN

Customer B L3VPN

Data Center

CONNECT PHYSICAL L3VPN TO VIRTUAL NETWORK FOR CLOUD ACCESS AND/OR SERVICE CHAINING

Green L3VPN

Red L3VPN Red VN

Green VN

WAN DC / POP Underlay

BGP Route Reflector Contrail Controller

WAN MPLS over TE-LSP

Data Center MPLS over GRE

Tenant VM or Service VM

BGP BGP BGP XMPP XMPP BGP

CONTRAIL SERVICE CHAINING IMPLEMENTATION IN THE DATA CENTER

OpenStack

Control

Virtualized Server

VM VM VM

Virtualized Server

Quantum

Virtualized Server

VM VM VM

Tenant Network

VM VM VM

Tenant Network

Data Center

HIGHLY AVAILABLE SCALE-OUT ARCHITECTURE

Configuration Node

Control Node

Compute Node

(Virtualized Server)

Service Node

(SRX, Firefly, JSP, ...)

Analytics Node

Gateway Node

(MX, EX, QFX, ...)

IF-MAP

Orchestrator (OpenStack)

BGP, Netconf

Logically Centralized (Physically distributed)

Horizontally Scalable

Highly Available

Federated

Contrail Controller

Contrail Detailed Walk-Through

LOGICAL TOPOLOGY

Virtual Network

Tenant Virtual Machines

Virtual Firewall

Physical Gateway Router Non-Virtualized (Bare Metal) Server

Physical Network (Internet, L3VPN, ...)

PHYSICAL TOPOLOGY

OpenStack Contrail

Controller Neutron Nova

Virtualized Server

Hypervisor with Contrail vRouter

Non-Virtualized (Bare Metal) Server

Underlay Switches

Gateway Router to Internet or L3VPN

MAPPING OF LOGICAL TO VIRTUAL TOPOLOGY

OpenStack Contrail

PHYSICAL LOGICAL

STARTING POINT EMPTY LOGICAL TOPOLOGY

OpenStack Contrail

PHYSICAL LOGICAL

CREATE GREEN TENANT CREATE VIRTUAL NETWORK "GREEN"

OpenStack Contrail

PHYSICAL LOGICAL

Create VN G

CREATE GREEN TENANT CREATE VIRTUAL MACHINE "G1"

OpenStack Contrail

PHYSICAL LOGICAL

Create VM G1

Attach to VN G

Nova: Create VM

OpenStack Contrail

PHYSICAL LOGICAL

Neutron:

Attach VM to VN

Create VM G1

Attach to VN G

Create routing-instance

OpenStack Contrail

PHYSICAL LOGICAL

Create VM G2

Attach to VN G

Nova: Create VM

OpenStack Contrail

PHYSICAL LOGICAL

Neutron:

Attach VM to VN

Create VM G2

Attach to VN G

OpenStack Contrail

PHYSICAL LOGICAL

Create VM G2

Attach to VN G

Exchange routes

Create tunnels VM

CREATE GREEN TENANT FORWARDING TABLES AND ENCAPSULATION

IP prefix Nexthop

VM G1 Virtual ethernet port

to VM G1

Green routing-instance IP FIB

VM G2 Push label L2 +

GRE encaps to server S2

MPLS label Nexthop

L1 Pop + Green routing-instance

Global MPLS FIB

IP prefix Nexthop

Server S2 Physical ethernet port

Global IP FIB

IP prefix Nexthop

VM G1 Push label L1

GRE encaps to server S1

Green routing-instance IP FIB

VM G2 Virtual ethernet port

to VM G2

MPLS label Nexthop

L2 Pop + Green routing-instance

Global MPLS FIB

IP prefix Nexthop

Server S1 Physical ethernet port

Global IP FIB

Inner IP header Payload

Source IP

Dest IP

Label GRE

Outer IP header

Server S1

Source IP

Server S2

Dest IP

Ethernet

Server S1

Source MAC

Server S2

Dest MAC

Packet

OpenStack Contrail

PHYSICAL LOGICAL

Create VM G3

Attach to VN G

Nova: Create VM

OpenStack Contrail

PHYSICAL LOGICAL

Create VM G3

Attach to VN G

Neutron:

Attach VM to VN

OpenStack Contrail

PHYSICAL LOGICAL

Create VM G3

Attach to VN G

Exchange routes

Create tunnels

CREATE GREEN TENANT END STATE

OpenStack Contrail

PHYSICAL LOGICAL

CREATE RED TENANT SAME STEPS AS GREEN TENANT

OpenStack Contrail

PHYSICAL LOGICAL

CONNECT GREEN TO RED TENANT VIA FIREWALL CREATE VIRTUAL MACHINE FOR FIREWALL

OpenStack Contrail

PHYSICAL LOGICAL

Create VM FW

Attach to VN G

Attach to VN R

Nova: Create VM

CONNECT GREEN TO RED TENANT VIA FIREWALL ATTACH FIREWALL TO RED AND GREEN VIRTUAL NETWORKS

OpenStack Contrail

PHYSICAL LOGICAL

Create VM FW

Attach to VN G

Attach to VN R

Neutron:

Attach VM to VNs

XMPP: Create

routing-instance

CONNECT GREEN TO RED TENANT VIA FIREWALL APPLY POLICY, EXCHANGE ROUTES, AND CREATE TUNNELS

OpenStack Contrail

PHYSICAL LOGICAL

Apply Policy

VN G ↔ VN R

Exchange routes

Create tunnels

CONNECT GREEN TO RED TENANT VIA FIREWALL END STATE

OpenStack Contrail

PHYSICAL LOGICAL

CONNECT GREEN TO RED TENANT VIA FIREWALL DATA PLANE: RED ↔ GREEN TRAFFIC FORCED THROUGH THE FIREWALL

OpenStack Contrail

PHYSICAL LOGICAL

CONNECT RED TENANT TO PHYSICAL L3VPN CONFIGURE L3VPN ROUTING INSTANCE

OpenStack Contrail

PHYSICAL LOGICAL

Apply Policy

VN R ↔ L3VPN

Netconf:

Configure

routing-instance

CONNECT RED TENANT TO PHYSICAL L3VPN EXCHANGE ROUTES WITH PHYSICAL ROUTER, CREATE TUNNELS

OpenStack Contrail

PHYSICAL LOGICAL

Apply Policy

VN R ↔ L3VPN

Exchange routes

Create tunnels

CONNECT RED TENANT TO PHYSICAL L3VPN EXCHANGE ROUTES WITH VROUTERS, CREATE TUNNELS

OpenStack Contrail

PHYSICAL LOGICAL

Apply Policy

VN R ↔ L3VPN

Exchange routes

Create tunnels

CONNECT BARE METAL SERVER TO RED TENANT USE TOP-OF-RACK SWITCH AS GATEWAY

VN R BMS

OpenStack Contrail

PHYSICAL LOGICAL

CONNECT BARE METAL SERVER TO RED TENANT CREATE ROUTING INSTANCE

VN R BMS

OpenStack Contrail

PHYSICAL LOGICAL

Attach BMS R4

to VN R

using switch S

Netconf:

Configure

routing-instance

CONNECT BARE METAL SERVER TO RED TENANT EXCHANGE ROUTES WITH PHYSICAL SWITCH, CREATE TUNNELS

VN R BMS

OpenStack Contrail

PHYSICAL LOGICAL

Attach BMS R4

to VN R

using switch S

Exchange routes

Create tunnels

CONNECT BARE METAL SERVER TO RED TENANT EXCHANGE ROUTES WITH VROUTERS, CREATE TUNNELS

VN R BMS

OpenStack Contrail

PHYSICAL LOGICAL

Attach BMS R4

to VN R

using switch S

Exchange routes

Create tunnels

CONNECT BARE METAL SERVER TO RED TENANT END STATE

VN R BMS

OpenStack Contrail

PHYSICAL LOGICAL

The Importance of Abstraction

"SDN as a Compiler"

THE IMPORTANCE OF ABSTRACTION

OpenStack Contrail

PHYSICAL TOPOLOGY

Complex • Low level of abstraction

• Many vrouters

• Many routing-instances

• Many tunnels

• Many routes

Complex to configure

Complex to troubleshoot

THE IMPORTANCE OF ABSTRACTION

LOGICAL TOPOLOGY

Simple • High level of abstraction

Simple to configure

Simple to troubleshoot

Contrail provides abstraction • Configure logical layer

• Mapping to physical layer

• "SDN as a Compiler"

• Analytics at physical layer

• Mapping to logical layer

"SDN AS A COMPILER"

Contrail Controller

South Bound Interfaces

South Bound Protocol 1

South Bound Protocol N

High Level (Service) Data Model

Configuration State Operational State

Transformation Engine

Low Level (Technology) Data Model

North Bound Interface (REST)

Analytics

High Level Data Model

(Service Data Model)

Low Level Data Model

(Technology Data Model)

North-Bound REST APIs

South-Bound Protocols

EXTENDING THE CONTROLLER USING PCE AS A HYPOTHETICAL EXAMPLE

Contrail Controller

South Bound Interfaces

South Bound Protocol N

High Level (Service) Data Model

Low Level (Technology) Data Model

North Bound Interface (REST)

Analytics

New Service (High Level)

Data Models

• Demand Calendar

• Constraints

New Technology Data Models

• Traffic-Engineered LSP

New Transformation Rules

New South-Bound Protocols

• PCEP (LSP programming)

• BGP-LS (Topology Discovery)

GEORGIA TECH SDN EVENT - Juniper...

Documents

SDN in MPLS

MPLS SDN NFV WORLD'17 - SDN NFV deployment update

Juniper Networks Education and Certification Programforums.juniper.net › jnet › attachments › jnet › Training_and_Certification... · Juniper Networks Education and Certification

MPLS SDN World Congress 2014 Interoperability Test and ... · Upcoming Showcase 2015 The next edition of the MPLS SDN World Congress will take place March 16–20, 2015. The EANTC

SOFTWARE DEFINED NETWORKING FOR SERVICE PROVIDERS – … › media › document › 12... · APP & SDN Controller SDN Packet-Optical Integration MPLS/IPTunnels or VLANs DC1 SDN Cloud

HIGH- Multiservice IP/MPLS PERFORMANCE SDN …teamkci.com/wp-content/uploads/brocade-mlxE-series-ds.pdf• Scalable multiservice IP/MPLS, Software-Defined Networking (SDN)-enabled

SDN Solution Overview - itu.int · PDF fileSDN Solution Overview Ericsson SDN Solution. Market Opportunity ... MPLS/VXLAN tunnel Cloud SDN Ericsson SDN Controller T I Opensource –Multi-vendor

MPLS + SDN + NFV World Congress 2017 Multi-Vendor ... · PDF fileCarsten Rossenhövel Managing Director, EANTC 2 MPLS + SDN + NFV World Congress 2017 Multi-Vendor Interoperability

The First Worldwide Event on the MPLS and SDN · PDF fileThe First Worldwide Event on the MPLS and SDN Market ... Loa Anderson, MPLS IETF WG Chairman, HUAWEI 10.00 COFFEE BREAK 10.30

SDN Practices in China Mobile - IEEE Standards … Cloud Data Center SDN APP，fulfill VPC+Service ... DUT7 SDN Controller S-PTN S-PTN MPLS-TP Encapsulation ... • Could China Mobile

MPLS SDN 2016 - Microloop avoidance with segment routing

Software Defined Networks - UKNOF routing, GMPLS/ASON, MPLS and MPLS-TP, ... Data Centers . ... Software Defined Networks (SDN)

SDN-Based Resource Allocation in MPLS Networks: A Hybrid ... · level re-routing is insufﬁcient, the proposed scheme recom- ... Index Terms—SDN, MPLS, Software Deﬁned WAN, OpenFlow,

MPLS + SDN + NFV World Congress 2017 Multi-Vendor … · 2017. 3. 27. · MPLS + SDN + NFV World Congress 2017 Multi-Vendor Interoperability Test ... networks need to be ubiquitously

MPLS SDN World Congress 2015 Interoperability and ... · MPLS SDN World Congress 2015 Interoperability and Feasibility Showcase ... (DCN) DCRS-7604E Vendor Ericsson MINI-LINK PT 2020

DTC MD JNET Overview

MPLS/SDN Intersections Next Generation Access Networks€¦ · Anthony Magee Advanced Technology –ADVA Optical Networking MPLS & Ethernet World Congress 2013 MPLS/SDN Intersections

Chapter 5 Introducing SDN Control in MPLS Networksyuba.stanford.edu/~sd2/Ch_5.pdf · Chapter 5 Introducing SDN Control in MPLS ... services using ATM or Frame -Relay networks are

ENTERPRISE MPLS - Juniper Networksforums.juniper.net/jnet/attachments/jnet/BAJUG/2/1/bajug 1 Enterprise MPLS.pdfWHAT IS MULTI-PROTOCOL LABEL SWITCHING? Forwarding paradigm: what should

JNET: A Case Study