ONF Showcase Demo Theme: Data Center SDN Title: NFV Orchestration for SLA guarantee services Luxoft Team:  Adrian loan Istrate  Ash Bhalgat Partners:  Qosmos: David Le-Goff  Certes Networks: Adam Boone

Use Case Description Participants: Luxoft SuperCloud NFV Orchestrator, Luxoft Firewall, Certes vCEP VPN engine, Qosmos SAM DPI engine  Qosmos SAM DPI on-switch service provides network intelligence that there is existing recreational video traffic (you tube) in the network that's consuming high bandwidth  Tenant request comes to Luxoft SuperCloud Orchestrator for SLA guarantee VPN traffic between 2 remotes sites H1 & H3  SuperCloud’s BWoD feature does nail up network connectivity automatically between sites. It also throttles bandwidth for recreational traffic to honor tenant SLA  Certes Network’s VPN VNF service encrypts traffic only for tenant's subscribed network path as directed by SuperCloud  Firewall VNF service that's chained after VPN, allows this traffic to pass through at both sites  Firewall allows remote site (H3) traffic access only through VPN FW DPI H1 vCEP GW Youtube, Video H3 TNM VPN H2 NFV Orchestrator VNF Control SDK- API Cloud SPTenant

Demonstration Goals  SuperCloud’s ability to orchestrate NFV services as per ETSI NFV standard architecture VNF On-boarding VNF lifecycle management  SuperCloud’s ability to orchestrate service chains for tenant paid service path  SuperCloud’s BWoD capability to intelligently allocate bandwidth to honor SLAs  SuperCloud integration with Qosmos DPI service to classify traffic based on application ID  SuperCloud’s ability to provide secure connectivity for corporate traffic in cloud-like environment via integration with Certes vCEP VPN VNF service L2-based encryption of the traffic between H1 and H3

NFV Orchestrator Use Case Demo Steps  SuperCloud Roles and Responsibilities: ­ADMIN: Infrastructure Provider– owns/manages switches, SDN Controller, VDUs ­PROVIDER: Service Provider – owns/manages hosts, network services ­USER: Tenant or End user – uses hosts to connect  Admin starts topology (switches, hosts, and SDN controller)  Admin(/Provider) performs DPI & vCEP image onboardin  From the web interface, Provider defines the service graph consisting of VNFs (DPI, vCEP1 and vCEP2) and Endpoints (H1, H2, H3, GW-Internet/YouTube/Video) if that does not exist.  From the web interface, Provider instantiates the service based on template  User initiates various traffic flows to available destinations (H1  H3, H1  YouTube, H1  Internet) FW DPI H1 vCEP GW Youtube, Video H3 Youtube/Video Traffic Secure Traffic Regular Traffic VNF Control SDK- API H2 TNM VPN Cloud SP Tenant

References  Luxoft SuperCloud NFV Orchestration Platform:  Qosmos SAM DPI: for-vswitch/ for-vswitch/  Certes Networks Cryptoflow VPN:

THANK YOU