Towards Wide-Area Network Virtualization Panagiotis Papadimitriou Leibniz Universität Hannover With acknowledgments to Zdravko Bozakov, David Dietrich, Amr Rizk (Leibniz Universität Hannover) Laurent Mathy (University of Liege) Christoph Werle, Roland Bless (Karlsruhe Institute of Technology) Dagstuhl Seminar on Future Internet

Towards Wide-Area Network Virtualization Dagstuhl Seminar on Future Internet Introduction  Increasing need for wide-area network service deployment  Network service deployment in the existing Internet infrastructure:  Wide-area deployment without any performance or reliability guarantees  Performance and reliability for services deployed at an ISP  Deployment limited to the ISP’s geographic footprint  How can we enable the coexistence of multiple service-tailored networks at large scale? 2

Towards Wide-Area Network Virtualization Dagstuhl Seminar on Future Internet Network Virtualization: An Enabler 3

Towards Wide-Area Network Virtualization Dagstuhl Seminar on Future Internet Roles and Actors 4 Service Provider  Service Provider (SP)  Deploys services on VNs  Infrastructure Provider (InP)  Owns and manages the physical infrastructure  Leases resources for VNs

Towards Wide-Area Network Virtualization Dagstuhl Seminar on Future Internet VN Request Roles and Actors 5  Service Provider (SP)  Deploys services on VNs  Infrastructure Provider (InP)  Owns and manages the physical infrastructure  Leases resources for VNs Service Provider

Towards Wide-Area Network Virtualization Dagstuhl Seminar on Future Internet Roles and Actors 6 Service Provider ?  Service Provider (SP)  Deploys services on VNs  Infrastructure Provider (InP)  Owns and manages the physical infrastructure  Leases resources for VNs VN Request

Towards Wide-Area Network Virtualization Dagstuhl Seminar on Future Internet Roles and Actors 7 Service Provider  Service Provider (SP)  Deploys services on VNs  Virtual Network Provider (VNP)  Assembles resources from one or multiple InPs into a VN  Infrastructure Provider (InP)  Owns and manages the physical infrastructure  Leases resources for VNs VN Provider VN Request

Towards Wide-Area Network Virtualization Dagstuhl Seminar on Future Internet Challenges 8 Service Provider VN Provider  Limited knowledge of the substrate network:  Substrate network topology  Substrate resource availability  Interoperability between InPs:  Inter-domain virtual link setup VN Request

Towards Wide-Area Network Virtualization Dagstuhl Seminar on Future Internet Substrate Network Visibility 9 ? ? ?  VN Provider‘s visibility on substrate network topology and resources is limited to:

Towards Wide-Area Network Virtualization Dagstuhl Seminar on Future Internet Substrate Network Visibility 10  VN Provider‘s visibility on substrate network topology and resources is limited to:  Offered virtual node types (similar to Amazon EC2)

Towards Wide-Area Network Virtualization Dagstuhl Seminar on Future Internet Substrate Network Visibility 11  VN Provider‘s visibility on substrate network topology and resources is limited to:  Offered virtual node types (similar to Amazon EC2)  Location of peering nodes

Towards Wide-Area Network Virtualization Dagstuhl Seminar on Future Internet Substrate Network Visibility 12  VN Provider‘s visibility on substrate network topology and resources is limited to:  Offered virtual node types (similar to Amazon EC2)  Location of peering nodes  Cost for sending traffic between peering nodes

Towards Wide-Area Network Virtualization Dagstuhl Seminar on Future Internet VN Request Description  VN topology (undirected weighted graph) as VN request description:  Introduces constraints in VN embedding  SPs may prefer a higher level of abstraction  Alternative VN request descriptions:  Bandwidth demands expressed by a traffic matrix  Hose model 13

Towards Wide-Area Network Virtualization Dagstuhl Seminar on Future Internet Multi-Domain Virtual Network Embedding 14

Towards Wide-Area Network Virtualization Dagstuhl Seminar on Future Internet Multi-Domain Virtual Network Embedding Resource Assignment Resource Matching VN Request VN Setup 15 VN Request Partitioning Resource Allocation InP VN Provider

Towards Wide-Area Network Virtualization Dagstuhl Seminar on Future Internet Multi-Domain Virtual Network Embedding Resource Assignment Resource Matching VN Request VN Setup 16 VN Request Partitioning Resource Allocation InP VN Provider

Towards Wide-Area Network Virtualization Dagstuhl Seminar on Future Internet Resource Matching 17  VN Provider matches requested to advertised resources  Candidates for each requested resource are identified

Towards Wide-Area Network Virtualization Dagstuhl Seminar on Future Internet Resource Matching 18  VN Provider matches requested to advertised resources  Candidates for each requested resource are identified

Towards Wide-Area Network Virtualization Dagstuhl Seminar on Future Internet Resource Matching 19  VN Provider matches requested to advertised resources  Candidates for each requested resource are identified

Towards Wide-Area Network Virtualization Dagstuhl Seminar on Future Internet Resource Matching 20  VN Provider matches requested to advertised resources  Candidates for each requested resource are identified

Towards Wide-Area Network Virtualization Dagstuhl Seminar on Future Internet Resource Matching 21  VN Provider matches requested to advertised resources  Candidates for each requested resource are identified

Towards Wide-Area Network Virtualization Dagstuhl Seminar on Future Internet VN Request Partitioning 22  VN Provider partitions the VN request among InPs  Objective: Minimize the expenditure for the Service Provider  Output: VN segment requests (virtual nodes assigned to peering nodes, bandwidth demands)

Towards Wide-Area Network Virtualization Dagstuhl Seminar on Future Internet VN Request Partitioning 23  VN Provider partitions the VN request among InPs  Objective: Minimize the expenditure for the Service Provider  Output: VN segment requests (virtual nodes assigned to peering nodes, bandwidth demands)

Towards Wide-Area Network Virtualization Dagstuhl Seminar on Future Internet VN Request Partitioning 24  VN Provider partitions the VN request among InPs  Objective: Minimize the expenditure for the Service Provider  Output: VN segment requests (virtual nodes assigned to peering nodes, bandwidth demands)

Towards Wide-Area Network Virtualization Dagstuhl Seminar on Future Internet Resource Assignment 25  Each InP maps its assigned VN segment onto its substrate network:  VN segment mapping should comply with the virtual node to peering node bindings

Towards Wide-Area Network Virtualization Dagstuhl Seminar on Future Internet VN Embedding Efficiency with LID  Comparison method:  Limited information disclosure (LID) vs. full information disclosure (FID)  VN embedding cost  VN request acceptance rate 26

Towards Wide-Area Network Virtualization Dagstuhl Seminar on Future Internet Extra Cost under LID 27  LID incurs15-30% extra cost

Towards Wide-Area Network Virtualization Dagstuhl Seminar on Future Internet Origins of Extra Cost 28  Extra cost is correlated with extra link cost  Extra link cost is due to longer paths

Towards Wide-Area Network Virtualization Dagstuhl Seminar on Future Internet VN Request Acceptance Rate 29  Lower VN acceptance rate and revenue for InPs under LID

Towards Wide-Area Network Virtualization Dagstuhl Seminar on Future Internet Virtual Link Setup 30

Towards Wide-Area Network Virtualization Dagstuhl Seminar on Future Internet Virtual Link Setup  Objective:  Interoperable solution for virtual link setup with QoS guarantees across InPs  Approach:  Couple virtual link setup signaling with QoS reservation signaling for efficiency  Rely on existing QoS resource reservation protocol (IETF NSIS)  Add new object to NSIS QoS NSLP to carry the required information for virtual link setup  Requirements:  NSIS support in routers  IP-based substrate  New QoS NSLP object support (only) in virtual link end-points

Towards Wide-Area Network Virtualization Dagstuhl Seminar on Future Internet Virtual Link Setup Protocol (VLSP)  NSIS QoS NSLP extension with new Virtual Link Setup Protocol (VLSP) object:  Virtual link setup at the end-points via VLSP  Resource reservation and QoS via NSLP object at the intermediate nodes Virtual Network ID Source Virtual Node ID Destination Virtual Node ID Source Virtual Interface IDDestination Virtual Interface ID Virtual Link ID (optional)Virtual Link Type (optional) GIST TCP/UDP/… QoS NSLP VLSP IP NTLP NSLP VLSP object NSIS QoS NSLP/VLSP

Towards Wide-Area Network Virtualization Dagstuhl Seminar on Future Internet Virtual Link Setup Workflow NSIS Daemon Router X eth0 IP forwarding eth0 Management Daemon NSIS Daemon VM2VM1 InP Management Node Router ARouter B eth0 vif1 VM2 Multiplexing/QoS eth1 IP in IP tunnel VM1 vif1 Management Daemon NSIS Daemon

Towards Wide-Area Network Virtualization Dagstuhl Seminar on Future Internet Virtual Link Setup Workflow NSIS Daemon Router X eth0 IP forwarding eth0 Management Daemon NSIS Daemon VM2VM1 InP Management Node Router ARouter B eth0 vif1 VM2 Multiplexing/QoS 1. Setup virtual link from  eth1 IP in IP tunnel VM1 vif1 Management Daemon NSIS Daemon

Towards Wide-Area Network Virtualization Dagstuhl Seminar on Future Internet Virtual Link Setup Workflow NSIS Daemon Router X eth0 IP forwarding eth0 Management Daemon NSIS Daemon VM2VM1 InP Management Node Router ARouter B eth0 vif1 VM2 Multiplexing/QoS 1. Setup virtual link from  2. Initialize virtual link setup  eth1 IP in IP tunnel VM1 vif1 Management Daemon NSIS Daemon

Towards Wide-Area Network Virtualization Dagstuhl Seminar on Future Internet Virtual Link Setup Workflow NSIS Daemon Router X eth0 IP forwarding eth0 Management Daemon NSIS Daemon VM2VM1 InP Management Node Router ARouter B eth0 vif1 VM2 Multiplexing/QoS 1. Setup virtual link from  3. RESERVE + VLSP Object 2. Initialize virtual link setup  eth1 IP in IP tunnel VM1 vif1 Management Daemon NSIS Daemon

Towards Wide-Area Network Virtualization Dagstuhl Seminar on Future Internet Virtual Link Setup Workflow NSIS Daemon Router X eth0 IP forwarding eth0 Management Daemon NSIS Daemon VM2VM1 InP Management Node Router ARouter B eth0 vif1 VM2 Multiplexing/QoS 1. Setup virtual link from  3. RESERVE + VLSP Object 4. Ignore VLSP object, perform admission control 2. Initialize virtual link setup  eth1 IP in IP tunnel VM1 vif1 Management Daemon NSIS Daemon

Towards Wide-Area Network Virtualization Dagstuhl Seminar on Future Internet Virtual Link Setup Workflow NSIS Daemon Router X eth0 IP forwarding eth0 Management Daemon NSIS Daemon VM2VM1 InP Management Node Router ARouter B eth0 vif1 VM2 Multiplexing/QoS 1. Setup virtual link from  3. RESERVE + VLSP Object 5. RESERVE + VLSP Object 4. Ignore VLSP object, perform admission control 2. Initialize virtual link setup  eth1 IP in IP tunnel VM1 vif1 Management Daemon NSIS Daemon

Towards Wide-Area Network Virtualization Dagstuhl Seminar on Future Internet Virtual Link Setup Workflow NSIS Daemon Router X eth0 IP forwarding eth0 Management Daemon NSIS Daemon VM2VM1 InP Management Node Router ARouter B eth0 vif1 VM2 Multiplexing/QoS 1. Setup virtual link from  3. RESERVE + VLSP Object 5. RESERVE + VLSP Object 4. Ignore VLSP object, perform admission control 2. Initialize virtual link setup  6. Setup virtual link  eth1 IP in IP tunnel VM1 vif1 Management Daemon NSIS Daemon

Towards Wide-Area Network Virtualization Dagstuhl Seminar on Future Internet Virtual Link Setup Workflow NSIS Daemon Router X eth0 IP forwarding eth0 Management Daemon NSIS Daemon VM2VM1 InP Management Node Router ARouter B eth0 vif1 VM2 Multiplexing/QoS 1. Setup virtual link from  3. RESERVE + VLSP Object 5. RESERVE + VLSP Object 4. Ignore VLSP object, perform admission control 2. Initialize virtual link setup  7. RESPONSE 6. Setup virtual link  eth1 IP in IP tunnel VM1 vif1 Management Daemon NSIS Daemon

Towards Wide-Area Network Virtualization Dagstuhl Seminar on Future Internet Virtual Link Setup Workflow NSIS Daemon Router X eth0 IP forwarding eth0 Management Daemon NSIS Daemon VM2VM1 InP Management Node Router ARouter B eth0 vif1 VM2 Multiplexing/QoS 1. Setup virtual link from  3. RESERVE + VLSP Object 5. RESERVE + VLSP Object 4. Ignore VLSP object, perform admission control 2. Initialize virtual link setup  7. RESPONSE 6. Setup virtual link  eth1 8. Reserve resources IP in IP tunnel VM1 vif1 Management Daemon NSIS Daemon

Towards Wide-Area Network Virtualization Dagstuhl Seminar on Future Internet Virtual Link Setup Workflow NSIS Daemon Router X eth0 IP forwarding eth0 Management Daemon NSIS Daemon VM2VM1 InP Management Node Router ARouter B eth0 vif1 VM2 Multiplexing/QoS 1. Setup virtual link from  3. RESERVE + VLSP Object 5. RESERVE + VLSP Object 4. Ignore VLSP object, perform admission control 2. Initialize virtual link setup  7. RESPONSE 9. RESPONSE 6. Setup virtual link  eth1 8. Reserve resources IP in IP tunnel VM1 vif1 Management Daemon NSIS Daemon

Towards Wide-Area Network Virtualization Dagstuhl Seminar on Future Internet Virtual Link Setup Workflow NSIS Daemon Router X eth0 IP forwarding eth0 Management Daemon NSIS Daemon VM2VM1 InP Management Node Router ARouter B eth0 vif1 VM2 Multiplexing/QoS 1. Setup virtual link from  3. RESERVE + VLSP Object 5. RESERVE + VLSP Object 4. Ignore VLSP object, perform admission control 2. Initialize virtual link setup  7. RESPONSE 9. RESPONSE 6. Setup virtual link  eth1 8. Reserve resources 10. Setup virtual link  virtual link IP in IP tunnel VM1 vif1 Management Daemon NSIS Daemon

Towards Wide-Area Network Virtualization Dagstuhl Seminar on Future Internet SDN Virtualization 44

Towards Wide-Area Network Virtualization Dagstuhl Seminar on Future Internet SDN Virtualization  Tenants are granted virtual networks with limited control and access on network devices 45

Towards Wide-Area Network Virtualization Dagstuhl Seminar on Future Internet SDN Virtualization  Tenants are granted virtual networks with limited control and access on network devices  Solution: Virtual networks programmable as SDNs (vSDNs)  SDN virtualization benefits:  Tenants:  Advanced control and access on network slices  Providers:  New cloud computing model:  SDN as a Service (SDNaaS) 46

Towards Wide-Area Network Virtualization Dagstuhl Seminar on Future Internet SDN Virtualization Challenges  Automation of vSDN setup  vSDN mapping  Transparent allocation of isolated flowspaces  Selection of identifiers  Generation and installation of flow entries for packet forwarding and encapsulation  Binding traffic to logical context using tagging  Transparent vSDN operation  Translation of references to logical/physical resource identifiers to appropriate context  Policy control to prevent access to unauthorized vSDN resources  Scalability of hypervisor  Distribution of vSDN configurations across multiple controllers 47

Towards Wide-Area Network Virtualization Dagstuhl Seminar on Future Internet SDN Hypervisor Overview  Distributed hypervisor  Multiple autonomous controller proxies  Coordinated by management module  Dataplane segmentation  Multiple SDN domains  Switches within a domain controlled by the same controller proxy 48

Towards Wide-Area Network Virtualization Dagstuhl Seminar on Future Internet SDN Hypervisor Design Challenges  Collaboration among controller proxies for operations across multiple SDN domains  Dynamic segmentation of SDN as vSDNs are provisioned or released  Support for arbitrary vSDN topologies  Suitability of existing virtual network embedding algorithms for vSDN mapping 49

Towards Wide-Area Network Virtualization Dagstuhl Seminar on Future Internet Conclusions  Multi-domain VN embedding with VNPs:  Suboptimality due to limited information disclosure  One example of emerging business models that require separation between the network operations and the physical infrastructure  Will VNPs materialize or a single InP will prevail (Amazon)?  New cloud computing models may emerge from SDN virtualization  Scalable SDN hypervisor design entails significant challenges 50

Towards Wide-Area Network Virtualization Dagstuhl Seminar on Future Internet51 Thank you! Panagiotis Papadimitriou WWW: