Active Networking On A Programmable Networking Platform The Openet Team Nortel Networks Technology Centre

Active Networking on Openet 10/21/ Agenda * Challenge of “Real” Active Networks * Openet: open networking * ORE and Openet Compositions * Active Networking on Openet * Experimental Results * Summary and Future Works

Active Networking on Openet 10/21/ Commercial Network Nodes * Forwarding Faster and Faster l Bandwidth doubles every 9 months è Optical core: photonic replaces electronic è New Moore’s Law l Traffic processing è Terabit switching from Gigabit * But lEver more use of hardware acceleration (ASIC) èFiltering, header processing, etc èLittle flexibility to introduce new services l Static and well-defined set of protocols and funcs è TCP, UDP, and even HTTP è Allowing configuration rather than addition/modification

Active Networking on Openet 10/21/ Active Networks * A User-Networking Approach l EE residing on active node è Virtual machine for new protocol processing è User interface for applications l Capsule or active packets running in network è “On the fly” protocol composing by applications è “protocol processors” with customers’ intelligence * But l Implementations mostly in host systems è Model: Linux and Java è Not seen in commercial network nodes

Active Networking on Openet 10/21/ Challenge and Our Solution * Goal: Active Networks on real Internet * Active Networks requires l Open boxes l Networking programmability * Commercial Network Nodes lLack the above two lHave diversified systems * Solution lA programmable networking platform on device èOpenet !!! lActive Networks through Openet

Active Networking on Openet 10/21/ Agenda * Challenges of “Real” Active Networks * Openet: open networking * ORE and Openet Compositions * Active Networking on Openet * Experiment and Results * Summary and Future Works

Active Networking on Openet 10/21/ The Openet Platform * Open networking through programming l Programmability to commercial network devices l Service-enabled networking platform * Easing service creation and deployment l Value-added services across network elements l Dynamic, safe and convenient l Not degrading network performance and reliability * Standards and Partners l Active Networks, IEEE, IETF, P1520 and FAIN l Columbia U., UC Berkeley, UPenn and UToronto l MITRE, TASC, NetFuel and CSIRO

Active Networking on Openet 10/21/ Repository Server ORE Control Console (Net Mgr) service initiation and policies network configuration resource administration repository maintenance End Apps Switch Router Switch Download oplets, policies, configs Control & Configuration End Apps use of service apply on the fly Control Data path Download User request ORE Openet Architecture

Active Networking on Openet 10/21/ CPU JVM …MEM JNI/Native Code OREJFWD Filtered packets New forwarding rules Forwarding Engine Monitor status User Oplets OpletService, Shell, Logger Jcapture, HTTP, IpPacket Standard Services ANTS Firewall, DiffServ Application services Function Services Control Plane Data Plane Openet: a node’s view

Active Networking on Openet 10/21/ Agenda * Challenges of “Real” Active Networks * Openet: open networking * ORE and Openet Compositions * Active Networking on Openet * Experimental Results * Summary and Future Works

Active Networking on Openet 10/21/ Openet Compositions * ORE: Oplet Runtime Environment lService creation and deployment lService downloading and lifecycle management * Services lEvery network function is a service lWrapped by Oplets lOpen APIs * ODK: Oplet Development Kit lEase service creation and encapsulation * Management lManager on console and Agents on nodes lService initiation, policy and configuration

Active Networking on Openet 10/21/ Java Virtual Machine API Extensions Oplet Runtime Environment Oplet Service Oplet Service Oplet Service Oplet Service ORE: the Openet Core * ORE lObject-oriented Runtime Environment èServices are objects èRun customized software on network nodes è Sevice downloading, installation, and safe execution lNeutral to heterogeneous hardware è Fully implemented using Java ORE

Active Networking on Openet 10/21/ JVM ORE User Services Standard Services * Services are applications under ORE * 4-tier hierarchy lStandard Services èOpletService èManifestOplet l System Services èJFWD èJSNMP, JMIB l Function Services èHTTP, OreServlet èShell, Logger l User Services System Services Function Services Service Hierarchy

Active Networking on Openet 10/21/ Java Virtual MachineAPI Extensions Oplet Runtime Environment Oplet Service Oplet Service Oplet Service Oplet Service Oplets and Services * What’s an Oplet ? l A self-contained downloadable unit, or service wrapper è Encapsulates one or more service objects è Contains service attributes, e.g., names è Eases secure downloading and service installation è Use other service oplets

Active Networking on Openet 10/21/ Agenda * Challenges of “Real” Active Networks * Openet: open networking * ORE and Openet Compositions * Active Networking on Openet * Experimental Results * Summary and Future Works

Active Networking on Openet 10/21/ Passport Routing Switch * New brand name of Accelar * L3 Routing Switch Family * High performance by separating planes l Forwarding Plane è Distributed ASIC forwarding engines è Wire-speed forwarding, up to 256 gbps (8600) l Control Plane è PowerPC è Network management * JVM available in control plane

Active Networking on Openet 10/21/ Switching Fabric CPU System Forwarding Plane (Wire Speed Forwarding) Control Plane ORE Network Services Traffic Packets Monitor statusNew rules JFWD Openet on Passport Forwarding Processor Forwarding Rules Statistics &Monitors... Forwarding Processor Forwarding Rules Statistics &Monitors Forwarding Processor Forwarding Rules Statistics &Monitors Active Networks Services

Active Networking on Openet 10/21/ ANTS on Openet * ANTS (Active Node Transfer System) l Proposed by MIT l Composing and deploying new protocols l Well-packed with toolkit and applications * Service Deployment on Passport l Wrapping the ANTS code without modification l ORE ANTS service l URL: “

Active Networking on Openet 10/21/ ORE ANTS Service * Service: “AntsNodeService” l Wrapping the MIT ANTS code l Package “com.nortelnetworks.ore.service.ants” è AntsNodeService.java: service interface è AntsNodeServiceImpl.java: service implementation è AntsNodeOplet.java: Oplet è AntsNode.mf: manifest l Service interfaces è getNode(): connect to the ANTS EE è getConfiguration(): set up using ANTS configuration

Active Networking on Openet 10/21/ How AN service is deployed? * Service design and coding l Regular Java programming * Service package l Oplets development by ODK l JAR files l Uploading to downloading servers * ORE start at Passport * Service activation by ORE l Downloading, start and stop è Startup service è Shell service * Service execution

Active Networking on Openet 10/21/ Agenda * Challenges of “Real” Active Networks * Openet: open networking * ORE and Openet Compositions * Active Networking on Openet * Experimental Results * Summary and Future Works

Active Networking on Openet 10/21/ Experiment * Goals l Verification: Active Networking on commercial nodes l Performance: ANTS and regular IP applications * Testbed l Part of Intranet: active hosts (Sun Workstations) l Internal network è Passport: active router è non-active Linux boxes: for HTTP server and Ping use * Passport gigabit routing switch l Two types: 1100B (10gbps) and 8600 (128gbps) l JVM: JDK and JDK 1.2 * Software l ORE l ORE ANTS service, MIT ANTS 1.2 included l Ping, in Linux

Active Networking on Openet 10/21/ Experiment Testbed Destination Host (Sun Workstation 1) HTTP server (Linux PC) ORE ANTS (Passport 1100B or 8600 Routing Switch) Download oplets Source Host (Sun Workstation 2) MIT ANTS Router Linux PC (Ping use only) Linux PC (Ping use only)

Active Networking on Openet 10/21/ Device Specifications * Accelar 1100B: 1 lPowerPC 403/66Mhz with 32 MB memory and VxWorks lRole: active router running the ORE ANTS * Accelar 8600: 1 lPowerPC 740/266Mhz with 64 MB memory and VxWorks lRole: active router running the ORE ANTS * Sun workstations: 2 lUltraSPARC I/167Mhz with 128 MB memory and Solaris lRole: Source and Destination hosts running MIT ANTS * HTTP server: 1 lPII/400MHz system with 32 MB memory and Linux lRole: ORE service code and ORE ANTS configuration * PCs: 2 lPII/400MHz systems with 32 MB memory and Linux lRole: source and destination hosts running regular Ping

Active Networking on Openet 10/21/ ANTS Ping and Linux Ping Destination Host (Sun Workstation 1) HTTP server (Linux PC) ORE ANTS (Passport 1100B or 8600 Routing Switch) Download oplets Source Host (Sun Workstation 2) MIT ANTS Router Linux PC (Ping use only) Linux PC (Ping use only) APing Ping * Aping testing with 1100B or 8600

Active Networking on Openet 10/21/ Data 1: Packet Received Packet received at Source Node (100 packets or capsules sent) Interval (ms) Packets Ping Aping(1100B) Aping(8600) * Loss by bursty UDP and slow CPU

Active Networking on Openet 10/21/ Data 2: Packet Delays * Is CPU a bottleneck? Yes. Minimal Average Delays at Source Tests Delay (ms) Min Aping (1100B)Aping (8600) Ping

Active Networking on Openet 10/21/ Data 3: Delay Distributions * Slowdown: Java read and write * Repeated on Linux and Sun Delay Distributions x8 1x2 2x0.5 1x Source Sun Ultra1 Destination Sun Ultra1 Router Passport Java I/O (4) Process(ms) Aping(1100B) Aping(8600) 83% 38%

Active Networking on Openet 10/21/ Result 1: Capsule Time Capsule Time Tests Processing Transmission Total Aping (8600)Aping (1100B) 100% 27% 73% 100% Time (ms) % 58% * Fast CPU speeds up more processing than transmission

Active Networking on Openet 10/21/ Result 2: Throughputs * Comparisons at Source lPing: 10,000 pps lAping with 1100B: 32.3 cps at maximal lAping with 8600: 90.9 cps (triple of 1100B) * Passport: ASIC faster than CPU lASIC processes Ping packets little lCPU processes Aping capsules fully

Active Networking on Openet 10/21/ Watch 1: Performance Up ? * Hardware approaches lFast CPU lNetwork Processor * Software approaches lFast JVM lJava network I/O * Combined S/H lRe-engineering software tightly with hardware èBe aware of hardware-dependency ! * Openet neither raises nor worsens performance lService loading rather than scheduling and monitoring

Active Networking on Openet 10/21/ Watch 2: is it ready? * AN services on Commercial Node lData-plane èLoaded in control plane èserved with forwarding engines (along the data path) lControl-plane èLoaded and served with the control plane èAffecting the forwarding engines * Data-plane services lNot ready if they are èTime critical èLarge traffic volume lYes if they are èLoose or elastic time requirement, like ANTS Ping * Yes! most control- plane services lConfiguration lPolicies lFault management lMonitor

Active Networking on Openet 10/21/ Agenda * Challenges of “Real” Active Networks * Openet: open networking * ORE and Openet Compositions * Active Networking on Openet * Experimental Results * Summary and Future Works

Active Networking on Openet 10/21/ Summary * Openet enables l AN services onto commercial hardware l Customer services portable * Active Networking with Passport l Packet processing: forwarding engine >> CPU l Bottlenecks: CPU, and Java network I/O * AN services ready to real network l Control plane services l Some data-plane services

Active Networking on Openet 10/21/ Other and Future Works * Actual Services l QoS:JDiffserv l Monitor: JCapture * Improving Service Deployment l Service security l Service use of resource * Openet on more hardware l Alteon l IXP l Optical core network * Performance enhance l Better use of CPU and forwarding engines

Active Networking on Openet 10/21/ Visit us at Thank You ! Q & A

Active Networking on Openet 10/21/ Backups

Active Networking on Openet 10/21/ Standard Services: ODK * Ease customer service creation * Basic Oplet APIs l OpletService è base service è extended to create new service description and interfaces l ManifestOplet è abstract oplet interface è implemented as Oplets to encapsulate service code è Service start or stop at runtime è Relating service information, e.g., Oplet name

Active Networking on Openet 10/21/ System Services * Access to hardware resource * Public low-level APIs * Exanples l JFWD: Java Forwarding l JSNMP: SNMP v2 client l JMIB: various MIB access

Active Networking on Openet 10/21/ System Services: JFWD * Java Forwarding l IP forwarding and routing è Diffserv marking è Filtering and diverting è Forwarding priority è Routing * Platform-independent APIs l Implemented on Passport/Accelar and Linux

Active Networking on Openet 10/21/ Function Services * Common use utility * Public neutral APIs * Examples l HTTP: HTTP service l Shell: ORE interactive shell l IpPacket: packet construction (IP, TCP, UDP) l Logger: service runtime printout l OreServlet: Java servlet

Active Networking on Openet 10/21/ Applications * ANTS l Active Networking on Passport 1100 and 8600 * IP filtering l Dynamic priority changes on Passport 1100 * JDiffserv l Diffserv forwarding and DSCP marking on Passport 8600 * JSNMP and JMIB l SNMP/MIB access l Passport 1100 and 8600 l Linux * JCapture: packet capture * Regatta: fault recovery

Active Networking on Openet 10/21/ Result: Delays and Thruput * Bottleneck?: CPU processing