1. Copyright © 2015 Pica8 Inc. All Rights Reserved. Sudhir Modali, Director PLM Pica8 The Key to Vendor Agnostic SDN/OpenFlow Table Type Patterns (TTP)

2. Copyright © 2015 Pica8 Inc. All Rights Reserved. Is Networking a Single Vendor Play? Custom Broadcom Cavium L2IPv4/v6 STP/TRILLOSPFISISBGP ChefPuppetEMSAPI ControllerOpenstackTivoliTail-f MPLS VPN ORCHESTRATION MANAGEMENT/ AUTOMATION CONTROL PLANE DATA PLANE ASICs PCEP MulticastWAN Traffic Engineering SecurityQoS Mellanox Marvell Barefoot Custom

3. Copyright © 2015 Pica8 Inc. All Rights Reserved. The Network GAP Software Innovation Network Innovation Multi-Core CPU Virtualization PaaS SaaS Big Data Cloud Value Technology Evolution “The Network Gap” ASICs VPNs Fabrics L2-VPNs VLANs Controllers Overlays SD-WAN

4. Copyright © 2015 Pica8 Inc. All Rights Reserved. Three Reasons For The Network Gap Closed Systems 1. Protocol Overload DevOps, CLI, SysAdmin BGP, OSPF, QinQ, IS-IS OVS, OVSDB OpenFLow 2. Inertia 3.

5. Copyright © 2015 Pica8 Inc. All Rights Reserved. Table Type Patterns (TTP): Unicast Routing Pipeline  Utilize all ASIC tables (VLAN+MAC+IP+TCAM) via Openflow  Enables flexible pipelines Choose between priority or LPM algorithms for lookups  Scale comparable to incumbent routers/switches Ingress Port VLAN Termination MAC Unicast Routing Policy ACL L3 Unicast Redirect L2 Rewrite (indirect) L2 interface (indirect) Meters Color Based Actions L3 Ecmp (Select) L3 FF (Fast Failover) Group actions Table0Table10Table20Table30Table40 Phy Port 2.7.1

6. Copyright © 2015 Pica8 Inc. All Rights Reserved. TTP profile

7. Copyright © 2015 Pica8 Inc. All Rights Reserved. TTP Closes Network Innovation Gap TTP Service Design Normalized ASIC Programming ProvisioningTroubleshooting DevelopmentOperations Operationalize Before Deployment

8. Copyright © 2015 Pica8 Inc. All Rights Reserved. OVS on Linux mode SDN Controller ovs-vswitchd ovsdb-tool Ovs-dpctl Ovs-appctl Ovsdb- client Save Apply ovs-kernel netlink First packet Port 1 Port 2 command config DB operation ovsdb-server ovsdb Ovs-vsctl Ovs-ofctl Host/Service discovery Multicast fabric Unicast routing Kernel Userspace Remote

9. Copyright © 2015 Pica8 Inc. All Rights Reserved. Table Type Patterns SDN Controller ovs-vswitchd ovsdb-tool Ovs-dpctl Ovs-appctl Ovsdb- client Save Apply netlink command config DB operation Port 1 Port 2 ASIC ovsdb-server ovsdb Ovs-vsctl Ovs-ofctl Host/Service discovery Multicast fabric Unicast Routing Software Tables HardwareTables SDK Userspace Remote

10. Copyright © 2015 Pica8 Inc. All Rights Reserved. Application TTP SDN Controller ovsdb-tool Ovsdb- client Apply config DB operation config Port 1 Port 2 ASIC Copy to CPU/Controller ovsdb-server ovsdb Ovs-vsctl TTP Ovs-ofctl Host/Service discovery Multicast fabric Unicast Routing HardwareTables SDK Userspace Remote

11. Copyright © 2015 Pica8 Inc. All Rights Reserved. TTP Profiles Can Be Deployed in... Overlays Network Virtualization VTEP support Multi-tenant clouds Data center interconnect Disaster recovery Open Networking Any network locale Incumbent alternative ASIC choice Normalized network services Open shim layer ASIC Metal NOS SDN Solutions VPN Traffic Eng. Tap SDN App Store Custom solutions Ecosystem and controller integration OEM customers OpenFlow with L2/L3 Data Center Networks Standard L2/L3 Scale out Automation-heavy Programmability with DevOps tools Scale-out spine and leaf

12. Copyright © 2015 Pica8 Inc. All Rights Reserved. Stacking It Together Data Plane (aka Network OS) CONTROLLER SDN Applications Tools NETWORK ORCHESTRATION Merchant Silicon TTP OpenFlow RESTful API Services Broadcom PicOS ODL OSS/BSS BGP Firewall Traffic Engineering Analytics OVSDB

13. Copyright © 2015 Pica8 Inc. All Rights Reserved. Benefits Realized Improvement 1000x (upto 2M) over single table implementation (2k) Line-rate Linux security tools Onboarding SDN applications on production environments Security Feature Scale Performance Interoperability Simplicity Support for traditional pipelines and enhancements dynamically Grading Comparable to incumbent equipment (Always) work-in-progress Better than incumbent equipment Works across multiple ASIC pipelines Comparable to incumbent equipment

14. Copyright © 2015 Pica8 Inc. All Rights Reserved. Case Studies

15. Copyright © 2015 Pica8 Inc. All Rights Reserved. Case 1: Routing-a-a-s TOR (Leaf) TTP Internet Data center applications Virtualized Service Core Network Data Center ToR Leaf TTP Edge Router TTP Core Router TTP Example TTP pipeline: -IPv4 and IPV6 -Unicast and multicast -Service chaining -Scale/performance = Trident2

16. Copyright © 2015 Pica8 Inc. All Rights Reserved. Case 2: WAN Service Border Leaf TTP Internet Data center applications Virtualized Service Core Network Data Center Core Router TTP Border Leaf TTP Example TTP pipeline: - VLAN translation -IPv4 and IPV6 -Unicast and multicast -NAT support -Scale/performance = Cavium Example TTP pipeline: -IPv4 and IPV6 -Unicast and multicast -Scale/performance = Trident2 ToR Leaf

17. Copyright © 2015 Pica8 Inc. All Rights Reserved. Networking “Made to Order” No Lock-in TTP SDN Stitching “When standard networking can’t get the job done, TTP delivers the flexibility and control to get you there”

18. Copyright © 2015 Pica8 Inc. All Rights Reserved. Thank You pica8.com

19. Copyright © 2015 Pica8 Inc. All Rights Reserved. multicast-TTP Ingress Port VLAN Termination MAC Unicast Routing Policy ACL L3 Unicast Redirect L2 Rewrite (indirect) L2 interface (indirect) Meters Color Based Actions L3 Ecmp (Select) L3 FF (Fast Failover) Group actions Table0Table10Table20Table30Table40 Phy Port SDN Controller Ovs-ofctl Multicast fabric Unicast Routing Switch Openflow Controller OpenFlow 1.3/1.4 ….... L3 group_all (multicast)

20. Copyright © 2015 Pica8 Inc. All Rights Reserved. Factors affecting flow scale FactorsComponentsTTP memory-SRAM/DRAM is cheaper than TCAM. -TCAM is embedded in ASIC and hence has a physical limit in terms of scale. Dedicated memory to store VLAN,L2,L3 entries for exact match. Lookup time-TCAM is a priority driven lookup. -SRAM can be used with newer sophisticated lookup algorithms Uses SRAM for matching and TCAM for policies (qos, security, ACL) – enables N+N search tables-SRAM best suited for longest prefix matching -TCAM best suited for wild card matching (first match) TCAM Enables User-Defined- Flows (UDF) – flows that capture a match on user defined pattern Scale-out vs scale-in data path -Distributed learning requires synchronization of information -Programmable data paths enable deterministic forwarding Reduces broadcast traffic and allows exception based routing, traffic engineering and application based switching

21. Copyright © 2015 Pica8 Inc. All Rights Reserved. Software vs Hardware  In hardware switches all packets are going through the ASIC. This is to avoid delay.  vSwitchd synchronize its state with the ASIC User ASIC OVS-vswitchd 16

22. Copyright © 2015 Pica8 Inc. All Rights Reserved. OpenFlow 22