1. Toward Transitional SDN Deployment in Enterprise Networks Marco Canini with Dan Levin, Stefan Schmid, Anja Feldmann TU Berlin / Telekom Innovation Labs

2. Motivation GOAL: Help SDN succeed! I ♥ SDN

3. The SDN Deployment Problem A real large-scale campus network UPGRADE FullSDNFullSDN Must upgrade to SDN incrementally

4. Key Questions How can we incrementally deploy SDN into enterprise campus networks? Can we reap the benefits of SDN with partial deployment?

5. Current Transitional Networks Dual-stack approach SDN Platform Legacy Mgmt

6. Current Transitional Networks Dual-stack approachEdge-only approach SDN Platform Legacy Mgmt SDN Platform App 1 App 2 App 3

7. Where the heck is the edge?

8. TOOL Determine the partial SDN deployment PANOPTICON SDN ARCHITECTURE Operate the network as a (nearly) full SDN

9. The Existing Network

10. 1. Planning the SDN Deployment A B C D E F Network architect provides set of ingress ports to be controlled via SDN

11. Optimized partial SDN deployment Tunable parameters Port priorities Price model Utilization thresholds (link utilization, VLANs, etc.) Network topology Cost-aware optimizer Objectives Upgrade budget Path delay Traffic estimates TOOL

12. The Partial SDN Deployment ( ) A B C D E F

13. Benefits of Partial SDN Deployment? A B C D E F Harvest unutilized network capacity

14. A B C D E F Main benefits of SDN = Principled orchestration of the network policy

15. Can partial SDN deployment still take advantage of principled network orchestration ?

16. 2. Realizing the Benefits of SDN A B C D E F Access control Insight #1: ≥ 1 SDN switch  Policy enforcement Insight #1: ≥ 1 SDN switch  Policy enforcement IDS Middlebox traversal

17. 2. Realizing the Benefits of SDN A B C D E F Traffic load-balancing Insight #1: ≥ 1 SDN switch  Policy enforcement Insight #1: ≥ 1 SDN switch  Policy enforcement Insight #2: ≥ 2 SDN switches  Fine-grained control Insight #2: ≥ 2 SDN switches  Fine-grained control

18. SDN Waypoint Enforcement Insight #1: ≥ 1 SDN switch  Policy enforcement Insight #1: ≥ 1 SDN switch  Policy enforcement Insight #2: ≥ 2 SDN switches  Fine-grained control Insight #2: ≥ 2 SDN switches  Fine-grained control Legacy devices must direct traffic to SDN switches Ensure that all traffic to/from an SDN-controlled port always traverses at least one SDN switch

19. A B C D E F Conceptually group SDN ports in Cell Blocks The SDN Architecture PANOPTICON

20. Traffic restricted to Solitary Confinement Trees A B C D E F Per-port spanning trees that ensure waypoint enforcement The SDN Architecture PANOPTICON

21. A B C D E F BCD EF A “Logical SDN”

22. PANOPTICON SDN Platform App 1 App 2 App 3 BCD EF A PANOPTICON provides the abstraction of a (nearly) fully-deployed SDN in a partially upgraded network

23. Results Highlights Evaluated a large campus network (1713 switches) Upgrade 6% of distribution switches  – 100% SDN-controlled ingress ports – avg. path stretch < 50% – max. link util. < 70%

24. PANOPTICON SDN Platform App 1 App 2 App 3 BCD EF A TOOL Determine the partial SDN deployment SDN ARCHITECTURE Operate the network as a (nearly) full SDN Summary

25. The Collaborators Anja FeldmannStefan SchmidDan Levin

26. PANOPTICON SDN Platform App 1 App 2 App 3 BCD EF A Thank you! Questions? Come and see us!