1. ViSION Status Update Dan Savu Stefan Stancu 1D. Savu - CERN openlab

2. Overview Introduction Update on Software Defined Networking ViSION Software Stack – HP SDN Controller – ViSION Core Framework – Load Balancer Module – The Health Monitor Module The Regressive Testing Application 2D. Savu - CERN openlab

3. The ViSION Project CERN openlab - HP Networking collaboration – Traffic orchestration – Software Define Networking approach Based on OpenFlow – Started in February 2012 – 2 engineers, 3 years CERN IT/CS recognized the need to scale CERN’s perimeter firewall capacity to cope with the increase of internet traffic. D. Savu - CERN openlab3

4. 4 SDN: Centralized controller implementation App Simple Packet Forwarding Hardware App Simple Packet Forwarding Hardware Network Operating System Open interface to hardware (e.g. OpenFlow) Anybody can innovate D. Savu - CERN openlab

5. OpenFlow/SDN update Still a very dynamic area ONF is active in refining existing versions and defining new ones: Controllers: – Open source: Beacon, Floodlight, NOX & POX, Trema, Ryu, Open Daylight, Open Contrail – Commercial: Big Network Controller (Big Switch), Programmable Flow (NEC), Contrail Cloud orchestration integration: Neutron/Quantum – Core part of the OpenStack platform, enabling network as a Service – Modular plugin design allows interfacing to SDN controller platforms 1.0.0 12/2009 1.1.0 2/2011 1.2 12/2011 1.3.0 07/2012 1.3.1 09/2012 1.3.2 04/2013 1.4.0 (TB ratified) 08/2013 D. Savu - CERN openlab5

6. OpenFlow – new controllers POX – Python only version of NOX (initial OpenFlow controller) – Targeted largely at research and education. Suited for rapid prototyping Open Daylight (04/2013) – Linux Foundation project – open source – Joint industry effort. Virtually all the big players are contributing members Juniper launches SDN controller (09/2013) – Based on Contrail Systems acquisition from 12/2012 – Open source (OpenContrail) and commercial (Contrail code + service and support) – Virtualization controller (network overlays) HP Virtual Application Network SDN Controller – October 21 st product release (codename Flare) – OpenFlow 1.3 support – High Availability – Infrastructure controller (physical OF network fabric) D. Savu - CERN openlab6

7. Overview Introduction Update on Software Defined Networking ViSION Software Stack – HP SDN Controller – ViSION Core Framework – Load Balancer Module – The Health Monitor Module The Regressive Testing Application 7D. Savu - CERN openlab

8. ViSION - HP SDN Framework D. Savu - CERN openlab8

9. ViSION Openflow Fabric External Net Internal Net Stateful Firewalls OpenFlow Fabric Trusted Bypass OpenFlow Fabric OpenFlow fabrics desired functionality: – (1) Classification – (2) Load Balancing – (3) Mirroring – (4) Fault tolerance Potential limitations (early days for OF) – No mirroring support in early OF versions – Classification based on port ranges scales poorly – Uniform load distribution not straight forward Can’t hash on high entropy bits (e.g. lower IP bits) – Adaptive load distribution is complex Requires API for synchronizing the FW’s state Investigating migration to OF 1.3 with HP to address some of these limitations D. Savu - CERN openlab9

10. ViSION Software Stack External Net Internal Net Stateful Firewalls OpenFlow Fabric Trusted Bypass OpenFlow Fabric HP SDN Controller ViSION Core Framework hp apps API ViSION Balancer ViSION UI OF Fabric Health Monitor Software Stack D. Savu - CERN openlab10

11. HP SDN Controller Overview Base OpenFlow Controller Appliance Virtual Appliance deployed as SW on an Industry standard x86 server OpenFlow 1.3 Controller Built-in Network Services Appliance Administration A Distributed Platform for High-Availability & Scalability Controller Clustering for Load-Balancing and Fail-Over Control State Mirroring across cluster for transparent failure recovery Extensible Platform for SDN Application Developers Embedded Java Application Deployment REST APIs GUI HP Network Infrastructure Standard interfaces and control protocols Openflow 1.3 Engine MS-Lync Partner 3 rd party Apps Partner 3 rd party Apps Federation Sentinel Cloud App Connectors Cloud App Connectors Hadoop Clustering TopologyDevice MgmtProvisionin g Security Path Calculation Alerts... Backup/Restore App Mgr Diagnostics... Customer Applications Customer Applications RESTful API D. Savu - CERN openlab11

12. ViSION/ Core Framework Traffic orchestration decomposition 1.Physical layer 2.Translation layer 3.Logical layer Core module Implements the first two layers Provides support for redundancy by using multiple links/paths Allows the higher logical layer to focus on traffic orchestration only Integrated with latest HPN Controller Status: code development to end this sprint final package to be delivered before our visit to HPN (mid October) Translation Physical Logical D. Savu - CERN openlab12

13. Balancer Allocates flows to resources based on – Resource capacity – Resource availability – Resource load Higher level of abstraction – Deals with the available resources and consumers – The core implements its decision into the physical OF fabric Flow allocation – Static  compromise for stateful firewalls – Dynamic High availability – Relocate flows in case a resource becomes unavailable Balancer Int. Network Health monitor & Traffic statistics Health monitor & Traffic statistics User Interface Balancer Ext. Network D. Savu - CERN openlab13

14. ViSION Software Stack External Net Internal Net Stateful Firewalls OpenFlow Fabric Trusted Bypass OpenFlow Fabric HP SDN Controller ViSION Core Framework hp apps API ViSION Balancer ViSION UI OF Fabric Health Monitor Software Stack D. Savu - CERN openlab14

15. ViSION/ Health Monitor Module -Real-time resource status information -Flexible module system -Multi-module data aggregation per agent -Custom agent configuration -Current modules: -SNMP -Ping -HTTP Web Request -LinkProbe via OF packet injection -Status -finalized, ready for hp code review -summer student involvement Hmon App Agents Data Collection Module(s) Active Probe(s) REST API Resource(s) D. Savu - CERN openlab15

16. ViSION/ Health Monitor Module E.g.: the link-probe module using OF packet injection Fw1 Fw2 Fw3 OpenFlow Network OF Controller D. Savu - CERN openlab16

17. Overview Introduction Update on Software Defined Networking ViSION Software Stack – HP SDN Controller – ViSION Core Framework – Load Balancer Module – The Health Monitor Module The Regressive Testing Application 17D. Savu - CERN openlab

18. ViSION System Level Testing VM Farm OF Fabric Production Network Section OF Fabric a. Regressive Testingb. Mirroring D. Savu - CERN openlab18

19. ViSION Regressive Testing App External Net Internal Net Stateful Firewalls OpenFlow Fabric Trusted Bypass OpenFlow Fabric HP SDN Controller ViSION Core Framework hp apps API ViSION Balancer ViSION UI OF Fabric Health Monitor Software Stack RegTest D. Savu - CERN openlab19

20. ViSION Regressive Testing App 20 Overview: -adapted mgen used for traffic injection -agent application to coordinate and monitor a machine’s flows -manager application to coordinate a pool of agents Status: -prototype, not yet finalized -summer student involvement D. Savu - CERN openlab

21. ViSION Project Timeline Feb 2012 Kick-off Initial target: virtual machine mobility Technology review May 2012 Project definition Investigation Finalized project scope Sep 2012 Design OF based ACL pusher prototype Testbed setup Jan 2013 Development Core module prototype implementation Architecture review May 2013 Development New HP controller API Visit to HPN In depth design review Flare update Sep 2013 Development Service oriented core module implementation Health Monitor Regressive testing tool Jan 2014 Proof of concept Load balancer May 2014 Prototype Refine User Interface Persistency support High availability Sep 2014 Testing Feb 2015 Productization D. Savu - CERN openlab21