1. S T A N F O R D U N I V E R S I T Y I N F O R M A T I O N T E C H N O L O G Y S E R V I C E S C o m m u n i c a t i o n S e r v i c e s July 12, 2 0 1 2 GENI CIO Workshop S T A N F O R D U N I V E R S I T Y

2. S T A N F O R D U N I V E R S I T Y I N F O R M A T I O N T E C H N O L O G Y S E R V I C E S C o m m u n i c a t i o n S e r v i c e s July 12, 2 0 1 2 Current State OpenFlow Core 6 40/10Gb Core switches deployed 4 Building switches connected Working with IT groups to integrate HPC clusters Submitted NSF proposal (Campus Cyberinfrastructure)

3. S T A N F O R D U N I V E R S I T Y I N F O R M A T I O N T E C H N O L O G Y S E R V I C E S C o m m u n i c a t i o n S e r v i c e s July 12, 2 0 1 2 Motivation and Benefits Flexibility Change the network topology or data path at will Apply policies anywhere in the network Simplicity Decrease the number of devices and appliances Common policy store for many devices One management interface Ease of Troubleshooting (user problems) Easier to track devices, users, and applications

4. S T A N F O R D U N I V E R S I T Y I N F O R M A T I O N T E C H N O L O G Y S E R V I C E S C o m m u n i c a t i o n S e r v i c e s July 12, 2 0 1 2 Motivation and Benefits Innovation Continue improving the user experience Deliver new services and do it faster Specialized services Financial Decrease cost of maintaining the network Larger vendor selection Cheaper commodity hardware Reduced support costs

5. S T A N F O R D U N I V E R S I T Y I N F O R M A T I O N T E C H N O L O G Y S E R V I C E S C o m m u n i c a t i o n S e r v i c e s July 12, 2 0 1 2 Use Case – Call Recording Call recording services required by: Life-Flight Stanford Hospital and Clinics Lucile Packard Children’s Hospital Operator Services VoIP Calls recorded by replicating entire VLANs Limited number of replication sessions available All traffic is replicated, not just calls of interest Too much complexity in network switch configurations, filters, topology

6. S T A N F O R D U N I V E R S I T Y I N F O R M A T I O N T E C H N O L O G Y S E R V I C E S C o m m u n i c a t i o n S e r v i c e s July 12, 2 0 1 2 Use Case – Call Recording Selectively send calls to the recorder Only interesting traffic sent to recorders Greatly reduces complexity of the network

7. S T A N F O R D U N I V E R S I T Y I N F O R M A T I O N T E C H N O L O G Y S E R V I C E S C o m m u n i c a t i o n S e r v i c e s July 12, 2 0 1 2 Information Security Office needs to be able to monitor all inbound and outbound campus traffic. Taps in different locations across campus Need multiple switches to feed multiple collection servers Use Case – ISO Traffic Monitoring

8. S T A N F O R D U N I V E R S I T Y I N F O R M A T I O N T E C H N O L O G Y S E R V I C E S C o m m u n i c a t i o n S e r v i c e s July 12, 2 0 1 2 More granularity when slicing and dicing traffic Pick and choose traffic to send to servers Greater flexibility in organizing what type of traffic goes to which collection server Use Case – ISO Traffic Monitoring

9. S T A N F O R D U N I V E R S I T Y I N F O R M A T I O N T E C H N O L O G Y S E R V I C E S C o m m u n i c a t i o n S e r v i c e s July 12, 2 0 1 2 Any new device on the Stanford network must be registered with the central NetDB application Security through obscurity Policy routing adds complexity Bottle-neck Use Case – Stanford Network Self Registration

10. S T A N F O R D U N I V E R S I T Y I N F O R M A T I O N T E C H N O L O G Y S E R V I C E S C o m m u n i c a t i o n S e r v i c e s July 12, 2 0 1 2 Force unregistered users to the captive portal at the switches closest to the users Registration and guest network services load distributed across multiple edge switches Simplification of network topology Policy routing no longer needed Use Case – Stanford Network Self Registration

11. S T A N F O R D U N I V E R S I T Y I N F O R M A T I O N T E C H N O L O G Y S E R V I C E S C o m m u n i c a t i o n S e r v i c e s July 12, 2 0 1 2 Deployment Strategy Build OpenFlow network in parallel to production network, limiting any potential impact on production traffic Focus on quick wins where we can simplify, innovate and automate Focus on opportunities where end to end OpenFlow network is not needed to realize benefits Gain experience