1. Active Networking On A Programmable Networking Platform The Openet Team Nortel Networks Technology Centre

2. Active Networking on Openet 10/21/2015 2 Agenda * Challenge of “Real” Active Networks * Openet: open networking * ORE and Openet Compositions * Active Networking on Openet * Experimental Results * Summary and Future Works

3. Active Networking on Openet 10/21/2015 3 Commercial Network Nodes * Forwarding Faster and Faster l Bandwidth doubles every 9 months è Optical core: photonic replaces electronic è New Moore’s Law l Traffic processing è Terabit switching from Gigabit * But lEver more use of hardware acceleration (ASIC) èFiltering, header processing, etc èLittle flexibility to introduce new services l Static and well-defined set of protocols and funcs è TCP, UDP, and even HTTP è Allowing configuration rather than addition/modification

4. Active Networking on Openet 10/21/2015 4 Active Networks * A User-Networking Approach l EE residing on active node è Virtual machine for new protocol processing è User interface for applications l Capsule or active packets running in network è “On the fly” protocol composing by applications è “protocol processors” with customers’ intelligence * But l Implementations mostly in host systems è Model: Linux and Java è Not seen in commercial network nodes

5. Active Networking on Openet 10/21/2015 5 Challenge and Our Solution * Goal: Active Networks on real Internet * Active Networks requires l Open boxes l Networking programmability * Commercial Network Nodes lLack the above two lHave diversified systems * Solution lA programmable networking platform on device èOpenet !!! lActive Networks through Openet

6. Active Networking on Openet 10/21/2015 6 Agenda * Challenges of “Real” Active Networks * Openet: open networking * ORE and Openet Compositions * Active Networking on Openet * Experiment and Results * Summary and Future Works

7. Active Networking on Openet 10/21/2015 7 The Openet Platform * Open networking through programming l Programmability to commercial network devices l Service-enabled networking platform * Easing service creation and deployment l Value-added services across network elements l Dynamic, safe and convenient l Not degrading network performance and reliability * Standards and Partners l Active Networks, IEEE, IETF, P1520 and FAIN l Columbia U., UC Berkeley, UPenn and UToronto l MITRE, TASC, NetFuel and CSIRO

8. Active Networking on Openet 10/21/2015 8 Repository Server ORE Control Console (Net Mgr) service initiation and policies network configuration resource administration repository maintenance End Apps Switch Router Switch Download oplets, policies, configs Control & Configuration End Apps use of service apply on the fly Control Data path Download User request ORE Openet Architecture

9. Active Networking on Openet 10/21/2015 9 CPU JVM …MEM JNI/Native Code OREJFWD Filtered packets New forwarding rules Forwarding Engine Monitor status User Oplets OpletService, Shell, Logger Jcapture, HTTP, IpPacket Standard Services ANTS Firewall, DiffServ Application services Function Services Control Plane Data Plane Openet: a node’s view

10. Active Networking on Openet 10/21/2015 10 Agenda * Challenges of “Real” Active Networks * Openet: open networking * ORE and Openet Compositions * Active Networking on Openet * Experimental Results * Summary and Future Works

11. Active Networking on Openet 10/21/2015 11 Openet Compositions * ORE: Oplet Runtime Environment lService creation and deployment lService downloading and lifecycle management * Services lEvery network function is a service lWrapped by Oplets lOpen APIs * ODK: Oplet Development Kit lEase service creation and encapsulation * Management lManager on console and Agents on nodes lService initiation, policy and configuration

12. Active Networking on Openet 10/21/2015 12 Java Virtual Machine API Extensions Oplet Runtime Environment Oplet Service Oplet Service Oplet Service Oplet Service ORE: the Openet Core * ORE lObject-oriented Runtime Environment èServices are objects èRun customized software on network nodes è Sevice downloading, installation, and safe execution lNeutral to heterogeneous hardware è Fully implemented using Java ORE

13. Active Networking on Openet 10/21/2015 13 JVM ORE User Services Standard Services * Services are applications under ORE * 4-tier hierarchy lStandard Services èOpletService èManifestOplet l System Services èJFWD èJSNMP, JMIB l Function Services èHTTP, OreServlet èShell, Logger l User Services System Services Function Services Service Hierarchy

14. Active Networking on Openet 10/21/2015 14 Java Virtual MachineAPI Extensions Oplet Runtime Environment Oplet Service Oplet Service Oplet Service Oplet Service Oplets and Services * What’s an Oplet ? l A self-contained downloadable unit, or service wrapper è Encapsulates one or more service objects è Contains service attributes, e.g., names è Eases secure downloading and service installation è Use other service oplets

15. Active Networking on Openet 10/21/2015 15 Agenda * Challenges of “Real” Active Networks * Openet: open networking * ORE and Openet Compositions * Active Networking on Openet * Experimental Results * Summary and Future Works

16. Active Networking on Openet 10/21/2015 16 Passport Routing Switch * New brand name of Accelar * L3 Routing Switch Family * High performance by separating planes l Forwarding Plane è Distributed ASIC forwarding engines è Wire-speed forwarding, up to 256 gbps (8600) l Control Plane è PowerPC è Network management * JVM available in control plane

17. Active Networking on Openet 10/21/2015 17 Switching Fabric CPU System Forwarding Plane (Wire Speed Forwarding) Control Plane ORE Network Services Traffic Packets Monitor statusNew rules JFWD Openet on Passport Forwarding Processor Forwarding Rules Statistics &Monitors... Forwarding Processor Forwarding Rules Statistics &Monitors Forwarding Processor Forwarding Rules Statistics &Monitors Active Networks Services

18. Active Networking on Openet 10/21/2015 18 ANTS on Openet * ANTS (Active Node Transfer System) l Proposed by MIT l Composing and deploying new protocols l Well-packed with toolkit and applications * Service Deployment on Passport l Wrapping the ANTS code without modification l ORE ANTS service l URL: “http://www.openetlab.org/downloads/”http://www.openetlab.org/downloads/

19. Active Networking on Openet 10/21/2015 19 ORE ANTS Service * Service: “AntsNodeService” l Wrapping the MIT ANTS code l Package “com.nortelnetworks.ore.service.ants” è AntsNodeService.java: service interface è AntsNodeServiceImpl.java: service implementation è AntsNodeOplet.java: Oplet è AntsNode.mf: manifest l Service interfaces è getNode(): connect to the ANTS EE è getConfiguration(): set up using ANTS configuration

20. Active Networking on Openet 10/21/2015 20 How AN service is deployed? * Service design and coding l Regular Java programming * Service package l Oplets development by ODK l JAR files l Uploading to downloading servers * ORE start at Passport * Service activation by ORE l Downloading, start and stop è Startup service è Shell service * Service execution

21. Active Networking on Openet 10/21/2015 21 Agenda * Challenges of “Real” Active Networks * Openet: open networking * ORE and Openet Compositions * Active Networking on Openet * Experimental Results * Summary and Future Works

22. Active Networking on Openet 10/21/2015 22 Experiment * Goals l Verification: Active Networking on commercial nodes l Performance: ANTS and regular IP applications * Testbed l Part of Intranet: active hosts (Sun Workstations) l Internal network è Passport: active router è non-active Linux boxes: for HTTP server and Ping use * Passport gigabit routing switch l Two types: 1100B (10gbps) and 8600 (128gbps) l JVM: JDK 1.1.7 and JDK 1.2 * Software l ORE 0.3.3 l ORE ANTS service, MIT ANTS 1.2 included l Ping, in Linux 2.2.14

23. Active Networking on Openet 10/21/2015 23 Experiment Testbed Destination Host (Sun Workstation 1) HTTP server (Linux PC) ORE ANTS (Passport 1100B or 8600 Routing Switch) Download oplets Source Host (Sun Workstation 2) MIT ANTS 134.177.116.108134.177.116.104 10.120.101.102 10.120.101.201 Router 10.120.101.5010.120.101.51 Linux PC (Ping use only) Linux PC (Ping use only)

24. Active Networking on Openet 10/21/2015 24 Device Specifications * Accelar 1100B: 1 lPowerPC 403/66Mhz with 32 MB memory and VxWorks lRole: active router running the ORE ANTS * Accelar 8600: 1 lPowerPC 740/266Mhz with 64 MB memory and VxWorks lRole: active router running the ORE ANTS * Sun workstations: 2 lUltraSPARC I/167Mhz with 128 MB memory and Solaris lRole: Source and Destination hosts running MIT ANTS * HTTP server: 1 lPII/400MHz system with 32 MB memory and Linux 2.2.14 lRole: ORE service code and ORE ANTS configuration * PCs: 2 lPII/400MHz systems with 32 MB memory and Linux 2.2.14 lRole: source and destination hosts running regular Ping

25. Active Networking on Openet 10/21/2015 25 ANTS Ping and Linux Ping Destination Host (Sun Workstation 1) HTTP server (Linux PC) ORE ANTS (Passport 1100B or 8600 Routing Switch) Download oplets Source Host (Sun Workstation 2) MIT ANTS 134.177.116.108134.177.116.104 10.120.101.102 10.120.101.201 Router 10.120.101.5010.120.101.51 Linux PC (Ping use only) Linux PC (Ping use only) APing Ping * Aping testing with 1100B or 8600

26. Active Networking on Openet 10/21/2015 26 Data 1: Packet Received Packet received at Source Node (100 packets or capsules sent) 100 21 60 100 0 20 40 60 80 100 120 0101001000 Interval (ms) Packets Ping Aping(1100B) Aping(8600) * Loss by bursty UDP and slow CPU

27. Active Networking on Openet 10/21/2015 27 Data 2: Packet Delays * Is CPU a bottleneck? Yes. Minimal Average Delays at Source 31 11 0.1 0 5 10 15 20 25 30 35 123 Tests Delay (ms) Min Aping (1100B)Aping (8600) Ping

28. Active Networking on Openet 10/21/2015 28 Data 3: Delay Distributions * Slowdown: Java read and write * Repeated on Linux and Sun Delay Distributions 0 13 0 8 2x8 1x2 2x0.5 1x2 0 5 10 15 20 Source Sun Ultra1 Destination Sun Ultra1 Router Passport Java I/O (4) Process(ms) Aping(1100B) Aping(8600) 83% 38%

29. Active Networking on Openet 10/21/2015 29 Result 1: Capsule Time Capsule Time 0 5 10 15 20 25 30 35 12Tests Processing Transmission Total Aping (8600)Aping (1100B) 100% 27% 73% 100% Time (ms) 31 11 42% 58% * Fast CPU speeds up more processing than transmission

30. Active Networking on Openet 10/21/2015 30 Result 2: Throughputs * Comparisons at Source lPing: 10,000 pps lAping with 1100B: 32.3 cps at maximal lAping with 8600: 90.9 cps (triple of 1100B) * Passport: ASIC faster than CPU lASIC processes Ping packets little lCPU processes Aping capsules fully

31. Active Networking on Openet 10/21/2015 31 Watch 1: Performance Up ? * Hardware approaches lFast CPU lNetwork Processor * Software approaches lFast JVM lJava network I/O * Combined S/H lRe-engineering software tightly with hardware èBe aware of hardware-dependency ! * Openet neither raises nor worsens performance lService loading rather than scheduling and monitoring

32. Active Networking on Openet 10/21/2015 32 Watch 2: is it ready? * AN services on Commercial Node lData-plane èLoaded in control plane èserved with forwarding engines (along the data path) lControl-plane èLoaded and served with the control plane èAffecting the forwarding engines * Data-plane services lNot ready if they are èTime critical èLarge traffic volume lYes if they are èLoose or elastic time requirement, like ANTS Ping * Yes! most control- plane services lConfiguration lPolicies lFault management lMonitor

33. Active Networking on Openet 10/21/2015 33 Agenda * Challenges of “Real” Active Networks * Openet: open networking * ORE and Openet Compositions * Active Networking on Openet * Experimental Results * Summary and Future Works

34. Active Networking on Openet 10/21/2015 34 Summary * Openet enables l AN services onto commercial hardware l Customer services portable * Active Networking with Passport l Packet processing: forwarding engine >> CPU l Bottlenecks: CPU, and Java network I/O * AN services ready to real network l Control plane services l Some data-plane services

35. Active Networking on Openet 10/21/2015 35 Other and Future Works * Actual Services l QoS:JDiffserv l Monitor: JCapture * Improving Service Deployment l Service security l Service use of resource * Openet on more hardware l Alteon l IXP l Optical core network * Performance enhance l Better use of CPU and forwarding engines

36. Active Networking on Openet 10/21/2015 36 Visit us at HTTP://www.openetlab.org Thank You ! HTTP://www.openetlab.org Q & A

37. Active Networking on Openet 10/21/2015 37 Backups

38. Active Networking on Openet 10/21/2015 38 Standard Services: ODK * Ease customer service creation * Basic Oplet APIs l OpletService è base service è extended to create new service description and interfaces l ManifestOplet è abstract oplet interface è implemented as Oplets to encapsulate service code è Service start or stop at runtime è Relating service information, e.g., Oplet name

39. Active Networking on Openet 10/21/2015 39 System Services * Access to hardware resource * Public low-level APIs * Exanples l JFWD: Java Forwarding l JSNMP: SNMP v2 client l JMIB: various MIB access

40. Active Networking on Openet 10/21/2015 40 System Services: JFWD * Java Forwarding l IP forwarding and routing è Diffserv marking è Filtering and diverting è Forwarding priority è Routing * Platform-independent APIs l Implemented on Passport/Accelar and Linux

41. Active Networking on Openet 10/21/2015 41 Function Services * Common use utility * Public neutral APIs * Examples l HTTP: HTTP service l Shell: ORE interactive shell l IpPacket: packet construction (IP, TCP, UDP) l Logger: service runtime printout l OreServlet: Java servlet

42. Active Networking on Openet 10/21/2015 42 Applications * ANTS l Active Networking on Passport 1100 and 8600 * IP filtering l Dynamic priority changes on Passport 1100 * JDiffserv l Diffserv forwarding and DSCP marking on Passport 8600 * JSNMP and JMIB l SNMP/MIB access l Passport 1100 and 8600 l Linux * JCapture: packet capture * Regatta: fault recovery

43. Active Networking on Openet 10/21/2015 43 Result: Delays and Thruput * Bottleneck?: CPU processing