Openflow
Y SDN
Fundamentos
de Open Networking.
Soluciones
Open Flow
Miguel Angel
Rodr
íguez
Fernández
marodriguez@juniper.net
2
Copyright
© 2009 Juniper Networks, Inc. www.juniper.net
Agenda
ARQUITECTURA SDN
INTRODUCCION a
Openflow
Casos
Prácticos
3
Copyright
© 2009 Juniper Networks, Inc. www.juniper.net
ARQUITECTURA SDN
4
Copyright
© 2009 Juniper Networks, Inc. www.juniper.net
Specialized Packet
Forwarding
Hardware
Ap
p
Ap
p
Ap
p
Specialized Packet
Forwarding
Hardware
Ap
p
Ap
p
Ap
p
Specialized Packet
Forwarding
Hardware
Ap
p
Ap
p
Ap
p
Specialized Packet
Forwarding
Hardware
Ap
p
Ap
p
Ap
p
Specialized Packet
Forwarding
Hardware
Operating
System
Operating
System
Operating
System
Operating
System
Operating
System
Ap
p
Ap
p
Ap
p
4
En la
actualidad:Cajas
cerradas
y
Protocolos
distribuidos
5
Copyright
© 2009 Juniper Networks, Inc. www.juniper.net
Specialized Packet
Forwarding
Hardware
Ap
p
Ap
p
Ap
p
Specialized Packet
Forwarding
Hardware
Ap
p
Ap
p
Ap
p
Specialized Packet
Forwarding
Hardware
Ap
p
Ap
p
Ap
p
Specialized Packet
Forwarding
Hardware
Ap
p
Ap
p
Ap
p
Specialized Packet
Forwarding
Hardware
Operating
System
Operating
System
Operating
System
Operating
System
Operating
System
Ap
p
Ap
p
Ap
p
Network Operating System
App
App
App
Un
Acercamiento
a “Software
Defined Networking
”
5
6
Copyright
© 2009 Juniper Networks, Inc. www.juniper.net
App
Simple Packet
Forwarding
Hardware
Simple Packet
Forwarding
Hardware
Simple Packet
Forwarding
Hardware
App
App
Simple Packet
Forwarding
Hardware
Simple Packet
Forwarding
Hardware
Network Operating System
1. Open interface to
hardware
3. Well
-
defined open API
2. At least one good operating system
Extensible, possibly open
-
source
El
Concepto
“Software
-
defined Network”
6
7
Copyright
© 2009 Juniper Networks, Inc. www.juniper.net
Software Defined Networking (SDN)
Los
principales
objetivos
de SDN
Abstraer
los
elementos
de la Red
desde
las
Aplicaciones
.
Control y
Gestión
centralizadad
de los
dispositivos
de red de
diferentes
fabricantes
.
Tener
una
Red
abierta
que
permita
ser
programable
y
crear
servicios
de forma
sencilla
.
SDN
es
una
arquitectura
que
divide el
plano
de
conmutación
y
permite
que
sea
programable
de
una
forma
directa
.
LAS REDES ABIERTAS ADOPTARAN
MAYORES INNOVACIONES.
8
Copyright
© 2009 Juniper Networks, Inc. www.juniper.net
Arquitectura
SDN
10
Copyright
© 2009 Juniper Networks, Inc. www.juniper.net
Introducción
a
Openflow
11
Copyright
© 2009 Juniper Networks, Inc. www.juniper.net
Aproximación
a
openflow
Plano de Control
separado
del
plano
de
conmutación
Plano de Control
Centralizado
.
OpenFlow
controller(La
plataforma
).
Lógicamente
centralizada
y
fisicamente
distribuida
.
Plano de conmutación distribuido.
OpenFlow switches (
Pueden
ser
routers,firewalls
).
No
es
necesario
tener
protocolos
de routing .
Software (kernel, hypervisor,
userspace
),
Hardware (merchant silicon, ASICs, OpenFlow optimized ASICs)
OpenFlow
es
el
protocolo
entre el
plano
de control y de
conmutación
.
12
Copyright
© 2009 Juniper Networks, Inc. www.juniper.net
Plano de Control
centralizado
y
conmutación
distribuido
.
OpenFlow controller
Plano de control
centralizado
OpenFlow protocol
OpenFlow switch
Plano de
conmutación
13
Copyright
© 2009 Juniper Networks, Inc. www.juniper.net
Arquitectura
de un
openflow
controller
Protocol Engines
OpenFlow
OF
-
Config
Basic Services
API (
not
standard)
Topology
discovery
Path
computation
Inventory
Infrastructure
Event dispatching
GUI
CLI
FlowVisor
(network partitioning)
Applications
Replication
Scheduler
Data Center
Multi Tenancy
Load
Balancer
14
Copyright
© 2009 Juniper Networks, Inc. www.juniper.net
OpenFlow
Controller
Traditional Router/Switch
OpenFlow
Router/Switch
Control Process
Forwarding
Table
Secure Channel
Simple Controller
Forwarding/Flow
Dispatch Table
Distributed control plane
EVOLUCION A OFN
15
Copyright
© 2009 Juniper Networks, Inc. www.juniper.net
Controller
PC
Hardware
Layer
Software
Layer
Flow Table
MAC
src
MAC
dst
IP
Src
IP
Dst
TCP
sport
TCP
dport
Action
OpenFlow
Client
*
*
5.6.7.8
*
*
*
port 1
port 4
port 3
port 2
port 1
1.2.3.4
5.6.7.8
Ejemplo
de
OpenFlow
15
16
Copyright
© 2009 Juniper Networks, Inc. www.juniper.net
TIPOS DE MENSAJES
Tres
tipos
de
mensajes
y
cada
mensaje
con
múltiples
subtipos
.:,
controller
-
to
-
switch, asynchronous y symmetric.
Controller
-
to
-
switch
messages are
initiated by the controller
and
used to directly manage or inspect the state of the switch.
Features (query capabilities), modify
-
state(add/delete/modify flow/group
entry), read
-
state, packet
-
out
Asynchronous
messages are
initiated by the switch
and used to
update the controller of network events and changes to the switch
state.
Such as
flow
-
removed, packet
-
in, port
-
status
Symmetric
messages are
initiated by either the switch or the
controller
and sent without solicitation.
hello, echo (request/reply), experimenter
17
Copyright
© 2009 Juniper Networks, Inc. www.juniper.net
OpenFlow
Basics
Flow Table
Entries (1.0)
Switch
Port
MAC
src
MAC
dst
Eth
type
VLAN
ID
IP
Src
IP
Dst
IP
Prot
L4
sport
L4
dport
Rule
Action
Stats
1.
Forward packet to zero or more
ports
2.
Encapsulate and forward to
controller
3.
Send to normal processing pipeline
4.
Modify Fields
5.
Any extensions you add!
+ mask what fields to match
Packet + byte counters
17
VLAN
pcp
IP
ToS
18
Copyright
© 2009 Juniper Networks, Inc. www.juniper.net
Examples (1/2)
Switching
*
Switch
Port
MAC
src
MAC
dst
Eth
type
VLAN
ID
IP
Src
IP
Dst
IP
Prot
TCP
sport
TCP
dport
Action
*
00:1f:..
*
*
*
*
*
*
*
port6
Flow Switching
port3
Switch
Port
MAC
src
MAC
dst
Eth
type
VLAN
ID
IP
Src
IP
Dst
IP
Prot
TCP
sport
TCP
dport
Action
00:20..
00:1f..
0800
vlan1
1.2.3.4
5.6.7.8
4
17264
80
port6
Firewall
*
Switch
Port
MAC
src
MAC
dst
Eth
type
VLAN
ID
IP
Src
IP
Dst
IP
Prot
TCP
sport
TCP
dport
Action
*
*
*
*
*
*
*
*
22
drop
18
19
Copyright
© 2009 Juniper Networks, Inc. www.juniper.net
Examples (2/2)
Routing
*
Switch
Port
MAC
src
MAC
dst
Eth
type
VLAN
ID
IP
Src
IP
Dst
IP
Prot
TCP
sport
TCP
dport
Action
*
*
*
*
*
5.6.7.8
*
*
*
port6
VLAN Switching
*
Switch
Port
MAC
src
MAC
dst
Eth
type
VLAN
ID
IP
Src
IP
Dst
IP
Prot
TCP
sport
TCP
dport
Action
*
*
vlan1
*
*
*
*
*
port6,
port7,
port9
00:1f..
19
20
Copyright
© 2009 Juniper Networks, Inc. www.juniper.net
Secure
Channel
Flow Table
OpenFlow
Controller
OpenFlow
Protocol
SSL/TLS
OpenFlow
v1.0 Switch
sw
hw
OpenFlow v1.0 Switch
21
Copyright
© 2009 Juniper Networks, Inc. www.juniper.net
Secure Channel
Flow
Table
OpenFlow
Controller
OpenFlow
Protocol
SSL/TLS
OpenFlow
v1.1 Switch
Flow
Table
…
Pipeline
Group
Table
OpenFlow v1.1 Switch
22
Copyright
© 2009 Juniper Networks, Inc. www.juniper.net
Secure Channel
Flow
Table
OpenFlow
Controller
OpenFlow
Protocol
SSL/TLS
OpenFlow
v1.1 Switch
Flow
Table
…
Pipeline
Group
Table
Table
OpenFlow v1.1 Switch
23
Copyright
© 2009 Juniper Networks, Inc. www.juniper.net
CASOS PRACTICOS
24
Copyright
© 2009 Juniper Networks, Inc. www.juniper.net
Google
Keynote at Open Networking Symposium 2012
Urs
Hölzle
, Senior Vice President Technical Infrastructure
Google deployed OpenFlow in I
-
Scale network
In production to connect all Google datacenters
Replaced traditional routing protocols
Google built OpenFlow switches themselves (but will buy if available)
Cost savings (e.g. 100% link utilization, easier management)
New opportunities
http://www.youtube.com/watch?v=VLHJUfgxEO4
25
Copyright
© 2009 Juniper Networks, Inc. www.juniper.net
Data center interconnect wan
Openflow
instead of routing protocols
OpenFlow
switch
no routing protocols
Logically centralized
OpenFlow
controller
26
Copyright
© 2009 Juniper Networks, Inc. www.juniper.net
Data center con
Arquitectura
de SDN
Physical
IP Fabric
Virtualized
Network
Virtualized
Compute
Virtualized
storage
Virtualized
services
Centralized
Orchestration
27
Copyright
© 2009 Juniper Networks, Inc. www.juniper.net
Multi
-
tenancy using overlay networks
Hypervisor
Virtual switch
Virtual machine
Overlay tunnel
28
Copyright
© 2009 Juniper Networks, Inc. www.juniper.net
Virtualized services
Virtual firewall service
centralized orchestration
OF compute, storage, and network
Centralized
Orchestration
Compute
Storage
Network
The IP fabric
was not touched
OpenFlow
Juniper is the
recognized
leader
of the network
programmability
movement, which is the conceptual
foundation underlying the SDN approach.
Long
before
the term “
SDN
” was coined, our disruptive
network architectures were built on the premise of using
innovative
software
to give customers unprecedented
levels of
flexibility
and
control
, with an end goal of
transforming
the
economics
and
experience
of networking.
By simultaneously simplifying and opening up the network,
Juniper
pioneered
the
core capabilities
and
concepts
behind SDNs.
Posicionamiento de SDN
Open network
Technologies FOR Innovation
Network
Orchestration
Network Devices
Junos
SDK
: Common
APIs, RE APIs, Services APIs, Remote (VE) APIs
Juniper Custom Silicon
Junos Data Plane (Packet Forwarding Engine)
Junos Control Plane
(Routing Engine)
Junos Service
Plane
(Service Engine)
Junos Virtual Plane
(Virtual Engine
Environment)
OpenFlow
(extensible)
Junos Space (Orchestration, Management, Monitoring
Plane)
Custom
Apps +
APIs
Custom Packet
Processing Apps +
APIs
Custom Apps + APIs
on any OS
Juniper and Custom Application APIs
Junos Space SDK
Any OF
controller
Automation
ALTO
ALTO
server
PCE
Common
Interfaces
OSS/BSS
Network
-
aware Apps
Juniper and Custom Space UIs /
Workflows
Topology
Client
Path
Client
...
SNMP
NETCONF
SYSLOG
HTTP
RESTful
Web Services
DMI
OpenFlow
BGP
-
TE
ALTO
PCP
Juniper Platform Element
Juniper Application Element
GRACIAS.
PREGUNTAS
Enter the password to open this PDF file:
File name:
-
File size:
-
Title:
-
Author:
-
Subject:
-
Keywords:
-
Creation Date:
-
Modification Date:
-
Creator:
-
PDF Producer:
-
PDF Version:
-
Page Count:
-
Preparing document for printing…
0%
Σχόλια 0
Συνδεθείτε για να κοινοποιήσετε σχόλιο