Cloud Enablement Architecture And NfV Services

Transcription

Cloud EnablementArchitecture and NfVServicesPrashant Jhingran pjhingra@cisco.comTechnical Marketing Engineer – Cisco Systems 2014 Cisco and/or its affiliates. All rights reserved.Cisco Public1

Agenda§ § § § § § § Key SP ChallengesDemystifying NfVNfV and StandardizationApplicability of NfVNfV Use casesCase Study - Virtualizing Service Provider Wi-Fi CoreSummary 2014 Cisco and/or its affiliates. All rights reserved.Cisco Public

Key SP challenges and Path TIONALSPNetworkCost andComplexityRapidInnovationTime toMarketSlowInnovation 2014 Cisco and/or its affiliates. All rights reserved.Cisco Public

Transformation To Carrier As A ServiceTraditionalSPNFv SDN&PhysicalTRANSFORMATIONE2E ServiceOrchestrationSelfServiceAgile SPCarrierClassNfV E2E Solution 2014 Cisco and/or its affiliates. All rights reserved.Cisco PublicCarrierAs AService

Demystifying NfV

Network Functions VirtualisationEnablers, benefits and applicationsNfV Transition of network infrastructure services to run on virtualised compute platformsUsing cloud technology to provide network functionality§ EnablersHypervisor and cloud computing technologyImproving x86 h/w performanceOptimised packet processing and codingtechniquesNetwork industry standardising on EthernetSDN based orchestration§ Value PropositionShorter innovation cycleImproved service agilityReduction in CAPEX and OPEX§ ApplicationsPotentially all network functions 2014 Cisco and/or its affiliates. All rights reserved.Cisco us VMBRASVMNMSVMCachingVMCDNVMWAASVM

The Backdrop : Ever increasing Traffic LevelsExabytes per Month120.023% CAGR 2012–2017Web/Data(24.2%, 18.9%)Traffic Share140.0100.080.060.040.020.00.0100%90%Core : Multiple 10G à 100G80%70%42%60%55%50%58%40%45%30%Metro : 10G à Multiple 10G or 100G20%10%0%2012 2013 2014 2015 2016 20172012 2013 2014 2015 2016 2017Source: Cisco VNI Global IP Traffic Forecast, 2012–2017 2014 Cisco and/or its affiliates. All rights reserved.Long-Haul (Also Traverses Metro)Cisco Public

NfV and Standardization

Network Functions Virtualization history§ Brought to prominence in October 201213 operators published a white paper, coining the term Network Functions Virtualization (NFV)Announced and the highlight of the “SDN and OpenFlow world Congress in Darmstadt§ Formal process based on an ETSI Industry Standard Group (ISG)Created January 2013Anticipated lifetime 2 years§ Role of NFV part 1Use cases, architecture and terminology, highlighting of functional gapsOutput is informational§ Role of NFV part 2Format, terms of reference etc. under discussionContinue when NFV part 1 completesLikely to be more normative in nature than NFV part 1 2014 Cisco and/or its affiliates. All rights reserved.Cisco Public

ETSI NFV OrganizationNFV Management icalSteeringCommitteeService, VNF and Infrastructure DescriptionOr-VnfmEMS 1EMS 2EMS 3Ve-VnfmVNFManager(s)ManagementandOperations Or-Vi Expert GroupsVNF 3VNF 2S/W ArchitectureVNF 1Vn-NfNFVIVirtualComputingVirtual areExecution reference pointsPerformanceand portabilityVirtual NetworkVirtualisation LayerComputingHardwareReliability andAvailabilityHardware resourcesNetworkHardware 2014 Cisco and/or its affiliates. All rights reserved.Other reference pointsVirtualisedInfrastructureManager(s)Public pointsMain NFVCiscoreferenceSecurity10 ETSI2012.Allrightsreserved

Applicability of NfV

Network solutions: Design approachesVariable CPU / FPGA / NPUHighDistributed: Lots CPUs NPUsWirelessGWsOSS/BSS, subsystemand N/W controlDistributed: CPUs Lots of NPUsAppliances (L4-L7)CPUCPUReqsCentralized: CPU or SoCWireline GWsBackbone, Metro and DC switchingBusiness CPECentralized: CPU NPUHome CPELow010Mbps100Mbps1Gbps10Gbps100Gbps 2014 Cisco and/or its affiliates. All rights reserved.1Tbps10TbpsCisco Public100Tbps 1Pbps

Virtual Network Functions (VNF) – evaluation criteria§ Physical Design Requirementsinterface count, interface size, system design requirements, specialist N/W functions§ Performance RequirementsL1-L3 packet performance, CPU processing, fabric capacity§ Network ArchitectureWill virtualization fit the network architecture principles of the network§ Elasticity of the service§ EconomicsOnboarding, CapEX and OpEx 2014 Cisco and/or its affiliates. All rights reserved.Cisco Public

Virtualized standard server based solutions – assessmentStrengths High CPU processing functionsNot extreme packet processingLow physical interface counts ( 20)Low-medium interface speedsEthernet interfaces (copper 10/1000/10Gbps)Standard hardware server buildsElastic services where h/w can be redeployedWeaknesses Very high packet processingSpecialized SP design and h/w functionalityHigh physical interface counts ( 20s)High interface speeds ( 40G)Diverse interfaces typesUnpredictable performance metrics 2014 Cisco and/or its affiliates. All rights reserved.Cisco Public

NfV Use Cases

NfV use case: Virtualized SP / 3rd party applicationsOrchestrationNGNCPEIP § Many examplesCentralised DCOSS/BSS, voice and video solutions, N/W control, video/collaboration solutions, wireless/Wi-Fi, security§ NFV transition well underway§ There are several existing products in this spaceSee earlier slide for details§ New solutions coming think and fast 2014 Cisco and/or its affiliates. All rights reserved.Cisco Public

NfV use case: Virtualized Edge GatewayPolicyServerOrchestrationInternetNGNCPEIP edgevBNGvBNGCentralised DC§ Vendors have complementing existing h/w gateway solutions with virtualized g/w solutions§ vPE, vBNG/BRAS based on Cloud Service Router§ Virtual mobile gateways (MME, S/PGW)§ CableLabs have kicked off work on vCMTS§ Virtualized gateways may require architectural changesVirtual racking and stacking 2014 Cisco and/or its affiliates. All rights reserved.Cisco Public

NfV use case : Virtual residential ain§ Quantum Virtual Broadband NodeL2 domain between home and data centerVirtualized CPE and home services in the cloud 2014 Cisco and/or its affiliates. All rights reserved.Cisco Public

NfV use case: Virtual Service InfrastructureCloud Orchestration and ManagementPhysical RouterSignalStrengthADGJ2WMP1BE34TK5XN6HQC7U8 F9I L0YORVS Z*#AccessGGSN/PGWWebProxyNATVOFWVOFWDPIFWA- ‐SBC§ Simple reconfiguration of service chains via SDN and virtualization toolsImproved scalingElastic services 2014 Cisco and/or its affiliates. All rights reserved.Cisco Public

Data Center EvolutionNFV DCLegacy DCPublicInternetL3VPNWAN Edge(NGN PE)AggregationASAVPNServiceCoreAS109*L3 VPN Edge(NGN-PE)*AS65522VRFFront-end VRFvIPSec GWL3 VPN Edge(DC-PE)*ASAVPNFirewallOutsideVLANShared/public VLANBack-end egation*VRFvLB**vLBvLBPublic Zone(DMZ)Protected FEZone 1Front-end ZonesTennant L3Edge (VRF-CE)*vFWZone 2SubZonSeuWbZoneYSubZonSeuXbZoneZZone 3Back-end ZoneseBGP static redist.ServerVLANSComputeInterneteMBGP***VRFL3 VPNVirtualized Compute and DC overlayAgility (Create/Delete), Scale, Flexible Topologies, BYOD, Elasticity,Utility Based Pricing 2014 Cisco and/or its affiliates. All rights reserved.Cisco Public

Case Study:Virtualizing Service Provider Wi-Fi Core

Wi-Fi E2E Solution Architecture802.11 a/b/g/n§ § § § § WLAN§ ControllerL2 / L3§ § § § NATFirewallDPIVideo optimizationInternetBackhaulCAPWAPWLAN AccessSession managementL4 RedirectionTransparent Auto LogonPolicy enforcementAccounting start / stopLegal etworkUCS§ Subscribermanagement§ Subscriberauthentication§ Service authorization§ Web portals§ Policy definition§ Roaming 2014 Cisco and/or its affiliates. All rights reserved.§ § § § § Address assignmentAccounting / BillingWhitelistingLocation awarenessNetwork AnalyticsCisco Public22

What to virtualize?802.11 a/b/g/n§ § § § § WLAN§ ControllerL2 / L3Session managementL4 RedirectionTransparent Auto LogonPolicy enforcementAccounting start / stopLegal InterceptWAGL3§ § § § NATFirewallDPIVideo rtalDNSPCRFMSEWLAN AccessCoreNetworkUCS§ Subscribermanagement§ Subscriberauthentication§ Service authorization§ Web portals§ Policy definition§ Roaming 2014 Cisco and/or its affiliates. All rights reserved.§ § § § § § § § § § AAADNS r managementAddress assignmentAccounting / BillingWhitelistingLocation awarenessNetwork AnalyticsCisco Public23

Virtualized Wi-Fi instance§ § § § § § WLANControllerSession managementL4 RedirectionTransparent Auto LogonPolicy enforcementAccounting start / stopLegal InterceptL2 / L3BackhaulWAG§ NAT§ FirewallL3InternetCoreNetworkCAPWAPDHCPWLAN Access§ § § § § MgmtNATPortalMSEUCSDNS§ § § § § AAADNS r managementWeb portals§ Location awarenessPolicy definition§ Network AnalyticsRoaming§ BBX – Ad insertionAddress assignmentWhitelisting 2014 Cisco and/or its affiliates. All rights reserved.Cisco Public24

Virtualized Wi-Fi Service InstancesService Instance - 1WLAN Access802.11 a/b/g/nWLANControllerBackhaulCoreNetworkL2 / L3NATL3WAGCAPWAPDHCPDNSMSEPortalUCS / Blade ServerInternetMgmtService Instance - 2WLAN Access802.11 a/b/g/nWLANControllerBackhaulCoreNetworkL2 / L3NATAAAL3WAGCAPWAPDHCPPortal 2014 Cisco and/or its affiliates. All rights reserved.MSECisco Public25

Differences between service instances IP addresses for all components on the SP managementnetwork Public IP addresses for virtual WLC’s NAT pool for each service instance VLAN’s must be unique per service instance within a clusterEverything else remains the same across ALL service instances 2014 Cisco and/or its affiliates. All rights reserved.Cisco Public26

VL-1094VL-1093Virtual Wi-Fi (inside of a service instance)WebPortalDNSvWLC-1vWAGBackhaulAAAV4 & V6VL-61vWLC-2MgmtvNATSP NetworkVL-62ISC DHCP(V4 & V6) 2014 Cisco and/or its affiliates. All rights reserved.DNSV4 & V6MSECisco Public27

Summary§ The backdrop to NfV and all network evolution is increasing amountof network traffic§ Both vendors & SP’s are experimenting with NfV§ Caution: NfV doesn’t mean EoL of your production hardware§ NfV: some functions are obvious / large spectrum are dependent onSP and their architecture§ A hybrid network environment consisting of blend of custom NFs andVirtualized NFs (VNFs) 2014 Cisco and/or its affiliates. All rights reserved.Cisco Public

Thank you.

Layer 2 Connectivity with Virtual SwitchvWLCvWLCvWAG MSEvWAG MSEDHCPvNATDHCPvNATPortalPortalVirtual MachinesVirtualVirtualSwitch Switch ControlervSphereVirtualSwitchvSphereESXi host 2ESXi host 1L2 TrunksPhysical Switches 2014 Cisco and/or its affiliates. All rights reserved.Cisco Public30

Service Instances across a clusterESXi Host - 1ServiceInstance 1vWLCServiceInstance 2PortalServiceInstance 3DHCPDNSMSEPortalVirtualSwitchESXi Host - 2ESXi Host - ESXi Host - MWare Cluster 2014 Cisco and/or its affiliates. All rights reserved.Cisco Public31

Fault tolerance for service instancesESXi Host - 1ESXi Host - 2ESXi Host - 3ESXi Host - 4ServiceInstance tualSwitchVirtualSwitchVMWare Cluster Only VM’s with a single vCPU can be made fault tolerant Virtual hard disk should be set up as Thick eager zeroed Only 4 Fault Tolerant VM’s per ESXi host 2014 Cisco and/or its affiliates. All rights reserved.Cisco Public32

Wi-Fi service instancesLocation -1Service Instance - 1MgmtDNSLocation -2BackhaulService Instance - 2SP NetworkService Instance - 3AAALocation -3ESXiHost1ESXiHost2ESXiHost3ESXiHost4VMWare Cluster Consistent subscriber experience Centralized asset management Centralized asset management Fault isolation / troubleshooting Customized portal experience Rapid “cookie cutter” deployment Shared IP address space Opportunity to customize Separate administration domain Self service management portals Custom billing / reporting License based solution 2014 Cisco and/or its affiliates. All rights reserved.Cisco Public33

Web-Authentication with DNS ion (1)Association (2)DHCP Discover (3)DHCP Relay (4)DHCP Offer (5)DHCP Request / ACK (6)DNS Query (7)UnauthenticatedSessionDNS REDIRECT (8)DNS Response (9) – Portal IP addressHTTP Request (10)HTTP Response (11) – Web Login pageUser Login (12)RADIUS Auth (14)RADIUS CoA (13)CoA Ack (15)User profileCached 2014 Cisco and/or its affiliates. All rights reserved.Authenticated SessionDNS redirectionremovedCisco Public34

Summary§ The backdrop to NfV and all network evolution is increasing amountof network traffic§ Both vendors & SP’s are experimenting with NfV§ Caution: NfV doesn’t mean EoL of your production hardware§ NfV: some functions are obvious / large spectrum are dependent onSP and their architecture§ A hybrid network environment consisting of blend of custom NFs andVirtualized NFs (VNFs) 2014 Cisco and/or its affiliates. All rights reserved.Cisco Public

References§ ETSI - gies/nfv/nfv-poc§ SDN Central virtualization-nfv/§ Cisco Live - http://www.ciscolive.com/ 2014 Cisco and/or its affiliates. All rights reserved.Cisco Public36

Content Contributors§ Piyush Patel (piyupate@cisco.com)§ Ravindra Shankar (rshankar@cisco.com)§ Simon Spraggs (sspraggs@cisco.com) 2014 Cisco and/or its affiliates. All rights reserved.Cisco Public37

Thank you.

Cisco Public ETSI NFV Organization! "ETSI2012."All"rights"reserved"10 Computing Hardware Storage Network Hardware resources Virtualisation Layer Virtualised Infrastructure Manager(s) V