SlideShare une entreprise Scribd logo
1  sur  17
Télécharger pour lire hors ligne
© 2014 VMware Inc. All rights reserved.
Supporting Virtualized Telco Functions
with OpenStack
Bruce Davie
CTO, Networking
Agenda
• NFV Architecture Overview
• Role of Network Virtualization in NFV
• Service Chaining Example
• OpenStack Neutron and Service Chaining
• Open Virtual Networking (OVN)
• Conclusion
2
NFV in a nutshell
Source: European Telecommunications Standards Institute (ETSI)
Network Functions Virtualization
Approach
3
NFV Benefits for Operators
• Decouple services from hardware
– E.g. 3G services and 4G services use same physical infrastructure
• Elastic capacity
– With uniform pool of resources, apply them to services that need them
– Long and short-term demand changes
• Deploy new services more rapidly
– SW install/upgrade vs. physical install & cable
• Highly customizable
– E.g. deploy unique service chains for each customer or class of customer
4
NFV Architecture
5
Operations and Business Support Systems (OSS / BSS)
Service, VNF & Infrastructure Description
Sample textCompute Hardware Storage Hardware Network Hardware
Virtual Compute Virtual Storage Virtual Network
Virtualization Layer
EMS1
VNF1
EMS2
VNF2 VNF3
Orchestrator
Virtual
Infrastructure
Manager
EMS3
VNF
Managers
NFVI
VNF
NFV M&O
Nova NeutronCinder/Swift
Role of Network Virtualization
• Note: Network Virtualization != NFV
• Agility of networking required for NFV, just like in public cloud
• Multi-tenancy and isolation
• Decouple network services from physical infrastructure
• Dynamic service chaining
6
Reference OpenStack Neutron Architecture
Authentication & Authorization via OpenStack keystone
Core Neutron API API Extensions
Horizon Web UI Neutron CLI Heat - Orchestration Other tools
API Tools
Open vSwitch
Nova Compute
Open vSwitch
Nova Compute
Open vSwitch
Nova Compute
Neutron Pluggable Backend layer
Open vSwitch Plugin
OpenStack Neutron API Server
• Integrated AuthN/AuthZ with OpenStack
Keystone
• Pluggable backend allows various
network virtualization solutions
• Advanced feature API extensions.
• VMware NSX plugin available
Top NFV Use Cases
• Mobile Operators:
– Evolved Packet Core (EPC) – the complex control & data plane for data services in 4G/LTE networks
• Wireline Operators:
– “virtual CPE” or “NFVaaS” – providing routing, firewall, etc. for enterprise customers on SP cloud
infrastructure
8
4G LTE
• LTE Network Elements
X2
cell
LTE-Uu
LTE-UE
Evolved Node B
(eNB)
S6a
HSS
S1-MME
MME: Mobility Management Entity
PCRF: Policy & Charging Rule Function
S10 S7
Rx+
SGi
S11
S1-U S5/S8
PDN GatewayServing Gateway
SAE Gateway
PDN
PCRF
MME
Evolved UTRAN
(E-UTRAN)
Evolved Packet Core
(EPC)
9
vCPE: VNF as a Service
• A collection of network services hosted by a
service provider
• Based on Virtual Network & Security
Functions (VNFs) from NSX & Partners
• Example Services
– Routing
– NAT
– IPsec & SSL VPN
– Firewall Services (Native/3rd party)
– IDS/IPS
• Fully virtualized networking and security on
x86 compute, managed by SP
• Network virtualization roles:
– Native network services (e.g. DFW)
– Speed/Agility
– Multitenant service chaining at scale
– Topology & location independence
10
• What is vCPE?
vCPE
VNF Service Chaining
Other
VNF
Firewall
VPN
IPsec/SSL
Service Chaining
• Creating a graph of services (e.g. load balance, firewall, WAN optimize, etc.)
• Network virtualization provides a natural way to do this in automated manner
• Often need to pass metadata along the chain
– e.g. make the results of a classification step available to a later node
– Ongoing argument about how to pass this metadata – VXLAN not really adequate
• Load balancing, HA & scale out considerations
WAN OptFirewall
VPN
IPsec/SSL
11
Useful reference: draft-ietf-sfc-use-case-mobility-03.txt
VNF1
Classifier
VNF2
VNF3
VNF1a VNF2a
Service Chaining Example: E-W Firewall & Routing
Logical View
Hypervisor1Hypervisor1
vSwitch
Hypervisor1Hypervisor2
vSwitch
3rd Party FW 3rd Party FW
Physical View
Web App
Web App
12
Neutron scorecard for service chaining
+ Builds general topologies at L2 and L3
+ Can insert some services
- No general purpose metadata
- Not all insertion models supported (e.g. bump in wire, selective insertion)
13
14
OVN
(Open Virtual Network)
What is OVN?
• Virtual networking for OVS
• Provides L2/L3 virtual networking
– Logical switches and routers
– Security groups
– L2/L3/L4 ACLs
– Multiple tunnel overlays (Geneve, STT, and VXLAN)
– Physical and DPDK-based logical-physical gateways
• Work on same platforms as OVS
– Linux (KVM and Xen)
– Containers
– DPDK
– Hyper-V
• Integration with OpenStack (and other CMPs eventually)
OVN Development
• Developed by the same team that started and maintains Open vSwitch
• Apache license
• Vendor-neutral
• Architecture and implementation have all occurred on public mailing lists:
• Core OVN is being developed on ovs-dev mailing list:
– http://openvswitch.org/pipermail/dev/
• Neutron plugin for OVN is being developed here:
– http://git.openstack.org/stackforge/networking-ovn.git
• Watch Tuesday’s presentation:
OVN: Native Virtual Networking for Open vSwitch
• Network Heresy Blog Post:
http://networkheresy.com/2015/01/13/ovn-bringing-native-virtual-networking-to-ovs/
16
Summary
• NFV has large industry thrust behind it, many stakeholders hoping it will succeed
• As operators seek to differentiate themselves, need agility to roll new services quickly
• Cost is a driver, but far from the only justification
• OpenStack quite a good fit, but not fully fleshed out
– Some room for enhancements to Neutron
• Need to avoid siloed solutions
• Need to remember the “other” parts besides compute
17

Contenu connexe

Tendances

Building Business on Top of Open Source
Building Business on Top of Open SourceBuilding Business on Top of Open Source
Building Business on Top of Open SourceOpen Networking Summit
 
OpenStack Telco Cloud Challenges, David Fick, Oracle
OpenStack Telco Cloud Challenges, David Fick, OracleOpenStack Telco Cloud Challenges, David Fick, Oracle
OpenStack Telco Cloud Challenges, David Fick, OracleSriram Subramanian
 
Delivering Composable NFV Services for Business, Residential and Mobile Edge
Delivering Composable NFV Services for Business, Residential and Mobile EdgeDelivering Composable NFV Services for Business, Residential and Mobile Edge
Delivering Composable NFV Services for Business, Residential and Mobile EdgePLUMgrid
 
OpenStack: Networking Roadmap, Collaboration and Contribution
OpenStack: Networking Roadmap, Collaboration and ContributionOpenStack: Networking Roadmap, Collaboration and Contribution
OpenStack: Networking Roadmap, Collaboration and ContributionOpen Networking Summit
 
NFV Use Case_Virtual Network Function As Service
NFV Use Case_Virtual Network Function As ServiceNFV Use Case_Virtual Network Function As Service
NFV Use Case_Virtual Network Function As ServiceAbdul Ravoof
 
Revolutionizing IT and Telecom Industry with OpenStack, SDN and NFV
Revolutionizing IT and Telecom Industry with OpenStack, SDN and NFVRevolutionizing IT and Telecom Industry with OpenStack, SDN and NFV
Revolutionizing IT and Telecom Industry with OpenStack, SDN and NFVPLUMgrid
 
You Can Build Your OpenStack and Consume it Too
You Can Build Your OpenStack and Consume it TooYou Can Build Your OpenStack and Consume it Too
You Can Build Your OpenStack and Consume it TooPLUMgrid
 
ONAP - Open Network Automation Platform
ONAP - Open Network Automation PlatformONAP - Open Network Automation Platform
ONAP - Open Network Automation PlatformAtul Pandey
 
Service Mesh on Kubernetes with Istio
Service Mesh on Kubernetes with IstioService Mesh on Kubernetes with Istio
Service Mesh on Kubernetes with IstioMichelle Holley
 
08 (IDNOG02) SP Transition to NG Infrastructure based on NFV Service Offering...
08 (IDNOG02) SP Transition to NG Infrastructure based on NFV Service Offering...08 (IDNOG02) SP Transition to NG Infrastructure based on NFV Service Offering...
08 (IDNOG02) SP Transition to NG Infrastructure based on NFV Service Offering...Indonesia Network Operators Group
 
See Your OpenStack Network Like Never Before with Real-time Visibility and Mo...
See Your OpenStack Network Like Never Before with Real-time Visibility and Mo...See Your OpenStack Network Like Never Before with Real-time Visibility and Mo...
See Your OpenStack Network Like Never Before with Real-time Visibility and Mo...PLUMgrid
 
Open and Disaggregated Transport SDN - from PoC to Field Trial
Open and Disaggregated Transport SDN - from PoC to Field TrialOpen and Disaggregated Transport SDN - from PoC to Field Trial
Open and Disaggregated Transport SDN - from PoC to Field TrialOpen Networking Summit
 
A Centrally Orchestrated SD-WAN Building a Green Ecosystem
A Centrally Orchestrated SD-WAN Building a Green EcosystemA Centrally Orchestrated SD-WAN Building a Green Ecosystem
A Centrally Orchestrated SD-WAN Building a Green EcosystemOpen Networking Summit
 
Cisco - OpenStack Summit 2016/Red Hat NFV Mini Summit
Cisco - OpenStack Summit 2016/Red Hat NFV Mini Summit Cisco - OpenStack Summit 2016/Red Hat NFV Mini Summit
Cisco - OpenStack Summit 2016/Red Hat NFV Mini Summit kimw001
 
Considerations for Deploying Virtual Network Functions and Services
Considerations for Deploying Virtual Network Functions and ServicesConsiderations for Deploying Virtual Network Functions and Services
Considerations for Deploying Virtual Network Functions and ServicesOpen Networking Summit
 
Meetup 1st _ SDN/NFV Use case in Operators' Networks: vCPE
Meetup 1st _ SDN/NFV Use case in Operators' Networks: vCPEMeetup 1st _ SDN/NFV Use case in Operators' Networks: vCPE
Meetup 1st _ SDN/NFV Use case in Operators' Networks: vCPEOPNFV_Vietnam
 
Fostering the Evolution of Network Based Cloud Service Providers.
Fostering the Evolution of Network Based Cloud Service Providers.Fostering the Evolution of Network Based Cloud Service Providers.
Fostering the Evolution of Network Based Cloud Service Providers.Cisco Service Provider
 
Introducing Ensemble Simulator – ADVA’s virtual networking environment
Introducing Ensemble Simulator – ADVA’s virtual networking environmentIntroducing Ensemble Simulator – ADVA’s virtual networking environment
Introducing Ensemble Simulator – ADVA’s virtual networking environmentADVA
 

Tendances (20)

Building Business on Top of Open Source
Building Business on Top of Open SourceBuilding Business on Top of Open Source
Building Business on Top of Open Source
 
OpenStack Telco Cloud Challenges, David Fick, Oracle
OpenStack Telco Cloud Challenges, David Fick, OracleOpenStack Telco Cloud Challenges, David Fick, Oracle
OpenStack Telco Cloud Challenges, David Fick, Oracle
 
Delivering Composable NFV Services for Business, Residential and Mobile Edge
Delivering Composable NFV Services for Business, Residential and Mobile EdgeDelivering Composable NFV Services for Business, Residential and Mobile Edge
Delivering Composable NFV Services for Business, Residential and Mobile Edge
 
OpenStack: Networking Roadmap, Collaboration and Contribution
OpenStack: Networking Roadmap, Collaboration and ContributionOpenStack: Networking Roadmap, Collaboration and Contribution
OpenStack: Networking Roadmap, Collaboration and Contribution
 
NFV Use Case_Virtual Network Function As Service
NFV Use Case_Virtual Network Function As ServiceNFV Use Case_Virtual Network Function As Service
NFV Use Case_Virtual Network Function As Service
 
Revolutionizing IT and Telecom Industry with OpenStack, SDN and NFV
Revolutionizing IT and Telecom Industry with OpenStack, SDN and NFVRevolutionizing IT and Telecom Industry with OpenStack, SDN and NFV
Revolutionizing IT and Telecom Industry with OpenStack, SDN and NFV
 
You Can Build Your OpenStack and Consume it Too
You Can Build Your OpenStack and Consume it TooYou Can Build Your OpenStack and Consume it Too
You Can Build Your OpenStack and Consume it Too
 
04 (IDNOG02) Cloud Infrastructure by Dondy Bappedyanto
04 (IDNOG02) Cloud Infrastructure by Dondy Bappedyanto04 (IDNOG02) Cloud Infrastructure by Dondy Bappedyanto
04 (IDNOG02) Cloud Infrastructure by Dondy Bappedyanto
 
Microservice Powered Orchestration
Microservice Powered OrchestrationMicroservice Powered Orchestration
Microservice Powered Orchestration
 
ONAP - Open Network Automation Platform
ONAP - Open Network Automation PlatformONAP - Open Network Automation Platform
ONAP - Open Network Automation Platform
 
Service Mesh on Kubernetes with Istio
Service Mesh on Kubernetes with IstioService Mesh on Kubernetes with Istio
Service Mesh on Kubernetes with Istio
 
08 (IDNOG02) SP Transition to NG Infrastructure based on NFV Service Offering...
08 (IDNOG02) SP Transition to NG Infrastructure based on NFV Service Offering...08 (IDNOG02) SP Transition to NG Infrastructure based on NFV Service Offering...
08 (IDNOG02) SP Transition to NG Infrastructure based on NFV Service Offering...
 
See Your OpenStack Network Like Never Before with Real-time Visibility and Mo...
See Your OpenStack Network Like Never Before with Real-time Visibility and Mo...See Your OpenStack Network Like Never Before with Real-time Visibility and Mo...
See Your OpenStack Network Like Never Before with Real-time Visibility and Mo...
 
Open and Disaggregated Transport SDN - from PoC to Field Trial
Open and Disaggregated Transport SDN - from PoC to Field TrialOpen and Disaggregated Transport SDN - from PoC to Field Trial
Open and Disaggregated Transport SDN - from PoC to Field Trial
 
A Centrally Orchestrated SD-WAN Building a Green Ecosystem
A Centrally Orchestrated SD-WAN Building a Green EcosystemA Centrally Orchestrated SD-WAN Building a Green Ecosystem
A Centrally Orchestrated SD-WAN Building a Green Ecosystem
 
Cisco - OpenStack Summit 2016/Red Hat NFV Mini Summit
Cisco - OpenStack Summit 2016/Red Hat NFV Mini Summit Cisco - OpenStack Summit 2016/Red Hat NFV Mini Summit
Cisco - OpenStack Summit 2016/Red Hat NFV Mini Summit
 
Considerations for Deploying Virtual Network Functions and Services
Considerations for Deploying Virtual Network Functions and ServicesConsiderations for Deploying Virtual Network Functions and Services
Considerations for Deploying Virtual Network Functions and Services
 
Meetup 1st _ SDN/NFV Use case in Operators' Networks: vCPE
Meetup 1st _ SDN/NFV Use case in Operators' Networks: vCPEMeetup 1st _ SDN/NFV Use case in Operators' Networks: vCPE
Meetup 1st _ SDN/NFV Use case in Operators' Networks: vCPE
 
Fostering the Evolution of Network Based Cloud Service Providers.
Fostering the Evolution of Network Based Cloud Service Providers.Fostering the Evolution of Network Based Cloud Service Providers.
Fostering the Evolution of Network Based Cloud Service Providers.
 
Introducing Ensemble Simulator – ADVA’s virtual networking environment
Introducing Ensemble Simulator – ADVA’s virtual networking environmentIntroducing Ensemble Simulator – ADVA’s virtual networking environment
Introducing Ensemble Simulator – ADVA’s virtual networking environment
 

Similaire à Supporting Virtualized Telco Applications with OpenStack

NFV Linaro Connect Keynote
NFV Linaro Connect KeynoteNFV Linaro Connect Keynote
NFV Linaro Connect KeynoteLinaro
 
Tech Talk by John Casey (CTO) CPLANE_NETWORKS : High Performance OpenStack Ne...
Tech Talk by John Casey (CTO) CPLANE_NETWORKS : High Performance OpenStack Ne...Tech Talk by John Casey (CTO) CPLANE_NETWORKS : High Performance OpenStack Ne...
Tech Talk by John Casey (CTO) CPLANE_NETWORKS : High Performance OpenStack Ne...nvirters
 
Open stack networking_101_update_2014-os-meetups
Open stack networking_101_update_2014-os-meetupsOpen stack networking_101_update_2014-os-meetups
Open stack networking_101_update_2014-os-meetupsyfauser
 
Summit 16: ARM Mini-Summit - NXP QorIQ NFV Solutions - NXP Semiconductors
Summit 16: ARM Mini-Summit - NXP QorIQ NFV Solutions - NXP SemiconductorsSummit 16: ARM Mini-Summit - NXP QorIQ NFV Solutions - NXP Semiconductors
Summit 16: ARM Mini-Summit - NXP QorIQ NFV Solutions - NXP SemiconductorsOPNFV
 
Network Function Virtualization (NFV) BoF
Network Function Virtualization (NFV) BoFNetwork Function Virtualization (NFV) BoF
Network Function Virtualization (NFV) BoFAPNIC
 
OpenStack and OpenDaylight Workshop: ONUG Spring 2014
OpenStack and OpenDaylight Workshop: ONUG Spring 2014OpenStack and OpenDaylight Workshop: ONUG Spring 2014
OpenStack and OpenDaylight Workshop: ONUG Spring 2014mestery
 
Intel's Out of the Box Network Developers Ireland Meetup on March 29 2017 - ...
Intel's Out of the Box Network Developers Ireland Meetup on March 29 2017  - ...Intel's Out of the Box Network Developers Ireland Meetup on March 29 2017  - ...
Intel's Out of the Box Network Developers Ireland Meetup on March 29 2017 - ...Haidee McMahon
 
neutron_icehouse_update
neutron_icehouse_updateneutron_icehouse_update
neutron_icehouse_updateAkihiro Motoki
 
Optimising nfv service chains on open stack using docker
Optimising nfv service chains on open stack using dockerOptimising nfv service chains on open stack using docker
Optimising nfv service chains on open stack using dockerAnanth Padmanabhan
 
Optimising nfv service chains on open stack using docker
Optimising nfv service chains on open stack using dockerOptimising nfv service chains on open stack using docker
Optimising nfv service chains on open stack using dockerSatya Sanjibani Routray
 
PSOCLD-1006 Cisco Cloud Architectures on OpenStack - Cisco Live! US 2015 San ...
PSOCLD-1006 Cisco Cloud Architectures on OpenStack - Cisco Live! US 2015 San ...PSOCLD-1006 Cisco Cloud Architectures on OpenStack - Cisco Live! US 2015 San ...
PSOCLD-1006 Cisco Cloud Architectures on OpenStack - Cisco Live! US 2015 San ...Rohit Agarwalla
 
[OpenStack Day in Korea 2015] Track 2-3 - 오픈스택 클라우드에 최적화된 네트워크 가상화 '누아지(Nuage)'
[OpenStack Day in Korea 2015] Track 2-3 - 오픈스택 클라우드에 최적화된 네트워크 가상화 '누아지(Nuage)'[OpenStack Day in Korea 2015] Track 2-3 - 오픈스택 클라우드에 최적화된 네트워크 가상화 '누아지(Nuage)'
[OpenStack Day in Korea 2015] Track 2-3 - 오픈스택 클라우드에 최적화된 네트워크 가상화 '누아지(Nuage)'OpenStack Korea Community
 
Navigating OpenStack Networking
Navigating OpenStack NetworkingNavigating OpenStack Networking
Navigating OpenStack NetworkingPLUMgrid
 
VMworld 2014: Advanced Topics & Future Directions in Network Virtualization w...
VMworld 2014: Advanced Topics & Future Directions in Network Virtualization w...VMworld 2014: Advanced Topics & Future Directions in Network Virtualization w...
VMworld 2014: Advanced Topics & Future Directions in Network Virtualization w...VMworld
 
Optimising nfv service chains on open stack using docker
Optimising nfv service chains on open stack using dockerOptimising nfv service chains on open stack using docker
Optimising nfv service chains on open stack using dockerRahul Krishna Upadhyaya
 
VMworld 2013: Advanced VMware NSX Architecture
VMworld 2013: Advanced VMware NSX Architecture VMworld 2013: Advanced VMware NSX Architecture
VMworld 2013: Advanced VMware NSX Architecture VMworld
 
Demystifying OpenStack for NFV
Demystifying OpenStack for NFVDemystifying OpenStack for NFV
Demystifying OpenStack for NFVTrinath Somanchi
 
OpenStack Networking and Automation
OpenStack Networking and AutomationOpenStack Networking and Automation
OpenStack Networking and AutomationAdam Johnson
 

Similaire à Supporting Virtualized Telco Applications with OpenStack (20)

NFV Linaro Connect Keynote
NFV Linaro Connect KeynoteNFV Linaro Connect Keynote
NFV Linaro Connect Keynote
 
Tech Talk by John Casey (CTO) CPLANE_NETWORKS : High Performance OpenStack Ne...
Tech Talk by John Casey (CTO) CPLANE_NETWORKS : High Performance OpenStack Ne...Tech Talk by John Casey (CTO) CPLANE_NETWORKS : High Performance OpenStack Ne...
Tech Talk by John Casey (CTO) CPLANE_NETWORKS : High Performance OpenStack Ne...
 
Open stack networking_101_update_2014-os-meetups
Open stack networking_101_update_2014-os-meetupsOpen stack networking_101_update_2014-os-meetups
Open stack networking_101_update_2014-os-meetups
 
Summit 16: ARM Mini-Summit - NXP QorIQ NFV Solutions - NXP Semiconductors
Summit 16: ARM Mini-Summit - NXP QorIQ NFV Solutions - NXP SemiconductorsSummit 16: ARM Mini-Summit - NXP QorIQ NFV Solutions - NXP Semiconductors
Summit 16: ARM Mini-Summit - NXP QorIQ NFV Solutions - NXP Semiconductors
 
Network Function Virtualization (NFV) BoF
Network Function Virtualization (NFV) BoFNetwork Function Virtualization (NFV) BoF
Network Function Virtualization (NFV) BoF
 
OpenStack and OpenDaylight Workshop: ONUG Spring 2014
OpenStack and OpenDaylight Workshop: ONUG Spring 2014OpenStack and OpenDaylight Workshop: ONUG Spring 2014
OpenStack and OpenDaylight Workshop: ONUG Spring 2014
 
Intel's Out of the Box Network Developers Ireland Meetup on March 29 2017 - ...
Intel's Out of the Box Network Developers Ireland Meetup on March 29 2017  - ...Intel's Out of the Box Network Developers Ireland Meetup on March 29 2017  - ...
Intel's Out of the Box Network Developers Ireland Meetup on March 29 2017 - ...
 
neutron_icehouse_update
neutron_icehouse_updateneutron_icehouse_update
neutron_icehouse_update
 
Optimising nfv service chains on open stack using docker
Optimising nfv service chains on open stack using dockerOptimising nfv service chains on open stack using docker
Optimising nfv service chains on open stack using docker
 
Optimising nfv service chains on open stack using docker
Optimising nfv service chains on open stack using dockerOptimising nfv service chains on open stack using docker
Optimising nfv service chains on open stack using docker
 
PSOCLD-1006 Cisco Cloud Architectures on OpenStack - Cisco Live! US 2015 San ...
PSOCLD-1006 Cisco Cloud Architectures on OpenStack - Cisco Live! US 2015 San ...PSOCLD-1006 Cisco Cloud Architectures on OpenStack - Cisco Live! US 2015 San ...
PSOCLD-1006 Cisco Cloud Architectures on OpenStack - Cisco Live! US 2015 San ...
 
[OpenStack Day in Korea 2015] Track 2-3 - 오픈스택 클라우드에 최적화된 네트워크 가상화 '누아지(Nuage)'
[OpenStack Day in Korea 2015] Track 2-3 - 오픈스택 클라우드에 최적화된 네트워크 가상화 '누아지(Nuage)'[OpenStack Day in Korea 2015] Track 2-3 - 오픈스택 클라우드에 최적화된 네트워크 가상화 '누아지(Nuage)'
[OpenStack Day in Korea 2015] Track 2-3 - 오픈스택 클라우드에 최적화된 네트워크 가상화 '누아지(Nuage)'
 
Navigating OpenStack Networking
Navigating OpenStack NetworkingNavigating OpenStack Networking
Navigating OpenStack Networking
 
VMworld 2014: Advanced Topics & Future Directions in Network Virtualization w...
VMworld 2014: Advanced Topics & Future Directions in Network Virtualization w...VMworld 2014: Advanced Topics & Future Directions in Network Virtualization w...
VMworld 2014: Advanced Topics & Future Directions in Network Virtualization w...
 
Optimising nfv service chains on open stack using docker
Optimising nfv service chains on open stack using dockerOptimising nfv service chains on open stack using docker
Optimising nfv service chains on open stack using docker
 
NFV Open Source projects
NFV Open Source projectsNFV Open Source projects
NFV Open Source projects
 
VMworld 2013: Advanced VMware NSX Architecture
VMworld 2013: Advanced VMware NSX Architecture VMworld 2013: Advanced VMware NSX Architecture
VMworld 2013: Advanced VMware NSX Architecture
 
Demystifying OpenStack for NFV
Demystifying OpenStack for NFVDemystifying OpenStack for NFV
Demystifying OpenStack for NFV
 
NFV and OpenStack
NFV and OpenStackNFV and OpenStack
NFV and OpenStack
 
OpenStack Networking and Automation
OpenStack Networking and AutomationOpenStack Networking and Automation
OpenStack Networking and Automation
 

Dernier

IESVE Software for Florida Code Compliance Using ASHRAE 90.1-2019
IESVE Software for Florida Code Compliance Using ASHRAE 90.1-2019IESVE Software for Florida Code Compliance Using ASHRAE 90.1-2019
IESVE Software for Florida Code Compliance Using ASHRAE 90.1-2019IES VE
 
activity_diagram_combine_v4_20190827.pdfactivity_diagram_combine_v4_20190827.pdf
activity_diagram_combine_v4_20190827.pdfactivity_diagram_combine_v4_20190827.pdfactivity_diagram_combine_v4_20190827.pdfactivity_diagram_combine_v4_20190827.pdf
activity_diagram_combine_v4_20190827.pdfactivity_diagram_combine_v4_20190827.pdfJamie (Taka) Wang
 
Secure your environment with UiPath and CyberArk technologies - Session 1
Secure your environment with UiPath and CyberArk technologies - Session 1Secure your environment with UiPath and CyberArk technologies - Session 1
Secure your environment with UiPath and CyberArk technologies - Session 1DianaGray10
 
Computer 10: Lesson 10 - Online Crimes and Hazards
Computer 10: Lesson 10 - Online Crimes and HazardsComputer 10: Lesson 10 - Online Crimes and Hazards
Computer 10: Lesson 10 - Online Crimes and HazardsSeth Reyes
 
Using IESVE for Loads, Sizing and Heat Pump Modeling to Achieve Decarbonization
Using IESVE for Loads, Sizing and Heat Pump Modeling to Achieve DecarbonizationUsing IESVE for Loads, Sizing and Heat Pump Modeling to Achieve Decarbonization
Using IESVE for Loads, Sizing and Heat Pump Modeling to Achieve DecarbonizationIES VE
 
Basic Building Blocks of Internet of Things.
Basic Building Blocks of Internet of Things.Basic Building Blocks of Internet of Things.
Basic Building Blocks of Internet of Things.YounusS2
 
Machine Learning Model Validation (Aijun Zhang 2024).pdf
Machine Learning Model Validation (Aijun Zhang 2024).pdfMachine Learning Model Validation (Aijun Zhang 2024).pdf
Machine Learning Model Validation (Aijun Zhang 2024).pdfAijun Zhang
 
UiPath Studio Web workshop series - Day 7
UiPath Studio Web workshop series - Day 7UiPath Studio Web workshop series - Day 7
UiPath Studio Web workshop series - Day 7DianaGray10
 
Bird eye's view on Camunda open source ecosystem
Bird eye's view on Camunda open source ecosystemBird eye's view on Camunda open source ecosystem
Bird eye's view on Camunda open source ecosystemAsko Soukka
 
Salesforce Miami User Group Event - 1st Quarter 2024
Salesforce Miami User Group Event - 1st Quarter 2024Salesforce Miami User Group Event - 1st Quarter 2024
Salesforce Miami User Group Event - 1st Quarter 2024SkyPlanner
 
Anypoint Code Builder , Google Pub sub connector and MuleSoft RPA
Anypoint Code Builder , Google Pub sub connector and MuleSoft RPAAnypoint Code Builder , Google Pub sub connector and MuleSoft RPA
Anypoint Code Builder , Google Pub sub connector and MuleSoft RPAshyamraj55
 
KubeConEU24-Monitoring Kubernetes and Cloud Spend with OpenCost
KubeConEU24-Monitoring Kubernetes and Cloud Spend with OpenCostKubeConEU24-Monitoring Kubernetes and Cloud Spend with OpenCost
KubeConEU24-Monitoring Kubernetes and Cloud Spend with OpenCostMatt Ray
 
Apres-Cyber - The Data Dilemma: Bridging Offensive Operations and Machine Lea...
Apres-Cyber - The Data Dilemma: Bridging Offensive Operations and Machine Lea...Apres-Cyber - The Data Dilemma: Bridging Offensive Operations and Machine Lea...
Apres-Cyber - The Data Dilemma: Bridging Offensive Operations and Machine Lea...Will Schroeder
 
NIST Cybersecurity Framework (CSF) 2.0 Workshop
NIST Cybersecurity Framework (CSF) 2.0 WorkshopNIST Cybersecurity Framework (CSF) 2.0 Workshop
NIST Cybersecurity Framework (CSF) 2.0 WorkshopBachir Benyammi
 
20230202 - Introduction to tis-py
20230202 - Introduction to tis-py20230202 - Introduction to tis-py
20230202 - Introduction to tis-pyJamie (Taka) Wang
 
Building Your Own AI Instance (TBLC AI )
Building Your Own AI Instance (TBLC AI )Building Your Own AI Instance (TBLC AI )
Building Your Own AI Instance (TBLC AI )Brian Pichman
 
AI You Can Trust - Ensuring Success with Data Integrity Webinar
AI You Can Trust - Ensuring Success with Data Integrity WebinarAI You Can Trust - Ensuring Success with Data Integrity Webinar
AI You Can Trust - Ensuring Success with Data Integrity WebinarPrecisely
 
UWB Technology for Enhanced Indoor and Outdoor Positioning in Physiological M...
UWB Technology for Enhanced Indoor and Outdoor Positioning in Physiological M...UWB Technology for Enhanced Indoor and Outdoor Positioning in Physiological M...
UWB Technology for Enhanced Indoor and Outdoor Positioning in Physiological M...UbiTrack UK
 
COMPUTER 10 Lesson 8 - Building a Website
COMPUTER 10 Lesson 8 - Building a WebsiteCOMPUTER 10 Lesson 8 - Building a Website
COMPUTER 10 Lesson 8 - Building a Websitedgelyza
 

Dernier (20)

IESVE Software for Florida Code Compliance Using ASHRAE 90.1-2019
IESVE Software for Florida Code Compliance Using ASHRAE 90.1-2019IESVE Software for Florida Code Compliance Using ASHRAE 90.1-2019
IESVE Software for Florida Code Compliance Using ASHRAE 90.1-2019
 
activity_diagram_combine_v4_20190827.pdfactivity_diagram_combine_v4_20190827.pdf
activity_diagram_combine_v4_20190827.pdfactivity_diagram_combine_v4_20190827.pdfactivity_diagram_combine_v4_20190827.pdfactivity_diagram_combine_v4_20190827.pdf
activity_diagram_combine_v4_20190827.pdfactivity_diagram_combine_v4_20190827.pdf
 
Secure your environment with UiPath and CyberArk technologies - Session 1
Secure your environment with UiPath and CyberArk technologies - Session 1Secure your environment with UiPath and CyberArk technologies - Session 1
Secure your environment with UiPath and CyberArk technologies - Session 1
 
Computer 10: Lesson 10 - Online Crimes and Hazards
Computer 10: Lesson 10 - Online Crimes and HazardsComputer 10: Lesson 10 - Online Crimes and Hazards
Computer 10: Lesson 10 - Online Crimes and Hazards
 
Using IESVE for Loads, Sizing and Heat Pump Modeling to Achieve Decarbonization
Using IESVE for Loads, Sizing and Heat Pump Modeling to Achieve DecarbonizationUsing IESVE for Loads, Sizing and Heat Pump Modeling to Achieve Decarbonization
Using IESVE for Loads, Sizing and Heat Pump Modeling to Achieve Decarbonization
 
Basic Building Blocks of Internet of Things.
Basic Building Blocks of Internet of Things.Basic Building Blocks of Internet of Things.
Basic Building Blocks of Internet of Things.
 
Machine Learning Model Validation (Aijun Zhang 2024).pdf
Machine Learning Model Validation (Aijun Zhang 2024).pdfMachine Learning Model Validation (Aijun Zhang 2024).pdf
Machine Learning Model Validation (Aijun Zhang 2024).pdf
 
UiPath Studio Web workshop series - Day 7
UiPath Studio Web workshop series - Day 7UiPath Studio Web workshop series - Day 7
UiPath Studio Web workshop series - Day 7
 
Bird eye's view on Camunda open source ecosystem
Bird eye's view on Camunda open source ecosystemBird eye's view on Camunda open source ecosystem
Bird eye's view on Camunda open source ecosystem
 
Salesforce Miami User Group Event - 1st Quarter 2024
Salesforce Miami User Group Event - 1st Quarter 2024Salesforce Miami User Group Event - 1st Quarter 2024
Salesforce Miami User Group Event - 1st Quarter 2024
 
Anypoint Code Builder , Google Pub sub connector and MuleSoft RPA
Anypoint Code Builder , Google Pub sub connector and MuleSoft RPAAnypoint Code Builder , Google Pub sub connector and MuleSoft RPA
Anypoint Code Builder , Google Pub sub connector and MuleSoft RPA
 
KubeConEU24-Monitoring Kubernetes and Cloud Spend with OpenCost
KubeConEU24-Monitoring Kubernetes and Cloud Spend with OpenCostKubeConEU24-Monitoring Kubernetes and Cloud Spend with OpenCost
KubeConEU24-Monitoring Kubernetes and Cloud Spend with OpenCost
 
Apres-Cyber - The Data Dilemma: Bridging Offensive Operations and Machine Lea...
Apres-Cyber - The Data Dilemma: Bridging Offensive Operations and Machine Lea...Apres-Cyber - The Data Dilemma: Bridging Offensive Operations and Machine Lea...
Apres-Cyber - The Data Dilemma: Bridging Offensive Operations and Machine Lea...
 
NIST Cybersecurity Framework (CSF) 2.0 Workshop
NIST Cybersecurity Framework (CSF) 2.0 WorkshopNIST Cybersecurity Framework (CSF) 2.0 Workshop
NIST Cybersecurity Framework (CSF) 2.0 Workshop
 
20230202 - Introduction to tis-py
20230202 - Introduction to tis-py20230202 - Introduction to tis-py
20230202 - Introduction to tis-py
 
20150722 - AGV
20150722 - AGV20150722 - AGV
20150722 - AGV
 
Building Your Own AI Instance (TBLC AI )
Building Your Own AI Instance (TBLC AI )Building Your Own AI Instance (TBLC AI )
Building Your Own AI Instance (TBLC AI )
 
AI You Can Trust - Ensuring Success with Data Integrity Webinar
AI You Can Trust - Ensuring Success with Data Integrity WebinarAI You Can Trust - Ensuring Success with Data Integrity Webinar
AI You Can Trust - Ensuring Success with Data Integrity Webinar
 
UWB Technology for Enhanced Indoor and Outdoor Positioning in Physiological M...
UWB Technology for Enhanced Indoor and Outdoor Positioning in Physiological M...UWB Technology for Enhanced Indoor and Outdoor Positioning in Physiological M...
UWB Technology for Enhanced Indoor and Outdoor Positioning in Physiological M...
 
COMPUTER 10 Lesson 8 - Building a Website
COMPUTER 10 Lesson 8 - Building a WebsiteCOMPUTER 10 Lesson 8 - Building a Website
COMPUTER 10 Lesson 8 - Building a Website
 

Supporting Virtualized Telco Applications with OpenStack

  • 1. © 2014 VMware Inc. All rights reserved. Supporting Virtualized Telco Functions with OpenStack Bruce Davie CTO, Networking
  • 2. Agenda • NFV Architecture Overview • Role of Network Virtualization in NFV • Service Chaining Example • OpenStack Neutron and Service Chaining • Open Virtual Networking (OVN) • Conclusion 2
  • 3. NFV in a nutshell Source: European Telecommunications Standards Institute (ETSI) Network Functions Virtualization Approach 3
  • 4. NFV Benefits for Operators • Decouple services from hardware – E.g. 3G services and 4G services use same physical infrastructure • Elastic capacity – With uniform pool of resources, apply them to services that need them – Long and short-term demand changes • Deploy new services more rapidly – SW install/upgrade vs. physical install & cable • Highly customizable – E.g. deploy unique service chains for each customer or class of customer 4
  • 5. NFV Architecture 5 Operations and Business Support Systems (OSS / BSS) Service, VNF & Infrastructure Description Sample textCompute Hardware Storage Hardware Network Hardware Virtual Compute Virtual Storage Virtual Network Virtualization Layer EMS1 VNF1 EMS2 VNF2 VNF3 Orchestrator Virtual Infrastructure Manager EMS3 VNF Managers NFVI VNF NFV M&O Nova NeutronCinder/Swift
  • 6. Role of Network Virtualization • Note: Network Virtualization != NFV • Agility of networking required for NFV, just like in public cloud • Multi-tenancy and isolation • Decouple network services from physical infrastructure • Dynamic service chaining 6
  • 7. Reference OpenStack Neutron Architecture Authentication & Authorization via OpenStack keystone Core Neutron API API Extensions Horizon Web UI Neutron CLI Heat - Orchestration Other tools API Tools Open vSwitch Nova Compute Open vSwitch Nova Compute Open vSwitch Nova Compute Neutron Pluggable Backend layer Open vSwitch Plugin OpenStack Neutron API Server • Integrated AuthN/AuthZ with OpenStack Keystone • Pluggable backend allows various network virtualization solutions • Advanced feature API extensions. • VMware NSX plugin available
  • 8. Top NFV Use Cases • Mobile Operators: – Evolved Packet Core (EPC) – the complex control & data plane for data services in 4G/LTE networks • Wireline Operators: – “virtual CPE” or “NFVaaS” – providing routing, firewall, etc. for enterprise customers on SP cloud infrastructure 8
  • 9. 4G LTE • LTE Network Elements X2 cell LTE-Uu LTE-UE Evolved Node B (eNB) S6a HSS S1-MME MME: Mobility Management Entity PCRF: Policy & Charging Rule Function S10 S7 Rx+ SGi S11 S1-U S5/S8 PDN GatewayServing Gateway SAE Gateway PDN PCRF MME Evolved UTRAN (E-UTRAN) Evolved Packet Core (EPC) 9
  • 10. vCPE: VNF as a Service • A collection of network services hosted by a service provider • Based on Virtual Network & Security Functions (VNFs) from NSX & Partners • Example Services – Routing – NAT – IPsec & SSL VPN – Firewall Services (Native/3rd party) – IDS/IPS • Fully virtualized networking and security on x86 compute, managed by SP • Network virtualization roles: – Native network services (e.g. DFW) – Speed/Agility – Multitenant service chaining at scale – Topology & location independence 10 • What is vCPE? vCPE VNF Service Chaining Other VNF Firewall VPN IPsec/SSL
  • 11. Service Chaining • Creating a graph of services (e.g. load balance, firewall, WAN optimize, etc.) • Network virtualization provides a natural way to do this in automated manner • Often need to pass metadata along the chain – e.g. make the results of a classification step available to a later node – Ongoing argument about how to pass this metadata – VXLAN not really adequate • Load balancing, HA & scale out considerations WAN OptFirewall VPN IPsec/SSL 11 Useful reference: draft-ietf-sfc-use-case-mobility-03.txt VNF1 Classifier VNF2 VNF3 VNF1a VNF2a
  • 12. Service Chaining Example: E-W Firewall & Routing Logical View Hypervisor1Hypervisor1 vSwitch Hypervisor1Hypervisor2 vSwitch 3rd Party FW 3rd Party FW Physical View Web App Web App 12
  • 13. Neutron scorecard for service chaining + Builds general topologies at L2 and L3 + Can insert some services - No general purpose metadata - Not all insertion models supported (e.g. bump in wire, selective insertion) 13
  • 15. What is OVN? • Virtual networking for OVS • Provides L2/L3 virtual networking – Logical switches and routers – Security groups – L2/L3/L4 ACLs – Multiple tunnel overlays (Geneve, STT, and VXLAN) – Physical and DPDK-based logical-physical gateways • Work on same platforms as OVS – Linux (KVM and Xen) – Containers – DPDK – Hyper-V • Integration with OpenStack (and other CMPs eventually)
  • 16. OVN Development • Developed by the same team that started and maintains Open vSwitch • Apache license • Vendor-neutral • Architecture and implementation have all occurred on public mailing lists: • Core OVN is being developed on ovs-dev mailing list: – http://openvswitch.org/pipermail/dev/ • Neutron plugin for OVN is being developed here: – http://git.openstack.org/stackforge/networking-ovn.git • Watch Tuesday’s presentation: OVN: Native Virtual Networking for Open vSwitch • Network Heresy Blog Post: http://networkheresy.com/2015/01/13/ovn-bringing-native-virtual-networking-to-ovs/ 16
  • 17. Summary • NFV has large industry thrust behind it, many stakeholders hoping it will succeed • As operators seek to differentiate themselves, need agility to roll new services quickly • Cost is a driver, but far from the only justification • OpenStack quite a good fit, but not fully fleshed out – Some room for enhancements to Neutron • Need to avoid siloed solutions • Need to remember the “other” parts besides compute 17

Notes de l'éditeur

  1. This slide comes directly from one of the early ETSI white papers proposing NFV. The left hand side is the old telco way – vertically integrated boxes. The right hand side is the NFV way – which clearly looks a lot like SDDC. So it’s easy to see where VMware has a role in NFV. Note also that some of the boxes on the left could be implemented as VMs, which could run on standard infrastructure, while other functions, like firewalls, are native components of NSX. So our 2-pronged strategy to tackle NFV is to partner with companies who can provide virtualized functions, and to incorporate some functions natively.
  2. Neutron Plugins taxonomy Built-in Solution (management, control, and data plane) entirely contained in the Quantum source tree 3rd party Plugin proxies request to an external “controller” Can use one or more built-in components (e.g.: DHCP Agent, L3 agent) 3rd party plugins can either be Open Source or Commercial (some) things to consider when choosing a plugin Free vs. Commercially Supported Advanced Features (exposed as API extensions) Scalability and High Availability (control & data plane) Hypervisor Compatibility Network HW Compat (vendor specific? Allow L3 scale-out?)
  3. 4G LTE is an all-IP network. Significant changes are introduced at both Radio Access Network, as well as in the core network. On the Radio Access network, node B and RNC are now combined, with more intelligence being pushed to the edge. This is now called eNodeB. Architecture wise, eNodeB also can be thought of having two logic components: radio module, and digital module. Radio Module mainly handles A2D, D2A with modulation and demodulation techniques, while digital module handles basic L1 to L2 packet processing, as well as pushing the packet back to core network. Deployment wise, fiber channel is being widely used to connect the radio module with digital module, and many carriers in Asia are centralizing digital modules into their Central office. This architecture is called C-RAN and many PoCs are being done to virtualize centralized digital module of eNodeB. Commercial deployment is probably still 2 years out. Inside core network, the entire system is flattened and greatly simplified to be an all IP network. This is now called evolved packet core (EPC). This is also a major infrastructure upgrade for carriers, and they are taking this opportunity to standardize applications around COTS hardware and virtualization. Further more, backward compatibility is built into these product so operators can gradually redirect their 3G traffic over EPC, thus maximize the ROI. Virtualization is definitely the future for EPC and VMware needs to dominate this space.