KREONET SOFTWARIZATION - KREONET SD-WAN Deployment based on ONOS- - PowerPoint PPT Presentation

KREONET SOFTWARIZATION - KREONET SD-WAN Deployment based on ONOS- Dongkyun Kim, KISTI mirr@kisti.re.kr Open Networking Summit 2016

• Introduction & Background • KREONET -S* as the Next KREONET • Deployment Status of KREONET -S* • Applications Development: VDN & UoV • Conclusions 2

Provide Research Infrastructures Do the Research As a national institute focused on S&T information,supercomputing,and research networking, KISTI plays a key role in facilitating the national R&D competitiveness 3

≪ Nationwide 17 Regional Centers in Korea (~100Gbps), 3 International Connections to the US and China (~20Gbps), Global Research Network Collaborations (GLIF & GLORIAD), ~200 member institutions, Supercomputing/Advanced Application Services ≫ *** 24 x 7 Network Operations Center *** T oward Software and User driven Virtualized, Dynamic, and Flexible Environment from Hardware-based Fixed, Closed Network Infra & Services 4

High Energy Physics Deterministic Network Performance and QoS for ~100G Data Transfer Weather & Climate Education & Collaboration User-oriented Dynamic & Flexible Networks for Time-to-Research & Time-to-Collaboration Astronomy Medical Science Future Internet Very Reliable and Security- guaranteed Networks for Collaborative Research New Medicine/Bio Culture & Art Constructions Supercomputing 5

New Network Environment for Global and Domestic Experimenters & Researchers Source: ONOS ICONA Project, SC14 Demos, StarLight’s SDX Project 6

• KREONET -S* Main Goals – Carrier-grade Reliable “Public SD-WAN” Operations • Distributed Controls and 24 x 7 Network Operations – New User Interfaces, Services, and Experiences – Multi-vendor and Multi-layer Network Infrastructure • Principal Building Blocks – Northbound (Apps & Services): VDN, UoV, vSciZ, etc. – Southbound: OpenFlow, TL1, NETCONF, etc. – East-Westbound: Distributed Controls • KISTI/KREONET - ONOS Affiliate (in a joint effort with KAIST) • Service Composition: KREONET COREEN Platform, etc. 7

KREONET -S* Applications & Services: High Performance, Advanced Security, New User Services & Experiences Multi- NFV/ NMS, SDN- Layer NFaaS etc. IP VDN (Virtual UoV (User oriented vSciZ (Virtual KREONET Dedicate Network) Visibility) Science DMZ) COREEN SD-WAN Technology & NOC KREONET -S* Controller Infrastructure: Carrier-grade High Availability/Failover and Scalability Controller Domain Controller Domain Controller Domain KREONET -S* Hardware Infrastructure: Multi-vendor and Multi-layer to CapEX/OpEX Savings 8

• Embracing Open Technologies – OpenFlow, OVS, OPNFV, OpenStack, Many others.. – ONOS Affiliate • T echnical collaborations for ONOS deployment • Setting up discussion channel for operational experiences • Applying various SDN applications on KREONET -S* 9 Source: Introducing ONOS, http://onosproject.org/software/

First Year (2015) Seoul, Daejeon RCs 2~ User Sites Third Year (2017) T wo National/International RC/GigaPoP 30~ User Sites Second Year (2016) T wo National RCs 10~ User Sites 10

Pure SDN Services Org-S2 - Deterministic QoS & Performance SDN Control - Virtually Isolated User Group Networks Org-S1 Domain - Enhanced Security & New User Experiences (KREONET -S) Org-S3 - User-centric Open Networking Environment SDN-IP Services Research - SDN-to-Internet Extended Connectivity Internet SDN Control - T raffic-engineered AS T ransit (DC to DC) Domains Domain (KREONET -S) (GLORIAD, - Partial Guarantee of QoS & Performance TEIN, etc.) - Partial Security, but still New User Experiences Org-I* Org-S* Federated SDN Services - Inter-SDN Connectivity & Federated Resources SDN Control SDN Control - Virtually Isolated Networks on Inter-Cluster SDN Domains Domain (Internet2, - Deterministic Guarantee of QoS & Performance (KREONET -S) etc.) - Enhanced Security & New User Experiences Org-S* Org-S* - Extended Connectivity with SDN-IP 11

ONOS Controller Instances in Daejeon ONOS Controller Instances in Seoul ONOS ONOS ONOS ONOS ONOS ONOS ONOS ONOS VM (B) VM VM VM VM VM VM VM PM-4 PM-2 PM-1 PM-3 OVS and Experiments OVS and Experiments n*10G Server Server Server Server VM VM VM VM Daejeon Seoul n*10G n*10G RC RC n*10G Core Node Core Node n*10G Edge/ Edge Access Node n*1G Node Edge/ Edge Access Node n*1G n*1G, n*10G Node n*1G n*1G, n* 10G n*1G n*1G Server Server Server Server Server Server VM VM VM VM VM VM 12 User Organization(s) User Organization(s)

• Softwarization of KREONET: Daejeon and Seoul Centers Controller Servers OVS/Experiment Servers Mgmt./Ctrl. SW Edge Node (AR) Core Node (BR) 13

• Deployment Status as of Today Master Stand-by (slave) KREONET -S* 7-Node ONOS Cluster: Distributed Controls Daejeon ONOS Instances Seoul ONOS Instances PM#1 PM#3 PM#2 PM#4 Build_VM Deploy_VM#2 Deploy_VM#3 Deploy_VM#4 Deploy_VM#5 Deploy_VM#6 Deploy_VM#7 Deploy_VM#1 Arista 7050SX Arista 7050SX (Edge Node) Brocade MLXe-8 Brocade MLXe-8 (Edge Node) (Core Node) Ciena 5410 (Core Node) Ciena 5410 (Optical) (Optical) 10Gbps x 1 1Gbps x 10 14

Deajeon Seoul Seoul OVS Arista 7050sx KREONET -S * OVS Operations & OVS Simulation OVS Seoul OVS OVS Brocade MLXe-8 Multiple links VDN/UoV (10G * 1, 1G * 10) OVS Experiments OVS OVS Brocade MLXe-8 Daejeon OVS Arista 7050sx OVS 15

Seoul (Edge) Seoul (Core) Chicago (Core) Daejeon (Core) Chicago (Edge) Daejeon (Edge) Deployment 2016 Busan (Core) Busan Deployment 2016 (Edge) 16

• Virtual Dedicate Network (VDN) & User-oriented Visibility (UoV) – VDN: OpenFlow/ONOS-based Dedicate Bandwidth Provisioning Network for User Groups on Demand – UoV: Virtual Network Visualization & Monitoring • Virtual ScienceDMZ – Very High Performance Distributed Science Cloud & Advanced Experimental Environment (being designed) • ONOS SDN Apps & Use Cases – SDN-IP (being experimented & deployed) – Packet-Optical, Segment routing (planning) 17

• Design Principles – User-Group based Authentication/Authorization • Root user *controls*, General users *use* – Easy-to-Use User Interface • Simple and Rapid: several-click Easy, ms Fast – User-oriented Network Visualization and Monitoring • Virtual Network T opology and Operational Attributes 18

OVS OVS OVS OVS OVS OVS Seoul OVS VDN-1 Each User Group can See & Manipulate ONLY their own VDN Daejeon OVS OVS OVS OVS VDN-2 19

• KISTI-KAIST Joint Development – VDN Prototype I Design and Implementation (2015) – VDN management modules, dedicate & isolated network allocation: being applied to KREONET -S* 20

VDN Manager: Main Screen Global Topology View VDN Manager: Manipulations User-oriented Visibility: Topology View & E2E View 21

• Testbed Configurations in Detail – eBGP and iBGP peerings between BGP speakers, external routers & ONOS SDN-IP applications KREONET -S* ONOS/SDN-IP & BGP Speakers End-Host01 End-Host02 10.100.10.1 10.100.20.1 10.10.10.0/24 10.10.20.0/24 BGP-Speaker01 BGP-Speaker02 AS AS65001 eBGP eBGP iBGP iBGP AS AS65001 10.100.20.2 10.100.10.2 AS AS65002 AS65003 AS External-Router01 External-Router02 PortID: 6 PortID: 5 PortID: 6 PortID: 5 Edge Node (AR) in Daejeon Core Node (BR) in Daejeon Core Node (BR) in Seoul Edge Node (AR) in Seoul 22

Advanced Apps/Users Researchers & Experimenters General Users/Operators Users SDN/NFV COREEN/ COREEN/ SDN/NFV & vScience SDN/NFV IP/SDN-IP Services Apps & SD-NOC DMZ Apps & Apps & Services Services Services Services SW Infra COREEN Platform Open SDN/NFV Control Platform SDN/non- SDN IP Network Infrastructure SDN Network Operations & Management HW Infra Distributed Computing & Storage Resources KREONET/GLORIAD Network Infrastructure 2 3

• KREONET -S* Making HAPPEN – New SDN Service Provider Network Deployment – Distributed Controls and Resilient SDN Operations – VDN & UoV for New User Services and Experiences • Further Work – Keep T esting and Experimenting on Distributed Controls • Failover & Operational Issues, Performance, etc. – VDN & UoV Enhancement: UI, Performance, Stability – New T echnology Deployment & Experiments with ON.Lab – Global Project & T estbed Participations with KAIST, PRP , etc. 24

Questions and/or Comments to mirr@kisti.re.kr 25