of Incremental SDN Deployment in Enterprise Networks Dan Levin - - PowerPoint PPT Presentation

▶
of incremental sdn deployment in
SMART_READER_LITE
LIVE PREVIEW

of Incremental SDN Deployment in Enterprise Networks Dan Levin - - PowerPoint PPT Presentation

Mar 08, 2024 362 likes •907 views

Panopticon: Reaping the benefits of Incremental SDN Deployment in Enterprise Networks Dan Levin withMarco Canini, Stefan Schmid, Fabian Schaffert, Anja Feldmann Enterprise Network Management Scheduled Policy changes maintenance Device life

slide-1
SLIDE 1

Panopticon: Reaping the benefits

  • f Incremental SDN Deployment in

Enterprise Networks

Dan Levin

withMarco Canini, Stefan Schmid, Fabian Schaffert, Anja Feldmann

slide-2
SLIDE 2

Enterprise Network Management

Heterogeneity Policy changes Troubleshooting Device life cycle management Scheduled maintenance Resource allocation

slide-3
SLIDE 3

Control Programs Control Programs Control Programs

SDN Interface

Global Network View

Controller Platform Controller Platform

Software Defined Networking

RIP OSPF EIGRP ISIS

slide-4
SLIDE 4

Principled Network Policy Orchestration

  • Consistent Network Updates [Reitblatt’12]
  • Modular Policy Composition [Monsanto’13]
  • Network Invariants Static Checking [Kazemian’12]
  • Automated Dataplane Troubleshooting [Zeng’12]
  • And more…

All leverage an existing SDN deployment

slide-5
SLIDE 5

The SDN Deployment Problem

SDN is not a feature to be “switched on” Chicken and egg: Building confidence Deployment must be Incremental

slide-6
SLIDE 6

Key Questions

  • 1. How can we incrementally deploy the SDN

interface into enterprise networks?

  • 2. What benefits can be realized from a hybrid

SDN deployment?

  • 3. What limitations or performance costs?
slide-7
SLIDE 7

PANOPTICON

Incrementally Deployable SDN Architecture

  • Systematic approach to operate a hybrid network

as a (nearly) full SDN

  • Prototype Implementation
  • Planning tool
slide-8
SLIDE 8

Key Questions

  • 1. How can we incrementally deploy the SDN

interface into enterprise networks?

  • 2. What benefits can be realized from a hybrid

SDN deployment?

  • 3. What limitations or performance costs?
slide-9
SLIDE 9

The Existing Network

A B C D E F

SDN-controlled “SDNc Ports”

slide-10
SLIDE 10

Planning Strategy

Hybrid SDN Deployment Traffic Estimates Network Topology

  • Path Delay
  • Link Utilizations
  • Resource

Constraints

slide-11
SLIDE 11

The Hybrid SDN Deployment ( )

A B C D E F

slide-12
SLIDE 12

Key Questions

  • 1. How can we incrementally deploy the SDN

interface into enterprise networks?

  • 2. What benefits can be realized from a hybrid

SDN deployment?

  • 3. What limitations or performance costs?
slide-13
SLIDE 13

A B C D E F

Main benefits of SDN= Principled orchestration of the network policy

slide-14
SLIDE 14

Realizing the Benefits of SDN

A B C D E F

Access control Insight #1: ≥ 1 SDN switch → Policy enforcement

IDS

Middlebox traversal

slide-15
SLIDE 15
  • 2. Realizing the Benefits of SDN

A B C D E F

Traffic load-balancing Insight #1: ≥ 1 SDN switch → Policy enforcement Insight #2: ≥ 2 SDN switches → Fine-grained control

slide-16
SLIDE 16

SDN Waypoint Enforcement

Insight #1: ≥ 1 SDN switch → Policy enforcement Insight #2: ≥ 2 SDN switches → Fine-grained control

Legacy devices must direct traffic to SDN switches

Ensure that all traffic to/from an SDN-controlled port always traverses at least one SDN switch

slide-17
SLIDE 17

A B C D E F

Conceptually group SDN ports in Cell Blocks

The SDN Architecture PANOPTICON

slide-18
SLIDE 18

Traffic restricted to Solitary Confinement Trees

A B C D E F

Per-port spanning trees that ensure waypoint enforcement

The SDN Architecture PANOPTICON

slide-19
SLIDE 19

Traffic restricted to Solitary Confinement Trees

A B C D E F

The SDN Architecture PANOPTICON

  • 1. One VLAN ID

per SDNc port

  • 2. Reuse VLAN

ID space across cell blocks

  • 3. SCTs can be

pre-installed

slide-20
SLIDE 20

A B C D E F

PANOPTICON

B C D E F A

“Logical SDN”

slide-21
SLIDE 21

PANOPTICON

“Logical SDN”

PANOPTICON

SDN Platform App 1 App 2 App 3

B C D E F A

PANOPTICON provides the abstraction of a (nearly) fully-deployed SDN in a partially upgraded network

slide-22
SLIDE 22

Evaluation

Simulation Emulation Testbed

How many SDNc ports do I get as the deployment grows? How will Panopticon Affect Network Traffic? Prototype Implementation TCP Performance under Waypoint Enforcement Fault Tolerance

See our Paper

slide-23
SLIDE 23

A B C D E F

Simulation Methodology

Topology: Real Enterprise Network

  • 1296 Access Switches
  • 412 Distrib. Switches

1296 SDNc Port Candidates Workload: Packet-level Traces → Traffic Matrix

  • Map randomly, but preserve prefix locality
  • Scale up traffic demands: max link util at 50%
  • Each src-dst pair consumes avg. 10 fwd rules
slide-24
SLIDE 24

A B C D E F

Resource Constraints

Link Capacities Flow Table Capacity (100K entries) # Supported VLANs (256, 512, 1024)

slide-25
SLIDE 25

A B C D E F

How many SDNc ports do I get?

Switch Placement Heuristic

  • 1. RAND - Lower Baseline
  • 2. VOL - Heuristic
  • 3. Optimal (tech report)

Accomodate as many SDNc Ports as possible subject to resource constraints Repeat experiments with 10 different seeds for each random parameter.

slide-26
SLIDE 26

How many SDNc ports do I get?

Random Baseline Deployment Strategy

slide-27
SLIDE 27

Feasibility with VOL heuristic

2% of network switches (33 SDN switches) 100% SDN-controlled ports

Optimistic Conditions Conservative Conditions

slide-28
SLIDE 28

How will Panopticon affect my traffic?

Recall: Baseline traffic scaled so that max-utilized link is 50%

slide-29
SLIDE 29

How will Panopticon affect my traffic?

slide-30
SLIDE 30

How will Panopticon affect my traffic?

33 SDN switches (2% of network) 90th path stretch < 1.9x max util. < 60%

slide-31
SLIDE 31

Key Evaluation Results

  • Every access port controlled via SDN
  • Moderate Path Stretch
  • Moderate increase in link utilization
  • Traffic Emulation: results support simulations
  • Testbed: validate system and fault-tolerance

Optimistically at 2% deployed SDN switches Conservatively at 10% deployed SDN switches

slide-32
SLIDE 32

PANOPTICON

SDN Platform App 1 App 2 App 3

B C D E F A

Planning TOOLDetermine the

partial SDN deployment

SDN ARCHITECTUREOperate

the network as a (nearly) full SDN

Summary

https://panoptisim.badpacket.in

slide-33
SLIDE 33
slide-34
SLIDE 34

A B C D E F

Packet Forwarding

Inter-Switch Fabric provides transit between SCTs

slide-35
SLIDE 35
slide-36
SLIDE 36

Current Hybrid Networks

SDN Platform Legacy Mgmt

?

Dual-stack approach

slide-37
SLIDE 37

Current Hybrid Networks

Dual-stack approach Edge-only approach

SDN Platform Legacy Mgmt

?

Legacy Mgmt SDN Platform

App 1 App 2 App 3

slide-38
SLIDE 38

The edge is legacy access switches

slide-39
SLIDE 39
slide-40
SLIDE 40

Hybrid SDN Use Cases

  • Automated Planned Maintenance Tool
  • Lightweight IP Subnet Mobility
  • ACL refactorization
  • Middle-box Traversal
slide-41
SLIDE 41

A B C D E F

Use Case: Planned Maintenance

Operator says: “You’re Going down for service... ...and, could the rest of you switches cooperate to minimize the disruption?

slide-42
SLIDE 42

A B C D E F

Use Case: Planned Maintenance

3) Update forwarding rules to re-route “green flow” 4) Gratuitous ARP for destination C. 2) Install forwarding rules for “green flow” 1) Operator signals intent to

  • ur application, to remove

switch for maintenance.

slide-43
SLIDE 43

Use Case Testbed Evaluation

2x NEC IP8800 (OF 1.0) 1x Cisco C3550XL 3x Cisco C2960G 2x HP 5406zl 1x Pica8 3290

Locations of “port-down” events along one path traversing SDN switch. TCP Connection Recovery Time

slide-44
SLIDE 44

Use Case Testbed Evaluation

2x NEC IP8800 (OF 1.0) 1x Cisco C3550XL 3x Cisco C2960G 2x HP 5406zl 1x Pica8 3290

slide-45
SLIDE 45
slide-46
SLIDE 46

Google B4

Functionally Equivalent Deployment

slide-47
SLIDE 47

How will Panopticon affect my traffic?

slide-48
SLIDE 48

How will Panopticon affect my traffic?

slide-49
SLIDE 49

How will Panopticon affect my traffic?

33 SDN switches → 90th stretch < 1.9x & max util. < 60%

slide-50
SLIDE 50

Controller Platform Controller Platform

Global Network View

Control Programs Control Programs Control Programs

f(

View)

f(

View)

f(

View)

SDN Interface

Ctrl Ctrl Ctrl Ctrl Ctrl Ctrl Ctrl Ctrl Ctrl

slide-51
SLIDE 51

Simulation Methodology

  • Real network topology

–

1296 Access / 412 Distribution / 3 Core

  • Traffic estimates from LBNL packet traces

– Map randomly while preserving prefix locality – Scale traffic projection so that the most utilized link is 50%

  • SDN deployment strategies: RANDOM vs. VOL

– VOL: iteratively upgrade switch that forwards most traffic

slide-52
SLIDE 52

Benefits of Hybrid Deployment?

A B C D E F

Harvest unutilized network capacity

slide-53
SLIDE 53

Controller Platform Controller Platform

Control Programs Control Programs Control Programs

SDN Interface

Global Network View