OpenFlow and Software Defjned Networks Outline o The history of - - PowerPoint PPT Presentation

OpenFlow and Software Defjned Networks

Outline

• The history of OpenFlow
• What is OpenFlow?
• Slicing OpenFlow networks
• Software Defjned Networks
• Industry interest

Original Question

How can researchers on college campuses test out new ideas in a real network, at scale?

Problem

Many good research ideas

• n college campuses…

No way to test new ideas at scale, on real networks, with real user traffjc Many good research ideas

• n college campuses…

No way to test new ideas at scale, on real networks, with real user traffjc Consequence: Almost no technology transfer Consequence: Almost no technology transfer

Research problems

Well known problems Security, mobility, availability Well known problems Security, mobility, availability Incremental ideas

Fixing BGP, multicast, access control, Mobile IP, data center networks.

Incremental ideas

Fixing BGP, multicast, access control, Mobile IP, data center networks.

More radical changes

Energy management, VM mobility, …

More radical changes

Energy management, VM mobility, …

How to build a test network with suffjcient scale and realism?

Software Router

PC

+

Multi-Port NIC Total capacity: Only ~5Gb/s

• Diffjcult to develop,

always behind industry

• Diffjcult to program,

constrained environment

• T
• o expensive

Custom Hardware

Million of lines

• f source

code 6,000 RFCs Billions of gates Bloated Power Hungry

Vertically integrated, complex, closed, proprietary Not suitable for experimental ideas

Specialized Packet Forwarding Hardware Operating System Featur e Featu re

Routing, management, mobility management, access control, VPNs, …

Modify Existing Equipment

The only test network large enough to evaluate future Internet technologies at scale, is the Internet itself.

OpenFlow Protocol

Data Path (Hardware) Control Path OpenFlow

Controller Controller

(Server Software) (Server Software)

Controller Controller

(Server Software) (Server Software)

Ap p Ap p Ap p Ap p Ap p Ap p

Slicing traffjc

All network traffic

Research traffic

Experiment #1 Experiment #2 … Experiment N

OpenFlow Basics

Research Experiments

Step 1:

Separate Control from Datapath

Step 2: Cache fmow decisions in datapath

“If header = x, send to port 4” “If header = ?, send to me” “If header = y, overwrite header with z, send to ports 5,6” Flow T able Flow T able

Data Path (Hardware) Data Path (Hardware) Control Control Path Path OpenFlow OpenFlow OpenFlow OpenFlow Controller Controller

OpenFlow Protocol (SSL/TCP)

16

Controller

PC

OpenFlow usage

OpenFlow Switch OpenFlow Switch OpenFlow Switch

Alice’s code Alice’s code

Decision?OpenFlow Protocol

Alice’s Rule Alice’s Rule Alice’s Rule Alice’s Rule Alice’s Rule Alice’s Rule OpenFlow offloads control intelligence to a remote software

OpenFlow Basics

Flow T able Entries

Switc h Port MAC src MAC dst Eth type VLAN ID IP Src IP Dst IP Prot L4 sport L4 dport

Rule Action Stats

• 1. Forward packet to zero or more ports
• 2. Encapsulate and forward to controller
• 3. Send to normal processing pipeline
• 4. Modify Fields
• 5. Any extensions you add!

+ mask what fjelds to match

Packet + byte counters

18

VLAN pcp IP T

• S

Examples

Switching

* Switc h Port MAC src MAC dst Eth type VLAN ID IP Src IP Dst IP Prot TCP sport TCP dport Action * 00:1f:.. * * * * * * * port6

Flow Switching

port3 Switc h Port MAC src MAC dst Eth type VLAN ID IP Src IP Dst IP Prot TCP sport TCP dport Action 00:20 .. 00:1f.. 0800 vlan1 1.2.3. 4 5.6.7. 8 4 1726 4 80 port6

Firewall

* Switc h Port MAC src MAC dst Eth type VLAN ID IP Src IP Dst IP Prot TCP sport TCP dport Action * * * * * * * * 22 drop

19

Examples

Routing

* Switc h Port MAC src MAC dst Eth type VLAN ID IP Src IP Dst IP Prot TCP sport TCP dport Action * * * * * 5.6.7. 8 * * * port6

VLAN Switching

* Switc h Port MAC src MAC dst Eth type VLAN ID IP Src IP Dst IP Prot TCP sport TCP dport Action * * vlan1 * * * * * port6, port7, port9 00:1f..

20

Flow Routing vs. Aggregation

Both models are possible with OpenFlow

Flow-Based

• Every fmow is

individually set up by controller

• Exact-match fmow

entries

• Flow table contains
• ne entry per fmow
• Good for fjne grain

control, e.g. campus networks

Aggregated

• One fmow entry covers

large groups of fmows

• Wildcard fmow entries
• Flow table contains one

entry per category of fmows

• Good for large number
• f fmows, e.g. backbone

21

Centralized vs Distributed Control

Both models are possible with OpenFlow

Centralized Control

OpenFlow Switch OpenFlow Switch OpenFlow Switch

Controller

Distributed Control

OpenFlow Switch OpenFlow Switch OpenFlow Switch

Controller Controller Controller

22

OpenFlow building blocks

Controller

NOX NOX

Slicing Software

FlowVisor FlowVisor FlowVis

• r

Console

23

Applications

LAVI LAVI ENVI (GUI) ENVI (GUI) Expedient Expedient n-Casting n-Casting

NetFPGA NetFPGA Software Ref. Switch Software Ref. Switch Broadcom Ref. Switch Broadcom Ref. Switch OpenWRT OpenWRT PCEngine WiFi AP PCEngine WiFi AP

Commercial Switches Stanford Provided

OpenFlow Switches

SNAC SNAC Stanford Provided

Monitoring/ debugging tools

• fmops
• fmops
• ftrace
• ftrace
• penseer
• penseer

OpenVSwit ch OpenVSwit ch HP, NEC, Pronto, Juniper.. and many more HP, NEC, Pronto, Juniper.. and many more

Beacon Beacon Helio s Helio s Maestr

• Maestr

General Forwarding Abstraction

Small set of primitives “Forwarding instruction set” Small set of primitives “Forwarding instruction set” Protocol independent Backward compatible Protocol independent Backward compatible Switches, routers, WiFi APs, basestations, TDM/WDM Switches, routers, WiFi APs, basestations, TDM/WDM

Research Examples (See http://archive.openfmow.org /videos/ for demo videos)

Broader interest in an evolvable Internet

Specialized Packet Forwarding Hardware

Featur e

Featur e

Specialized Packet Forwarding Hardware Specialized Packet Forwarding Hardware Specialized Packet Forwarding Hardware Specialized Packet Forwarding Hardware Operating System Operating System Operating System Operating System Operating System

Network OS

Featur e Featur e

Featur e

Featur e

Featur e

Featur e

Featur e

Featur e

Featur e

Featur e

Restructured Network

Featur e Feature

Network OS

• 1. Open interface to packet

forwarding

• 3. Well-defjned open API
• 2. At least one Network OS

probably many. Open- and closed-source

Software-Defjned Network

Packet Forwarding Packet Forwarding Packet Forwarding Packet Forwarding Packet Forwarding Packet Forwarding Packet Forwarding Packet Forwarding Packet Forwarding Packet Forwarding

Network OS

Research

– NOX (C++/Python) http://noxrepo.org – Maestro (Rice University) – Helios (NEC) – Beacon (Java) coming soon. – Others in development

Commercial

– ONIX [OSDI 2010, Google, Nicira, NEC] – Expect others

Cellular industry

• Recently made transition to IP
• Billions of mobile users
• Need to securely extract payments

and hold users accountable

• IP sucks at both, yet hard to change

OpenFlow provides a way for the cellular industry to solve real problem plaguing their networks.

T elco Operators

• Global IP traffjc growing 40-50% per

year

• End-customer monthly bill remains

unchanged

• Therefore, CAPEX and OPEX need to

reduce 40-50% per Gb/s per year

• But in practice, reduces by ~20% per

year

• And based on the same equipment as

competitors

OpenFlow allows telcos to reduce CAPEX, OPEX and to add new differentiating features to their networks.

Example: New Data Center

Cost

200,000 servers Fanout of 20  10,000 switches $5k vendor switch = $50M $1k commodity switch = $10M Savings in 10 data centers = $400M

Control

More fmexible control T ailor network for services Quickly improve and innovate

Data center companies have been the first to deploy OpenFlow in their networks.

Next Steps

OpenFlow Standardization

Version 1.0: Most widely used version Version 1.1: Released in February 2011. Currently, running OpenFlow Version 1.4, supports group-table, meter band and pipelining. OpenFlow transferred to ONF in March 2011.

Thank you!