You are on page 1of 40

What Is SDN?

Ivan Pepelnjak (ip@ipSpace.net)


Network Architect

ipSpace.net AG

This material is copyrighted and licensed for the sole use by said adam (sonsoc.som@hotmail.com [102.141.196.149]). More information at http://www.ipSpace.net/Webinars
Who is Ivan Pepelnjak (@ioshints)
Past
•  Kernel programmer, network OS and web developer
•  Sysadmin, database admin, network engineer, CCIE
•  Trainer, course developer, curriculum architect
•  Team lead, CTO, business owner
Present
•  Network architect, consultant, blogger, webinar and book author
Focus
•  Large-scale data centers, clouds and network virtualization
•  Software Defined Networking and NFV
•  Scalable application design

More @ ipSpace.net/About
2 This material is copyrighted
© ipSpace.net 2015 and licensed for the sole use by said adam
What(sonsoc.som@hotmail.com
is SDN? [102.141.196.149]). More information at http://www.ipSpace.net/Webinars
The Challenges
•  Increase flexibility while reducing costs
•  Faster application deployments
•  Compete with public cloud offerings

3 This material is copyrighted


© ipSpace.net 2015 and licensed for the sole use by said adam
What(sonsoc.som@hotmail.com
is SDN? [102.141.196.149]). More information at http://www.ipSpace.net/Webinars
This material is copyrighted and licensed for the sole use by said adam (sonsoc.som@hotmail.com [102.141.196.149]). More information at http://www.ipSpace.net/Webinars
This material is copyrighted and licensed for the sole use by said adam (sonsoc.som@hotmail.com [102.141.196.149]). More information at http://www.ipSpace.net/Webinars
Technology Is an
Enabler, Not a Solution

This material is copyrighted and licensed for the sole use by said adam (sonsoc.som@hotmail.com [102.141.196.149]). More information at http://www.ipSpace.net/Webinars
What Is SDN?

This material is copyrighted and licensed for the sole use by said adam (sonsoc.som@hotmail.com [102.141.196.149]). More information at http://www.ipSpace.net/Webinars
SDN is the physical separation
of the network control plane
from the forwarding plane, and
where a control plane controls
several devices

(Open Networking Foundation)

This material is copyrighted and licensed for the sole use by said adam (sonsoc.som@hotmail.com [102.141.196.149]). More information at http://www.ipSpace.net/Webinars
SDN is the physical separation
of the network control plane
from the forwarding plane, and
where a control plane controls
several devices

(Open Networking Foundation)

This material is copyrighted and licensed for the sole use by said adam (sonsoc.som@hotmail.com [102.141.196.149]). More information at http://www.ipSpace.net/Webinars
SDN is packet forwarding done
in software (on x86 platform)

This material is copyrighted and licensed for the sole use by said adam (sonsoc.som@hotmail.com [102.141.196.149]). More information at http://www.ipSpace.net/Webinars
SDN is packet forwarding done
in software (on x86 platform)

This material is copyrighted and licensed for the sole use by said adam (sonsoc.som@hotmail.com [102.141.196.149]). More information at http://www.ipSpace.net/Webinars
SDN is whitebox switching
(running software on third-party
cheap hardware)

This material is copyrighted and licensed for the sole use by said adam (sonsoc.som@hotmail.com [102.141.196.149]). More information at http://www.ipSpace.net/Webinars
SDN is whitebox switching
(running software on third-party
cheap hardware)

This material is copyrighted and licensed for the sole use by said adam (sonsoc.som@hotmail.com [102.141.196.149]). More information at http://www.ipSpace.net/Webinars
SDN is an approach to computer
networking that allows network
administrators to manage
network services through
abstraction of lower level
functionality

This material is copyrighted and licensed for the sole use by said adam (sonsoc.som@hotmail.com [102.141.196.149]). More information at http://www.ipSpace.net/Webinars
SDN is an approach to computer
networking that allows network
administrators to manage
network services through
abstraction of lower level
functionality

This material is copyrighted and licensed for the sole use by said adam (sonsoc.som@hotmail.com [102.141.196.149]). More information at http://www.ipSpace.net/Webinars
SDN and NetOps is a lifestyle change
This material is copyrighted and licensed for the sole use by said adam (sonsoc.som@hotmail.com [102.141.196.149]). More information at http://www.ipSpace.net/Webinars
Finding the Sweet Spot
Device provisioning Router
(orchestration) system Management / Policy plane
Service provisioning Configuration / CLI / GUI
(orchestration) system

Control plane
Device abstraction solutions Static routes

Forwarding adjustments OSPF


(example: RTBH)

Neighbor Link state IP routing


table database table

Control/Data Plane Separation Forwarding table


(example: MPLS-TP, OpenFlow)
Data plane

17This material is copyrighted


© ipSpace.net 2015 and licensed for the sole use by said adam
What(sonsoc.som@hotmail.com
is SDN? [102.141.196.149]). More information at http://www.ipSpace.net/Webinars
SDN Toolbox: Existing Tools
Router
Management / Policy plane

NETCONF Configuration / CLI / GUI

Control plane
Static routes

BGP OSPF
SNMP

Neighbor Link state IP routing


PCEP table database table

ForCES, BGP
Flowspec, Forwarding table
MPLS-TP Data plane

18This material is copyrighted


© ipSpace.net 2015 and licensed for the sole use by said adam
What(sonsoc.som@hotmail.com
is SDN? [102.141.196.149]). More information at http://www.ipSpace.net/Webinars
SDN Toolbox: Emerging Protocols
Router
OF-Config, Management / Policy plane
XMPP, OVSDB,
Configuration / CLI / GUI
Puppet/Chef

Control plane
Static routes

OSPF OnePK

Neighbor Link state IP routing


I2RS, OVSDB table database table

OpenFlow Forwarding table


Data plane

19This material is copyrighted


© ipSpace.net 2015 and licensed for the sole use by said adam
What(sonsoc.som@hotmail.com
is SDN? [102.141.196.149]). More information at http://www.ipSpace.net/Webinars
Four Paths to SDN
Control/Data plane separation
•  OpenFlow

Control- or Management plane interaction


•  Existing or new control-plane protocols (BGP, BGP FlowSpec, I2RS)
•  Existing or new management-plane protocols (NETCONF, XMPP, OpFlex)

Decoupling and abstracting


•  Overlay virtual networks
•  Wireless controllers
•  VPN solutions

Proprietary vendor API


•  Juniper SDK, Cisco OnePK, Arista eAPI, F5 iControl…

20This material is copyrighted


© ipSpace.net 2015 and licensed for the sole use by said adam
What(sonsoc.som@hotmail.com
is SDN? [102.141.196.149]). More information at http://www.ipSpace.net/Webinars
From Here to There

This material is copyrighted and licensed for the sole use by said adam (sonsoc.som@hotmail.com [102.141.196.149]). More information at http://www.ipSpace.net/Webinars
Networks are
Mission-Critical
Infrastructure

This material is copyrighted and licensed for the sole use by said adam (sonsoc.som@hotmail.com [102.141.196.149]). More information at http://www.ipSpace.net/Webinars
Expect the U-Curve Adoption
Technology adoption

Network/organization size

23This material is copyrighted


© ipSpace.net 2015 and licensed for the sole use by said adam
What(sonsoc.som@hotmail.com
is SDN? [102.141.196.149]). More information at http://www.ipSpace.net/Webinars
Simplify

Standardize

Automate

Abstract
This material is copyrighted and licensed for the sole use by said adam (sonsoc.som@hotmail.com [102.141.196.149]). More information at http://www.ipSpace.net/Webinars
Go for Low-Hanging
Fruits

This material is copyrighted and licensed for the sole use by said adam (sonsoc.som@hotmail.com [102.141.196.149]). More information at http://www.ipSpace.net/Webinars
Read-Only Access

Device Provisioning

Service Provisioning

Traffic Rerouting

Real-Time and Data Plane

This material is copyrighted and licensed for the sole use by said adam (sonsoc.som@hotmail.com [102.141.196.149]). More information at http://www.ipSpace.net/Webinars
What Is NFV?

This material is copyrighted and licensed for the sole use by said adam (sonsoc.som@hotmail.com [102.141.196.149]). More information at http://www.ipSpace.net/Webinars
NFV 101
•  Most L4-7 devices run on x86 CPU Outside VM
Hypervisor
host
•  Why should they run on vendor-supplied
hardware?
•  We want to run them on third-party
commodity hardware
•  NFV ≈ Network Services in VM format Inside

Perceived drawbacks
•  CPU-based packet processing is expensive
Network
•  High hypervisor overhead with I/O intensive workload
Sample products
•  Routers: Brocade Vyatta, Cisco CSR, Juniper vMX
•  Firewall: pfSense, Palo Alto, Fortinet, Juniper Firefly (SRX), Vyatta, vShield Edge
(VMware), NSX Edge Services Router (VMware), vASA (Cisco)
•  Load balancer: BIG-IP VTM (F5), A10, vShield Edge (VMware), Embrane, LineRate
Systems (now F5), Citrix NetScaler

28This material is copyrighted


© ipSpace.net 2015 and licensed for the sole use by said adam
What(sonsoc.som@hotmail.com
is SDN? [102.141.196.149]). More information at http://www.ipSpace.net/Webinars
NFV 101
•  Most L4-7 devices run on x86 CPU Outside VM
Hypervisor
host
•  Why should they run on vendor-supplied
hardware?
•  We want to run them on third-party
commodity hardware
•  NFV ≈ Network Services in VM format Inside

Perceived drawbacks
•  CPU-based packet processing is expensive
Network
•  High hypervisor overhead with I/O intensive workload
Sample products
•  Routers: Brocade Vyatta, Cisco CSR, Juniper vMX
•  Firewall: pfSense, Palo Alto, Fortinet, Juniper Firefly (SRX), Vyatta, vShield Edge
(VMware), NSX Edge Services Router (VMware), vASA (Cisco)
•  Load balancer: BIG-IP VTM (F5), A10, vShield Edge (VMware), Embrane, LineRate
Systems (now F5), Citrix NetScaler

29This material is copyrighted


© ipSpace.net 2015 and licensed for the sole use by said adam
What(sonsoc.som@hotmail.com
is SDN? [102.141.196.149]). More information at http://www.ipSpace.net/Webinars
Will NFV Reduce Costs?
Short answer: probably not VM
Hypervisor
host
Benefits of NFV:
•  Better hardware utilization
•  Replacing CapEx (hardware) with OpEx (subscription)
•  Pay-as-You-Go model
•  Increased flexibility: deploy any service on a generic pool
of compute resources
Network
•  Reduce time-to-deployment (no hardware provisioning)
Drawbacks:
•  New technology
•  Increased complexity

Network Automation is a Mandatory Prerequisite


30This material is copyrighted
© ipSpace.net 2015 and licensed for the sole use by said adam
What(sonsoc.som@hotmail.com
is SDN? [102.141.196.149]). More information at http://www.ipSpace.net/Webinars
NFV Challenges
Fundamental decisions Provisioning challenges
•  Build or buy? •  Service decomposition
•  Service provisioning
Product delivery challenges •  Service insertion and stitching
•  Packaging •  VM orchestration
•  Multi-vendor integration
•  Support Operational challenges
•  Licensing •  High availability
•  Integration with orchestration •  Auto-scaling
systems •  Service monitoring
•  Monitoring and auditing of scale-
out infrastructure

31This material is copyrighted


© ipSpace.net 2015 and licensed for the sole use by said adam
What(sonsoc.som@hotmail.com
is SDN? [102.141.196.149]). More information at http://www.ipSpace.net/Webinars
Getting Started

This material is copyrighted and licensed for the sole use by said adam (sonsoc.som@hotmail.com [102.141.196.149]). More information at http://www.ipSpace.net/Webinars
Start Small

This material is copyrighted and licensed for the sole use by said adam (sonsoc.som@hotmail.com [102.141.196.149]). More information at http://www.ipSpace.net/Webinars
Make It as Simple
as Possible

This material is copyrighted and licensed for the sole use by said adam (sonsoc.som@hotmail.com [102.141.196.149]). More information at http://www.ipSpace.net/Webinars
Pilot First
Integrate Next

This material is copyrighted and licensed for the sole use by said adam (sonsoc.som@hotmail.com [102.141.196.149]). More information at http://www.ipSpace.net/Webinars
Good Enough Is
Good Enough

This material is copyrighted and licensed for the sole use by said adam (sonsoc.som@hotmail.com [102.141.196.149]). More information at http://www.ipSpace.net/Webinars
Start NOW

This material is copyrighted and licensed for the sole use by said adam (sonsoc.som@hotmail.com [102.141.196.149]). More information at http://www.ipSpace.net/Webinars
Advanced SDN and Network Automation Training
SDN Use Cases

Monitoring Software Defined Networks

Network Function Virtualization Using Schprokits

Automation Tools
SDN and NFV Tools

BGP SDN Jinja2,YAML and Ansible

Network
OpenFlow Deep Dive NETCONF Deep Dive

SDN Architectures and Deployment Considerations

What is SDN? Network Programmability 101

Inter-DC
More information
FCoE has@very
38This material SDN.ipSpace.net
limited use and requires no bridging
is copyrighted
© ipSpace.net 2015 and licensed for the sole use by said adam
What(sonsoc.som@hotmail.com
is SDN? [102.141.196.149]). More information at http://www.ipSpace.net/Webinars
Online, On-Site or Customized? The Choice Is Yours

39This material is copyrighted


© ipSpace.net 2015 and licensed for the sole use by said adam
What(sonsoc.som@hotmail.com
is SDN? [102.141.196.149]). More information at http://www.ipSpace.net/Webinars
Stay in Touch
Web: ipSpace.net
Blog: blog.ipSpace.net
Email: ip@ipSpace.net
Twitter: @ioshints

SDN: ipSpace.net/SDN
Webinars: ipSpace.net/Webinars
Consulting: ipSpace.net/Consulting

40This material is copyrighted


© ipSpace.net 2015 and licensed for the sole use by said adam
What(sonsoc.som@hotmail.com
is SDN? [102.141.196.149]). More information at http://www.ipSpace.net/Webinars

You might also like