Protokół OpenFlow. Piotr Gierz Architekt Rozwiązań. w służbie Software Defined Networks (SDN)

Wielkość: px

Rozpocząć pokaz od strony:

Download "Protokół OpenFlow. Piotr Gierz Architekt Rozwiązań. w służbie Software Defined Networks (SDN)"

Piotr Łukasik
8 lat temu
Przeglądów:

1 Protokół OpenFlow w służbie Software Defined Networks (SDN) Piotr Gierz Architekt Rozwiązań Hewlett-Packard Hewlett-PackardDevelopment DevelopmentCompany Company,,L.P. L.P. The information contained herein is subject to change without notice

Hewlett-PackardDevelopment DevelopmentCompany Company,,L.P. L.

2 Źródła: Materiały, informacje: OpenFlow ( ONF ( NOX ( Floodlight HP (floodlight.openflowhub.org), Networking ( różne inne miejsca w sieci. 2

org), Floodlight HP (floodlight.openflowhub.

3 Agenda Co to jest OpenFlow i sieć typu SDN Definicja Struktura Model protokołu komunikacji Zasada działnia OpenFlow i HP Open Networking Fundation (ONF) Demo 3

4 Co to jest protokół OpenFlow

5 Definicja Software Defined Networking (SDN) Nowa architektura sieci Oddzielenie control plane od forwarding hardware. Umożliwienie aby data plane był zdefiniowany jako logiczny, centralny kontroler (lub zbiór kontrolerów). OpenFlow Standardowy 5 protokół komunikacyjny używany pomiędzy control i data planes.

Umożliwienie aby data plane był zdefiniowany jako logiczny, centralny

6 Transformacja sieci do modelu SDN Featur e Feature Network OS Featur e Featur e Operating System Specialized Packet Forwarding Hardware Featur e Featur e Operating System Specialized Packet Forwarding Hardware Featur e Featur e Operating System Specialized Packet Forwarding Hardware

7 Elementy logiczne modelu SDN Dobrze zdefiniowane API (~6000 RFC) Featur e Feature Network OS implementacja mechanizmów i protokołów sieciowych Network OS OpenFlow protokół definuijący przesyłanie pakietów, Packet Forwarding Packet Forwarding Packet Forwarding

protokołów sieciowych Network OS OpenFlow protokół definuijący

8 Elementy sieci typu SDN Kontroler OF (Network OS) Urządzenia sieciowe wspierające OF Komunikacja out-of-band Ruch produkcyjny sterowany przez protokół OF

9 Elementy sieci typu SDN Network OS Research NOX (C++/Python), Beacon (Java), Floodlight Trema (Java), (C/Ruby), Commercial ONIX HP [OSDI 2010, Google, Nicira, NEC] The Openflow Management System

10 Komunikacja w OpenFlow 1. Fizyczne urządzenia sieciowe rejestrują się w kontrolerze OpenFlow, 2. Protokół i port komunikacyjny TCP/6633, 3. Opcja: TCP/6633 szyfrowane i autentykowane w SSL. 4. Działanie Reaktywne lub Proaktywne

11 Zasada działania If header = x, send to port 4 If header = y, overwrite header with z, send to ports 5,6 If header =?, send to me Flow Table

12 OpenFlow Flow Table

13 OpenFlow Flow Table Match Rule Attributes Ingress port MAC source address MAC destination address Ether Type VLAN ID VLAN PCP IPv4 source address IPv4 destination address IPv4 protocol TCP/UDP source port TCP/UDP destination port IPv4 ToS (wildcard or exact match on all fields) QoS Actions En-queue on a specific priority queue Rate limit using a specific meter Forwarding Actions Forward packet to ports Forward via NORMAL processing Flood along Spanning Tree Drop packet Send packet to controller Modify Actions VLAN: set/strip VLAN, VLAN priority L2: set MAC source, set MAC dest L3: set IP source/dest, set IP ToS

specific priority queue Rate limit using a specific meter Forwarding Actions Forward packet to ports Forward via NORMAL processing Flood along Spanning

14 OpenFlow i HP

15 OpenFlow Switch Software Available now! Runs on these switches: HP 8200 Series HP 6600 Series HP 6200 Series HP 5400 Series HP 3500 Series Fully supported, controlled release this year Included as standard feature in

16 HP s Leadership in OpenFlow Key Contributor and Leader in Advancing the HP and Stanford began Standard collaborating on Ethane the predecessor to OpenFlow in 2007 HP developed the first commercial switch implementation of OpenFlow and demonstrated it with Stanford at the ACM SIGCOMM conference in 2008 HP network switches are now the leading choice for academic and commercial researchers worldwide DevoFlow: Cost-Effective Flow Management for High Performance Enterprise Networks,, HotNets, October 2010 Network Integrated Transparent TCP Accelerator, AINA, April 2010 "ElasticTree: Saving Energy in Datacenter Networks, NSDI, April 2010 "Automated and Scalable QoS Control for Network Convergence," WREN/INM 2010 Workshop, held in conjunction with NSDI, April SPAIN: Design and Algorithms for Constructing Large Data-Center Ethernets from Commodity Switches, HP Tech Report, 2009 "A Demonstration of Virtual Machine Mobility in an OpenFlow network" ACM SIGCOMM, (Best Demo Award), Seattle, WA, August 2008.

worldwide DevoFlow: Cost-Effective Flow Management for High Performance Enterprise Networks,, HotNets, October 2010 Network Integrated Transparent TCP Accelerator, AINA, April 2010 "ElasticTree:

17 Examples of Early OpenFlow Adopters University/Commercial Research Perform networking experiments in a large scale Leverage parts of production network Cloud Providers Optimized data center operation and management Differentiate their services with OpenFlow capability to dynamically redirect traffic Campus Network Virtualize Reduced 17 the network for ease of management and enhanced security cost to develop new capabilities

management Differentiate their services with OpenFlow capability to dynamically redirect traffic Campus

18 Customers and OpenFlow Currently over 60 customers using HP OpenFlow switches 95% use OpenFlow in a research test bed, not a production network Test beds are modest sized networks with 5 20 switches Nearly Many all are using the NOX controller use LLDP and STP in their OpenFlow networks Some are looking forward to deployments with 100,000+ users and 1,000+ switches Most are happy with OpenFlow1.0 Requested extensions to OF protocol: ipv6, mac-in-mac, ip-inip, rate limiting, priority queue assignment, traffic shaping, discovery/capabilities

OpenFlow networks Some are looking forward to deployments with 100,000+ users and 1,000+ switches Most are happy with OpenFlow1.

19 HP Virtual Service Network (VSN) Architecture Network Services Management Resource Mgmt virtual resources Provisioning virtual service networks Control appliance status module embedded software control Infrastructure switches/routerswireless APssecurity servicesembedded apps 19

service networks Control appliance status module embedded software

20 HP OpenFlow in Action OpenFlow Management Software Sue Smith Flow Specs Services Specs user < > application connections service levels: performance, latency Video Webcast Services Sue Smith Webcast Services Sue Smith Video Webcast Services Virtual Service Network

levels: performance, latency Video Webcast Services Sue Smith

21 HP OpenFlow in Action OpenFlow Management Software Connection Policies OpenFlow Controller Device Setting s Network Sue Smith Webcast Servers

22 HP OpenFlow in Action By User Connections + Flow Specs Users/Paths per connection

23 HP OpenFlow in Action By Application Connections + Flow Specs Users/Paths per connection

24 ONF

25 OpenFlow Enabled Virtually all the ONF Members have made some type of announcement about supporting OpenFlow. 25

26 Competitive Landscape Highlights Company Data Plane Control Plane Notes Big Switch Cisco IBM Partnership with NEC to use their controller. Juniper OpenFlow in JunOS SDK. Marvell NEC Only vendor with complete solution, but virtually no market share outside Japan. Nicira Pronto Systems HP 26 Yes No Announcement Available in ProCurve switches, under in H3C. Interoperate with Uncertain consideration

27 Demo

28 Urządzenia HP ProCurve 5400zl

29 Urządzenia HP ProCurve 3500yl

30 Kontroler OF Konfiguracja Linux Ubuntu LTE, C++ (gcc), Python, kde-libs NOX (wersja Destiny ) NOX GUI Uruchomienie./nox_core -v -i ptcp:6633 switch monitoring... <moduły>

31 Zasady konfiguracji OF w przełącznikach HP Konfiguracja: Wymiana ruchu kontrolnego OpenFlow pomiędzy przełącznikiem a kontrolerem powinna odbywać się przez dedykowany VLAN. Dedykowany VLAN nie może być VLANem skonfigurowanym jako OpenFlow eksperyment, VLAN 1 nie powinien być wykorzystywany jako dedykowany VLAN, VLAN 1 nie powinien być wykorzystywany jako OpenFlow eksperyment, Tryb pracy urządzenia: Każdy VLAN na przełączniku to oddzielny eksperyment OpenFlow, VLAN Virtualization/Aggregate mode Hybrydowy/Forward Normal/OF-only

32 Konfiguracja przełączników Dedykowany VLAN do wymiany ruchu kontrolnego VLAN skonfigurowany jako OpenFlow eksperyment 3. Włączenie OpenFlow dla VLANu 4. Konfiguracja kontrolera OpenFlow 5. Komendy show vlan 10 name OFMgmt ip address untagged 1-4 vlan 20 name OFExp untagged tagged vlan 20 openflow enable vlan 20 openflow controller tcp: :6633 show openflow version show openflow show openflow 20 flow show openflow rules show openflow 20

33 Topologia sieci

34 Thank you

Podobne dokumenty

Elastyczna sieć dla rozwiązań Cloud Open vswitch

Elastyczna sieć dla rozwiązań Cloud Open vswitch Dariusz Puchalak 19+ lat Linux/Unix Sysadmin 7+ lat trener 6+ m-cy w OSEC OSEC 6+ lat na rynku doświadczona kadra (ACNI, RHCA) specjalizacja open-source