Protokół OpenFlow w służbie Software Defined Networks (SDN) Piotr Gierz Architekt Rozwiązań 2011 2011Hewlett-Packard Hewlett-PackardDevelopment DevelopmentCompany Company,,L.P. L.P. The information contained herein is subject to change without notice
Źródła: Materiały, informacje: OpenFlow (www.openflow.org,) ONF (www.opennetworking.org), NOX (www.noxrepo.org), Floodlight HP (floodlight.openflowhub.org), Networking (www.procurve.com), różne inne miejsca w sieci. 2
Agenda Co to jest OpenFlow i sieć typu SDN Definicja Struktura Model protokołu komunikacji Zasada działnia OpenFlow i HP Open Networking Fundation (ONF) Demo 3
Co to jest protokół OpenFlow
Definicja Software Defined Networking (SDN) Nowa architektura sieci Oddzielenie control plane od forwarding hardware. Umożliwienie aby data plane był zdefiniowany jako logiczny, centralny kontroler (lub zbiór kontrolerów). OpenFlow Standardowy 5 protokół komunikacyjny używany pomiędzy control i data planes.
Transformacja sieci do modelu SDN Featur e Feature Network OS Featur e Featur e Operating System Specialized Packet Forwarding Hardware Featur e Featur e Operating System Specialized Packet Forwarding Hardware Featur e Featur e Operating System Specialized Packet Forwarding Hardware
Elementy logiczne modelu SDN Dobrze zdefiniowane API (~6000 RFC) Featur e Feature Network OS implementacja mechanizmów i protokołów sieciowych Network OS OpenFlow protokół definuijący przesyłanie pakietów, Packet Forwarding Packet Forwarding Packet Forwarding
Elementy sieci typu SDN Kontroler OF (Network OS) Urządzenia sieciowe wspierające OF Komunikacja out-of-band Ruch produkcyjny sterowany przez protokół OF
Elementy sieci typu SDN Network OS Research NOX (C++/Python), Beacon (Java), Floodlight Trema (Java), (C/Ruby), Commercial ONIX HP [OSDI 2010, Google, Nicira, NEC] The Openflow Management System
Komunikacja w OpenFlow 1. Fizyczne urządzenia sieciowe rejestrują się w kontrolerze OpenFlow, 2. Protokół i port komunikacyjny TCP/6633, 3. Opcja: TCP/6633 szyfrowane i autentykowane w SSL. 4. Działanie Reaktywne lub Proaktywne
Zasada działania If header = x, send to port 4 If header = y, overwrite header with z, send to ports 5,6 If header =?, send to me Flow Table
OpenFlow Flow Table
OpenFlow Flow Table Match Rule Attributes Ingress port MAC source address MAC destination address Ether Type VLAN ID VLAN PCP IPv4 source address IPv4 destination address IPv4 protocol TCP/UDP source port TCP/UDP destination port IPv4 ToS (wildcard or exact match on all fields) QoS Actions En-queue on a specific priority queue Rate limit using a specific meter Forwarding Actions Forward packet to ports Forward via NORMAL processing Flood along Spanning Tree Drop packet Send packet to controller Modify Actions VLAN: set/strip VLAN, VLAN priority L2: set MAC source, set MAC dest L3: set IP source/dest, set IP ToS
OpenFlow i HP
OpenFlow Switch Software Available now! Runs on these switches: HP 8200 Series HP 6600 Series HP 6200 Series HP 5400 Series HP 3500 Series Fully supported, controlled release this year Included as standard feature in
HP s Leadership in OpenFlow Key Contributor and Leader in Advancing the HP and Stanford began Standard collaborating on Ethane the predecessor to OpenFlow in 2007 HP developed the first commercial switch implementation of OpenFlow and demonstrated it with Stanford at the ACM SIGCOMM conference in 2008 HP network switches are now the leading choice for academic and commercial researchers worldwide DevoFlow: Cost-Effective Flow Management for High Performance Enterprise Networks,, HotNets, October 2010 Network Integrated Transparent TCP Accelerator, AINA, April 2010 "ElasticTree: Saving Energy in Datacenter Networks, NSDI, April 2010 "Automated and Scalable QoS Control for Network Convergence," WREN/INM 2010 Workshop, held in conjunction with NSDI, April 2010. SPAIN: Design and Algorithms for Constructing Large Data-Center Ethernets from Commodity Switches, HP Tech Report, 2009 "A Demonstration of Virtual Machine Mobility in an OpenFlow network" ACM SIGCOMM, (Best Demo Award), Seattle, WA, August 2008.
Examples of Early OpenFlow Adopters University/Commercial Research Perform networking experiments in a large scale Leverage parts of production network Cloud Providers Optimized data center operation and management Differentiate their services with OpenFlow capability to dynamically redirect traffic Campus Network Virtualize Reduced 17 the network for ease of management and enhanced security cost to develop new capabilities
Customers and OpenFlow Currently over 60 customers using HP OpenFlow switches 95% use OpenFlow in a research test bed, not a production network Test beds are modest sized networks with 5 20 switches Nearly Many all are using the NOX controller use LLDP and STP in their OpenFlow networks Some are looking forward to deployments with 100,000+ users and 1,000+ switches Most are happy with OpenFlow1.0 Requested extensions to OF protocol: ipv6, mac-in-mac, ip-inip, rate limiting, priority queue assignment, traffic shaping, discovery/capabilities
HP Virtual Service Network (VSN) Architecture Network Services Management Resource Mgmt virtual resources Provisioning virtual service networks Control appliance status module embedded software control Infrastructure switches/routerswireless APssecurity servicesembedded apps 19
HP OpenFlow in Action OpenFlow Management Software Sue Smith Flow Specs Services Specs user < > application connections service levels: performance, latency Video Webcast Services Sue Smith Webcast Services Sue Smith Video Webcast Services Virtual Service Network
HP OpenFlow in Action OpenFlow Management Software Connection Policies OpenFlow Controller Device Setting s Network Sue Smith Webcast Servers
HP OpenFlow in Action By User Connections + Flow Specs Users/Paths per connection
HP OpenFlow in Action By Application Connections + Flow Specs Users/Paths per connection
ONF
OpenFlow Enabled Virtually all the ONF Members have made some type of announcement about supporting OpenFlow. 25
Competitive Landscape Highlights Company Data Plane Control Plane Notes Big Switch Cisco IBM Partnership with NEC to use their controller. Juniper OpenFlow in JunOS SDK. Marvell NEC Only vendor with complete solution, but virtually no market share outside Japan. Nicira Pronto Systems HP 26 Yes No Announcement Available in ProCurve switches, under in H3C. Interoperate with Uncertain consideration
Demo
Urządzenia HP ProCurve 5400zl
Urządzenia HP ProCurve 3500yl
Kontroler OF Konfiguracja Linux Ubuntu 10.04.4 LTE, C++ (gcc), Python, kde-libs NOX (wersja Destiny ) NOX GUI Uruchomienie./nox_core -v -i ptcp:6633 switch monitoring... <moduły>
Zasady konfiguracji OF w przełącznikach HP Konfiguracja: Wymiana ruchu kontrolnego OpenFlow pomiędzy przełącznikiem a kontrolerem powinna odbywać się przez dedykowany VLAN. Dedykowany VLAN nie może być VLANem skonfigurowanym jako OpenFlow eksperyment, VLAN 1 nie powinien być wykorzystywany jako dedykowany VLAN, VLAN 1 nie powinien być wykorzystywany jako OpenFlow eksperyment, Tryb pracy urządzenia: Każdy VLAN na przełączniku to oddzielny eksperyment OpenFlow, VLAN Virtualization/Aggregate mode Hybrydowy/Forward Normal/OF-only
Konfiguracja przełączników 1. 2. Dedykowany VLAN do wymiany ruchu kontrolnego VLAN skonfigurowany jako OpenFlow eksperyment 3. Włączenie OpenFlow dla VLANu 4. Konfiguracja kontrolera OpenFlow 5. Komendy show vlan 10 name OFMgmt ip address 172.16.10.1 255.255.255.0 untagged 1-4 vlan 20 name OFExp untagged 21-24 tagged 11-14 vlan 20 openflow enable vlan 20 openflow controller tcp:172.16.10.1:6633 show openflow version show openflow show openflow 20 flow show openflow rules show openflow 20
Topologia sieci
Thank you