Openflow y SDN (página 2)

Partes: 1, 2

Arquitectura de un openflow controller
Protocol Engines
OpenFlow
OF-Config
Basic Services
API (not standard)
Topology
discovery
Path
computation
Inventory
Infrastructure
Event dispatching
GUI
CLI
FlowVisor (network partitioning)
Applications
Replication
Scheduler
Data Center
Multi Tenancy
Load
Balancer

OpenFlow
Controller
Traditional Router/Switch
OpenFlow Router/Switch
Control Process
Forwarding Table
Secure Channel
Simple Controller
Forwarding/Flow Dispatch Table
Distributed control plane
EVOLUCION A OFN

Controller
PC
Hardware
Layer
Software
Layer
Flow Table
(Gp:) MAC
src
(Gp:) MAC
dst
(Gp:) IP
Src
(Gp:) IP
Dst
(Gp:) TCP
sport
(Gp:) TCP
dport
(Gp:) Action

OpenFlow Client
(Gp:) *
(Gp:) *
(Gp:) 5.6.7.8
(Gp:) *
(Gp:) *
(Gp:) *
(Gp:) port 1

port 4
port 3
port 2
port 1
1.2.3.4
5.6.7.8
Ejemplo de OpenFlow
13

TIPOS DE MENSAJES
Tres tipos de mensajes y cada mensaje con múltiples subtipos.:, controller-to-switch, asynchronous y symmetric.

Controller-to-switch messages are initiated by the controller and used to directly manage or inspect the state of the switch.
Features (query capabilities), modify-state(add/delete/modify flow/group entry), read-state, packet-out
Asynchronous messages are initiated by the switch and used to update the controller of network events and changes to the switch state.
Such as ?ow-removed, packet-in, port-status
Symmetric messages are initiated by either the switch or the controller and sent without solicitation.
hello, echo (request/reply), experimenter

OpenFlow Basics Flow Table Entries (1.0)
Switch
Port
MAC
src
MAC
dst
Eth
type
VLAN
ID
IP
Src
IP
Dst
IP
Prot
L4
sport
L4
dport
Rule
Action
Stats
Forward packet to zero or more ports
Encapsulate and forward to controller
Send to normal processing pipeline
Modify Fields
Any extensions you add!
+ mask what fields to match
Packet + byte counters
15
VLAN
pcp
IP
ToS

Examples (1/2)
Switching
*
(Gp:) Switch
Port
(Gp:) MAC
src
(Gp:) MAC
dst
(Gp:) Eth
type
(Gp:) VLAN
ID
(Gp:) IP
Src
(Gp:) IP
Dst
(Gp:) IP
Prot
(Gp:) TCP
sport
(Gp:) TCP
dport
(Gp:) Action

*
00:1f:..
*
*
*
*
*
*
*
port6
Flow Switching
port3
(Gp:) Switch
Port
(Gp:) MAC
src
(Gp:) MAC
dst
(Gp:) Eth
type
(Gp:) VLAN
ID
(Gp:) IP
Src
(Gp:) IP
Dst
(Gp:) IP
Prot
(Gp:) TCP
sport
(Gp:) TCP
dport
(Gp:) Action

00:20..
00:1f..
0800
vlan1
1.2.3.4
5.6.7.8
4
17264
80
port6
Firewall
*
(Gp:) Switch
Port
(Gp:) MAC
src
(Gp:) MAC
dst
(Gp:) Eth
type
(Gp:) VLAN
ID
(Gp:) IP
Src
(Gp:) IP
Dst
(Gp:) IP
Prot
(Gp:) TCP
sport
(Gp:) TCP
dport
(Gp:) Action

*
*
*
*
*
*
*
*
22
drop
16

Examples (2/2)
Routing
*
(Gp:) Switch
Port
(Gp:) MAC
src
(Gp:) MAC
dst
(Gp:) Eth
type
(Gp:) VLAN
ID
(Gp:) IP
Src
(Gp:) IP
Dst
(Gp:) IP
Prot
(Gp:) TCP
sport
(Gp:) TCP
dport
(Gp:) Action

*
*
*
*
*
5.6.7.8
*
*
*
port6
VLAN Switching
*
(Gp:) Switch
Port
(Gp:) MAC
src
(Gp:) MAC
dst
(Gp:) Eth
type
(Gp:) VLAN
ID
(Gp:) IP
Src
(Gp:) IP
Dst
(Gp:) IP
Prot
(Gp:) TCP
sport
(Gp:) TCP
dport
(Gp:) Action

*
*
vlan1
*
*
*
*
*
port6,
port7,
port9
00:1f..
17

Secure Channel
Flow Table
OpenFlow Controller
OpenFlow Protocol
SSL/TLS
OpenFlow v1.0 Switch
sw
hw
OpenFlow v1.0 Switch

Secure Channel
Flow Table
OpenFlow Controller
OpenFlow Protocol
SSL/TLS
OpenFlow v1.1 Switch
Flow Table
…
Pipeline
Group Table
OpenFlow v1.1 Switch

Secure Channel
Flow Table
OpenFlow Controller
OpenFlow Protocol
SSL/TLS
OpenFlow v1.1 Switch
Flow Table
…
Pipeline
Group
Table Table
OpenFlow v1.1 Switch

CASOS PRACTICOS

Data center interconnect wanOpenflow instead of routing protocols
OpenFlow switch
no routing protocols
Logically centralized
OpenFlow controller

Data center con Arquitectura de SDN
Physical
IP Fabric
Virtualized
Network
Virtualized
Compute
Virtualized
storage
Virtualized
services
Centralized
Orchestration

Multi-tenancy using overlay networks
Hypervisor
Virtual switch
Virtual machine
Overlay tunnel

Virtualized services
Virtual firewall service

centralized orchestrationOF compute, storage, and network
Centralized
Orchestration
Compute
Storage
Network
The IP fabric
was not touched
OpenFlow

Juniper is the recognized leader of the network programmability movement, which is the conceptual foundation underlying the SDN approach.
Long before the term “SDN” was coined, our disruptive network architectures were built on the premise of using innovative software to give customers unprecedented levels of flexibility and control, with an end goal of transforming the economics and experience of networking.
By simultaneously simplifying and opening up the network, Juniper pioneered the core capabilities and concepts behind SDNs.
Posicionamiento de SDN