400 likes | 767 Views
SDN / NFV – Cloud Data Center Solution Overview. September 18, 2013 . Version 2.1. Cloud Data Center Market Two Macro Trends. 1. Top Investment Drviers : Virtualization & Security. 2 . Consolidation & Cloud Trends = Rise of Large Scale Data Centers.
E N D
SDN / NFV – Cloud Data CenterSolution Overview September 18, 2013 Version 2.1
Cloud Data Center MarketTwo Macro Trends 1. Top Investment Drviers: Virtualization & Security 2. Consolidation & Cloud Trends = Rise of Large Scale Data Centers Source: Data Center Deployment and SDN Strategies: North American Enterprise Survey - October 25, 2012
10G / 40G Adoption Spirent new DX2 / FX2 line and 400G ready chassis provide best of breed solutions for high density 10/40/100G testing.
Other DC Investment Drivers • Spirent is focused on solutions for the top two concerns • Virtualization • Large DC adoption of VM much faster: 53% increase projected in the next 12 months alone! • Spirent’s Virtual Solutions validate performances of VM, Virtual Switches, NFV, Hypervisors… • AppSec • Security & App Performance are top concerns • Avalanche Virtual & Avalanche Next is industry leading AppSec testing solutions
How about SDN?(Hype? or Not?) '12 - '18 Market Forecast by Product Category SDN Spend by Use Case Cloud Service Provider Datacenter - Hyper-scale Datacenter, Web 2.0 Datacenter Service Provider - WAN Edge, Metro, Core, Mobile Backhaul, Mobile Packet Core Source: Lightspeed ventures and SDNCentral
Large Scale Ethernet Fabric Tests • June.2012 - World Largest Ethernet Fabric Test – Juniper • 1,536x 10G Ports • 2.357M Low Latency L2/3 streams • Multicast w/ IGMP • In Progress – with two vendors • 384x 40G ports • 40x 100G ports • Spirent is Leader in This Space! • Test Throughput, Queueput, forwarding, frame loss, congestion • RFC 2889, Benchmarking Methodology for LAN Switching Devices • RFC 2544, Benchmarking Methodology for Network Interconnect Devices • RFC 3918, Methodology for IP Multicast Benchmarking • Draft Data Center Bridging Benchmarking (tests 802.1Qbb and 802.Qaz) • RFC 5180, IPv6 Benchmarking Methodology for Network Interconnect Devices • RFC 4814, Hash and Stuffing: Overlooked Factors in Network Device Benchmarking
Spirent Data Center Solutions • Convergence of storage networking and data networking • FCoE, LLDP/DCBX, PFC • Convergence of layer 2 and layer 3 • TRILL, Shortest Path Bridging, Fabricpath • Making the network deal with compute virtualization • VEPA/EVB, LISP • Connecting multiple data centers/pods • OTV • Software Defined Network • Openflow Controller Emulation 1.3 • Openflow Compliance Testing – OFTest 1.0.1
Spirent dX2 • 8-port QSFP+ single slot module • Industry leading 10G density – 32 ports per slot • Industry leading 40G density – 8 ports per slot (2x competition) • Industry leading dual-speed 40G/10G density (speed set per QSFP+ port) • Lowest cost of ownership for both 10G and 40G • 1,536 10G or 384 40G ports per rack • Massive traffic scale to fully load the largest fabrics
Spirent fX2 • Highest Density of any Test Module in its Class • Industry-leading 10G density – 20 ports per slot • Industry–leading 40G density – 5 ports per slot • Industry-leading dual-speed 40G/10G density (speed set per QSFP+ port) • Speed configurable per QSFP+ port • 64K Tx and 128K Rx streams per port first release & increasing thereafter!
QSFP+ Overview • dX2 and fX2 modules come with QSFP+ interfaces • QSFP+ = quad SFP+ • Equivalent to 4 SFP+ interfaces in a smaller QSFP+ package • Can run 40G Ethernet as well as 4 x 10G Ethernet • 4 x 10G operation connected to a SFP+ DUT requires “breakout” cable options
VXLAN • Unknown MAC address sent via multicast to all other VTEPs • VTEPs learn VM Mac to VTEP IP mappings similar to a Bridge • Known MAC address sent via point-to-point tunnel between VTEP • Mac-in-IP Overlay • VTEP (typically Vswitch) maps VMs to VxLAN tunnel • 24 bit VXLAN Header (16M VXLANs) • Crosses Layer 3 boundaries
Typical Test Scenarios Wizard: • Create multiple VTEPs and VMs behind the VTEPs • Create VMs (hosts) behind the customers switch • Create traffic between the VMs • Enable IGMP on the VTEPs • Map VMs to a multicast group • Map VMs to a VXLAN segment Tests: • VTEP Performance / Scale • Mac / VXLAN Scale • Mac Learning / Multicast • VM Mobility • Duplicate Mac / VLAN • Traffic Leaking between VXLAN Testing Virtual VTEP Testing Physical VTEP Large Scale VTEP & VM Emulation
Top Differentiators • Large scale Ethernet fabric testing is our strength! • DX2 / FX2 – highest density 10/40G • New STC Chassis – 100/400G ready for future • Protocol/Realism, Unified Platform, Intelligent Results, Wizards, iTest… • Avalanche Next provides industry best AppSec test solution with traffic realism
Spirent and OpenFlow • ONF member since founding year • Co-Funded open-source OFTest conformance test suite • Spirent solution based on OFTest – actual tool used by ONF for certification testing • Hosting Plugfest Nov 4-8 • Active participation in Testing & Interoperability Working Group • Weekly calls • Test Case Contributions • 3-4 engineers at each Plugfest
OpenFlow Testing Challenges • Debate whether OpenFlow can scale • Latency in Reactive Mode • Limited length and width in TCAM flow tables • Mix of Switches w/ various capabilities (L2, L3, L2/3, hybrid…) • Mix of Controllers – Availability / Performance concerns • Security – hardening the controller, protocols… • Traffic leakage between tenants • Very Complex & Tedious Test Workflows • Disconnection between Network (SDN) and Application / Security testing (NFV)
OpenFlow 1.0 & 1.3 Support • Port Discovery (via LLDP) • Scale & Performance • 1M flows and Multiple Controller per port • True latency measurements • Fully automated flow building wizard • Reduce setup time by up to 4X • OpenFlow Timing Measurements • Flow Update Add Count = Number of flows added • Flow Update Add Time = Time to add flows • Flow Update Add Rate = Rate of flow adds (flows/sec) • Barrier Response Time = Time between Barrier Request and Reply • Flow Update Add Setup Time = Time between First flow add Barrier Reply • All 1.0 Match Fields • 1.3 Features: IPv6, MPLS Support, Group Definitions and Rate Limits (Metering) • Coming Soon: • OpenflowTLV Editor (with Custom TLV support) • Switch Emulation
Testing Standard Compliance • OFTest – Unbuntu VM Package (available for download very soon) • OFTest is “official” tool used by ONF for certification • Our Ubuntu Package is available for free download. It makes OFTest much easier to install and start. • iTest / OFTest Conformance Test Suite (1.0.1) (Oct 2013) • Automation – Configuring & running OFTest VMs and SUTs • Analysis – Collects logs from OFTest / SUTs, WireShark decodes • Test Authoring – easily add / extend use cases • Coming Soon – Compliance testing for OpenFlow 1.3 (Nov 2013)
Support Partners in Public Demos • June.2013 - Interop Tokyo 2013 Grand-Prix Award • OpenFlow 1.3 Interoperability • June.2013 - ONF Plugfest • OpenFlow 1.3 Controller Emulation • Aug.2013 - Global Open Networking and SDN Conference 2013 in Beijing • First public OpenFlow 1.3 test in China
Partnership with SDN Central & Network Test (David Newman) • SDN/NFV Test Methodologies • NFV Overlay Underlay • VM-VM Inter/Intra Servers, Racks, DC • VM Motions • NS EW Traffic Patterns • Dynamic underlay network • VM placements • Joint development / marketing • Public Tests with SDN/NFV vendors
Open Networking Lab – Menlo Park • Stanford + Berkeley Technology Transfers • Collaborating on Test Methodologies for: • SDN-IP BGP Beering – large scale BGP protocol emulation • ONOS – HA SDN Controller testing • Flowvisor / Netvisor – VLAN leaking
SDN Landscape • NFV • NV • Open Flow NFV NFV NFV Compute Infrastructure VSwitch Overlay Network (VXLAN, NVGRE) VSwitch VSwitch Underlay Network OpenFlow Controller Management Console
Spirent TestCenter VirtualAvalanche Virtual • Top Differentiators • Virtual & Physical Ports are identical • All STC & AV “goodness” are available as virtual • Great for Test Cases than spans virtual & physical • Only solution that can test L2-7 & Storage IO simultaneously • No lag in feature releases between physical & virtual =
Testing vSwitch, Hypervisor, NIC & Server • Runs on a Hypervisor or Bare Metal Server • Vmware, KVM, QEMU, Xen, HyperV • Benchmarking • Virtual Switches • Virtual NICs / acceleration technologies • High-end servers / NICs • Identifies effectiveness of various performance tuning factors Servers / Applications DataCenter Switches SAN Storage Array NAS Network Attached Storage Benchmarking on Cisco UCS server
Testing VM Live Migration • Test vMotions using real VMs • Use native live migration mechanism • vMotion • XenMotion • Concurrent Live (Hyper-V) • Live Migration (Red Hat) • Test realistic LAN L2-7 & SAN I/O simultaneously Server L2-7 & Storage I/O Server Server Any Hypervisors Switch Switch STC 1/10/40G HW test ports Storage target
Testing NFV / Service Chains Spirent Solutions: • Validate NFV Virtual Firewall, IDS/IPS, NAT, etc. performance • Validate End-to-End Service Chain performance • Simulate realistic Application & Security traffic Firewall NAT IDS VSwitch VSwitch VSwitch OpenFlow Controller Management Console 10/40/100G
VMWorld 2013 w/ Net Optics – Validating Virtual Switch & Virtual Appliance Performance & QoE Impact • Spirent Avalanche Virtual + NetOptics Phantom Virtual Tap Solution • Validate performance & scale of virtual tap and virtual security appliances • Simulate large scale security attacks and web / application traffic • Measure QoE impact
Top Differentiators • Only vendor with truly end-to-end solutions • Across Compute & Network layers • Across Virtual & Physical infrastructure • Orchestration / Integration for end-to-end test methodologies • Unified Platform & Virtual is key • Virtual is 100% same as Physical • Same GUI, scripts, methodologies across AV, STC, HW & Virtual • SDN/NFV testing requires mix of virtual & physical ports • East-South Traffic (STCv/AVv to STCv/AVv - Inter / Intra Server & Racks) • North-South Traffic (STCv to STC – Servers to Cloud of Hosts) • Realism Matters • Leverage Spirent’s Industry Leading Avalanche and Avalanche Virtual
Improving Software Engineering Efficiency Using Dynamic Virtual Test Bed
A new direction … Continuous Integration • SW Development Process • Integrate Code Daily • Each Integration Verified/Tested • Detect integration errors quicker • Reduced integration problems • Cohesive Software Development
NEM Based Continuous Integration Case Study *Metrics are based on manual and approximated calculations due to lack of rigorous monitoring ** Indicates a successful build or test cycle and omits failures
Success Story: Why a major NEM chose iTest and STC? • Challenges • Regression testing takes 4 days • Must manually configure DUTs • Testing Edge Router requires 3 additional DUTs and 84 test ports • Results • iTest reduced time to test to 7 hours • STC supports “device-behind-device” reducing required ports to 24 • Reduce test-bed cost to $200k from $1M