260 likes | 417 Views
Toward Transitional SDN Deployment in Enterprise Networks. Marco Canini. with Dan Levin, Stefan Schmid , Anja Feldmann. TU Berlin / Telekom Innovation Labs. Motivation. I. ♥. SDN. GOAL: Help SDN succeed!. The SDN Deployment Problem. Full SDN. UPGRADE.
E N D
Toward Transitional SDN Deployment in Enterprise Networks Marco Canini withDan Levin, Stefan Schmid, AnjaFeldmann TU Berlin / Telekom Innovation Labs
Motivation I ♥ SDN GOAL: Help SDN succeed!
The SDN Deployment Problem Full SDN UPGRADE Must upgrade to SDN incrementally A real large-scale campus network
Key Questions • How can we incrementally deploy SDNinto enterprise campus networks? • Can we reap the benefits of SDNwith partial deployment?
Current Transitional Networks ? LegacyMgmt SDNPlatform Dual-stack approach
Current Transitional Networks ? App1 App2 App3 LegacyMgmt SDNPlatform SDN Platform LegacyMgmt Dual-stack approach Edge-only approach
PANOPTICON SDN ARCHITECTUREOperate the network as a (nearly) full SDN TOOLDetermine the partial SDN deployment
1. Planning the SDN Deployment B Network architect provides set ofingress ports to becontrolled via SDN C D A E F
Network topology TOOL Optimizedpartial SDNdeployment Cost-awareoptimizer Trafficestimates Objectives Tunable parameters • Upgrade budget • Path delay • Port priorities • Price model • Utilization thresholds(link utilization, VLANs, etc.)
The Partial SDN Deployment ( ) B C D A E F
Benefits of Partial SDN Deployment? B C Harvest unutilizednetwork capacity D A E F
Main benefits of SDN=Principled orchestration ofthe network policy B C D A E F
? Can partial SDN deploymentstill take advantage ofprincipled network orchestration
2. Realizing the Benefits of SDN Insight #1:≥ 1 SDN switch Policy enforcement IDS B Middleboxtraversal C D A E F Access control
2. Realizing the Benefits of SDN Insight #1:≥ 1 SDN switch Policy enforcement B C D A Trafficload-balancing E Insight #2:≥ 2 SDN switches Fine-grained control F
SDN Waypoint Enforcement Insight #1:≥ 1 SDN switch Policy enforcement Insight #2:≥ 2 SDN switches Fine-grained control Ensure that all traffic to/froman SDN-controlled port always traverses at least one SDN switch Legacy devices must direct traffic to SDN switches
SDN Architecture The PANOPTICON Conceptually group SDN ports in Cell Blocks B C D A E F
SDN Architecture The PANOPTICON Traffic restricted to Solitary Confinement Trees B C D A E Per-port spanning trees thatensure waypoint enforcement F
PANOPTICON A E F B B C D “Logical SDN” C D A E F
A E F B C D “Logical SDN” PANOPTICON provides the abstraction of a (nearly)fully-deployed SDN in a partially upgraded network PANOPTICON App1 App2 App3 SDN Platform
Results Highlights • Evaluated a large campus network (1713 switches) • Upgrade 6% of distribution switches • 100% SDN-controlled ingress ports • avg. path stretch < 50% • max. link util. < 70%
Summary SDN ARCHITECTUREOperate the network asa (nearly) full SDN A E F B C D TOOLDetermine the partialSDN deployment PANOPTICON App1 App2 App3 SDN Platform
The Collaborators Dan Levin Stefan Schmid AnjaFeldmann
Thank you! Questions? A E F B C D PANOPTICON Come and see us! App1 App2 App3 SDN Platform