8 software defined networking and traffic engineering partha narasimhan_ash chowdappa

CONFIDENTIAL
© Copyright 2013. Aruba Networks, Inc.
All rights reserved
#airheadsconf
So#ware Deﬁned Networking &
Traﬃc Engineering
Partha Narasimhan & Ash Chowdappa
March 2013

CONFIDENTIAL
All rights reserved
-‐ IntroducNon to SDN
-‐ SDN EvoluNon & Traﬃc Engineering
-‐ Wired + Wireless SDN Architecture
-‐ SDN Use Cases
-‐ Simpliﬁed network designs with SDN ?
Agenda

CONFIDENTIAL
All rights reserved
#airheadsconf 3
IntroducNon to SDN

CONFIDENTIAL
All rights reserved 4 #airheadsconf
So#ware Defined Networking
•  SoWware-‐defined networking decouples network control
(rouNng and switching traffic) from the physical network
topology
•  Network intelligence and state are centralized, network
topology is abstracted and virtualized
•  Open Networking FoundaNon consorNum is leading
standardizaNon efforts
•  hps://www.opennetworking.org/
•  OpenFlow is a protocol that facilitates communicaNon
between SDN Controllers and SDN capable network
elements.

CONFIDENTIAL
SDN Logical Architecture*
* hps://www.opennetworking.org/images/stories/downloads/white-‐papers/wp-‐sdn-‐newnorm.pdf

CONFIDENTIAL
SDN & OpenFlow beneﬁts*
* hps://www.opennetworking.org/images/stories/downloads/white-‐papers/wp-‐sdn-‐newnorm.pdf
•  Centralized management and control of networking devices from
mulNple vendors
•  Increased network reliability, security, uniform policy enforcement, and
fewer conﬁguraNon errors
•  More granular network control with the ability to apply comprehensive
and wide-‐ranging policies at the session, user, device, and applicaNon
levels
•  Beer end-‐user experience as applicaNons exploit centralized network
state informaNon to seamlessly adapt network behavior to user needs.

CONFIDENTIAL
All rights reserved
#airheadsconf 7
SDN EvoluNon & Traﬃc Engineering
Home vs Enterprise Networks

CONFIDENTIAL
SDN Categories
Datacenter/Core
Infastructure
Access
Infrastructure

CONFIDENTIAL
Quest to simplify end user experience &
network operaHons
Typical “Home” networks
•  Handful of personal devices
•  Single broadcast domain in home networks
Enterprise networks
•  100’s of Broadcast domains
•  Security policies
•  1000’s of devices

All rights reserved
10
Aruba SDN Framework EvoluHon
WLAN
Infrastructure
Virtualization
WLAN +
Services
Virtualization
Wireless +
Wired
1.  Seamless WLAN overlay deployment
2.  VLAN “virtualizaNon”
3.  Broadcast/MulNcast arbitraNon for WLANs
4.  Centralized controller based ﬂow control
1.  “AirGroup” mDNS centralized control plane –
services, topology virtualizaNon
2.  Abstract underlying L2/L3 network topology
1.  Centralized arbitraNon
point for network, services
discovery protocols
2.  Traﬃc engineering with
virtual topology

CONFIDENTIAL
Example of Network VirtualizaHon
Virtual VLANs on Wireless LANs
User VLANs “virtualized” i.e. they are not instanNated
on the edge switches that the APs are connected.

CONFIDENTIAL
• Special handling for ARP, v6 ND, DHCP
–  Drop everything else (breaks services such as Bonjour)
• AirGroup – mDNS protocol speciﬁc handling
–  Can we generalize AirGroup to handle any generic Bcast/Mcast protocol ?
–  Network neighborhood deﬁned by policy and independent of physical
network topology
• Need good BC/MC handling for all physical network designs
Example of Network Services VirtualizaHon
Special Broadcast / Mul:cast handling

CONFIDENTIAL
All rights reserved
#airheadsconf 13
Wired + Wireless SDN Architecture

CONFIDENTIAL © Copyright 2012.
Aruba Networks, Inc. All rights reserved
Personalized Experience
User
Simplify Network Ops
IT
So#ware Deﬁned Uniﬁed Access
VPN
Access Policy Mobility State Performance
Management LocaNon Content Network Apps AnalyNcs
Onboard New Apps,
BYOD & Guests
Flow Awareness,
App Services
Monitor Wi-‐Fi, Wired
& WAN Controller AirWave ClearPass
SDN Control Plane

CONFIDENTIAL
Flow Steering with OpenFlow
OF
OF
OF
OF
OF
OF
OF
OF
OF
OF
OF
OF
•  Virtual cut-through
paths per user/app
•  Unified access on
multi-vendor network
•  Stitching flows
across roles
OF

CONFIDENTIAL
So#ware Deﬁned Personalized Networks

CONFIDENTIAL
Air Services
  Visibility of services
based on ownership,
locaNon and role
Branch

CONFIDENTIAL
Aruba AirGroup Example: Student Mary
Personal
AirGroup
“Mary”
Shared AirGroup
“Students”
Local AirGroup
“Lab”
Mary’s
MacBook
Mary’s
iPad
Classroom
Apple TV
For teachers only
Dormitory
Printer
Library
Printer
Lab
Apple TV
Auditorium
Printer
For teachers
only
Mary’s
Apple TV
Mary’s
Friend
Mike
Mary’s
Friend Jen

CONFIDENTIAL
Per User, Device Security
Branch
SSID: Corporate
  MulNple user, device
policies under the same
SSID

CONFIDENTIAL
200
Mbps
600
Mbps
Dynamic RF topology based on
applicaHon QoS, delivery context
  Best Wi-‐Fi rates for each
mobile device
  Best topology (AP,
channel selecNon) is
driven by App QoS
requirements
HQ
400
Mbps
108
Mbps
54
Mbps
36
Mbps

CONFIDENTIAL
• SDN may present an opportunity to simplify network designs
–  With special Bcast/Mcast handling for Wired/Wireless the size of broadcast
domain may not maer
–  Dynamic SDN topologies imply physical and logical L2/L3 topologies are
less relevant
• A flat L2 for IPv6 only (Wired) ?
–  Keep current v4 design, move v6 traffic into an overlay VLAN
• “Solve” L3 mobility with simplified topology
Future network designs with SDN

8 software defined networking and traffic engineering partha narasimhan_ash chowdappa

Related slideshows

More Related Content

8 software defined networking and traffic engineering partha narasimhan_ash chowdappa