Post on 15-Jan-2015
description
SDN sur le réseau de l’entreprise Webinar client – 3 juillet 2014
Jérôme Durand Consulting Systems Engineer, Routing & Switching
Gauthier Mille Enterprise Networking
http://reseauxblog.cisco.fr
Cisco Confidential 2 © 2013-2014 Cisco and/or its affiliates. All rights reserved.
§ Introduction au Software Defined Networking § Stratégie SDN Cisco sur les réseaux d’entreprise
§ Programmabilité des équipements
§ Contrôleur APIC-EM
§ Virtualisation du réseau
§ Conclusion
Agenda
Cisco Confidential 3 © 2013-2014 Cisco and/or its affiliates. All rights reserved.
Introduction au Software Defined Networking
Cisco Confidential 4 © 2013-2014 Cisco and/or its affiliates. All rights reserved.
SDN classique – sortir le control plane de l’équipement
Approche traditionnelle
Approche SDN basique
Cisco Confidential 5 © 2013-2014 Cisco and/or its affiliates. All rights reserved.
5
Définition SDN Définition ‘Open Networking Foundation
The physical separation of the network control plane from the forwarding plane, and where a control plane controls several devices.
Cisco Confidential 6 © 2013-2014 Cisco and/or its affiliates. All rights reserved.
6
Définition OpenFlow ? Définition Open Networking Foundation
First standard communications interface defined between the control and forwarding layers of an SDN architecture
Cisco Confidential 7 © 2013-2014 Cisco and/or its affiliates. All rights reserved.
OpenFlow est une composante de SDN
SDN est plus vaste
SDN n’est pas OpenFlow
Cisco Confidential 8 © 2013-2014 Cisco and/or its affiliates. All rights reserved.
One Size does not fit ALL
NETCONF YANG
Driven by SP customers Standardized in IETF
REST Driven by DC customers Also, standardized in IETF
onePK
Driven by Cisco SDK type of access Suitable for packet processing applications
Puppet Driven by DC customers Open source tool chain
Chef
Driven by DC customers Open source tool chain
OMI
Driven by DC customers (mainly Microsoft) Open source tool chain
Open Flow
Research and Academia, Federal and state govt.
Cisco Confidential 9 © 2013-2014 Cisco and/or its affiliates. All rights reserved.
Vendor-specific APIs
Applications
Programmable APIs
Control Plane
Data Plane
Vendor Specific (e.g. onePK)
1
Modèles de programmabilité SDN
Applications
Virtual Control Plane
Virtual Data Plane
Overlay Protocols (e.g. VXLAN)
Vendor- specific APIs
3 Network Virtualization/ Virtual Overlays
Control Plane
Data Plane
Controller
Data Plane
Applications
Vendor-specific APIs
OpenFlow
2a Classic SDN
Vendor Specific (e.g. onePK)
Controller
Data Plane
Applications
Vendor-specific APIs
OpenFlow
Control Plane
2b Hybrid “SDN”
Vendor Specific (e.g. onePK)
Control Plane
Data Plane
CLI, SNMP, …
Cisco Confidential 10 © 2013-2014 Cisco and/or its affiliates. All rights reserved.
Contrôler ? Mais comment ?
Air traffic control tells where to take off from, but not how to fly the plane
Baggage handlers follow sequences of simple, basic instructions
CONTRÔLE “IMPERATIF” CONTRÔLE “DECLARATIF”
Cisco Confidential 11 © 2013-2014 Cisco and/or its affiliates. All rights reserved.
Strategy SDN Cisco ACI - Application Centric Infrastructure
Cisco Confidential 12 © 2013-2014 Cisco and/or its affiliates. All rights reserved.
Le réseau ne cesse de se complexifier
Quelle: ZK Research 2013
Origine des incidents Le challenge
IoT BYOD
WLAN
Cloud computing
Ressources
Complexité
Virtualisation / UC Mobilité
Cisco Confidential 13 © 2013-2014 Cisco and/or its affiliates. All rights reserved.
SDN pour résoudre les challenges principaux sur les réseaux d’entretprise
Réduction des coûts
Mieux manager le réseau
Utiliser les fonctionnalités du réseau
Ajouter simplement des services
Cisco Confidential 14 © 2013-2014 Cisco and/or its affiliates. All rights reserved.
Le rôle du contrôleur: abstraction de l’élément réseau Passer du temps sur le quoi, pas sur le comment
Cisco Confidential 15 © 2013-2014 Cisco and/or its affiliates. All rights reserved.
SDN pour simplifier
Cisco Confidential 16 © 2013-2014 Cisco and/or its affiliates. All rights reserved.
Vendor-specific APIs
Applications
Programmable APIs
Control Plane
Data Plane
Vendor Specific (e.g. onePK)
1
La stratégie Cisco
Applications
Virtual Control Plane
Virtual Data Plane
Overlay Protocols (e.g. VXLAN)
Vendor- specific APIs
3 Network Virtualization/ Virtual Overlays
Control Plane
Data Plane
Controller
Data Plane
Applications
Vendor-specific APIs
OpenFlow
2a Classic SDN
Vendor Specific (e.g. onePK)
Controller
Data Plane
Applications
Vendor-specific APIs
OpenFlow
Control Plane
2b Hybrid “SDN”
Vendor Specific (e.g. onePK)
Control Plane
Data Plane
CLI, SNMP, …
Cisco Confidential 17 Cisco Confidential 17 © 2013-2014 Cisco and/or its affiliates. All rights reserved.
DATA CENTER ACCESS WAN
Application Network Profile User/Things Network Profile
APIC EM APIC EM
Consistent Policy Across Cloud, DC, WAN and Access
CLOUD
APPLICATION PROFILE
USER PROFILE
Stratégie uniforme sur toutes les composantes du réseau
Cisco Confidential 18 © 2013-2014 Cisco and/or its affiliates. All rights reserved.
Vendor-specific APIs
Applications
Programmable APIs
Control Plane
Data Plane
Vendor Specific (e.g. onePK)
1
Programmabilité des équipements
Applications
Virtual Control Plane
Virtual Data Plane
Overlay Protocols (e.g. VXLAN)
Vendor- specific APIs
3 Network Virtualization/ Virtual Overlays
Control Plane
Data Plane
Controller
Data Plane
Applications
Vendor-specific APIs
OpenFlow
2a Classic SDN
Vendor Specific (e.g. onePK)
Controller
Data Plane
Applications
Vendor-specific APIs
OpenFlow
Control Plane
2b Hybrid “SDN”
Vendor Specific (e.g. onePK)
Control Plane
Data Plane
CLI, SNMP, …
Cisco Confidential 19 © 2013-2014 Cisco and/or its affiliates. All rights reserved.
Pourquoi des API ? Configurer
Opérer Rajouter des
fonctionnalités Déploiement de
services
Cisco Confidential 20 © 2013-2014 Cisco and/or its affiliates. All rights reserved.
Plusieurs API pour plusieurs besoins Configurer
Opérer Rajouter des
fonctionnalités Déploiement de
services
NETCONF YANG
BGP-LS PCEP OpFlex
Cisco Python API BGP
Flowspec
Cisco Confidential 21 © 2013-2014 Cisco and/or its affiliates. All rights reserved.
BUILD, AUTOMATE, IMPROVE
SPEED & FASTER ADAPTABILITY
EXTEND TO NEW BUSINESS PLATFORMS
REVENUE & COST SAVINGS
SIMPLICITY, INTEGRATION & THE POWER OF CHOICE
onePK: One Platform Kit Disponible depuis Avril 2014 sur ASR et ISR
C, JAVA, REST, Python Development
API Presentation
API Infrastructure
(IOS) (NX-OS) (IOS-XR)
OnePK
Write Once, Run Anywhere
Cisco Confidential 22 © 2013-2014 Cisco and/or its affiliates. All rights reserved.
Custom Routing App
onePK
Data Center
onePK
Select Packets Take a Custom Policy-Based
Route
Data Center
An example of OnePK application Traffic Steering / Custom Routing
Custom routing application hosted on a server, communicates securely with onePK infrastructure to route specific packets according to a custom policy
Example policies: • Bandwidth utilization (network) • Latency (network) • Time of the day (external) • Cost (external)
Cisco Confidential 23 © 2013-2014 Cisco and/or its affiliates. All rights reserved.
Où héberger les applications OnePK ? Plusieurs modèles selon les besoins
App
App
External Server
Hardware Blade
Device (process) IOx
App
Cisco Confidential 24 © 2013-2014 Cisco and/or its affiliates. All rights reserved.
Vendor-specific APIs
Applications
Programmable APIs
Control Plane
Data Plane
Vendor Specific (e.g. onePK)
1
Contrôleur SDN – APIC-EM
Applications
Virtual Control Plane
Virtual Data Plane
Overlay Protocols (e.g. VXLAN)
Vendor- specific APIs
3 Network Virtualization/ Virtual Overlays
Control Plane
Data Plane
Controller
Data Plane
Applications
Vendor-specific APIs
OpenFlow
2a Classic SDN
Vendor Specific (e.g. onePK)
Controller
Data Plane
Applications
Vendor-specific APIs
OpenFlow
Control Plane
2b Hybrid “SDN”
Vendor Specific (e.g. onePK)
Control Plane
Data Plane
CLI, SNMP, …
Cisco Confidential 25 © 2013-2014 Cisco and/or its affiliates. All rights reserved.
Architecture Cisco APIC Enterprise Module
Abstracts Network Devices to Mask Complexity Treat Network as a System
Exposes Network Intelligence For Business Innovation
Cisco APIC Enterprise Module
Cisco and Third Party Applications
Network Devices Catalyst, ASR, ISR
Network Info Database
Policy Infrastructure Automation
REST API
CLI, OpenFlow, OnePK API
Security QoS Mobility
Cisco Confidential 26 © 2013-2014 Cisco and/or its affiliates. All rights reserved.
Cisco APIC Enterprise Module Scénarios de déploiement initiaux
Easy QoS
Follow Me QoS
Compliance Assurance
Network-Wide Rapid Threat Detection and Mitigation (Sourcefire)
ACL Management Automation
Résoudre les problèmes principaux de nos clients EN GARANTISSANT LA PROTECTION DES INVESTISSEMENTS
Automated Performance Routing (PfR) Configuration
Automated WAN Policy Compliance Assurance
QoS
Cisco Confidential 27 © 2013-2014 Cisco and/or its affiliates. All rights reserved.
Enterprise Applications
APIC Enterprise Module Release 1.0 Software VM
SAL
REST APIs
Enterprise Services
Inventory and State
Identity and Location
Application Awareness
Policy Enforcement
QoS Policy Management ACL
Elastic Infrastructure
CLI
Advanced Network Visualizer
APIC EM
CLI Enables Immediate Use of Installed Base
Cisco Confidential 28 © 2013-2014 Cisco and/or its affiliates. All rights reserved.
APIC-EM Démo du contrôleur du réseau de l’entreprise
Cisco Confidential 29 © 2013-2014 Cisco and/or its affiliates. All rights reserved.
Autre exemple: QOS Classification for Jabber
Enterprise Network
3945/ISRG2 3945/ISRG2
EN Controller
3945/ISRG2
Cat 3750 Cat 3750
QoS Changes
Collaboration App
Session Policy
AP
Pre-QOS change – Default Classification Post QoS change - Video
Cisco Confidential 30 © 2013-2014 Cisco and/or its affiliates. All rights reserved.
Vendor-specific APIs
Applications
Programmable APIs
Control Plane
Data Plane
Vendor Specific (e.g. onePK)
1
Virtualisation des fonctions réseau / overlay
Applications
Virtual Control Plane
Virtual Data Plane
Overlay Protocols (e.g. VXLAN)
Vendor- specific APIs
3 Network Virtualization/ Virtual Overlays
Control Plane
Data Plane
Controller
Data Plane
Applications
Vendor-specific APIs
OpenFlow
2a Classic SDN
Vendor Specific (e.g. onePK)
Controller
Data Plane
Applications
Vendor-specific APIs
OpenFlow
Control Plane
2b Hybrid “SDN”
Vendor Specific (e.g. onePK)
Control Plane
Data Plane
CLI, SNMP, …
Cisco Confidential 31 © 2013-2014 Cisco and/or its affiliates. All rights reserved.
Consistence opérationnelle pour les réseaux physiques et virtuels Virtualisation des solutions Cisco pour le réseau
Server
Hypervisor Nexus 1000v
OS
App
CSR 1000V ASAv vNAM vWAAS
…
Cisco Confidential 32 © 2013-2014 Cisco and/or its affiliates. All rights reserved.
Vendor-specific APIs
Applications
Programmable APIs
Control Plane
Data Plane
Vendor Specific (e.g. onePK)
1
Et sur les applications ?
Applications
Virtual Control Plane
Virtual Data Plane
Overlay Protocols (e.g. VXLAN)
Vendor- specific APIs
3 Network Virtualization/ Virtual Overlays
Control Plane
Data Plane
Controller
Data Plane
Applications
Vendor-specific APIs
OpenFlow
2a Classic SDN
Vendor Specific (e.g. onePK)
Controller
Data Plane
Applications
Vendor-specific APIs
OpenFlow
Control Plane
2b Hybrid “SDN”
Vendor Specific (e.g. onePK)
Control Plane
Data Plane
CLI, SNMP, …
Cisco Confidential 33 © 2013-2014 Cisco and/or its affiliates. All rights reserved.
Introduction à DevNet
Creating a Community of Software Developers who Leverage Cisco Technology in Their Work
Enabling a Robust Developer Ecosystem
Engineering Platform APIs
SDKs and Tools
Developer Support
Community Management
To Build Compelling and Innovative Apps
Cisco Confidential 34 © 2013-2014 Cisco and/or its affiliates. All rights reserved.
Conclusion
Cisco Confidential 35 © 2013-2014 Cisco and/or its affiliates. All rights reserved.
Masking Network Complexity, Exposing Network Intelligence Base Software & Base Apps Included in SmartNet, Premium & Partner Apps Priced.
Cisco APIC Enterprise Module
Software or Appliance Based
Open Daylight, RESTful, OpenFlow, CLI, OnePK
Existing & New Installations Catalyst, ISR, ASR
Agile Integration Model
Network Abstraction and Automation
APIC EM
Cisco Confidential 36 © 2013-2014 Cisco and/or its affiliates. All rights reserved.
Le réseau au service de l’innovation avec ACI 36% de temps économisé sur le WAN et l’accès
Average Time Spent by Network Administrator
Current IT* Fast IT
28% Troubleshooting
19% Security
18% Configuration
14% Equipment Upgrade
14% Traffic Optimization
7% Other
14% Troubleshooting
10% Security 8% Configuration
14% Equipment Upgrade
10% Traffic Optimization
43% Other
Total Network Operations Time Savings
More Time Available for Business Innovation
Cisco Confidential 37 © 2013-2014 Cisco and/or its affiliates. All rights reserved.
Cisco SDN pour les réseaux d’entreprise
Agilité Simplicité Protection des investissements
Policy and Administration
Sur tout le réseau (DC, WAN, Accès)
Utilisation de toute la capacité du réseau
Pour anciens et nouveaux déploiements
Thank you.