data center sdn - opennetworking.org

SDN Solutions Showcase, October 14-17, 2014 © 2014 Open Networking Foundation

SDNSOLUTIONSSHOWCASE

Data Center SDN ONF SDN Solutions Showcase Theme Demonstrations



NFV Orchestration for SLA Guarantee Services Luxoft SuperCloud NFV Orchestrator, Qosmos SAM and Certes Networks vCEP VPN VNF



Company Information

3

Luxoft Holding, Inc. (NYSE:LXFT US) is a leading provider of software development services and innovative IT solutions to a global client base consisting primarily of large multinational corporations. Luxoft’s software development services consist of core and mission critical custom software development and support, product engineering and testing, and technology consulting. Luxoft’s solutions are based on its proprietary products and platforms that directly impact its clients’ business outcomes and efficiently deliver continuous innovation. The Company develops its solutions and delivers its services from 18 dedicated delivery centers worldwide. It has over 7,700 employees across 22 offices in 14 countries in North America, Mexico, Western and Eastern Europe, and Asia Pacific. Luxoft is incorporated in Tortola, British Virgin Islands, has its operating headquarters office in Zug, Switzerland and is listed on the New York Stock Exchange. For more information, please visit http://www.luxoft.com. Qosmos leads the market for embedded Deep Packet Inspection (DPI) and network intelligence technology used in physical, SDN and NFV architectures. The company supplies software to vendors who embed real-time application awareness in their products for traffic optimization, service chaining, quality of service, analytics, cyber security and more. Qosmos brings fast time to market for network intelligence and continuous protocol signature updates inside physical, SDN and NFV networking products. As the leading supplier of embedded intelligence software, Qosmos contributes actively to international standards and serves 75% of the market. Certes Networks, Inc. provides security solutions for networks. The Company offers standard-based encryption and authentication solutions that secure data in area networks, data centers, and public and private cloud networks.


Problem and Solution

Problem: How to orchestrate VNF service chains for SLA guarantee tenant requests ? Solution: Participants: Luxoft SuperCloud NFV Orchestrator, Luxoft Firewall, Certes vCEP VPN engine, Qosmos SAM DPI engine § Qosmos SAM DPI on-switch service provides network intelligence about existing recreational video traffic (you tube) in the network that's consuming high bandwidth § Tenant request comes to Luxoft SuperCloud Orchestrator for SLA guarantee VPN traffic between 2 remotes sites H1 & H3 § SuperCloud’s BWoD feature does nail up network connectivity automatically between sites. It also throttles bandwidth for recreational traffic to honor tenant SLA § Certes Network’s VPN VNF service encrypts traffic only for tenant's subscribed network path as directed by SuperCloud § Firewall VNF service that's chained after VPN, allows this traffic to pass through at both sites § Firewall allows remote site (H3) traffic access only through VPN

FW

DPI

H1

vCEP vCEP

GW YouTube,

Video

H3

TNM

VPN

H2

NFV Orchestrator

VNF Control SDK-API

Cloud SP Tenant


NFV Orchestrator

Solution Details

•  SuperCloud Roles and Responsibilities: –  ADMIN: Infrastructure Provider– owns/manages

switches, SDN Controller, VDUs –  PROVIDER: Service Provider – owns/manages

hosts, network services –  USER: Tenant or End user – uses hosts to connect

•  Admin starts topology (switches, hosts, and SDN controller)

•  Admin(/Provider) performs DPI & vCEP image onboarding

•  From the web interface, Provider defines the service graph consisting of VNFs (DPI, vCEP1 and vCEP2) and Endpoints (H1, H2, H3, GW-Internet/YouTube/Video) if that does not exist.

•  From the web interface, Provider instantiates the service based on service template

•  User initiates various traffic flows to available destinations (H1à H3, H1à YouTube, H1à Internet)

FW

DPI

H1

vCEP

vCEP

GW YouTube,

Video

H3

YouTube/Video Traffic Secure Traffic Regular Traffic VNF Control SDK-API

H2

TNM

VPN

Cloud SP Tenant


Key Takeaways

§  Orchestration of NFV services as per ETSI NFV standard architecture •  VNF On-boarding and lifecycle management

§  Orchestration of service chains for tenant network service paths

§  SuperCloud’s BWoD feature to intelligently allocate bandwidth to honor SLAs

§  SuperCloud integration with Qosmos DPI to classify traffic as per application ID

§  SuperCloud’s integration with Certes vCEP VPN VNF service to provide secure connectivity for corporate traffic in cloud environments •  L2-based encryption of the traffic between H1 and H3


Follow-up

•  For more information, see us after the demo or at Luxoft’s Booth #: 1

•  Luxoft Contacts: §  Ash Bhalgat ([email protected]) §  Adrian loan Istrate ([email protected])

•  References: –  Luxoft SuperCloud NFV Orchestration Platform:

http://supercloud.luxoft.com –  Qosmos SAM DPI:

http://www.qosmos.com/products/dpi-module-for-vswitch/ –  Certes Networks Cryptoflow VPN:

http://certesnetworks.com/solutions/cryptoflows/



NFV Orchestration for SLA Guarantee Services Demo

8

data center sdn - opennetworking.org

Documents