OpenFlowでのサービスチェイニングによるSDNの実現
MPLS Japan 2013
株式会社エーアイコーポレーション
岩下 雅幸 / 溝口 茂
http://www.aicp.co.jp/

アジェンダ• Service Chaining とは？
• Service Chainingで要求されること• Service Chainingのモデル化• デモ• 標準技術による汎用化

2013/10/30

2Service Chaining とは？
Customer

Customer

A

B

Service ProviderFW

APP FILTERIDS
WAN ACCEL

CustomerC
2013/10/30

Customer

C3

Service Chaining のイメージ

Traffic
Shaper

2013/10/30

AA

B

B

IPS/IDS

Content
Filtering

WAN
acceleration

Firewall4

既存の手法でのService Chaining
NetworkEngineers

Traffic
Shaper

2013/10/30

AA

B

B

IPS/IDS

Content
Filtering

WAN
acceleration

Firewall5

ダイナミックな Service Chaining
Networking
Applications

Traffic
ShaperA

A

B

B

NetworkEngineer

IPS/IDS

Content
Filtering

WAN
acceleration

FirewallProgrammed by Software
2013/10/30

6Service Chainingで要求されること
Networking
Applications

3

2013/10/30

Traffic
ShaperA

A

B

B

NetworkEngineer

IPS/IDS

2

Content
Filtering

WAN
acceleration

Firewall1
7

１への対応：OpenFlowの導入

Traffic
Shaper

2013/10/30

AA

B

B

IPS/IDS

Content
Filtering

WAN
acceleration

Firewall18

Openflowを組み合わせた構成

2013/10/30

9OpenFlowでのService Chaining
Networking
Applications

3？ 2？

2013/10/30

Traffic
ShaperA

A

B

B

NetworkEngineer

IPS/IDS

2？

Content
Filtering

WAN
acceleration

Firewall

110SDN Architecture“The Future of Networking, and the Past of Protocols”

www.slideshare.net/martin_casado/sdn-abstractions

Service Chainingのモデル化

TrafficShaper

2013/10/30

AA

B

B

IPS/IDS

Content
Filtering

WAN
acceleration

Firewall12

“Abstract Network View”

Traffic
Shaper

2013/10/30

AA

B

B

IPS/IDS

Content
Filtering

WAN
acceleration

Firewall13

モデル間のマッピング
VPN Service Model
Flow Profile Name: unique string
From Networks: [ IP-address/mask ]To Networks: [ IP-address/mask ]Reserved bandwidth: integer > 0Service Application
Traffic Steering Device Model

Firewall Device Model

Port: unique integer 0..47

Src: IP-address/mask

Src: IP-address/mask

Dst: IP-address/mask

Dst: IP-address/mask

Port: integer 1..65535

2013/10/30Action: drop | output(N) | …

Action: drop | allow

14

Service Application

ネットワーク全体への適用
Network-wide Transaction
Rule #46: Port=1, Src=*, Dst=116.54.16.128/26,
Action=output(6)Rule #117: Src=*, Dst=116.54.16.128/26,Port=80, Action=allow

Rule #47: Port=7, Src=*, Dst=116.54.16.128/26,
Action=output(8)Rule #118: Src=*, Dst=116.54.16.128/26,
Port=*, Action=drop

12
3
4
5

678910InOutDemoモデルベースでのService Chaning3
2013/10/30

2

Traffic
ShaperAA

B

B

IPS/IDS

1

2

ContentFiltering

WAN
acceleration

Firewall17

標準技術による汎用化

YANG(RFC6020)- - - - - - - - - - - - - - - - - - NETCONF(RFC 6241) - - - - - - - - - - - - - - - - Traffic
Shaper

2013/10/30

AA

B

B

IPS/IDS

Content
Filtering

WAN
acceleration

Firewall18

ドイツテレコムの実績• “A Realtime OSS-based SDN Approach”•Deutsche Telekom: A Software-Defined Operator–

2013/10/30

http://www.lightreading.com/ethernet-ip/routers/deutsche-telekom-a-software-definedoperator/d/d-id/706099

19ベンダー様でのNETCONF採用状況– Alaxala• Ethernet switches– BATM/Telco Systems• T-Metro 7224

– BigBand• MSP2800– Brocade• NetIron XMR, CES, and CER• MLX Series• VDX– Cisco• IOS 12.4(9)T and later• IOS XE 2.1 and later– Edgeware• WTV-2X– Huawei• AR3200/2200 Enterprise Routers– Juniper Networks• JUNOS 7.5 and later– Nexor• Messaging Gateways– RuggedCom• RX5000 and MX5000– Sonus• NBS5200 Session Border Controller– Taseon• TN 320– Verivue• MDX 9020

– Ericsson• SEA 20

– H3C
• S9500E Series Routing Switches
2013/10/30

Please Note that this list is work in progress
and feedback on accuracy and completeness isstrongly encouraged20

標準化動向- NETCONF WG- NETMOD(YANG) WG- OF-CONFIG YANG Modules- YANG module for CCAP:
next generation cable headend systems- OpenStack Plugin
http://blog.ipspace.net/2013/10/openstackquantum-neutron-plug-in-there.html- YANG models for Service
OAM PM and FM
2013/10/30

Please Note that this list is work in progress
and feedback on accuracy and completeness isstrongly encouraged21

Service Chainingで迅速なサービス実現、そして さらなる付加価値を！
NetworkEngineers

Networking
Applications

NetworkEngineerPerl
Scripts

Various CLIs
Various APIs
Manual Activities
Tedious Script MaintenanceToday
2013/10/30

Standards-Based
Abstraction andAutomation

Tomorrow
22