SDNRG R. Gu, Ed.
Internet-Draft C. Li
Intended status: Informational R. Wang
Expires: September 1, 2016 China Mobile
February 29, 2016
Problem statement of SDN and NFV co-deployment in cloud datacenters
draft-gu-sdnrg-problem-statement-of-sdn-nfv-in-dc-01
Abstract
With the development of cloud computing technology, cloud datacenters
have been influenced. Co-deployment of SDN and NFV technology shows
its distinct advantages of vitalizing network resources in providing
VPC services and SFC services.In order to deploy SDN and NFV in cloud
datacenters, a resolution test has been conducted. According to the
resolution test, SDN and NFV technology has been nearly mature for
the commercial deployment in operators' network. However, there are
some key problems on network architecture, virtualized platform,
standard interfaces, performance of SDN devices and so on to be
working out in practical practice.
Status of This Memo
This Internet-Draft is submitted to IETF in full conformance with the
provisions of BCP 78 and BCP 79.
Internet-Drafts are working documents of the Internet Engineering
Task Force (IETF). Note that other groups may also distribute
working documents as Internet-Drafts. The list of current Internet-
Drafts is at http://datatracker.ietf.org/drafts/current/.
Internet-Drafts are draft documents valid for a maximum of six months
and may be updated, replaced, or obsoleted by other documents at any
time. It is inappropriate to use Internet-Drafts as reference
material or to cite them other than as "work in progress."
This Internet-Draft will expire on September 1, 2016.
Copyright Notice
Copyright (c) 2016 IETF Trust and the persons identified as the
document authors. All rights reserved.
This document is subject to BCP 78 and the IETF Trust's Legal
Provisions Relating to IETF Documents
(http://trustee.ietf.org/license-info) in effect on the date of
Gu, et al. Expires September 1, 2016 [Page 1]
Internet-Draft problem-statement-of-sdn-nfv-in-dc-01 February 2016
publication of this document. Please review these documents
carefully, as they describe your rights and restrictions with respect
to this document.
Table of Contents
1. Introduction . . . . . . . . . . . . . . . . . . . . . . . . 2
2. Terminology . . . . . . . . . . . . . . . . . . . . . . . . . 2
3. Definition of terms . . . . . . . . . . . . . . . . . . . . . 3
4. SDN and NFV usecase in cloud datacenters . . . . . . . . . . 3
5. Resolution test of SDN and NFV in cloud datacenters . . . . . 8
6. Problems and aspects to be considered in the trail deployment 9
7. Conclusion . . . . . . . . . . . . . . . . . . . . . . . . . 11
8. Security Considerations . . . . . . . . . . . . . . . . . . . 11
9. IANA Considerations . . . . . . . . . . . . . . . . . . . . . 11
10. Normative References . . . . . . . . . . . . . . . . . . . . 11
Authors' Addresses . . . . . . . . . . . . . . . . . . . . . . . 11
1. Introduction
Datacenters have been heavily impacted due to the development and
large-scale deployment of cloud computing technology. Co-deployment
of SDN and NFV technology shows its distinct advantages of
virtualizing network resources in the scenario of cloud datacenter
such as convenient and elastic.
SDN technology helps the cloud datacenters with central-management
and resource efficiency. NFV brings up virtual machines instead of
physical firewall, load balancer, and VPN gateway devices. Thus VPC
services and service functions are provided with the SDN
architecture, NFV elements, standard interfaces and the designing
flow table.
In order to deploy SDN and NFV in cloud datacenters, we have
conducted a resolution test aiming at co-deployment of SDN and NFV.
According to the resolution test, SDN and NFV technology have been
nearly mature for the commercial deployment in operators' network.
However, there are some key problems on network architecture,
virtualized platform, standard interfaces and so on to be working out
in practical practice.
2. Terminology
The key words "MUST", "MUST NOT", "REQUIRED", "SHALL", "SHALL NOT",
"SHOULD", "SHOULD NOT", "RECOMMENDED", "MAY", and "OPTIONAL" in this
document are to be interpreted as described in [RFC2119].
Gu, et al. Expires September 1, 2016 [Page 2]
Internet-Draft problem-statement-of-sdn-nfv-in-dc-01 February 2016
3. Definition of terms
NAT: network address translation
NFV: network function virtualization
SDN: software defined network
SF: service function
SFC: service function chaining
VAS: value-added service
VFW: virtual firewall
VLB: virtual load balancer
VM: virtual machine
VPC: virtual private cloud
DCI: datacenter interconnect
4. SDN and NFV usecase in cloud datacenters
In cloud datacenters, the SDN and NFV architecture includes the
applications to tenants, SDN controller, network function virtualized
manager (NFVM), SFC controller and the service function node. With
the orchestration, the SDN controller, SFC controller and the NFV
manager work in coordination to provide the auto-deployed services
such as VPC, VAS of layer 4 - layer 7 and so on.
Tenants make the requirement of services in the service applications.
Service application records tenants' network and service requirements
and translates them into the SDN controller, SFC controller and the
NFV managers with the logical network mapping to the physical
network. The orchestrator including the virtualized platform is in
charge of the orchestration and management of NFV infrastructure and
software resources, and realizing network services. The SDN
controller is a logically centralized entity with a general view of
the network and in charge of SDN data paths, while the SFC controller
is in central control of the service function chain according to the
requirements from the service applications. The NFV manager is
responsible for NFV lifecycle management such as installation,
update, query, scaling and termination. In the bottom, network
elements are the resource instances which can be a virtual instance
such as a virtual machine or be embedded in a physical network
Gu, et al. Expires September 1, 2016 [Page 3]
Internet-Draft problem-statement-of-sdn-nfv-in-dc-01 February 2016
element such as the virtual load balance instances or the physical
firewall located in the resource pool.
In fact, there are virtual machines and baremetal servers in cloud
datacenters. So there are serveral scenarios including virtual
machines only, bare-mental servers only and virtual machines and
baremental server co-existed.
A newly-built cloud datacenter based on SDN and NFV is shown in
scenario A. In this scenario, network elements are virtulized
including virtual switch, virtual machines, virtual routers, virtual
load balancer,and virtual firewall.In this scenario, all the network
elements are virtualized for the advantages of elasticity.
Gu, et al. Expires September 1, 2016 [Page 4]
Internet-Draft problem-statement-of-sdn-nfv-in-dc-01 February 2016
--------------------------
| |
| Service Application +---------------------------
| | |
----+--------------+------ |
| | |
| | |
| ---------+------- |
| | | |
| | Orchestrator +---------------------- |
| | (Openstack) | | |
| ----+---------+-- | |
| | | | |
| | | | |
---+---------+---- --+--------------- -----+---+------
| | | | | |
| SDN Controller | | SFC Controller | | NFV manager |
| | | | | |
---+-------------- ---------+-------- --------+-------
| | |
-----+--------------------------+-------------------+-------
| |
| ----- ----- ----- ------ |
| |VSW| |VSW| |VSW| | VR | |
| ----- ----- ----- ------ |
| |
| ------ ------ ------ ------ |
| | VM | | VM | | VLB| | VFW| |
| ------ ------ ------ ------ |
| |
| network element |
------------------------------------------------------------
Figure 1: Scenario A of SDN and NFV in cloud datacenters
Scenario B shows SDN architecture of physical network elements such
as bare-metal servers, physical load balancer, and physical firewall.
Actually, virtual machines can not meet the requirement of some
service systems. Thus bare-metal servers exist in the architecture.
In this scenario, SDN ToR switch is deployed on the top of the bare-
metal server acting as the vtep.By the way, some model of
orchestrator is responsible for the management of bare-metal server,
ironic model in openstack as an example.
Gu, et al. Expires September 1, 2016 [Page 5]
Internet-Draft problem-statement-of-sdn-nfv-in-dc-01 February 2016
--------------------------
| |
| Service Application +---------------------------
| | |
----+--------------+------ |
| | |
| | |
| ---------+------- |
| | | |
| | Orchestrator +---------------------- |
| | (Openstack) | | |
| ----+---------+-- | |
| | | | |
| | | | |
---+---------+---- --+--------------- -----+---+------
| | | | | |
| SDN Controller | | SFC Controller | | NFV manager |
| | | | | |
---+-------------- ---------+-------- --------+-------
| | |
-----+--------------------------+-------------------+-------
| |
| ------- ------- ------ |
| | ToR | | ToR | | LB | |
| ---+--- ---+--- ------ |
| | | |
| -------+------ -------+------ ------ |
| | bare-mental| | bare-mental| | FW | |
| | server | | server | ------ |
| -------------- -------------- |
| |
| network element |
------------------------------------------------------------
Figure 2: Scenario B of SDN and NFV in cloud datacenters
Scenario C and scenario D is the combination of scenario A and
scenario B. In scenario C, bare-metal servers remain while virtual
load balancer and virtual firewall are adopeted. In scenario D, both
bare-metal servers and virtual machines exist with virtual load
balancer and virtual firewall adopeted.
Gu, et al. Expires September 1, 2016 [Page 6]
Internet-Draft problem-statement-of-sdn-nfv-in-dc-01 February 2016
--------------------------
| |
| Service Application +---------------------------
| | |
----+--------------+------ |
| | |
| | |
| ---------+------- |
| | | |
| | Orchestrator +---------------------- |
| | (Openstack) | | |
| ----+---------+-- | |
| | | | |
| | | | |
---+---------+---- --+--------------- -----+---+------
| | | | | |
| SDN Controller | | SFC Controller | | NFV manager |
| | | | | |
---+-------------- ---------+-------- --------+-------
| | |
-----+--------------------------+-------------------+-------
| |
| ------- ------- ------- |
| | ToR | | ToR | | VLB | |
| ---+--- ---+--- ------- |
| | | |
| -------+------ -------+------ |
| | bare-mental| | bare-mental| ------- |
| | server | | server | | VFW | |
| -------------- -------------- ------- |
| |
| network element |
------------------------------------------------------------
Figure 3: Scenario C of SDN and NFV in cloud datacenters
Gu, et al. Expires September 1, 2016 [Page 7]
Internet-Draft problem-statement-of-sdn-nfv-in-dc-01 February 2016
--------------------------
| |
| Service Application +---------------------------
| | |
----+--------------+------ |
| | |
| | |
| ---------+------- |
| | | |
| | Orchestrator +---------------------- |
| | (Openstack) | | |
| ----+---------+-- | |
| | | | |
| | | | |
---+---------+---- --+--------------- -----+---+------
| | | | | |
| SDN Controller | | SFC Controller | | NFV manager |
| | | | | |
---+-------------- ---------+-------- --------+-------
| | |
-----+--------------------------+-------------------+-------
| |
| ------- ------- ------ |
| | ToR | | VSW | | VR | |
| ---+--- ------- ------ |
| | |
| -------+------ ------- ------- ------- |
| | bare-mental| | VM | | VLB | | VFW | |
| | server | ------- ------- ------- |
| -------------- |
| network element | |
------------------------------------------------------------
Figure 4: Scenario D of SDN and NFV in cloud datacenters
5. Resolution test of SDN and NFV in cloud datacenters
The resolution test is based on the architecture introduced with the
KVM virtualized platform, and Openstack as the orchestrator. In the
resolution test, the whole systems, network architecture, SDN
controller, and forwarding devices are tested of functions,
performances and security under normal and stress conditions.
Gu, et al. Expires September 1, 2016 [Page 8]
Internet-Draft problem-statement-of-sdn-nfv-in-dc-01 February 2016
6. Problems and aspects to be considered in the trail deployment
It's found out that some key problems exist when introducing SDN and
NFV technology into cloud datacenters under the resolution tests and
the practical trail. Problems rely on aspects such as virtualized
platforms, network architectures, interface standardization, and some
others listed as follows.
(1)Virtualized platforms
KVM virtualized platform is adopted in our test. However, serveral
other virtualized platforms are used in the recent network such as
VMWARE ESXI and Xen, which may be not well supported by Openstack.
The main reason relies on that Openstack is an open-source cloud
operating system developing based on KVM platform, which is widely
used in public cloud datacenters. Actually in the private cloud
datacenters, other virtualized platforms such as VMware and XEN are
widely adopted. Thus more work needs to be focused on other
virtualized platforms carrying on SDN technology with platforms of
much more open interfaces and more interface docking attempts.
(2) Network architecture
The network architecture of SDN is clear according to other
standardization organizations with hierarchical layers of application
layer, orchestrator, controlling layer and forwarding layer. When
adding the virtualized network elements into the SDN architecture,
problems arise around the network architecture of SDN and NFV co-
deployed in the cloud datacenters. How can the orchestration layer,
SDN controller, SFC controller, NFV manager co-operate in order to
provide the VPC services and SFC services. What's the relationship
and specific role-taking between the service application,
orchestration layer, SDN controller, SFC controller and NFV manager.
The specific interfaces between these related parts are obscure as
well.
In scenario D, virtual machines and baremetal servers exist in the
network and baremetal servers should be managed by openstack as well
as virtual machines.Even through the ironic module of openstack can
support baremetal servers, questions arise on aspects such as
openstack Kilo is needed,additional network partition including IPMI,
PXE and service network,SDN switches should be deployed additionally
and so on.
(3) Interface standardization
Due to the incomplete interface of Openstack, interface
standardization should be taking into consideration. Nowadays,
Gu, et al. Expires September 1, 2016 [Page 9]
Internet-Draft problem-statement-of-sdn-nfv-in-dc-01 February 2016
physical servers can be managed by Openstack through ironic module
while without widely attempts. Besides, the FW plug-in is limited
into only one vendor rather than LB. Service function chaining
interfaces are still under discussion without being published with
SFC protocols under discussion. The specific interfaces between SDN
controller, SFC controller and NFV manager are obscure as well.
Above all, the interface standardizations should be kept researching
on.
(4) Virtualization high availability
As virtual machines and virtualized platforms are brought in,
reliability can be a problem. Reliability can be divided into
several layers: the virtual network elements, Openstack, controller,
virtual link and so on. High availability of virtual network
elements integrated in the SDN architectures are without
standardization.
(5) Benchmark standardization
In the resolution test, it works out that the benchmark
standardization should be focused on. In actual test, both
encapsulation technology of VxLAN and MPLSoGRE exist in the SDN
overlay resolution with difficult comparison. Besides, there are two
realization mechanisms of active and passive trigger mode when SDN
controller communicates with the forwarding devices. Thus the
benchmark of SDN controller performance runs to a problem.
(6) extension of network
The numbers of virtual machines and baremetal servers are limited by
SDN controller, the performance of SDN forwarding devices and
openstack. In order to extend the SDN network, SDN devices and
openstack should interact with each other. Extensible solutions
should be researched on.
(6) DCI
According to the development of SDN network, it's more complicated to
realize the datacenter interconnect, for the reason that SDN
datacenter and tradional datacenter coexist. The interconnections of
SDN datacenters benefit from SDN gateway, while interconnections
between SDN datacenter and traditional datacenter should be focused
on with SDN devices added in the traditional datacenters and more
details to be discussed.
(7) Practical practice experience
Gu, et al. Expires September 1, 2016 [Page 10]
Internet-Draft problem-statement-of-sdn-nfv-in-dc-01 February 2016
The technology of NFV and SDN is still in the trial stage which is l\
qack of practical practice experience. According to the scenarios,
NFV elements can be deployed behind the gateway or in rtyukNAT
devices are alternated. The deployment guidance of practical
practice is eager. to be shared.
7. Conclusion
SDN and NFV technology has been planned to be co-deployed in the
cloud datacenters in providing services such as VPC and VAS of
layer4-layer7.Through the resolution test, we have found out that key
problems on network architecture, virtualized platform, standard
interfaces, high availability, practice guidance and many others
exist.More tests, trails and standardization work need to be
conducted in preparing the large-scale commercial deployment of SDN
and NFV technology in cloud datacenters.
8. Security Considerations
None.
9. IANA Considerations
None.
10. Normative References
[RFC2119] Bradner, S., "Key words for use in RFCs to Indicate
Requirement Levels", BCP 14, RFC 2119,
DOI 10.17487/RFC2119, March 1997,
<http://www.rfc-editor.org/info/rfc2119>.
[RFC2234] Crocker, D., Ed. and P. Overell, "Augmented BNF for Syntax
Specifications: ABNF", RFC 2234, DOI 10.17487/RFC2234,
November 1997, <http://www.rfc-editor.org/info/rfc2234>.
Authors' Addresses
Rong Gu (editor)
China Mobile
32 Xuanwumen West Ave, Xicheng District
Beijing 100053
China
Email: gurong_cmcc@outlook.com
Gu, et al. Expires September 1, 2016 [Page 11]
Internet-Draft problem-statement-of-sdn-nfv-in-dc-01 February 2016
Chen Li
China Mobile
32 Xuanwumen West Ave, Xicheng District
Beijing 100053
China
Email: lichenyj@chinamobile.com
Ruixue Wang
China Mobile
32 Xuanwumen West Ave, Xicheng District
Beijing 100053
China
Gu, et al. Expires September 1, 2016 [Page 12]