Äîêóìåíò âçÿò èç êýøà ïîèñêîâîé ìàøèíû. Àäðåñ îðèãèíàëüíîãî äîêóìåíòà : http://lvk.cs.msu.su/~sveta/SDN_OpenFlow_controllers_lecture2.pdf Äàòà èçìåíåíèÿ: Tue Oct 13 19:47:34 2015 Äàòà èíäåêñèðîâàíèÿ: Sat Apr 9 22:40:10 2016 Êîäèðîâêà:

SDN&NFV: SDN/OpenFlow
. ..-.., ..., ..
ashalimov@lvk.cs.msu.su @alex_shali @arccnnews


0: SDN/OpenFlow

. ..

2


SDN/OpenFlow?
SDN = Software Defined Networking
· · · · . . .

.
· (OPEX) · (CAPEX) ·

...
. ..

"SDN means thinking differently about networking"
3


SDN/OpenFlow
A B

A -> B
A

B · (OF_PACKET_IN). · ( ). · OpenFlow + (OF_PACKET_OUT/FLOW_MOD).
. .. 4


SDN/OpenFlow
A B

A

B · (OF_PACKET_IN). · ( ). · OpenFlow + (OF_PACKET_OUT/FLOW_MOD). · .
. .. 5


I: OpenFlow

. ..

6


OpenFlow
· , TCP/IP , · -. · (, , ) · API .
. .. 7


OpenFlow
·
­ Nox, Pox, MUL, Ruy, Beacon, OpenDaylight, Floodlight, Maestro, McNettle, Flower, Runos ­ Python Haskell, Erlang

· - Pox. ·
­ ONOS (Stanford) ­ OpenDayLight (Cisco)

· ­ Runos
­ arccn.github.io/runos
. .. 8


OpenFlow
, , , , , , NAT, ARP, DNS, DHCP, BGP

, , web





·
­
· events per second
· >10M · ""

­
· us

·
­ 24/7

·
­ : ­


(2013)
· · · · · · · · · NOX-Classic NOX Beacon Floodlight SNAC Ryu POX Maestro Trema

· · · · · · · · ·

Helios FlowER MUL McNettle NodeFlow Onix SOX Kandoo Jaxon

· Cisco ONE controller · Nicira NVP Controller · Big Network Controller · IBM Programmable Network Controller · HP SDN Controller · NEC Programmable Flow

11



·
­ ­

·
­

·
­

·
­ OpenFlow
12




5/30/2013

13


(2013)

· 7 000 000 . · 50 75 . · :
­ ­ (DC >10M fps)


II: OpenFlow

. ..

15



:
· OpenFlow :
­ ; ­ .

· OpenFlow :
­ , OS Linux; ­ ; ­ .


: In-kernel
Linux [2]
·
­ ­

·
­ ­ ­ ""
[2] P. Ivashchenko, A. Shalimov, R. Smeliansky "High performance in-kernel SDN/OpenFlow controller", Proceedings of the 2014 Open Networking Summit Research Track, USENIX, March 3-5, 2014 Santa Clara, USA


(kernel)

· 30M fps · 45us


RUNOS ­ OpenFlow
+: - -: -


NOX, Pox, Floodlight, OpenDaylight, MUL, etc

OpenFlow

User space Kernel space



?




Inkernel

OpenFlow
OpenFlow +: - -:

: · - userspace · +: - () +: - ·


RUNOS
Easy RUNOS
OpenFlow

Fusion RUNOS
OpenFlow

User space Kernel space

In-kernel RUNOS
OpenFlow

NOX, POX, Floodlight, OpenDaylight, OpenMUL Easy

Fusion +

In-kernel



+



· [] · REST [] · (, Pyretic, Maple)


REST

. ..

22


NorthBound API
· NorthBound API ­ · OpenFlow !
­ (routing, access control) ­ ­ ­

·

. ..

23


OpenFlow

. ..

24


Possible problems in OpenFlow controllers
Example of the problem with running several apps independently: · Forwarding and Span apps. First app sends a flow over port 1, while second ones sends the same flow over port 5. Rules intersect with each other. · Final rules order in the flow table is unknown. · Packets will go using only the first rule. Thus, only one app will work. Conflict! · We may to resolve such conflicts and some others. Just ip_src:10.0.0.1 -> output:1,5!

Forwarding

SPAN

Rule 1: ip_src:10.0.0.1 -> output:1 Rule 2: ip_src:10.0.0.1 -> output:5

OpenFlow

Flow table
Rule 1 Rule 2

New packet

ip_dst:10.0.0.1 never used



· ( , Pyretic)
­ ­ (forwarding couting) ­ ­ (firewall, switch)

. ..

26


· Pyretic
­ (match(dstip=2.2.2.8) >> fwd(1)) + (match(dstip=2.2.2.9) >> fwd(2))
. .. 27


Pyretic LB

· http://frenetic-lang.org /publications/pyretic-login13.pdf
. .. 28


III: Runos

. ..

29


RUNOS
RUNOS = RUssian Network Operating System

·
­ "Could an OpenFlow controller be both easy to develop applications for and also high performance?" ­ , ­
Arista 7050T-52 NEC PF5240F Extreme X460-24p OpenvSwitch 1.6 Brocade Huawei OpenFlow OF1.0 OF1.0, OF1.3 OF1.0, OF1.3 OF1.0, OF1.3 OF 1.3 OF 1.3


RUNOS:
· ,


User ­ OpenFlow space , . Kernel space ­ Features: ( - Algorithmic policies (rule generation) ).

· RUNOS :
­ , ­ ­

-

-

Client-friendly API using EDSL grammar (low level details are hidden inside the runtime ­ overloading, templates) Modules composition (parallel and sequential composition)



Config (json): "controller ": { "threads": 4 }, "loader ": { "threads": 3 }, "link discovery ": { "poll-interval" : 10, "pin-to-thread" : 2 }, "learning switch": { } ...

·
­ ­

·
­ (poll-interval) ­ (pin-to-thread, ownthread)



: C++11, QT, Boost (asio, proto, graph : · libfluid project (_base, _msg)
­ OpenFlow 1.3

· libtins
­ OpenFlow

· glog (google log)
­ ,

· tcmalloc (google performance tools)
­ malloc/free

· json11
­

· boost graph
­ ,


EasyWay
· :



0.5 · · · · · Rest API ( Floodlight) · WebUI ( , , ) · · · ARP



0.6 - ( ) · . OpenFlow. , , . · . . · -- ( ). · . · .



· http://arccn.github.io/runos/
­ Apache, version 2.0

· Tutorial (Readme.md)
­ , ,

·
­ ­ OpenFlow

·
­ Google group runos-ofc



· Algorithmic policies (rule generation)
­ Arrangement of priorities of rules, combining of rules ­ LOAD, MATCH, READ abstractions ­ MAPLE based

· Client-friendly API using EDSL grammar (low level details are hidden inside the runtime ­ overloading, templates)
­ ­ ­ ­ ­ "pkt[eth src] == eth addr " "if (ethsrc == A || ethdst == B) doA else doB" "test((eth_src & "ff0.....0") == "....")" "modify(ip_dst >> "10.0.0.1")" decision are "unicast()", "broadcast()", "drop()"

· Application composition (parallel and sequential composition)
­ dpi + (lb >> forwarding)




· : 10 . · : 55


Open Source
· OpenSource :
­ : "Free as in Freedom" ­ ,
· , · advanced (eg, Runos) · community (, )

· (*): Apache, BSD GPL, Eclipse, , · :
­ (eg, runos-ng) ­ ( R&D)
* http://www.slideshare.net/gerasiov/license-44646637


IV: Runos

. ..

41


First application ­ L2 learning
A
A | B | ...

1

2

3

B
B | A | ...

4 Host A

L2 learning table Switch:port 1:1 3:2

· What is L2 learning?
­ L2 table ­ where particularly host resides (host <->sw:port)

B

· A->B. What should we do on sw1?
­ Learn and broadcast

· B->A. What should we do on sw3?
­ Learn and unicast

· Advanced question: will it work for ping utilities? Ping 10.0.0.2 (assuming B has this IP)
­ Yes, arp (broadcast), ip (icmp)


Host Databases

.insert(...)


L2 forwarding application


Runos
·
­ Runos ­ Mininet

·

. ..

45


V:

. ..

46


(High Availability, HA)
· 365/24/7. · . · ­ , . · : , , , , , .
, %
99,999 99,99 99,9 99


5 52 8,7 3,7










/1
Active/Standby (Passive) : · [ ] · [ ] · [ ]


RUNOS : · OpenFlow 1.0 · . · ·

+ -




/2

· Active/Active
­ ­

· [ , ] · [ ] ·


OpenFlow
· OpenFlow 1.2:
­ ­ ­ : Master, Slave, Equal ­ : Equal . ­ : OFPT_ROLE_REQUEST ­ : .
OpenFlow 1.0, 1.1

OpenFlow 1.2 ­ 1.5



: 1. ? 2. ? 3. ? 4. ? 5. ?



: · . · , Master . · .

: · Master .


1:
In-memory [MASTER] Network View 1 In-memory [SLAVE] Network View 1 In-memory [SLAVE] Network View 1







... Add Flow Add Node

... Add Flow Add Node

... Add Flow Add Node

Proposer Acceptor

Acceptor

Acceptor



Network 1

Network 2

Network 3

· · ·

Multi-Paxos : Network View, ( NV), .


2:

· Master-:
­ , .

· :
.

· :
.


3: · · : · . · : .


3:
1. CID. , CID. . .

2.

3.

4.


4:

?

?

?

1.

2.
3.

4.

5.

Master. . , . Master- . Master- .


5:
: · . · [ , packetin , CPU, ] · .
: , : 1. 2. . 3. .


5:
· : , Master. , , , , . · : .


5:

· :
­ ­ ­ P

· , P. · :
­ , Master- .


5: · :
­ . ­ .

· : , . · :
­ .


Quiz 2
·

. ..

64



· OpenFlow Tutorial
­

· Runos
­ arccn.github.io/runos

http://arccn.ru/

ashalimov@lvk.cs.msu.su
. ..

@alex_shali @arccnnews
65