cisco community meet the author€¦ · cisco confidential 9. overlay virtual networks. control and...

21
Victor Moreno Distinguished Engineer April 30, 2020 Evolution of Overlay Networking with Victor Moreno Cisco Community Meet The Author

Upload: others

Post on 25-Sep-2020

8 views

Category:

Documents


0 download

TRANSCRIPT

Page 1: Cisco Community Meet The Author€¦ · Cisco Confidential 9. Overlay Virtual Networks. Control and Data Plane Separation. Overlay Control Plane Encapsulation Underlay Control Plane

Victor MorenoDistinguished EngineerApril 30, 2020

Evolution of Overlay Networking with Victor Moreno

Cisco CommunityMeet The Author

Page 2: Cisco Community Meet The Author€¦ · Cisco Confidential 9. Overlay Virtual Networks. Control and Data Plane Separation. Overlay Control Plane Encapsulation Underlay Control Plane

© 2020 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 2

Learn from the IT expert that literally wrote the books & content “Lear more about the best practices and approaches to troubleshoot complex network problems”

Welcome to the new “Meet Authors event”

Author

Meet

Story behind

Learn the

Key Content

Trends &

Questions

Clarify

Page 3: Cisco Community Meet The Author€¦ · Cisco Confidential 9. Overlay Virtual Networks. Control and Data Plane Separation. Overlay Control Plane Encapsulation Underlay Control Plane

© 2020 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 3© 2020 Cisco and/or its affiliates. All rights reserved. Cisco Confidential

Meet the Author raffleLucky winner

Congratulations “Ernesto Montiel”!

From “Vinit’s Jain event”

Page 5: Cisco Community Meet The Author€¦ · Cisco Confidential 9. Overlay Virtual Networks. Control and Data Plane Separation. Overlay Control Plane Encapsulation Underlay Control Plane

© 2020 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 5

Meet the Author

Distinguished Engineer, Speaker & Cisco Press author!

Victor MorenoDistinguished Engineer

Page 6: Cisco Community Meet The Author€¦ · Cisco Confidential 9. Overlay Virtual Networks. Control and Data Plane Separation. Overlay Control Plane Encapsulation Underlay Control Plane

© 2020 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 6

It’s Victor's time!

Page 7: Cisco Community Meet The Author€¦ · Cisco Confidential 9. Overlay Virtual Networks. Control and Data Plane Separation. Overlay Control Plane Encapsulation Underlay Control Plane

© 2020 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 7

From Segmentation to Abstract Intent Expression

VLANsMPLS OTV

EVPN

LISP

VXLAN

Intent Based Net

Service Mesh

Functionality

VPLS

Complexity

Page 8: Cisco Community Meet The Author€¦ · Cisco Confidential 9. Overlay Virtual Networks. Control and Data Plane Separation. Overlay Control Plane Encapsulation Underlay Control Plane

© 2020 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 8

Network Fabric Requirements and Implications

Requirements

• High Densities of End-points

• Mobility

• Segmentation

• Stack of Services: IP unicast, Multicast, Layer 2, NAT, Service Insertion, etc.

Implication

Scale

Performance

Simplicity: Consolidated Stack

Extensibility

MobilityMobile device traffic will be 66% of total IP traffic by 20201

IoT26 billion networked devices and connections will exist by 20202

Security100 days Industry average to detect a common threats3

Cloud93% of organizations will use multiple clouds by 20194

66%

93%

26B

100

Page 9: Cisco Community Meet The Author€¦ · Cisco Confidential 9. Overlay Virtual Networks. Control and Data Plane Separation. Overlay Control Plane Encapsulation Underlay Control Plane

© 2020 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 9

Overlay Virtual NetworksControl and Data Plane Separation

Overlay Control Plane

Encapsulation

Underlay Control Plane

Underlay Network

Hosts

(end-points)

Edge DevicesOverlay Virtual Networks

Logical topology used to virtually connect

devices, built on top of a physical Underlay

topology.

An Overlay network often uses alternate

forwarding attributes to provide additional

services, not provided by the Underlay.

Page 10: Cisco Community Meet The Author€¦ · Cisco Confidential 9. Overlay Virtual Networks. Control and Data Plane Separation. Overlay Control Plane Encapsulation Underlay Control Plane

© 2020 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 10

Push

• Routing Protocols (e.g. BGP)

• Distribute/push updates to all routers

• Run optimal path computation on all updates received

• Ideal for the underlay

• Relatively static (infrequent changes)

• Responsible for multi-path routing decisions

• High computation requirement, distributes and calculates routes with reliable failover

Overlay Control Plane: Push vs. Pull

Pull

• Mapping protocols (e.g. DNS, LISP)

• Updates are pulled only where needed

• No path computation, focus on Policy constrained lookups

• Ideal for overlay

• Very dynamic (high rates of change)

• Responsible for end-point attachment & policy driven services

• Computationally nimble, updates and services queries to a database.

Page 11: Cisco Community Meet The Author€¦ · Cisco Confidential 9. Overlay Virtual Networks. Control and Data Plane Separation. Overlay Control Plane Encapsulation Underlay Control Plane

© 2020 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 11

Network Protocol Consolidation

Networks have evolved organically:

• Some L2, Some L3

• L2 protocols: STP, MLAG

• First Hop Resiliency (FHRP): VRRP, HSRP

• Multicast: PIM ASM, SSM

• L2 extensions: VPLS, EVPN

• Traffic Engineering: RSVP, MPLS

• NAT

• An L3 Access removes the need for some of these (FHRP, L2)

• The remaining services can be provided by a single protocol stack

• With a unified operational model: Registration and Resolution are unchanged and are the same for all services

• It is all about mapping Identifiers to Locations. Not more, not less.

• Where necessary additional semantics can be added to the mappings

• Services are expressed as policies governing the responses provided.

• Pulling allows the evaluation of flow context as part of the policy, it also allows us to scale policies

From multiple topics to one theme with variations

Page 12: Cisco Community Meet The Author€¦ · Cisco Confidential 9. Overlay Virtual Networks. Control and Data Plane Separation. Overlay Control Plane Encapsulation Underlay Control Plane

© 2020 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 12

Base Network Connectivity

Cloud ConnectivityVirtual Networks (VPC/VNET)Peering, Gateways, VPNsLoad Balancers

Access ControlInstance level: Security GroupsSubnet level: Network ACLs

Application Service MeshInterconnect container clustersPolicy BasedController to side-car

Layers of Network Operations in the Cloud

Page 13: Cisco Community Meet The Author€¦ · Cisco Confidential 9. Overlay Virtual Networks. Control and Data Plane Separation. Overlay Control Plane Encapsulation Underlay Control Plane

© 2020 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 13

Mobility in the Access

• Rate (@CP) = m x N

• IoT example:

• 16K Robots, each moves 20 times/minute

• 20 r/min x 16K = 320K r/min = 5,333 roams/s

• Sub 70 ms convergence

• 64K Robots (21K r/s) 100K Robots (31K r/s)

• Stadium 64K@1r/min ➔ ~ 1K r/s

Rates of Mobility are compounded by end-point density

XTR-2XTR-1

m roams/min

N end-points

XTR-2

XTR-1

Control plane

m x N events/min

Page 14: Cisco Community Meet The Author€¦ · Cisco Confidential 9. Overlay Virtual Networks. Control and Data Plane Separation. Overlay Control Plane Encapsulation Underlay Control Plane

© 2020 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 14

Mobility in the Access

• Sparse signaling: Only the xTRsinvolved in the move

• Light processing: Only mapping updates, no path calculation

• The rate of events at the xTRs is a fraction of the total rate of events

• Rate@xTR = (m x N) / number of xTRs

• IoT example

• In a network with 100 access routers

• Rate @xTR = 5,333 r/s /100 = ~54 r/s

LISP Control Plane - Scoped move signaling

XTR-2XTR-1

XTR-2

XTR-1

Control plane

Page 15: Cisco Community Meet The Author€¦ · Cisco Confidential 9. Overlay Virtual Networks. Control and Data Plane Separation. Overlay Control Plane Encapsulation Underlay Control Plane

© 2020 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 15

Mobility in the Access

• Prefixes can be scoped to different control plane nodes

• Horizontally scale by adding nodes

• Tested performance for one control plane node:

• Up to 800 r/s while converging faster than 70 ms

• IoT example:

• 5,333 r/s / 800 r/s = 7 CP nodes

LISP Control Plane – Horizontal Scale of the Control Plane

XTR-2XTR-1

m roams/min

N end-points

XTR-2

XTR-1

m x N events/minControl plane

Page 16: Cisco Community Meet The Author€¦ · Cisco Confidential 9. Overlay Virtual Networks. Control and Data Plane Separation. Overlay Control Plane Encapsulation Underlay Control Plane

© 2020 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 16© 2020 Cisco and/or its affiliates. All rights reserved. Cisco Confidential

Submit Your Questions Now!

Use the Q&A panel to submit your questions, our expert will respond

Page 17: Cisco Community Meet The Author€¦ · Cisco Confidential 9. Overlay Virtual Networks. Control and Data Plane Separation. Overlay Control Plane Encapsulation Underlay Control Plane

© 2020 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 17

Extra Resources and References

Cisco Press -Cisco Certification Program Update

http://www.ciscopress.com/promotions/new-cisco-certifications-142035

Other useful resources:

Cisco Enterprise Presents at Tech Field Day Extra at Cisco Live Europe 2020https://techfieldday.com/appearance/cisco-enterprise-presents-at-tech-field-day-extra-at-cisco-live-europe-2020/

Victor’s publicationshttps://www.ciscopress.com/authors/bio/eda7ea44-92c4-4334-8c1e-569913502b00

The new study CCNP and CCIE Data Center Core DCCOR 350-601 Complete Video Course will be available soon! [Learn more]

Cisco PressNews

Page 18: Cisco Community Meet The Author€¦ · Cisco Confidential 9. Overlay Virtual Networks. Control and Data Plane Separation. Overlay Control Plane Encapsulation Underlay Control Plane

© 2020 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 18

Congratulations winners!

We’ll contact you via email

Page 19: Cisco Community Meet The Author€¦ · Cisco Confidential 9. Overlay Virtual Networks. Control and Data Plane Separation. Overlay Control Plane Encapsulation Underlay Control Plane

© 2020 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 19© 2020 Cisco and/or its affiliates. All rights reserved. Cisco Confidential

Thank you for Your Time!

Please help to complete the survey

Your opinion is important and help us to improve

Page 20: Cisco Community Meet The Author€¦ · Cisco Confidential 9. Overlay Virtual Networks. Control and Data Plane Separation. Overlay Control Plane Encapsulation Underlay Control Plane

© 2020 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 20

Thanks For Joining today!

Page 21: Cisco Community Meet The Author€¦ · Cisco Confidential 9. Overlay Virtual Networks. Control and Data Plane Separation. Overlay Control Plane Encapsulation Underlay Control Plane