software defined networking - huawei - networkshop44
TRANSCRIPT
Huawei software defined networking (SDN)
technology and agile network for universities
Steven Harrison
Innovative Agile Network Building a Better Connected Education
Wired and Wireless Convergence
High-Quality Service Experience
Coordinated Network defense
Real-time Detection and Automatic Configuration
Software-Defined Networking
Big dataCloud computingMobility Internet of ThingsSocial media
Are Your Networks Ready?
Innovative ICT is driving new Education Models
3
1
5 4
2
Virtual, HD & Interactive, Creating a Teaching
Environment Favorable to Learning
Future Classroom & Campusin the 21st Century
CloudComputing
Big Data
Social Networking
IoT
SDN
Mobility
Multimedia Interactive TeachingLearning is no longer passive
Virtual Community LearningClassrooms are no longer fixed
Digital LibraryKnowledge no longer hard to find
Cloud enabled LearningLack of Teaching Resource
Principal/Teacher DashboardPoor Management
1
2
3
4
5
It's Time to Redefine the Network
Data center
Now, an Agile Network
Campus network
WAN
Branch network
High-Quality Application Experience
Coordinated End-to-End Secured Network
Centralized, Real-time Detection, Automatic Configuration
Software-Defined Networking
Wired and Wireless Convergence
Agile switch (5th Generation)
Huawei Agile Network Architecture
Campus network controller (Intelligent)
Leveraging SDN with ENP in campus networks
Zero-configuration edge
Multi-Service
Aggregated & Unified
Software Defined& Programmable
Innovation #1: SVF Aggregates, Many-to-One, Wireless & Wired
T-bit
Virtualized MPUsCore/Aggregation switch
Access switch
APVirtualized ports
Virtualized cards
1 N2
1 M2
MPU 1 MPU 2MPU 3 MPU 4
One device manages a campus.
…
……
Super Virtual Fabric (SVF) aggregates multiple wired and wireless nodes to single virtual node with unified & simplified management
One Campus One Switch
• Unified NMS, device discovery, and configuration delivery
• Zero configuration and deployment of access switches
Innovation #2: iPCA Enables IP Network with Quality Awareness
IP technology revolution: Huawei Packet Conservation Algorithm for Internet (iPCA)
The First multi-input and multi-output measurement technologyReal-time measurement, multi-flow measurement, applicable to any network size
Traditional detection method iPCA
User 31
2
Packet loss!Simulation
flows
Real service flows
Test flows are service
flows
VS Fault point is the 6th board of
the 2rd chassis
Silicon Valley data center
BeiJing data center
Innovation #3: User Experience oriented network
User XX
Location XX
Automatic translationAutomatic deployment
1. Security policy2. QoS policy3. Storage policy4. Service policy
Controller
Beijing
Shenzhen
Silicon Valley
WAN/Internet
Shenzhen data center
Policy, resource
Policy, resource
Policy, resource
Mobile policy, resource, and user experience Policy center
Controller
iSOC
Security policy association Defense against
attacks、 viruses、 information leaks…
Security center
Innovation #4: Security CoordinationDistributed and Dynamic Detection plus Proactive Defense
Traffic cleaning and active defense of unknown threats
Analysis of big data sourced from network security events and coordinated defense
Automatic threat isolation
Innovation #5 Software-Defined Networking with ENP for Future
Use software to redefine the configuration on agile switches.
When a protocol is upgraded, do we change the configuration or replace the device?
Chip supporting programmability in the forwarding plane
POF supports future protocols with ease
Architecture supporting multi-layer openness
Traditional switches must be replaced.
Controller
New protocols 1.0, 2.0, 3.0…
POF packet parsing
Agile Application Agile Management Agile Evolution• Redefine the Network to Focus
on
User Experience
• Use SDN Architecture in
Campus
Networks• Implement SDN Ready
everywhere,
Hardware Ready, and Software Ready
• Achieve Coordinated Security
Analysis using Big Data
• Implement Wired and Wireless
Convergence
• Enable the IP Network for Quality
Awareness
First to:Enabling the Network to Be More Agile for services
• Provide a change-on-demand
network
Agile Networks made possible with the Next Generation Switch
HUB
First generation
L2 Switch
Second generation
L3 Switch
Third generation
Multi-Service Switch
Fourth generation
ASIC Inside
Agile Switch
Ethernet network processor
ENP
S12700 Switch Family
S12708 S12712
12.32 Tbps 17.44 Tbps
6240 Mpps 9120 Mpps
15u 19u
384*10G / 64*40G / 64*100G 576*10GE / 96*40GE / 96*100G
Agile EvolutionCampus network controller• Dynamic allocation of network
resources• Service orchestration and
dynamic path managementAgile Switch• SDN oriented network coreUnified Management• eSight• iSOC Security Center
One Campus One switch• SVF, virtual management
NG FW
AP
S12700
WAN/Internet
NE/AR/SVN
APS5700
Agile core
Converged edge
CampusController
Agile switch
This is the Agile Network
NGFW Anti-DDoS
Network Egress
Security POD
DC / eSight / iSOC
HUAWEI ENTERPRISE ICT SOLUTIONS A BETTER WAY