Revision #.#© 2014 Open Networking Foundation

NFV Orchestration for SLA Guarantee Services Luxoft SuperCloud NFV Orchestrator, Qosmos SAM and Certes Networks vCEP VPN VNF

Revision #.#© 2014 Open Networking Foundation 2

Company Information

Luxoft Holding, Inc (NYSE:LXFT US) is a leading provider of software development services and innovative IT solutions to a global client base consisting primarily of large multinational corporations. Luxoft’s software development services consist of core and mission critical custom software development and support, product engineering and testing, and technology consulting. Luxoft’s solutions are based on its proprietary products and platforms that directly impact its clients’ business outcomes and efficiently deliver continuous innovation. The Company develops its solutions and delivers its services from 18 dedicated delivery centers worldwide. It has over 7,700 employees across 22 offices in 14 countries in North America, Mexico, Western and Eastern Europe, and Asia Pacific. Luxoft is incorporated in Tortola, British Virgin Islands, has its operating headquarters office in Zug, Switzerland and is listed on the New York Stock Exchange. For more information, please visit http://www.luxoft.com.

Qosmos leads the market for embedded Deep Packet Inspection (DPI) and network intelligence technology used in physical, SDN and NFV architectures. The company supplies software to vendors who embed real-time application awareness in their products for traffic optimization, service chaining, quality of service, analytics, cyber security and more. Qosmos brings fast time to market for network intelligence and continuous protocol signature updates inside physical, SDN and NFV networking products. As the leading supplier of embedded intelligence software, Qosmos contributes actively to international standards and serves 75% of the market.

Certes Networks, Inc. provides security solutions for networks. The Company offers standard-based encryption and authentication solutions that secure data in area networks, data centers, and public and private cloud networks.

Revision #.#© 2014 Open Networking Foundation

Problem and Solution

Problem:

How to orchestrate VNF service chains for SLA guarantee tenant requests ?

Solution:

Participants: Luxoft SuperCloud NFV Orchestrator, Luxoft Firewall, Certes vCEP VPN engine, Qosmos SAM DPI engine Qosmos SAM DPI on-switch service provides network intelligence about existing recreational video traffic (you tube) in the network that's consuming high bandwidth Tenant request comes to Luxoft SuperCloud Orchestrator for SLA guarantee VPN traffic between 2 remotes sites H1 & H3SuperCloud’s BWoD feature does nail up network connectivity automatically between sites. It also throttles bandwidth for recreational traffic to honor tenant SLACertes Network’s VPN VNF service encrypts traffic only for tenant's subscribed network path as directed by SuperCloudFirewall VNF service that's chained after VPN, allows this traffic to pass through at both sitesFirewall allows remote site (H3) traffic access only through VPN

FW

DPI

H1

vCEP vCEP

GWYoutube,

Video

H3

TNM

VPN

H2

NFV Orchestrator

VNF Control SDK-API

Cloud SP Tenant

Revision #.#© 2014 Open Networking Foundation

NFV Orchestrator

Solution Details

• SuperCloud Roles and Responsibilities:– ADMIN: Infrastructure Provider– owns/manages

switches, SDN Controller, VDUs– PROVIDER: Service Provider – owns/manages

hosts, network services– USER: Tenant or End user – uses hosts to connect

• Admin starts topology (switches, hosts, and SDN controller)

• Admin(/Provider) performs DPI & vCEP image onboarding

• From the web interface, Provider defines the service graph consisting of VNFs (DPI, vCEP1 and vCEP2) and Endpoints (H1, H2, H3, GW-Internet/YouTube/Video) if that does not exist.

• From the web interface, Provider instantiates the service based on service template

• User initiates various traffic flows to available destinations (H1 H3, H1 YouTube, H1 Internet)

FW

DPI

H1

vCEP

vCEP

GWYoutu

be,Video

H3

Youtube/Video TrafficSecure TrafficRegular TrafficVNF Control SDK-API

H2

TNM

VPN

Cloud SP Tenant

Revision #.#© 2014 Open Networking Foundation 5

Data Center SDN

Revision #.#© 2014 Open Networking Foundation

Key Takeaways

Orchestration of NFV services as per ETSI NFV standard architecture• VNF On-boarding and lifecycle management

Orchestration of service chains for tenant network service paths

SuperCloud’s BWoD feature to intelligently allocate bandwidth to honor SLAs

SuperCloud integration with Qosmos DPI to classify traffic as per application ID

SuperCloud’s integration with Certes vCEP VPN VNF service to provide secure connectivity for corporate traffic in cloud environments• L2-based encryption of the traffic between H1 and H3

Revision #.#© 2014 Open Networking Foundation 7

THANK YOU