20131010 90分で理解するSDNの基礎

2013年10月10日 IT Pro Expo

大それたタイトルですが、2013当時に OpenFlow とサーバサイドでのエッジオーバレイ仮想ネットワークについて解説した資料です。

これまた歴史的経緯だなー。。。

Transcript

1. 90෼Ͱཧղ͢ΔSDNͷجૅ
   2013೥10݄10೔
   ϛυΫϥδϟύϯגࣜձࣾ
   

   View Slide

2. Copyright ©2013 Midokura All rights reserved
   ຊ೔ͷΞδΣϯμ
   
   u ಋೖฤ
   Ø ࿩ऀ঺հ
   Ø What’s SDN ?
   Ø “SDN” Λ෼ྨͯ͠ΈΑ͏
   u ٕज़঺հฤ
   Ø ༷ʑͳߏ੒ٕज़
   Ø OpenFlow Deep-dive
   Ø Server-side Edge overlay Deep-dive
   

   View Slide

3. ಋೖฤ
   
   
   Photo Credit:stevendepolo via Compfight cc
   

   View Slide

4. Copyright ©2013 Midokura All rights reserved
   ࿩ऀ঺հ
   
   ΩϟϦΞͰͷωοτϫʔΫઃܭɾӡ༻ɺ.JP DNS
   ͷج൫ઃܭɾӡ༻ɺػثϕϯμSEΛܦͯݱ৬
   

   View Slide

5. Copyright ©2013 Midokura All rights reserved
   ຊ೔ͷ໨త
   
   Ø  “SDN” ͱ͍͏ݴ༿Λฉ͍ͨࣄ͸
   ͋Δ͕ϐϯͱ͜ͳ͍ํ
   ର৅ऀ
   Ø  ʮ“SDN”ͱݺ͹Ε͍ͯΔ΋ͷʯ
   ͷର৅Λ੔ཧ͢Δ
   Ø  ʮ”SDN”ͱݺ͹Ε͍ͯΔ΋ͷʯ
   ͷ୅දతͳ΋ͷͷٕज़తͳ֓؍
   Λཧղ͢Δ
   ૂ͍
   Photo Credit: Marco Bellucci via Compfight cc
   

   View Slide

6. 
   What’s “SDN”?
   Photo Credit: Micky Aldridge via flickr cc
   

   View Slide

7. Copyright ©2013 Midokura All rights reserved
   2012Λڥʹ஫໨ΛूΊ͍ͯΔ “SDN”
   
   A. OpenFlow
   B. Software Defined Networking
   C. Software Defined Network
   From: Google Trends
   A
   
   B
   
   C
   
   

   View Slide

8. Copyright ©2013 Midokura All rights reserved
   What’s “SDN” ?
   
   Software Defined Networking
   ιϑτ΢ΣΞͰωοτϫʔΫΛఆٛ͢Δ???
   

   View Slide

9. Copyright ©2013 Midokura All rights reserved
   Web ্ͰݟΔ༷ʑͳ “SDN” ͷఆٛ
   
   SDN is a new approach to networking in which network
   control is decoupled from the data forwarding function
   and is directly programmable.
   From: https://www.opennetworking.org/about/onf-overview
   ωοτϫʔΫͷߏ੒ɺػೳɺੑೳͳͲΛιϑτ΢ΣΞ
   ͷૢ࡞͚ͩͰಈతʹઃఆɺมߋͰ͖ΔωοτϫʔΫɺ
   ͋Δ͍͸ͦͷͨΊͷίϯηϓτΛࢦ͢
   From: http://www.atmarkit.co.jp/ait/articles/1304/08/news098.html
   

   View Slide

10. Copyright ©2013 Midokura All rights reserved
    Web ্ͰݟΔ༷ʑͳ “SDN” ͷఆٛ cont.
    SDNͱ͸ɺωοτϫʔΫΛιϑτ΢ΣΞͰಈతʹ
    ʙதུʙ
    ͦ͜ͰɺैདྷɺݸʑͷωοτϫʔΫػث͕1୆ͣͭͰߦ͖ͬͯͨωοτϫʔΫ
    ੍ޚͱσʔλసૹॲཧΛ෼཭͠ɺ൚༻αʔόଆͷιϑτ΢ΣΞͰσʔλసૹॲ
    ཧͷΈΛߦ͏ػثΛಈతʹ੍ޚ͢Δ͜ͱͰɺ௨৴Λॊೈʹޮ཰Α͘ɺ҆શʹߦ
    ͑ΔΑ͏ʹ͢Δ͜ͱΛ໨ࢦͯ͠ߟ͑ΒΕͨͷ͕SDNͰ͢ɻ
    From: http://jpn.nec.com/sdn/about_sdn.html?
    ιϑτ΢ΣΞʹΑͬͯԾ૝తͳωοτϫʔΫΛ࡞Γ্͛Δٕज़શൠ
    Λݴ͍·͢ɻSDNΛ༻͍Δͱɺ෺ཧతʹ઀ଓ͞ΕͨωοτϫʔΫ
    ্Ͱɺผ్Ծ૝తͳωοτϫʔΫΛߏங͢Δͱ͍ͬͨΑ͏ͳ͜ͱ
    ͕ՄೳʹͳΓ·͢ɻ
    From: https://www.nic.ad.jp/ja/basics/terms/sdn.html
    

    View Slide

11. Copyright ©2013 Midokura All rights reserved
    Web ্ͰݟΔ༷ʑͳ “SDN” ͷఆٛ cont.
    
    ڞ௨߲
    ü  “ιϑτ΢ΣΞͰ”
    ü  “ಈతʹมߋ”
    ͦͷଞͷΩʔϫʔυ
    ü  ίϯτϩʔϧϓϨʔϯɺσʔλϓϨʔϯ෼཭
    ü  ࣗಈԽ
    ü  ػೳͷ௥Ճ
    ü  Ծ૝Խ
    ü  ൚༻ϋʔυ΢ΣΞ
    

    View Slide

12. Copyright ©2013 Midokura All rights reserved
    Web ্ͰݟΔ༷ʑͳ “SDN” ͷఆٛ cont.
    
    ü  “SDN” ͱ͍͏ݻ༗໊ࢺͷඪ४ٕज़͸ଘࡏ͠ͳ͍
    ü  ιϑτ΢ΣΞͰωοτϫʔΫʹରͯ͠ಈత੍ޚ
    Λߦ͏࢓૊ΈΛͳ΂ͯ “SDN” ͱݺΜͰ͍Δ
    Photo Credit: @Doug88888 via Compfight cc
    ϙΠϯτ
    

    View Slide

13. “SDN”Λ෼ྨͯ͠ΈΑ͏
    
    Photo Credit: 5letterdesign via Compfight cc
    

    View Slide

14. Copyright ©2013 Midokura All rights reserved
    ແ਺ͷ “SDN” ϕϯμ
    
    

    View Slide

15. Copyright ©2013 Midokura All rights reserved
    ෼ྨI. “ద༻ྖҬ”ͱ”෺ཧvsԾ૝”
    
    σʔληϯλ
    ෺ཧ Ծ૝
    WAN
    Ϋϥ΢υωοτϫʔΫελοΫ
    Ծ૝ɾ෺ཧεΠονͷ࿈ܞ
    ෺ཧεΠονͷ੍ޚ
    αʔόɺDCωοτϫʔΫɺWANͷ౷߹੍ޚ
    ఻ૹϨΠϠͷ੍ޚ
    

    View Slide

16. Copyright ©2013 Midokura All rights reserved
    ෼ྨII. “৽ڵvsطଘ”ͱ “HardwareͱSoftware”
    
    ιϑτ΢ΣΞ
    طଘ ৽ڵ
    ϋʔυ΢ΣΞ
    ৽ڵιϑτ΢ΣΞϕϯμ
    Ծ૝Խ No.1ࣄۀऀͷิڧ
    طଘωοτϫʔΫػثϝʔΧ
    ൚༻FPGAɺ൚༻OSʹΑΔODMձࣾ
    طଘ఻ૹػثϝʔΧ
    طଘαʔόػثϝʔΧ
    

    View Slide

17. Copyright ©2013 Midokura All rights reserved
    ෼ྨIII. “ར༻ٕज़”
    
    (ԿΒ͔ͷ)API
    Hop
    
    By
    
    Hop
    Edge
    
    overlay
    OpenFlow
    ఻ૹύεઃఆͷࣗಈԽ
    ෺ཧL2/L3ઃఆͷࣗಈԽɾػೳ௥Ճ
    Ϋϥ΢υͷࣗಈԽɾεέʔϧڧԽ
    શ෦ೖΓ
    Ծ૝ɾ෺ཧεΠονͷ౷߹
    Ϋϥ΢υɾDCؒͷ࿈ܞ
    

    View Slide

18. ٕज़঺հฤ
    
    Photo Credit: [martin] via Compfight cc
    

    View Slide

19. ༷ʑͳߏ੒ٕज़
    
    
    Photo Credit: See-ming Lee 李思明 SML via Compfight cc
    

    View Slide

20. Copyright ©2013 Midokura All rights reserved
    Ծ૝εΠον
    
    Ծ૝εΠονͱ͸
    ü  ιϑτ΢ΣΞͰಈ࡞͢ΔεΠον
    ü  Ծ૝ԽͷϗετOSͰಈ࡞͠ɺVMͱ֎෦ωο
    τϫʔΫΛ઀ଓ͢Δ༻్͕ଟ͍
    ü  ୯७ͳεΠονϯάҎ֎ʹ΋τϯωϧԽɺ
    VLAN ͷ௥Ճ࡟আ౳ͷϔομૢ࡞΋αϙʔτ
    Virtual Switch
    VM VM VM
    Virtual Switch
    VM VM VM
    Virtual Switch
    VM VM VM
    Virtual Switch
    VM VM VM
    Virtual Switch
    VM VM VM
    Virtual Switch
    VM VM VM
    Physical Network
    

    View Slide

21. Copyright ©2013 Midokura All rights reserved
    Ծ૝εΠον
    
    ୅දతͳ࣮૷ྫ
    ü  VMWare ESXi/Infrastracture ্Ͱಈ࡞
    
    ü  ୯७ͳεΠονػೳ͕ϝΠϯ
    
    vswitch, vDS
    Nexus 1000v
    ü  ESXi, Linux ্Ͱಈ࡞
    
    ü  جຊతʹ͸ Cisco UCS ্Ͱͷಈ࡞Λ૝ఆ
    ( IAαʔόͳΒಈ࡞͸Մೳ…ͳഺ )
    
    ü  Linux ্Ͱಈ࡞
    
    ü  Data path ͱͳΔ kernel module ͱɺControl plane ͱͳΔ
    application ͔Βߏ੒
    
    ü  OpenFlow Λ࢖͏͜ͱ΋ɺ௚઀Data pathΛϓϩάϥϛϯά
    ͢Δࣄ΋Մೳ
    Open vSwitch
    

    View Slide

22. Copyright ©2013 Midokura All rights reserved
    Open vSwitch
    ü  Linux ্Ͱಈ࡞͠ɺOpen source Ͱ։ൃ͞Ε
    ͍ͯΔҝɺ঎༻ར༻΁ͷԠ༻΋੝ΜͰɺ
    ”SDN ੡඼” ʹ΋͠͹͠͹ར༻͞ΕΔ
    Ծ૝εΠον
    
    ü  KVM ౳ͷ Linux ΛϗετOSͱ͍ͯ͠Δ΋ͷ͸ɺͦͷ··
    ಈ࡞Մೳ
    
    ü  OpenFlow Ҏ֎ʹ΋ɺNETLINK ܦ༝Ͱ௚઀ϓϩάϥϛϯ
    ά͢ΔࣄʹΑΓɺΑΓॊೈͳ֦ு͕Մೳ
    Ϋϥ΢υ
    
    ωοτϫʔΫ
    
    ελοΫ
    ൚༻FPGAΛ
    
    ༻͍ͨ৽ڵػث
    
    ϝʔΧ
    ü  εΠονͷϕʔεOSʹ Linux Λ࠾༻͓ͯ͠Γɺσʔλύε
    ϓϩάϥϛϯάʹ Open vSwitch ͕ར༻Մೳ
    
    ü  OVS ͷػೳʹΑΓ࠷৽ͷ OpenFlow ΍ଞͷτϯωϧϓϩτ
    ίϧ౳ʹҰૣ͘ରԠՄೳ
    
    Ԡ༻ྫ
    

    View Slide

23. Copyright ©2013 Midokura All rights reserved
    Hop-by-hop ͱ Overlay
    
    Hop-by-hop
    ü  ܦ༝͢ΔػثΛશͯઃఆ
    Overlay
    ü  ௨৴ݩͱѼઌΛऩ༰͢Δ૷ஔͷΈ
    Λઃఆ
    ü  ૷ஔؒ͸ԿΒ͔ͷτϯωϧϓϩτ
    ίϧͰ઀ଓ͠ɺैདྷͷϧʔςΟϯ
    ά౳ʹΑΓ౸ୡੑΛ֬อ
    τϯωϧ
    ¡  ͖Ίࡉ͔ͳ੍ޚ͕Մೳ
    º  ઃఆྔ͕๲େ
    º  τϯωϧ۠ؒ͸ෳࡶͳ੍ޚ͸ࠔ೉
    º  L2 Λ্ҐͰಈ࡞ͤ͞Δ৔߹͸ෳ
    ࡶͳ੍ޚ͕ඞཁ
    ¡  ઃఆྔ͕ݱ࣮తͳྔͰೲ·Δ
    

    View Slide

24. Copyright ©2013 Midokura All rights reserved
    Hop-by-hop ͱ Overlay
    
    ซ༻
    τϯωϧ
    Hop-by-hop Overlay Hop-by-hop
    ü  ੍ޚ͢ΔΠϯλϑΣʔεͱͯ͠τϯωϧΠϯλϑΣʔε౳ΛࢦఆͰ͖Ε͹ɺ
    Hop-by-hop ͱ Overlay ͷࠩ͸ѻ͏ΠϯλϑΣʔεͷछผͷҧ͍Ͱ͋Γɺซ
    ༻͸Մೳ
    ü  ୠ͠ɺ੍ޚ͸ͦΕ͚ͩෳࡶʹ…
    

    View Slide

25. Copyright ©2013 Midokura All rights reserved
    Overlay Ͱ༻͍ΒΕΔτϯωϧٕज़
    
    ü  L2 ϑϨʔϜΛ UDP Ͱ௨͢τϯωϦϯά
    
    ü  24bits ͷςφϯτࣝผࢠΛ࣋ͪɺVLANۭؒ12btisΑΓ޿େ
    
    ¡  UDP ϔομʹΑΓɺܦ༝ϊʔυͰࡉ͔ͳ੍ޚ͕Մೳ
    
    º  MACֶशʹඪ४Ͱ͸ IP Multicast Λ࢖͏ҝɺ࣮૷͕ࠔ೉˞
    VXLAN
    NVGRE
    ü  L2 ϑϨʔϜΛ GRE Ͱ௨͢ҝͷ֦ுɺGRE Tunnel ID Λ෼ׂ
    
    ü  24bitsͷTenant ID Λ࣋ͪɺVLANۭؒ12bitsΑΓ޿େ
    
    ¡  GREʹݟ͑ΔҝɺطଘͷϑϨʔϜϫʔΫͷվม͕ෆཁ
    
    º  Multicast/Broadcast ͕ Tenant IDͱϦϯΫ͍ͯ͠ͳ͍
    
    GRE ü  ॴҦ GRE τϯωϦϯά
    
    ¡  ރΕ͓ͯΓ࣮૷΋ଟ͍
    
    º  L2 ͷߟྀ͸্ҐΞϓϦέʔγϣϯͰߟྀ͢Δඞཁ͕͋Δ
    
    ˞VMWare NSX Ͱ͸IP Multicast ʹΑΔಈతֶशͰ͸ͳ͘
    
    ಠࣗػߏʹΑΓίϯτϩʔϥ͔Β഑৴͞ΕΔ
    

    View Slide

26. Copyright ©2013 Midokura All rights reserved
    OpenStack ͱ Neutron
    
    ü  Open Source ͳΫϥ΢υϚωδϝϯτγςϜ
    ü  ଟ਺ͷίϯϙʔωϯτͷ API ʹΑΔૄ݁߹ʹΑΓ࣮૷
    ü  Network ͸ Neutron ͱ͍͏ίϯϙʔωϯτ܈ʹΑ੍ͬͯޚ
    ͞ΕɺAPI ΋ެ։͞Ε͍ͯΔ
    OpenStack
    

    View Slide

27. Copyright ©2013 Midokura All rights reserved
    ü  L2/L3ͱ͍ͬͨجຊతͳػೳ͚ͩͰ͸ͳ͘ɺߴϨΠϠͷαʔϏεʹ΋֦ு
    OpenStack ͱ Neutron
    
    ü  OpenStack ʹ४ڌ͢Δҝɺଟ͘ͷϝʔΧɺϕϯμ͕
    Neutron API ͱࣗࣾ API Λม׵͢Δ Plugin Λ࣮૷
    ü  σʔληϯλɾΫϥ΢υ޲͚ Network API ͷ
    σϑΝΫτελϯμʔυͷީิͱͯ͠஫໨͞Ε͍ͯΔ
    ੍ޚର৅
    L2 separation
    L3 separation
    FWaaS
    LBaaS
    VPNaaS QoS
    Service Insertion
    Security Group Etc, Etc …
    Neutron API
    

    View Slide

28. Copyright ©2013 Midokura All rights reserved
    ü  ௨৴ࣄۀऀͷඪ४ԽஂମͰ͋Δ
    ETSI (European Telecommunications Standards Institute)
    ʹΑΓɺن֨ԽΛݕ౼
    ü  2013೥10݄4೔ݱࡏ͸·ͩެ։͞Εͨن֨͸ແ͠
    2013೥10݄14೔ʹॳ൛ͷ࢓༷͕ެ։
    NFV = Network Function Virtualization
    
    ü  LBaaS, VPNaaS, FWaaS ౳ɺैདྷઐ༻ػث͕ػೳΛఏڙ͍ͯͨ͠ωοτ
    ϫʔΫαʔϏεΛ൚༻αʔό্Ͱ࣮ݱ͢ΔࣄΛݺͿ޿ٛͷ NFV ͱɺඪ४
    ن֨ͱͯ͠ͷڱٛͷ NFV ͕ଘࡏ͢Δ
    ඪ४ن֨ͱͯ͠ͷNFV
    ༻ޠͱͯ͠ͷNFV
    http://www.etsi.org/technologies-clusters/technologies/nfv
    

    View Slide

29. Copyright ©2013 Midokura All rights reserved
    ETSI NFV ͷಛ௃
    
    From: http://portal.etsi.org/NFV/NFV_White_Paper.pdf
    ΩϟϦΞݻ༗ͷػೳ͕ଟؚ͘·ΕΔ
    

    View Slide

30. Copyright ©2013 Midokura All rights reserved
    ETSI NFV ͷಛ௃ cont.
    
    ONFͱڠௐͯ͠SDNͱ͸ิ׬తͳؔ܎Λ໨ࢦ͢
    From: http://portal.etsi.org/NFV/NFV_White_Paper.pdf
    

    View Slide

31. 
    http://ja.wikipedia.org/wiki/%E3%83%95%E3%82%A1%E3%82%A4%E3%83%AB:Onsen_Macaque.JPG
    

    View Slide

32. Copyright ©2013 Midokura All rights reserved
    What’s OpenFlow ?
    
    OpenFlow
    = ֎෦͔ΒύέοτॲཧϧʔϧΛϓϩάϥϛϯά͢Δ࢓૊Έ
    ωοτϫʔΫ
    ίϯτϩʔϥ
    ΞϓϦέʔγϣϯ
    API
    
    ωοτϫʔΫ
    ػث܈
    ͜ͷ෦෼:
    APIͱ௨৴ํࣜΛ
    نఆ͢ΔͷΈ
    ୯ͳΔϓϩτίϧͰ͋Γɺ
    ϑϨʔϜϫʔΫΛඪ४Խ
    

    View Slide

33. Copyright ©2013 Midokura All rights reserved
    ϑϩʔΤϯτϦͱΞΫγϣϯͷجຊ
    
    •  సૹ͢Δ
    
    •  ϔομΛॻ͖׵͑Δ
    
    •  ഇغ͢Δ
    
    •  ίϯτϩʔϥʹసૹ͢Δ
    
    ϑϩʔຖͷτϥϑΟοΫͷ౷ܭ৘ใ
    
    OpenFlow-Enabled
    εΠον
    
    OpenFlow
    Client
    
    Control Plane
    
    Data Plane
    
    Flow Table
    
    Matching Fields
    Action
    Stats
    
    ϑϩʔΤϯτϦ
    
    OpenFlow
    ίϯτϩʔϥ
    
    OpenFlow
    
    ϓϩτίϧ
    
    Ingress
    Port
    MAC
    DA
    MAC
    SA
    EtherType
    VLAN
    ID
    IP
    Src
    IP
    Dst
    IP
    Protocol
    TCP/UDP
    src port
    TCP/UDP
    dst port
    P-bits
    IP
    DSCP
    ϨΠϠ2
    ϨΠϠ3
    ϨΠϠ4
    
    ϑϩʔΛࣝผ
    
    

    View Slide

34. Copyright ©2013 Midokura All rights reserved
    ONFʹΑΔඪ४Խ
    
    https://www.opennetworking.org/membership/members
    100ࣾҎ্(*)ͷϝϯόʹΑΓߏ੒
    
    Working Group Ͱٞ࿦
    ϘʔυϝϯόͰ࢓༷ࡦఆ
    શͯͷϝϯόͷঝೝΛ
    ܦͯɺ࢓༷͕ඪ४Խ
    ONFͷඪ४Խϓϩηε
    Ϙʔυϝϯό(*)
    (*) 2013೥10݄ݱࡏ
    

    View Slide

35. Copyright ©2013 Midokura All rights reserved
    OpenFlow ࢓༷֓ཁ (1/3)
    
    ü ϨΠϠ2ɺϨΠϠ3 (IPv4) Ϛονϯάɺॻସ
    ü VLANͷ௥Ճɺ࡟আɺॻସ
    ü γϯάϧϑϩʔςʔϒϧ
    OpenFlow 1.0 (2010-03)
    ü MPLSϥϕϧɺEXP bitϚονϯάɺॻସ
    ü Ϛϧνϑϩʔςʔϒϧ
    ü άϧʔϓςʔϒϧ(LAG)
    OpenFlow 1.1 (2011-02)
    ü ϨΠϠ3 (IPv4) Ϛονϯάɺॻସ
    ü Extensible Expression ΁ͷରԠ
    (IPv6 TLV ͷελοΩϯά΁ͷରԠ)
    OpenFlow 1.2 (2011-12)
    

    View Slide

36. Copyright ©2013 Midokura All rights reserved
    ü ίϯτϩʔϥʙεΠον઀ଓͷվળɾ֦ு
    •  CapabilityωΰγΤʔγϣϯͷվળ
    •  Auxiliary Connection ͷαϙʔτ
    ü Tunnel ID ͷαϙʔτ
    ü IPv6 ֦ுϔομͷαϙʔτ
    ü PBB (IEEE802.1ah) ͷαϙʔτ
    ü ౷ܭऔಘͷ֦ு
    ü Per-flow meter ( rate-limit ౳ʹར༻)
    ü etc …
    OpenFlow 1.3 (2012-05)
    OpenFlow ࢓༷֓ཁ (2/3)
    

    View Slide

37. Copyright ©2013 Midokura All rights reserved
    OpenFlow ࢓༷֓ཁ (3/3)
    
    ü मਖ਼ͱվળɺେ෯ͳ৽نػೳ௥Ճ͸ແ͠
    OpenFlow 1.3.2 (2013-04)
    OpenFlow 1.3.1 (2012-09)
    ü Extensible Expression ͷ֦ு
    ü Packet-in ͷ֦ு
    ü Bundle ϝΧχζϜͷಋೖ
    ü ྫ֎ॲཧͷ֦ு
    ü Τϥʔίʔυͷ֦ு
    OpenFlow 1.4 (2013-10ݱࡏϨϏϡʔத)
    https://www.opennetworking.org/images/stories/downloads/sdn-resources/onf-specifications/openflow/openflow-spec-v1.4.0.pdf
    

    View Slide

38. Copyright ©2013 Midokura All rights reserved
    OpenFlow ͷपลن֨
    
    OpenFlow ͷ໰୊఺
    Ø  ݩʑ OpenFlow ͸“ύέοτͷॲཧϧʔϧ”
    ͷΈΛنఆ
    Ø  Լهͷػೳ͕ͳ͘ɺOpenFlow ͚ͩͰ͸׬݁͠ͳ͍
    ü  ϢʔβɺίϯϑΟά؅ཧ
    ü  ΠϯλϑΣʔεͷ؅ཧ
    ü  OAM (؂ࢹɾ؅ཧ) ػೳ
    Ұ෦Λิ׬͢Δن֨OF-CONFIGΛنఆ
    

    View Slide

39. Copyright ©2013 Midokura All rights reserved
    OF-CONFIG
    
    OF-CONFIG ֓ཁ
    Ø  OpenFlow ͸ “Data path” Λઃఆ͢Δͷʹର͠ɺ
    OF-CONFIG ͸
    “OpenFlow capable (ͳ෺ཧతͳ) Switch” Λઃఆ
    From: https://www.opennetworking.org/images/stories/downloads/sdn-resources/onf-specifications/openflow-config/of-
    config-1-1-1.pdf
    

    View Slide

40. Copyright ©2013 Midokura All rights reserved
    OF-CONFIG
    
    OF-CONFIG ͷ؅ཧ಺༰
    ü  OpenFlow ίϯτϩʔϥͱͷ઀ଓपΓ
    ü  ΠϯλϑΣʔεɺΩϡʔͷઃఆ
    ü  ΠϯλϑΣʔεͷ Up, Down ౳
    ü  OpenFlow Data path ͷ Capability Negotiation
    Ø  Ϣʔβ؅ཧ౳ɺOpenFlow ʹ௚઀ؔ܎͠ͳ͍εΠο
    νͷ؅ཧʹ͍ͭͯ͸ґવͱͯ͠ผͷํ๏Ͱ؅ཧ͢Δ
    ඞཁ͕͋Δࣄʹ஫ҙ
    

    View Slide

41. 
    https://commons.wikimedia.org/wiki/File:Plastic_tubing.jpg
    

    View Slide

42. Copyright ©2013 Midokura All rights reserved
    What’s Edge Overlay ?
    
    Edge overlay
    Ø  Τϯυऩ༰૷ஔ (Edge) ͕τϯωϧΛுΔ Overlay
    ü  Ծ૝ԽϗετOS্ͷԾ૝εΠον͕ԿΒ͔ͷτϯωϧΛ
    ுΓɺVM-to-VM ͷ௨৴Λ Overlay ͱͯ͠ఏڙ
    ( Server-side Edge Overlay )
    
    Ϋϥ΢υ
    
    ωοτϫʔΫ
    
    ελοΫ
    VPLS
    ü  ճઢऩ༰૷ஔ͕ MPLS LSP ΛுΓɺސ٬ͷ L2 ճઢΛ
    Overlay ͱͯ͠ఏڙ
    
    Ԡ༻ྫ
    

    View Slide

43. Copyright ©2013 Midokura All rights reserved
    Server-side Edge overlay
    
    ֓೦ਤ
    Virtual Switch
    VM VM VM
    Virtual Switch
    VM VM VM
    Virtual Switch
    VM VM VM
    Virtual Switch
    VM VM VM
    Virtual Switch
    VM VM VM
    Virtual Switch
    VM VM VM
    Physical Network
    Ø  GRE, NVGRE, VXLAN ౳ɺIP based ͳτϯωϦϯάϓϩτί
    ϧΛར༻
    Ø  ͦͷҝɺUndelay ͱͳΔ Physical Network ͸ IP Reachability
    ͑͋͞Ε͹ྑ͍
    

    View Slide

44. Copyright ©2013 Midokura All rights reserved
    Why Server-side Edge overlay in Cloud ?
    
    ü  CPUɾϝϞϦ͸Ծ૝ԽɺࣗಈԽ͞Ε͍ͯΔ͕
    ωοτϫʔΫ͸ࣗಈԽ͞Ε͍ͯͳ͍
    
    Automation
    ü  East-to-West τϥϑΟοΫͷരൃ
    
    ü  ϘτϧωοΫͱͳΔԾ૝ϧʔλVM
    
    ü  ωοτϫʔΫऩ༰਺ → VLAN 4,096 ͷน
    ü  VMऩ༰਺ → MAC ςʔϒϧͷ૿େ
    ü  L2ωοτϫʔΫ → STP ͷݶք
    Performance
    Scalability
    

    View Slide

45. Copyright ©2013 Midokura All rights reserved
    ࣮૷ྫ: MidoNet ͷ৔߹
    
    VM
    Upstream ISP
    vPort
    vPort
    vPort
    vPort
    VM VM
    vPort
    vPort
    VM VM
    vPort
    Tenant A
    
    Router
    
    Tenant A
    
    Bridge 1
    
    Tenant A
    
    Bridge 2
    
    Tenant B
    
    Bridge 1
    
    Tenant B
    
    Router
    
    The Internet
    Logical Topology (Overlay)
    BGP uplink
    Provider
    
    Router
    
    Upstream ISP
    The Internet
    VM
    MidoNet
    Compute Node
    VM
    MidoNet
    Compute Node
    VM
    MidoNet
    Compute Node
    MidoNet
    Gateway Node
    MidoNet
    Gateway Node
    Back-end Network
    Network
    
    State Node
    NW State
    
    DB
    
    NW State
    
    DB
    
    NW State
    
    DB
    
    Physical Topology (Underlay)
    BGP uplink
    API Node
    Cloud Mgmt System
    Only
    requirement is
    an IP
    reachability!
    
    ݸʑͷNWػثͰ͸ͳ
    ͘ɺ࿦ཧτϙϩδશମ
    ΛΤϛϡϨʔτ
    

    View Slide

46. Copyright ©2013 Midokura All rights reserved
    
    
    
    
    
    
    ϓϩάϥϜΠϯλϑΣʔε
    
    Upstream ISP
    The Internet
    VM
    MidoNet
    Compute Node
    VM
    MidoNet
    Compute Node
    VM
    MidoNet
    Compute Node
    MidoNet
    Gateway Node
    MidoNet
    Gateway Nodef
    Back-end Network
    Network
    
    State Node
    NW State
    
    DB
    
    NW State
    
    DB
    
    NW State
    
    DB
    
    BGP uplink
    API Node
    Cloud Mgmt System
    MidoNet ͷ৔߹
    Cloud Management
    System ͱ࿈ܞ͠ɺ
    ࣗಈԽΛαϙʔτ
    
    Point!
    Restful API ܦ༝ͷ੍ޚɺ౷ܭ
    ৘ใऔಘʹରԠ͠ɺಠࣗ
    CMS ͱͷ࿈ܞʹ΋ରԠՄೳ
    Point!
    OVS kernel module Λ Data
    Path ͱͯ͠ར༻͠ɺAgent ͔
    ΒϓϩάϥϜ
    Point!
    

    View Slide

47. Copyright ©2013 Midokura All rights reserved
    East-West τϥϑΟοΫͷരൃ
    
    ϗετؒԟ෮Ϗϯλ໰୊
    ϧʔλɺFW౳ͷτϥϑΟοΫΛू໿͢Δ࿦ཧϊʔ
    υ΁ͷંΓฦ͠τϥϑΟοΫʹΑΓɺෛՙ͕ഒ૿
    

    View Slide

48. Copyright ©2013 Midokura All rights reserved
    East-West τϥϑΟοΫͷരൃ
    
    MidoNet ͷ৔߹
    ैདྷͷVirtual Router
    Upstream ISP Upstream ISP
    Back-end Network
    Upstream ISP Upstream ISP
    Back-end Network
    NetworkػثΛVMͱͯ͠ΤϛϡϨʔγϣϯ Network TopologyશମΛΤϛϡϨʔγϣϯ
    MidoNet
    Drop Drop
    Drop
    Drop
    
    
    IngressͰͷτϙϩδΤϛϡϨʔτʹΑΓɺ໨త஍ͱͳΔϗετ
    ʹ௚઀సૹ͢Δҝɺ”ߦͬͯདྷ͍” ͕ൃੜ͠ͳ͍
    
    Point!
    

    View Slide

49. Copyright ©2013 Midokura All rights reserved
    ϘτϧωοΫͱͳΔϧʔλVM
    
    ෛՙूதʹΑΔVM Down
    τϥϑΟοΫͷूதɺARPॲཧɺύέοτϑΟϧ
    λॲཧʹΑΓϧʔλVM͕ෆ҆ఆʹ
    Photo Credit: Ed Karjala via Compfight cc
    

    View Slide

50. Copyright ©2013 Midokura All rights reserved
    ϘτϧωοΫͱͳΔϧʔλVM
    
    MidoNet ͷ৔߹
    Upstream ISP Upstream ISP
    Back-end Network
    τϙϩδΤϛϡϨʔγϣϯʹΑΓΤοδͰ
    ෼ࢄॲཧ͢ΔҝɺϧʔλVM͕ଘࡏ͠ͳ͍
    Point!
    ֤MidoNet Agent ͕ IP-MACରԠ
    දΛ࣋ͪɺಉҰϗετ಺VM͔
    ΒͷARPʹ୅ཧԠ౴
    Point!
    VMͰ͸ͳ͘ɺϗετOSͰͷϑΥϫʔσΟϯάॲཧ
    Point!
    

    View Slide

51. Copyright ©2013 Midokura All rights reserved
    ωοτϫʔΫऩ༰਺
    
    VID 4,096 ͷน
    Photo Credit: Alex Barth via Compfight cc
    VLAN ͸ศར͕ͩ IaaS Ϋϥ΢υͷςφϯτࣝผࢠ
    ͱͯ͠͸͋·Γʹ΋গͳ͍
    

    View Slide

52. Copyright ©2013 Midokura All rights reserved
    ωοτϫʔΫऩ༰਺
    
    MidoNetͷ৔߹
    
    
    
    
    
    
    
    
    
    Upstream ISP
    VM
    MidoNet
    Compute Node
    VM
    MidoNet
    Compute Node
    VM
    MidoNet
    Compute Node
    MidoNet
    Gateway Node
    MidoNet
    Gateway Node
    Back-end Network
    Network
    
    State Node
    NW State
    
    DB
    
    NW State
    
    DB
    
    NW State
    
    DB
    
    BGP uplink
    Cloud Mgmt System
    API Node
    VLANΛར༻͠ͳ͍τϙϩδΤϛϡϨ
    ʔγϣϯͷҝɺ4,096 ͷนʹ੍ݶ͞Ε
    ͣεέʔϧΞ΢τ͕Մೳ
    Point!
    

    View Slide

53. Copyright ©2013 Midokura All rights reserved
    VMऩ༰਺
    
    ߴີ౓ऩ༰ʹΑΔMAC਺ͷݶք
    VM Λଟॏऩ༰͢ΔࣄʹΑΓɺ1εΠον͋ͨΓͰ
    ֶश͠ͳͯ͘͸͍͚ͳ͍ MAC ਺͕ܹ૿
    Photo Credit: the bpp via Compfight cc
    

    View Slide

54. Copyright ©2013 Midokura All rights reserved
    VMऩ༰਺
    
    MidoNetͷ৔߹
    
    
    
    
    
    
    Upstream ISP
    VM
    MidoNet
    Compute Node
    VM
    MidoNet
    Compute Node
    VM
    MidoNet
    Compute Node
    MidoNet
    Gateway Node
    MidoNet
    Gateway Node
    Back-end Network
    Network
    
    State Node
    NW State
    
    DB
    
    NW State
    
    DB
    
    NW State
    
    DB
    
    BGP uplink
    Cloud Mgmt System
    API Node MACֶश݁Ռ͸ΫϥελDB্ͷ֨ೲ
    ͞ΕΔҝɺεέʔϧΞ΢τՄೳɻ
    
    େن໛ͳMACΤϯτϦ਺ʹରԠ
    Point!
    ෺ཧαʔόͷσʔλύε্ʹϓϩάϥ
    ϛϯά͞ΕΔ΋ͷ͸࣮ࡍʹऩ༰͢Δ
    VMͷ௨৴͕ൃੜͨ͠΋ͷͷΈ
    Point!
    

    View Slide

55. Copyright ©2013 Midokura All rights reserved
    L2 ωοτϫʔΫͷεέʔϥϏϦςΟ
    
    ϑϥοτ L2 ΁ͷཁٻ
    Photo Credit: skarpi - www.skarpi.is via Compfight cc
    ϗετOS ͕ಉҰηάϝϯτʹ͍ΔࣄΛཁٻ͢Δػ
    ೳ΋ଟ͍͕ɺطଘͷL2ٕज़Ͱ͸εέʔϧ͠ͳ͍
    

    View Slide

56. Copyright ©2013 Midokura All rights reserved
    L2 ωοτϫʔΫͷεέʔϥϏϦςΟ
    
    MidoNet ͷ৔߹
    
    
    
    Upstream ISP
    VM
    MidoNet
    Compute Node
    VM
    MidoNet
    Compute Node
    VM
    MidoNet
    Compute Node
    MidoNet
    Gateway Node
    MidoNet
    Gateway Node
    Back-end Network
    Network
    
    State Node
    NW State
    
    DB
    
    NW State
    
    DB
    
    NW State
    
    DB
    
    BGP uplink
    Cloud Mgmt System
    API Node
    ֤ MidoNet Agent ؒ௨৴͸ GRE Ͱ
    ΧϓηϧԽ
    
    ˠ IP Reachability ͑͋͞Ε͹Α͍
    
    ˠ IGP Λ༻͍ͨ L3 εέʔϧΞ΢τ
    ͕ར༻Մೳ
    Point!
    

    View Slide

57. Copyright ©2013 Midokura All rights reserved
    ·ͱΊ
    
    ü ࠓ೔ଘࡏ͢ΔΞϓϦέʔγϣϯͱͯ͠͸
    Ø ౷߹؅ཧγεςϜʹΑΔ෺ཧɾԾ૝؀ڥͷ౷߹੍ޚ
    Ø OpenFlow / Open vSwitch Λ༻͍ͨωοτϫʔΫػث
    Ø Server-side Edge Overlay Λ༻͍ͨΫϥ΢υωοτϫʔΫε
    λοΫ
    Λ “SDN” “SDN ରԠ” ͱݺͿέʔε͕ଟ͍Ͱ͢
    ü “SDN” ͱ͍͏ݻ༗໊ࢺͷٕज़͸ଘࡏ͠·ͤΜ
    

    View Slide

58. 
    Thank you!
    
    

    View Slide