22
Ubiquitous, lightweight NFV in the age of the Internet of Things Richard Cziva - University of Glasgow, United Kingdom [email protected] NFW WORLD CONGRESS, San Jose, CA, US 19/04/2016

Ubiquitous, lightweight NFV in the age of the Internet of ... lightweight NFV in the age of the Internet of Things ... Step-by-step • Traffic from ... (e.g. SR-IOV / DPDK) DPDK runs

  • Upload
    voque

  • View
    219

  • Download
    1

Embed Size (px)

Citation preview

Page 1: Ubiquitous, lightweight NFV in the age of the Internet of ... lightweight NFV in the age of the Internet of Things ... Step-by-step • Traffic from ... (e.g. SR-IOV / DPDK) DPDK runs

Ubiquitous,lightweightNFVintheageoftheInternetofThings

Richard Cziva - University of Glasgow, United Kingdom

[email protected]

NFW WORLD CONGRESS, San Jose, CA, US 19/04/2016

Page 2: Ubiquitous, lightweight NFV in the age of the Internet of ... lightweight NFV in the age of the Internet of Things ... Step-by-step • Traffic from ... (e.g. SR-IOV / DPDK) DPDK runs

About us •  University of Glasgow, United Kingdom

� School of Computing Science

� Networked Systems Research Laboratory

•  Director: Dr Dimitrios P Pezaros

Ric

har

d C

ziva

: Ubi

quit

ous,

ligh

twei

ght

NF

V in

th

e ag

e of

In

tern

et o

f T

hin

gs

Page 3: Ubiquitous, lightweight NFV in the age of the Internet of ... lightweight NFV in the age of the Internet of Things ... Step-by-step • Traffic from ... (e.g. SR-IOV / DPDK) DPDK runs

Research topics @netlab

Our webpage: https://netlab.dcs.gla.ac.uk Ric

har

d C

ziva

: Ubi

quit

ous,

ligh

twei

ght

NF

V in

th

e ag

e of

In

tern

et o

f T

hin

gs

Page 4: Ubiquitous, lightweight NFV in the age of the Internet of ... lightweight NFV in the age of the Internet of Things ... Step-by-step • Traffic from ... (e.g. SR-IOV / DPDK) DPDK runs

Internet of Things (IoT) •  Physical objects

� Devices

� Vehicles

� Software

� Sensors

•  Connected using a network

Ric

har

d C

ziva

: Ubi

quit

ous,

ligh

twei

ght

NF

V in

th

e ag

e of

In

tern

et o

f T

hin

gs

Page 5: Ubiquitous, lightweight NFV in the age of the Internet of ... lightweight NFV in the age of the Internet of Things ... Step-by-step • Traffic from ... (e.g. SR-IOV / DPDK) DPDK runs

Increase of IoT devices

Ric

har

d C

ziva

: Ubi

quit

ous,

ligh

twei

ght

NF

V in

th

e ag

e of

In

tern

et o

f T

hin

gs

Page 6: Ubiquitous, lightweight NFV in the age of the Internet of ... lightweight NFV in the age of the Internet of Things ... Step-by-step • Traffic from ... (e.g. SR-IOV / DPDK) DPDK runs

Growth of network traffic

Ric

har

d C

ziva

: Ubi

quit

ous,

ligh

twei

ght

NF

V in

th

e ag

e of

In

tern

et o

f T

hin

gs

Cisco: “growth due to mobile devices and wearables”

Page 7: Ubiquitous, lightweight NFV in the age of the Internet of ... lightweight NFV in the age of the Internet of Things ... Step-by-step • Traffic from ... (e.g. SR-IOV / DPDK) DPDK runs

IoT support at CSPs •  CSPs are transforming to support multiple IoT

applications:

�  Connected cars

�  Surveillance systems

�  Smart cities

�  Smart metering

�  Environment sensors

�  …

Ric

har

d C

ziva

: Ubi

quit

ous,

ligh

twei

ght

NF

V in

th

e ag

e of

In

tern

et o

f T

hin

gs

Page 8: Ubiquitous, lightweight NFV in the age of the Internet of ... lightweight NFV in the age of the Internet of Things ... Step-by-step • Traffic from ... (e.g. SR-IOV / DPDK) DPDK runs

IoT architecture

Ref.: Capillary Networks – Bridging the Cellular and IoT Worlds - Oscar Novo, Nicklas Beijar, Mert Ocak, Jimmy Kjallman, Miika Komu, Tero Kauppinen Ericsson Research

Ric

har

d C

ziva

: Ubi

quit

ous,

ligh

twei

ght

NF

V in

th

e ag

e of

In

tern

et o

f T

hin

gs

Page 9: Ubiquitous, lightweight NFV in the age of the Internet of ... lightweight NFV in the age of the Internet of Things ... Step-by-step • Traffic from ... (e.g. SR-IOV / DPDK) DPDK runs

Challenges •  IoT applications have diverse network

requirements

•  The network requirements are constantly

changing in an unpredictable fashion

•  Network reconfiguration needs to be fast (and

frequent)

Ric

har

d C

ziva

: Ubi

quit

ous,

ligh

twei

ght

NF

V in

th

e ag

e of

In

tern

et o

f T

hin

gs

Page 10: Ubiquitous, lightweight NFV in the age of the Internet of ... lightweight NFV in the age of the Internet of Things ... Step-by-step • Traffic from ... (e.g. SR-IOV / DPDK) DPDK runs

Example: Change in network requirements

Ric

har

d C

ziva

: Ubi

quit

ous,

ligh

twei

ght

NF

V in

th

e ag

e of

In

tern

et o

f T

hin

gs

Capillary Gateway

CCTV system

Image processing

Recording

vNF

Goal: Increase bandwidth (video quality) in case of event of interest

Page 11: Ubiquitous, lightweight NFV in the age of the Internet of ... lightweight NFV in the age of the Internet of Things ... Step-by-step • Traffic from ... (e.g. SR-IOV / DPDK) DPDK runs

The question is: What type of virtual Network Functions fit the emerging IoT architecture?

Ric

har

d C

ziva

: Ubi

quit

ous,

ligh

twei

ght

NF

V in

th

e ag

e of

In

tern

et o

f T

hin

gs

Page 12: Ubiquitous, lightweight NFV in the age of the Internet of ... lightweight NFV in the age of the Internet of Things ... Step-by-step • Traffic from ... (e.g. SR-IOV / DPDK) DPDK runs

vNFs in the IoT context •  vNFs need to run on wide variety of devices

� Most devices or capillary gateways are low

cost (e.g., single chip computers)

•  vNFs need to support fast lifecycle mgmt.

� A vNF should be started in few seconds

•  The virtualization overhead should be minimal

•  vNFs should be as simple as possible

Ric

har

d C

ziva

: Ubi

quit

ous,

ligh

twei

ght

NF

V in

th

e ag

e of

In

tern

et o

f T

hin

gs

Page 13: Ubiquitous, lightweight NFV in the age of the Internet of ... lightweight NFV in the age of the Internet of Things ... Step-by-step • Traffic from ... (e.g. SR-IOV / DPDK) DPDK runs

Glasgow Network Functions •  Glasgow Network Functions (GNF)

�  Research and development project from Netlab

•  Main characteristics of GNF are:

� Container-based NFV system

� Transparent attachment to network traffic

(using SDN)

�  Infrastructure independent

� Open source Ric

har

d C

ziva

: Ubi

quit

ous,

ligh

twei

ght

NF

V in

th

e ag

e of

In

tern

et o

f T

hin

gs

Page 14: Ubiquitous, lightweight NFV in the age of the Internet of ... lightweight NFV in the age of the Internet of Things ... Step-by-step • Traffic from ... (e.g. SR-IOV / DPDK) DPDK runs

Containers •  Lightweight “virtualization”

�  Shared kernel on the host

•  Fast create/start/stop/delete

•  High performance � Small delay, high throughput, low memory usage

•  Reusable / shareable

•  Traditional software environment

•  Microservices architecture

Ric

har

d C

ziva

: Ubi

quit

ous,

ligh

twei

ght

NF

V in

th

e ag

e of

In

tern

et o

f T

hin

gs

Page 15: Ubiquitous, lightweight NFV in the age of the Internet of ... lightweight NFV in the age of the Internet of Things ... Step-by-step • Traffic from ... (e.g. SR-IOV / DPDK) DPDK runs

GNF components (in brief)

•  Router �  Runs on top the Open Daylight Controller �  Creates and inserts the rules to apply a specific forwarding policy

•  Manager �  Provides a REST API to the system

•  Agent �  Daemon running on the GNF hosts �  Manages (starts and stops) containers and local forwarding �  Provides host/container status information to the Manager

•  UI �  Talks to the Manager �  Adds/removes network functions

Ric

har

d C

ziva

: Ubi

quit

ous,

ligh

twei

ght

NF

V in

th

e ag

e of

In

tern

et o

f T

hin

gs

Page 16: Ubiquitous, lightweight NFV in the age of the Internet of ... lightweight NFV in the age of the Internet of Things ... Step-by-step • Traffic from ... (e.g. SR-IOV / DPDK) DPDK runs

Step-by-step •  Traffic from Camera to Cloud

•  Need a new Rate Limiter placed between them? �  Controller finds a suitable host platform �  Pulls the rate limiter �  Spawns an instance

•  Apply the policy �  Reroute the traffic matching:

�  FROM Camera

�  TO Cloud

•  Chaining containers �  Web Cache �  IDPS

Ric

har

d C

ziva

: Ubi

quit

ous,

ligh

twei

ght

NF

V in

th

e ag

e of

In

tern

et o

f T

hin

gs

Camera

Host platform

Cloud Soft switch

Rate Limiter

Agent

Web cache IDPS

OF rule

Page 17: Ubiquitous, lightweight NFV in the age of the Internet of ... lightweight NFV in the age of the Internet of Things ... Step-by-step • Traffic from ... (e.g. SR-IOV / DPDK) DPDK runs

Inside a GNF host •  No packet copy

Ric

har

d C

ziva

: Ubi

quit

ous,

ligh

twei

ght

NF

V in

th

e ag

e of

In

tern

et o

f T

hin

gs

Page 18: Ubiquitous, lightweight NFV in the age of the Internet of ... lightweight NFV in the age of the Internet of Things ... Step-by-step • Traffic from ... (e.g. SR-IOV / DPDK) DPDK runs

GNF in public clouds •  As GNF does not require any virtualization or special

kernel, it runs on public clouds using generic VMs

•  We have evaluated three public cloud providers and used various instance types for host VMs for vNFs

•  Results show: there is a significant difference in RTT and throughput between instance types and providers

Ric

har

d C

ziva

: Ubi

quit

ous,

ligh

twei

ght

NF

V in

th

e ag

e of

In

tern

et o

f T

hin

gs

Published in: GNFC: Towards Network Function Cloudification. Richard Cziva, Simon Jouet and Dimitrios P Pezaros, IEEE NFV-SDN`15.

Page 19: Ubiquitous, lightweight NFV in the age of the Internet of ... lightweight NFV in the age of the Internet of Things ... Step-by-step • Traffic from ... (e.g. SR-IOV / DPDK) DPDK runs

GNF in public clouds

Ric

har

d C

ziva

: Ubi

quit

ous,

ligh

twei

ght

NF

V in

th

e ag

e of

In

tern

et o

f T

hin

gs

Published in: GNFC: Towards Network Function Cloudification. Richard Cziva, Simon Jouet and Dimitrios P Pezaros, IEEE NFV-SDN`15.

Page 20: Ubiquitous, lightweight NFV in the age of the Internet of ... lightweight NFV in the age of the Internet of Things ... Step-by-step • Traffic from ... (e.g. SR-IOV / DPDK) DPDK runs

Example GNF vNFs •  Examples vNFs available on our website:

https://netlab.dcs.gla.ac.uk/projects/glasgow-network-functions http://glanf.dcs.gla.ac.uk

�  Firewall

�  HTTP proxy

�  Network measurement functions

�  Introducing delay

�  Rate limiter

�  DNS load balancer

�  SNORT

•  We also have a Youtube video showing GNF in operation

(https://youtu.be/W7aa4L2piBQ)

Ric

har

d C

ziva

: Ubi

quit

ous,

ligh

twei

ght

NF

V in

th

e ag

e of

In

tern

et o

f T

hin

gs

Page 21: Ubiquitous, lightweight NFV in the age of the Internet of ... lightweight NFV in the age of the Internet of Things ... Step-by-step • Traffic from ... (e.g. SR-IOV / DPDK) DPDK runs

Container NFV – challenges 1.  Exclusive allocation of CPU resources

2.  Direct I/O (e.g. SR-IOV / DPDK)

�  DPDK runs in Docker (Intel 2015)

3.  Inter-NF communication (direct memory mapped)

4.  High performance software switch between

containers

5.  Fast live migration

Ric

har

d C

ziva

: Ubi

quit

ous,

ligh

twei

ght

NF

V in

th

e ag

e of

In

tern

et o

f T

hin

gs

Page 22: Ubiquitous, lightweight NFV in the age of the Internet of ... lightweight NFV in the age of the Internet of Things ... Step-by-step • Traffic from ... (e.g. SR-IOV / DPDK) DPDK runs

Thank you!

•  Contact: [email protected]

•  GNF has been published in two papers so far: •  Container-based Network Function Virtualization

for Software Defined Networks. Richard Cziva, Simon Jouet, Kyle White and Dimitrios P Pezaros, IEEE ISCC 2015

•  GNFC: Towards Network Function Cloudification. Richard Cziva, Simon Jouet and Dimitrios P Pezaros, IEEE NFV-SDN 2015.

Ric

har

d C

ziva

: Ubi

quit

ous,

ligh

twei

ght

NF

V in

th

e ag

e of

In

tern

et o

f T

hin

gs