2. About the Presenter
• Chuck Black, Principal Software Architect and all-
around good guy at Tallac Networks
• 30+ years experience doing
research and development in
networks, network security,
and network management
Tallac Networks Confidential
3. SDN Intro: Part II
How does this SDN crap actually work?
Tallac Networks Confidential
4. SDN: Nowhere to Hide
• Resistance is futile, you will be assimilated
• Billion-dollar acquisitions
• Millions of dollars of VC
• Google, VMware, even Cisco ... seems like
everybody is getting into the act
Tallac Networks Confidential
5. How do we open it up?
Separate Control and Forwarding Planes
Moving control functionality to centralized controller
• Removing control software Controller
from device
Control
• With SDN, the device
handles the forwarding
and data planes Control
• With SDN, the controller Data
hosts the control plane Forwarding
Device
Tallac Networks Confidential
6. Open Networking via SDN App App App App
• Simplified devices
Controller
• All control
functionality in Data
controller Forwarding Data
Forwarding
•
Data
Fully distributed Forwarding
enforcement, and
easy to innovate
and evolve
Data
Forwarding
Data
Forwarding
Tallac Networks Confidential
7. SDN Controller Controller
• Sees whole network
• Calculates best
solution for network Data
•
Forwarding Data
Deterministic, Data Forwarding
predictable behavior Forwarding
• Fast (runs on server,
compute up to 50x Data
Forwarding
performance of Data
networking device) Forwarding
Tallac Networks Confidential
8. SDN Devices flows Controller
• Controller decides on
appropriate behavior
• Controller downloads flows
Data
„flow‟ rules to each Forwarding Data
flows
device Data Forwarding
Forwarding
• Devices enforce flows
in flow table, forward flows
Data
to controller for Forwarding
directions if no match flows
Data
exists Forwarding
Tallac Networks Confidential
9. App App App App
SDN Applications Controller
• Controller is software
• Applications can be
built on top of the flows
Data
controller Forwarding Data
flows
flows
Forwarding
•
Data
Now possible to write Forwarding
software to implement
forwarding, routing, flows
overlays, multi-path, Data
Forwarding
access control, etc. flows
Data
Forwarding
Tallac Networks Confidential
10. SDN Communication Controller
• Communication
mechanism required Openflow
between controller
and devices flows
Data
flows
Forwarding
•
Data
Traditionally in SDN flows
Data Forwarding
this has been the Forwarding
Openflow protocol
•
flows
Alternative SDN-like Data
Forwarding
solutions use vendor- flows
Data
specific proprietary Forwarding
protocols
Tallac Networks Confidential
11. Openflow Basics: Match fields
Controller
• Openflow building blocks:
o Matching fields
o E.g. MAC src/dst, IP src/dst, VLAN,
TCP/UDP ports, physical switch port
o Allows wildcards
TCP/ TCP/
Ingress MAC MAC Eth VLAN VLAN IP IP IP IP
UDP UDP
Data Port Src Dst Type Id Prior Src Dst Prot ToS
sport dport
Forwarding
Tallac Networks Confidential
12. Openflow Basics: Flow entries and tables
Flow Entries Match Fields Counters Instructions
Controller
• Match fields: matching incoming packets
• Counters: keeping tally of packet matches
• Instructions: what to do if the packet matches
Flow Tables
• Match: perform associated action/instruction
Data
• No match: forward to controller
Forwarding
• Actions: Forward, Drop, Normal, Flood, ...
Tallac Networks Confidential
14. Inside Networking Devices with Openflow
• SDN device: Move all that software off of the router or switch, up to the controller
Network Device
SOFTWARE
to Controller
Services
SNMP
Agent
Web
ACLs
CLI
QoS
Routing
Security
Virus Spanning
CONFIG Snooping Access Control
Throttling Openflow Tree
Low-level ASIC interface
ASIC TCAM TCAM TCAM TCAM TCAM
Tallac Networks Confidential
15. SDN Intro: Half way there
• Part III: Wait – Who stole my SDN?!
Or, “What about these alternative definitions of SDN?”
• Part IV: SDN, Schmesh-DN. Why should I care?
Or, “Yawn. Boooring. Give me one good reason why I should care
and not still punch you.”
Tallac Networks Confidential
16. About Tallac Networks
• Consulting and training services
• SDN enterprise deployment solutions
Contact us:
o www.tallac.com
o Tallac Networks
6528 Lonetree Blvd
Rocklin, CA 95765
916.757.6350
Tallac Networks Confidential