Introduction To Software-Defined Networking (SDN) and Network Programmability PDF
Introduction To Software-Defined Networking (SDN) and Network Programmability PDF
SDN is an exciting new approach to network IT Service Management. You may have questions about SDN,
Controllers, APIs, Overlays, OpenFlow and ACI. You may also be wondering what products and services are SDN-
enabled and how you can solve your unique business challenges and enhance your differentiated services by
leveraging network programmability.
In this introductory session we will cover the genesis of SDN, what it is, what it is not, and Cisco's involvement in this
space. Cisco's SDN-enabled Products and Services will be explained enabling you to consider your own
implementations. Since SDN extends network flexibility and functionality which impacts Network Engineering and
Operations teams, we'll also cover the IT Service Management impact.
Network engineers, network operation staff, IT Service Managers, IT personnel managers, and application/compute
SMEs will benefit from this session.
Agenda
BRKRST-1014 © 2016 Cisco and/or its affiliates. All rights reserved. Cisco Public 5
SDN is…
…an approach to network transformation*
…empowering external influencers to network design and operations
…impacting the networking industry - challenging the way we think about
engineering, implementing and managing networks
…providing new methods to interact with equipment/services via controllers, APIs
…normalizing the interface with equipment/services
…enabling high-scale, rapid network and service provisioning/management
…generating a LOT of ‘buzz’ and attention
…providing a catalyst for traditional Route/Switch engineers to branch-out
I Wants
…a new attempt at network evolution… SDN
BRKRST-1014 © 2016 Cisco and/or its affiliates. All rights reserved. Cisco Public 7
Overlays / Encapsulations
Have We Seen This Before?
MPLS
VPLS
VPN
GRE Tunnels
LISP
Control Plane / Data Plane
Separation –
Centralized Control
BRKRST-1014 © 2016 Cisco and/or its affiliates. All rights reserved. Cisco Public 8
Where Did SDN Come From?
2008
Have you tried rebooting
the Internet yet?
http://cleanslate.stanford.edu/
BRKRST-1014 © 2016 Cisco and/or its affiliates. All rights reserved. Cisco Public 9
The Traditional Network…
Control Plane (CP)
Control and Data
Plane resides CP DP CP DP
within Physical
Device
Data Plane (DP)
CP DP CP DP
CP DP CP DP CP DP CP DP
CP DP CP DP
CP
CP DP CP DP
CP DP CP DP CP DP CP DP
CP DP CP DP
CP CP DP CP DP
Controller
CP DP CP DP CP DP CP DP
BRKRST-1014 © 2016 Cisco and/or its affiliates. All rights reserved. Cisco Public 14
Your Challenges
• Pace of Change – Technology & Competition
• Globalization of the Marketplace
• Proliferation of Social Networking
• IT Budgets, Staffing and Resources
• Accelerated Pace of Consumerization, Virtualization and XaaS Options
• Consumption Economics
BRKRST-1014 © 2016 Cisco and/or its affiliates. All rights reserved. Cisco Public 15
Customer Needs: Network Programmability
• Centralized configuration,
management/control, monitoring of
network devices (physical or virtual)
• Ability to override traditional
forwarding algorithms to suite unique
business or technical needs
• Allowing external applications or
systems to influence network
provisioning and operation
• Rapid and scalable deployment of
network services with life-cycle
management
© 2016 Cisco and/or its affiliates. All rights reserved. Cisco Public 17
!
Weather-Based Routing
© 2016 Cisco and/or its affiliates. All rights reserved. Cisco Public 18
Get IMs From Routers/Switches
© 2016 Cisco and/or its affiliates. All rights reserved. Cisco Public
Business Metrics Influencing Routing
Controller
Staff Directory
WAN1 (MPLS)
WAN2 (EPL)
WAN3 (Internet)
UNIVERSITY
BRKRST-1014 © 2016 Cisco and/or its affiliates. All rights reserved. Cisco Public 20
An Overview of OpenFlow
What is OpenFlow?
API
Application
OF
OF Controller AGENT
ONF Members
3TEN8 Cisco Systems Hitachi Metaswitch Networks Samsung
6WIND Citrix Systems HP Midokura Sanctum Networks Ltd
A10 Networks Colt Technology Services Huawei MRV Communications SDN Essentials
Active Broadband Networks Coriant IBM NAIM Networks SDN Solutions
ADVA Optical Networking Corsa Technology Infinera NCL Communication SK Telecom
Alcatel-Lucent Criterion Networks (I) Pvt Ltd Infoblox NEC Spirent
Alibaba Group Holding Ltd Cyan Institute for Information Industry (III) Netgear Swisscom
Applied Micro Circuits Dell/Force10 Networks Intel Netronome Tail-f Systems
Aricent Group Digital China Networks Ltd (DCN) Intelliment Security NetScout Tallac Networks
Arista Networks ECI Telecom Intune Networks NoviFlow Inc. Tata Communications
Aruba Networks Equinix IP Infusion NSN Tekelec (Acquired by Oracle)
ATTO Research Korea Ericsson Itential NTT Data Telecom Italia
Auvik Networks EstiNet Technologies Inc. ITRI (Industrial Technology Research OKI Electric Industry Telefonica
Baidu Online Network Technology Co ETRI (Electronics and Institute) Optelian Telekom Malaysia - TM Research &
Ltd. Telecommunications Research Ixia Oracle Development
Barefoot Networks Institute) Juniper Networks Orange Telesoft
Beijing Internet Institute (BII) Extreme Networks KDDI Overture Networks Tellabs
Big Switch Networks F5 Kemp Technologies PCCW Global Ltd. Tencent, Inc.
BISDN Fiberhome Technologies Konodrac Pertino Texas Instruments
Blue Ocean Networks Pty LTD FishNet Security KT Corp. (Korea Telecom) Pica8 Thales
Broadcom Freescale Semiconductor Inc L3 Communications Systems - East Plexxi Inc Tilera
Brocade Communication Systems Friesty Lancope, Inc. PMC-Sierra Inc. Transmode
BTI Systems Fujitsu Level 3 Procera Networks TW Telecom
Centec Networks Gencore Systems LSI Corporation Qosmos UBIqube Solutions
Ceragon Networks Gigamon Luxoft Rackspace Vello Systems
China Mobile Research Center GlimmerGlass Marvell Radware Verizon
China Telecom GuardiCore Ltd. MediaTek Riverbed Technologies
Ciena H3C Technologies Mellanox Technologies Saisei Networks
http://opennetworking.org
BRKRST-1014 © 2016 Cisco and/or its affiliates. All rights reserved. Cisco Public 23
OF v1.0
What Makes OpenFlow Different? Example
Flow Table
Ingres Source Dest Ether VLAN VLAN IP IP IP IP TCP/U TCP/U Action Priority Counter
s Port MAC Priorit Protoco
MAC Type ID SRC DEST l
TOS DP DP
y SRC DEST
25 Drop 100
* * Firewall/Security
* * * * * * * * *
0x0800 Controller 100
* * * * *
Inspection * * * * * *
Vlan10 80 Fwd Port 8 200
* 00:01:E7:*
* * * * *
Combinations * * *
80 Rewrite 200
* * *
Multi-action *
; NAT * * * 192.168.1.*
* * * 10.1.2.3;
Fwd port 9
2 2
Redirect to OpenFlow
Controller
FLOW
CPU 3
Forward to local
TABLE Forwarding Stack (CPU)
7 Drop Packet
1 6
BRKRST-1014 © 2016 Cisco and/or its affiliates. All rights reserved. Cisco Public 25
OF v1.0
What Makes OpenFlow Different? Example
Counters
FLOW TABLE
HEADER FIELDS COUNTERS ACTIONS
… … … FLOW ENTRY
… … …
BRKRST-1014 © 2016 Cisco and/or its affiliates. All rights reserved. Cisco Public 26
OpenFlow Introduced Notable Features Flow-spec
Version Tuple
1.0 2009-12 Initial Specification 12
1.1 2011-02 Support for multiple flow tables; Added support for MPLS 15
Defined two operating modes – Hybrid | Pure OpenFlow
1.2 2011-12 Support for IPv6 34
Multiple Controller support
1.3 2012-06 Support for Rate Limiting; IPv6 Extensions, GRE 38
Version increasingly used by customers/manufacturers
1.3.1 2012-09 Support for Negotiation TLVs 38
1.3.4 2014-03 Clarify table feature wildcard list should not include fields that are mandatory in some context 40
Only
Add section about control channel maintenance
Push MPLS should add a MPLS header before the IP header and before MPLS tags, not
before
VLAN which is not valid
1.5 2014-12 Egress Tables; Packet aware pipeline (IP, PPP); flexible encoding - OpenFlow 44
1.5.1 2015-03 eXtensible Statistics (OXS); set-field action wildcard; Controller connection status
BRKRST-1014 © 2016 Cisco and/or its affiliates. All rights reserved. Cisco Public 27
OF v1.3
Example
Input Switch Intra- Etherne Ethernet Ethernet Input Input IP IP ECN IP IPv4 IPv4
Switch Physical Table t Dest Source Frame VLAN VLAN DSCP Protocol Source Dest
Input Addr Addr Type
Port Metadata id Priority Addr Addr
Port
. . .
TCP TCP UDP UDP SCTP SCTP ICMP ICMP ARP ARP ARP IPv6 IPv6
Source Dest Source Dest Source Dest Type Code Opcode Source Target Source Dest
Port Port Port Port Port Port IPv4 IPv4 Addr Addr
Addr Addr
. . .
. . . IPv6 ICMPv ICMPv Target Source Target MPLS MPLS MPLS PBB- Logical
Port
IPv6
Extension
Flow 6 type 6 code Addr link- link- label TC BoS bit ISID Header
Metadata
Label for ND layer layer pseudo-
field
for ND for ND
. . .
BRKRST-1014 © 2016 Cisco and/or its affiliates. All rights reserved. Cisco Public 28
OpenFlow is one Fish in the Sea of SDN
PCEP
APIs
BRKRST-1014 © 2016 Cisco and/or its affiliates. All rights reserved. Cisco Public 29
SDN Protocols in Internet
Application Frameworks, Management Systems, Controllers, ...
“Protocols” OpFlex OpenFlow I2RS PCEP BGP-LS/FS Neutron OMI Puppet NETCONF …
BRKRST-1014 © 2016 Cisco and/or its affiliates. All rights reserved. Cisco Public 30
Industry Communities, Projects and
Standards Bodies
Cisco Innovations:
FEX Architecture
Technical Advisory
802.1 Overlay
Board seat Open Network Research
Networking Project
Center at Stanford
University
Puppet Agent
Modules
Puppet Labs
Initiatives:
investor
Contributor - Neutron API
Technical Advisory Group Technical Committee Donabe
Chair, Management Area Cisco Innovations:
Working Groups: Projects OpenStack API for Nexus
Config, Hybrid, Extensibility, OpenStack Extensions
Futures/FPMOD/OF2.0
BRKRST-1014 © 2016 Cisco and/or its affiliates. All rights reserved. Cisco Public 34
Network Function Virtualization (NFV)
Service provisioning
from days to minutes dDOS
VM
SBC
VM
Firewall
VM
NAT
VM
Chaining
DHCP DNS PCRF Portal
VM VM VM VM
Simple Logistics &
Common Sparing WLC
VM
RaaS
VM
SDN Ctrl.
VM
BRAS
VM
Scale VM VM VM VM
• e.g. DPI, FW, CGN, BNG, Mobility S/PGW, AAA, Better fit for x86
DNS, DDOS (Virtualization)
Network • Low to Med Throughput
Services • Stateful functions
• Unpredictable traffic Compute
(L4+) • # of flows (traffic management) – varies
• No interface-specific functions Bandwidth
BRKRST-1014 © 2016 Cisco and/or its affiliates. All rights reserved. Cisco Public 36
Better fit for x86
Bandwidth
2 Server Chassis
8 RR chassis
1 RR per VM
BRKRST-1014 © 2016 Cisco and/or its affiliates. All rights reserved. Cisco Public 37
What Are Cisco's SDN solutions?
SD-WAN / NFV Solutions
• Hardware
– Cisco 4000 Series Integrated Services Router (ISR)
– Cisco ASR 1000 Series Router
– Cisco Integrated Services Virtual Router (ISRv)
– ASAv, vWLC, vWAAS
• Software
– Enterprise Service Automation (ESA) – a module to APIC-EM that automates Virtual
Network Functions (VNFs) across multiple sites
– Cisco Enterprise Network Functions Virtualization Infrastructure Software (NFVIS) -
provides the Linux-based virtualization layer allowing addition of VNFs to the network
with an integrated hypervisor and graphical user interface
BRKRST-1014 © 2016 Cisco and/or its affiliates. All rights reserved. Cisco Public 39
Cisco Enterprise NFV Architecture
Virtual appliances:
Routing, firewall, WAN VNFs and Apps
acceleration, WLAN control, other Cisco and third-party network functions and apps
Host Platform
Cisco ISR 4000 with UCS E-series compute module
Cisco UCS C-series server
Generic x86 server
BRKRST-1014 © 2016 Cisco and/or its affiliates. All rights reserved. Cisco Public 40
Highlights CP DP
• Physical Networking Consistency – NX-OS
Nexus 1000V • Multi Hypervisor Consistency
NetVirt
• Innovative Security and Monitoring Solutions API
Network
Admin
Virtual
Supervisor
Module
VSM
VSM
VEM:
Virtual Ethernet
Module
Underlay / Fabric
• High Capacity
• Resilient
• Intelligent Traffic Handling
• Programmable & Manageable
BRKRST-1014 © 2016 Cisco and/or its affiliates. All rights reserved. Cisco Public 42
Layer-2 Overlays
+ Emulate L2 LAN Segment
+ Transport Ethernet Frames (IP and non-IP)
+ Can emulate physical topologies
- Single Subnet Mobility (L2 domain)
- Exposure to L2 Flooding
BRKRST-1014 © 2016 Cisco and/or its affiliates. All rights reserved. Cisco Public 43
Layer-3 Overlays
+ Abstract IP-based connectivity
+ Transport IP Packets
+ Can emulate physical topologies
+ Full Mobility regardless of subnet
+ Contain Network Failures/Flooding
+ Useful in abstracting connectivity and policy
BRKRST-1014 © 2016 Cisco and/or its affiliates. All rights reserved. Cisco Public 44
Tunnel End-Point
The Edges of Overlays
Network Overlays Host Overlays Integrated Overlays
VM VM VM VM VM VM
Physical Physical Physical
Virtual Virtual Virtual
Protocols for Resiliency & Loops Single administrative domain Resiliency & Scale; Cross-org &
Federation
Traditional VPNs Open Standards
OTV, VXLAN, VPLS, LISP VXLAN, NVGRE, STT ACI
BRKRST-1014 © 2016 Cisco and/or its affiliates. All rights reserved. Cisco Public 45
Some Network Overlay/SDN Humor
Credit to Sean McGee
BRKRST-1014 © 2016 Cisco and/or its affiliates. All rights reserved. Cisco Public 46
Cisco’s Solutions in Overlays
• VXLAN • LISP
• MPLS • Nexus 1000V
• OTV • ACI
• VPLS
BRKDCT-1301 VXLAN Deployment – Use Cases and Best Practices
BRKRST-1014 © 2016 Cisco and/or its affiliates. All rights reserved. Cisco Public 47
An Overview of Network Controllers
What Is OpenDaylight?
• …an open source project formed by industry leaders and others under the
Linux Foundation with the mutual goal of furthering the adoption and innovation
of Software Defined Networking (SDN) through the creation of a common
vendor supported framework.
• Focus: Customers with some programming resources that desire a free,
community-supported SDN controller, especially if focus is on OpenFlow
BRKRST-1014 © 2016 Cisco and/or its affiliates. All rights reserved. Cisco Public 49
OpenDaylight (ODL)
Network Applications Cisco Sourced Customers 3rd Parties
Java Bundle
H/A
NETWORK DEVICES
Cisco or Other OpenFlow-enabled Devices
BRKRST-1014 © 2016 Cisco and/or its affiliates. All rights reserved. Cisco Public 50
OpenDaylight Architectural Model
Hydrogen
• Released February 2014
Helium
• Released October 2014
• 1.87M+ lines of code
• 28 Projects
• 256 Contributors
Lithium
• June 2015
Helium
• August 2015
Beryllium
• Feb 2016
BRKRST-1014 © 2016 Cisco and/or its affiliates. All rights reserved. Cisco Public 51
OpenDaylight
OpenFlow-enabled
devices that are
configured to this
controller
automatically show
up in the topology
BRKRST-1014 © 2016 Cisco and/or its affiliates. All rights reserved. Cisco Public 52
OpenDaylight
BRKRST-1014 © 2016 Cisco and/or its affiliates. All rights reserved. Cisco Public 53
OpenDaylight Membership
Platinum Members
23 29
1
13 15
4
10,411
total
Source: http://spectrometer.opendaylight.org/?metric=loc
BRKRST-1014 © 2016 Cisco and/or its affiliates. All rights reserved. Cisco Public 55
What Is OSC?
• Cisco’s reinvestment from the previous Extensible Network Controller
(XNC) to a new ‘Open SDN Controller (OSC)’
• Based on OpenDaylight “Helium”
• Includes Cisco value-added functions: installation helpers, log and metrics
aggregation, plug-in clustering, and monitoring
• http://cisco.com/go/opensdn or
https://developer.cisco.com/site/openSDN
• Focus: Customers with some programming resources that desire a
commercially supported edition of a free, community-supported SDN
controller, especially if focus is on OpenFlow
BRKRST-1014 © 2016 Cisco and/or its affiliates. All rights reserved. Cisco Public 56
Cisco Commercial Distribution of OpenDaylight
BRKRST-1014 © 2016 Cisco and/or its affiliates. All rights reserved. Cisco Public 58
Open SDN Controller vs OpenDaylight
BRKRST-1014 © 2016 Cisco and/or its affiliates. All rights reserved. Cisco Public 59
Deployment Options
Standalone 3 Node Cluster
BRKRST-1014 © 2016 Cisco and/or its affiliates. All rights reserved. Cisco Public 60
Native Applications
OpenFlow Manager
OpenFlow topology
visualization
BRKRST-1014 © 2016 Cisco and/or its affiliates. All rights reserved. Cisco Public 61
Native Applications (cont’d)
Inventory
Device vendor
Platform IDs
Series numbers
BRKRST-1014 © 2016 Cisco and/or its affiliates. All rights reserved. Cisco Public 62
Native Applications (cont’d)
BGPLS Manager
Visualize network
topology based on
Border Gateway (BGP)
Protocols
BRKRST-1014 © 2016 Cisco and/or its affiliates. All rights reserved. Cisco Public 63
Native Applications (cont’d)
PCEP Manager
Auto-create Label-
Switched Paths (LSPs)
Delete LSPs
BRKRST-1014 © 2016 Cisco and/or its affiliates. All rights reserved. Cisco Public 64
Native Applications (cont’d)
Model Explorer
OpenDaylight YANG
User Interface
Call functions
Parameters
BRKRST-1014 © 2016 Cisco and/or its affiliates. All rights reserved. Cisco Public 65
APIs
BRKRST-1014 © 2016 Cisco and/or its affiliates. All rights reserved. Cisco Public 66
What Is APIC-EM?
• A purpose-built, easy to use SDN controller
• Does NOT require programming experience [but does have REST NBI]
• Does NOT require HW/SW upgrades to take advantage of controller model
• Has specific applications built-in to address common network needs:
Policy Management, QoS Management, Zero-Touch Deployment and iWAN
• Available to SmartNet customers without charge
BRKRST-1014 © 2016 Cisco and/or its affiliates. All rights reserved. Cisco Public 69
Network Information Base Provides “One Source of Truth”
BRKRST-1014 © 2016 Cisco and/or its affiliates. All rights reserved. Cisco Public 70
Topology View
© 2016 Cisco and/or its affiliates. All rights reserved. Cisco Public
APIC-EM @ Cisco Live (San Francisco 2014)
© 2016 Cisco and/or its affiliates. All rights reserved. Cisco Public
Application:
QoS Classification Management
BRKRST-1014 © 2016 Cisco and/or its affiliates. All rights reserved. Cisco Public 73
Application:
Policy Analysis (ACL Trace Example)
BRKRST-1014 © 2016 Cisco and/or its affiliates. All rights reserved. Cisco Public 74
APIC-EM ZTD: Site – Add Devices
Site Workflow
Serial # and PID based
device matching on server
Operational Config and/or
IOS image for each device
Bootstrap config optional
BRKRST-1014 © 2016 Cisco and/or its affiliates. All rights reserved. Cisco Public 75
APIC-EM IWAN
Cisco's APIC-EM focuses on
policy-based management
using business language in
a simple GUI.
Plug and Play
Centralized policy
automation
Public-key-infrastructure
certificate
QoS/DMVPN deployment
and change management
Network wide visibility and
segmentation with AVC
BRKRST-1014 © 2016 Cisco and/or its affiliates. All rights reserved. Cisco Public 76
What Is APIC?
• The SDN controller which is the unifying point of automation and
management for the Application Centric Infrastructure (ACI) fabric.
• Offers services for managing System, Tenant(s), Fabric, VM(s), L4-7
Services in the Nexus 9K datacenter fabric
• NBI: REST, Python
• SBI: OpFlex ACI, REST, L4-7 Scripting API/VTY
Advanced GUI
with Extended
Features
Controller Applications/Feature
NETWORK DEVICES
BRKRST-1014 © 2016 Cisco and/or its affiliates. All rights reserved. Cisco Public 79
APIC
Unified API
BRKRST-1014 © 2016 Cisco and/or its affiliates. All rights reserved. Cisco Public 80
APIC Architecture Overview
Multithreaded, Distributed & Clustered Fabric Controllers
BRKRST-1014 © 2016 Cisco and/or its affiliates. All rights reserved. Cisco Public 81
Management Access
GUI
CLI
Any APIC
Web
R
Object E
Browser S
Python T
SDK
API Tools
https://apic.local/api/mo/uni/tn-common.xml
BRKRST-1014 © 2016 Cisco and/or its affiliates. All rights reserved. Cisco Public 82
APIC
BRKRST-1014 © 2016 Cisco and/or its affiliates. All rights reserved. Cisco Public 83
APIC GUI – System Topology
BRKRST-1014 © 2016 Cisco and/or its affiliates. All rights reserved. Cisco Public 84
APIC
BRKRST-1014 © 2016 Cisco and/or its affiliates. All rights reserved. Cisco Public 85
API Inspector in GUI
BRKRST-1014 © 2016 Cisco and/or its affiliates. All rights reserved. Cisco Public 86
Cisco SDN: Providing Choice in Automation and Programmability
Application Centric Programmable Fabric Programmable Network
Infrastructure
DB DB
Turnkey integrated solution with VxLAN-BGP EVPN Modern NX-OS with enhanced
security, centralized management, standard-based NX-APIs
compliance and scale
3rd party controller support Automation Ecosystem
Automated application centric-policy (Puppet, Chef, Ansible etc.)
model with embedded security VTS for software overlay
provisioning and management Common NX-API
Broad and deep ecosystem across N2K-N9K across N2K-N9K
Mass Market
Service Providers Mega Scale Datacenters
(commercial, enterprises, public sector) © 2016 Cisco and/or its affiliates. All rights reserved. Cisco Public
NX-API Support Across Nexus 2K-9K
Application Centric Programmable Fabric Programmable Network
Infrastructure
DB
DB
ACI Release for Nexus 9000 Virtual Topology System (VTS) Unified Open NX-OS Release for Nexus
• Microsoft Azure and System Center for software overlay 3000 and Nexus 9000
Integration provisioning and management • Enhancements to NX-API – object store
• Programmability examples: vCenter plug- across for Nexus 2K-9K and model driven
in, ACI toolkit etc. • Standards-based fabric • Native 3rd party RPM applications
• Simplified operations support on Nexus 5600/7x00 integration (tcollector, Nagios, Ganglia,
• Stretched fabric, multiple destinations with VXLAN BGP EVPN Puppet / Chef etc.)
from 30KMs to 150KMs (shipping with Nexus 9000 • Linux utilities support for seamless tool
• Group-based policy on Openstack today) integration across compute and network
• New ACI ecosystem partners (CliQr) • SDK for custom application integration
BRKRST-1014 © 2016 Cisco and/or its affiliates. All rights reserved. Cisco Public 88
Programmable Fabric
NX-API, VXLAN BGP EVPN Fabric, and Virtual Topology System (VTS)
VTS
NX-API
Operations /
Programmability
& Automation
BGP-EVPN VXLAN Fabric
Physical Virtual DCI/WAN
VM VM
OS OS
Automated
DCI / WAN
Bare Metal Virtualized
vCenter GUI
REST API
Flexible Overlays Automated
Seamless integration with Orchestrators
Physical and virtual overlays
Overlay provisioning and DCI/WAN integration
Bare-metal and Virtualized workloads
VTS
Open and Programmable Scalable VXLAN Management
REST Northbound APIs MP-BGP EVPN control plane
Multi-protocol and Multi-hypervisor support High performance virtual forwarding
Programmable Fabric
BRKRST-1014 © 2016 Cisco and/or its affiliates. All rights reserved. Cisco Public 90
Unified Open NX-OS Release for Nexus 3000 and Nexus 9000
Delivering Operational Flexibility and Lower OPEX
Programmable 3rd Party DevOps Custom Application Managing Switch with
Open APIs Automation Tools Development Linux Tools
DC
Repository
Nexus
BRKRST-1014 © 2016 Cisco and/or its affiliates. All rights reserved. Cisco Public 91
Cisco Prime Interlock with SDN/NP
Management CIAC
Operational Intelligence
PRIME INFRASTRUCTURE 3rd Party
and UCSD & NAM Apps Automated Service Provisioning
Orchestration Dynamic Service Assurance
Layer Catalog/ Fault/ User / Data Performance Reporting / Visualization and Analytics
Provisioning Events Management Monitoring Analytics
REST API
BRKRST-1014 © 2016 Cisco and/or its affiliates. All rights reserved. Cisco Public 92
How to Get Ready
Controller Deployment
Start by asking/acknowledging the
Branch Campus business problem/opportunity you’re
trying to address with SDN/NP
BRKRST-1014 © 2016 Cisco and/or its affiliates. All rights reserved. Cisco Public 94
SDN/Network Programmability Impact to ITSM
• External Programs (and App Developers) have access to traditional network
devices – You Good with that!?
• Change Control – Now more Real-Time – Programs/Apps need to participate
• You MUST have Focused, Intentional monitoring of the controllers – they are
the brains!
• You MUST have a Robust backup/redundancy plan for controllers
• You MUST implement Good RBAC, security and accounting – lock-down the
controllers and APIs!
• The Uncle Ben Principle - “With Great Power Comes Great Responsibility”
BRKRST-1014 © 2016 Cisco and/or its affiliates. All rights reserved. Cisco Public 95
So…Are All Network Engineers Becoming
Programmers?
BRKRST-1014 © 2016 Cisco and/or its affiliates. All rights reserved. Cisco Public 96
Remember This Inflection Point?
Telephony in 1998
BRKRST-1014 © 2016 Cisco and/or its affiliates. All rights reserved. Cisco Public 97
What Skills Would Be Helpful for a
Network Engineer Branching Out?
• Basic Programming constructs
(conditionals, loops, functions/procedures)
• Basic Python / Perl
• REST / Web Services
• Regular Expression
• XML / XSLT
• Basic SQL
• Basic shell scripting - grep
• #1 - Communicating Effectively with Programmers
BRKRST-1014 © 2016 Cisco and/or its affiliates. All rights reserved. Cisco Public 98
Job Roles: Cisco Network Programmability Evolution
Business Application
Business Application
Developer — Network
Developer
Programmability Aware
Network Engineer
Development Network
Programmability
Curriculum Designer
Network
Support Engineer Programmability
Engineer
Traditional Networking
Open Infrastructure
Infrastructure
http://www.cisco.com/web/learning/certifications/specialist
Network Programmability Cisco Education Offerings
Course Description Cisco Certification
Integrating Business Applications with Network Learn networking concepts, and how to deploy and troubleshoot Cisco Business Application
Programmability (NIPBA); programmable network architectures with these self-paced courses. Engineer Specialist Certification
Integrating Business Applications with Network
Programmability for Cisco ACI (NPIBAACI)
Developing with Cisco Network Programmability Learn how to build applications for network environments and effectively Cisco Network Programmability
(NPDEV); bridge the gap between IT professionals and software developers. Developer Specialist Certification
Developing with Cisco Network Programmability
for Cisco ACI (NPDEVACI)
Designing with Cisco Network Programmability Learn how to expand your skill set from traditional IT infrastructure to Cisco Network Programmability
(NPDES); application integration through programmability. Design Specialist Certification
Designing with Cisco Network Programmability
for Cisco ACI (NPDESACI)
Implementing Cisco Network Programmability Learn how to implement and troubleshoot open IT infrastructure Cisco Network Programmability
(NPENG); technologies. Engineer Specialist Certification
Implementing Cisco Network Programmability
for Cisco ACI (NPENGACI)
BRKRST-1014 © 2016 Cisco and/or its affiliates. All rights reserved. Cisco Public 100
Cisco Services
SMART
SERVICE
CAPABILITIES
BRKRST-1014 © 2016 Cisco and/or its affiliates. All rights reserved. Cisco Public 102
Cisco Quick Start Service For Nexus 9000
Overview Deliverables Outcomes
BRKRST-1014 © 2016 Cisco and/or its affiliates. All rights reserved. Cisco Public 103
Cisco Accelerated Deployment Services For Nexus 9000
Overview Deliverables Outcomes
BRKRST-1014 © 2016 Cisco and/or its affiliates. All rights reserved. Cisco Public 104
Technical Assistance From Cisco TAC
Resolve Issues Quickly
• CCIE professionals
BRKRST-1014 © 2016 Cisco and/or its affiliates. All rights reserved. Cisco Public 105
DevNet
http://
https://developer.cisco.com
© 2016 Cisco and/or its affiliates. All rights reserved. Cisco Public 106
Cisco SDN: Providing Choice in Automation and Programmability
Application Centric Programmable Fabric Programmable Network
Infrastructure
DB DB
Turnkey integrated solution with VxLAN-BGP EVPN Modern NX-OS with enhanced
security, centralized management, standard-based NX-APIs
compliance and scale
3rd party controller support Automation Ecosystem
Automated application centric-policy (Puppet, Chef, Ansible etc.)
model with embedded security VTS for software overlay
provisioning and management Common NX-API
Broad and deep ecosystem across N2K-N9K across N2K-N9K
Mass Market
Service Providers Mega Scale Datacenters
(commercial, enterprises, public sector) © 2016 Cisco and/or its affiliates. All rights reserved. Cisco Public
Complete Your Online Session Evaluation
• Give us your feedback to be
entered into a Daily Survey
Drawing. A daily winner will
receive a $750 Amazon gift card.
• Complete your session surveys
through the Cisco Live mobile
app or from the Session Catalog
on CiscoLive.com/us.
BRKRST-1014 © 2016 Cisco and/or its affiliates. All rights reserved. Cisco Public 108
Continue Your Education
• Demos in the Cisco campus
• Walk-in Self-Paced Labs
• Lunch & Learn
• Meet the Engineer 1:1 meetings
• Related sessions
BRKRST-1014 © 2016 Cisco and/or its affiliates. All rights reserved. Cisco Public 109
Please join us for the Service Provider Innovation Talk featuring:
Yvette Kanouff | Senior Vice President and General Manager, SP Business
Joe Cozzolino | Senior Vice President, Cisco Services
BRKRST-1014 © 2016 Cisco and/or its affiliates. All rights reserved. Cisco Public 113
Acronym Decoder Ring [Aka Glossary]
• CP – Control Plane
• DP – Data Plane
• OF – OpenFlow
• TLV – Type-Length-Value
BRKRST-1014 © 2016 Cisco and/or its affiliates. All rights reserved. Cisco Public 114
Acronym Decoder Ring [Aka Glossary]
• CA – Controlled Availability
• GA – General Availability
• ODL – OpenDaylight
BRKRST-1014 © 2016 Cisco and/or its affiliates. All rights reserved. Cisco Public 115
Basic Definitions
What Is Software Defined Network (SDN)? What Is OpenFlow?
“…In the SDN architecture, the control and data “…open standard that enables researchers
planes are decoupled, network intelligence and to run experimental protocols in campus networks.
state are logically centralized, and the underlying Provides standard hook for researchers to run
network infrastructure is abstracted from the experiments, without exposing internal working of
applications…” vendor devices…”
Note: SDN is not mandatory for network programmability or automation Note: OpenFlow is not mandatory for SDN
Source: www.opennetworking.org Source: www.opennetworking.org
BRKRST-1014 © 2016 Cisco and/or its affiliates. All rights reserved. Cisco Public 116
OpenFlow Platform Support
Platform Available Now
BRKRST-1014 © 2016 Cisco and/or its affiliates. All rights reserved. Cisco Public 117
Example Please…
Java ‘HelloWorld’ from a Router via Syslog
/**
* Copyright (c) 2010-2012, Cisco Systems, Inc.
*
* THIS SAMPLE CODE IS PROVIDED "AS IS" WITHOUT ANY EXPRESS OR IMPLIED WARRANTY BY CISCO SOLELY FOR THE PURPOSE of
* PROVIDING PROGRAMMING EXAMPLES. CISCO SHALL NOT BE HELD LIABLE FOR ANY USE OF THE SAMPLE CODE IN ANY APPLICATION.
*
* Redistribution and use of the sample code, with or without modification, are permitted provided that the following
* conditions are met: Redistributions of source code must retain the above disclaimer.
*
*/
import java.net.InetAddress;
import java.net.UnknownHostException;
import org.slf4j.Logger;
import org.slf4j.LoggerFactory;
import com.cisco.onep.core.exception.OnepConnectionException;
import com.cisco.onep.core.exception.OnepDuplicateElementException;
import com.cisco.onep.core.exception.OnepIllegalArgumentException;
import com.cisco.onep.core.exception.OnepInvalidSettingsException;
...
© 2016 Cisco and/or its affiliates. All rights reserved. Cisco Public 118
. . .
try {
/**
** Connect to the network element.
**/
connect();
logger.info("Connect to element = " + elementAddress);
} catch (Exception e) {
logger.error(e.getLocalizedMessage(), e);
}
networkElement.disconnect("Exit");
logger.info("\n**************** End ****************\n");
}
}
© 2016 Cisco and/or its affiliates. All rights reserved. Cisco Public 119
Result
NE100#sh logg
Syslog logging: enabled (0 messages dropped, 12 messages rate-limited, 0 flushes, 0 overruns, xml disabled,
Console logging: level debugging, 48 messages logged, xml disabled,
filtering disabled
Monitor logging: level debugging, 0 messages logged, xml disabled,
filtering disabled
Buffer logging: level debugging, 57 messages logged, xml disabled,
filtering disabled
Count and timestamp logging messages: disabled
© 2016 Cisco and/or its affiliates. All rights reserved. Cisco Public 120
Infrastructure SDN Reference Architecture for NFV
Apps
MATE Bandwidth TE Tunnel DC-WAN
Design/Live Services Manager Orch
Java/REST/Thrift APIs
Quantum WAVE Orchestration Platform
Collector &
Programming
Modeling
Collector API Deployer API
Collector/
DEPL
ODL API
Collector Server CDL/ODL
NETCONF/
agents agents BGP-LS PCEP CLI
YANG
Network
(Network Elements)
BRKRST-1014 © 2016 Cisco and/or its affiliates. All rights reserved. Cisco Public 121
Overview of Cisco SP Virtualization offerings
Routing Security Mobility Video Others
Cloud Virtual Route Virtual Virtual EPC
Virtual EPC Virtual
Services Reflector Firewall (QvPC
Router (CSR) (XRv) (ASAv)
(QvPC SSI)
SCALE)
Cloud DVR WLC
FCS Q2 CY14
Shipping Shipping FCS Q2 CY14 FCS Q4 CY14
Web/Email
Virtual PE
Virtual BNG Security
Router Virtual GiLAN
(X-Star) Appliance vCDN Virtual SCE
(Sunstone) (Project Tenmile)
Pre-CC (WSA/ESA)
Pre-CC
FCS 2H CY14
Orchestration
HERO
Mozart Quantum WAVE
Cloud Services Orchestration WAN Orchestration
FCS Q2 CY14 FCS Q2 CY14
BRKRST-1014 © 2016 Cisco and/or its affiliates. All rights reserved. Cisco Public 122
Business Transformation Cisco Education Offerings
Course Description Cisco Certification
For IT and Network Professionals:
Building Business Specialist Skills • Builds non-technical skills key to ensure business impact and influence. Cisco Enterprise IT
Topics include: business analysis, finance, technology adoption and Business Specialist
effective communications.
Executing Advanced Cisco Business Value Enables customer transformation through business architecture and Cisco Certified Business
Analysis and Design Techniques solution selling expertise Value Practitioner
Performing Cisco Business-Focused Provides skills and an approach to build a strategic roadmap of IT Cisco Transformative
Transformative Architecture Engagements initiatives, aligned to business priorities Architecture Specialist
BRKRST-1014 © 2016 Cisco and/or its affiliates. All rights reserved. Cisco Public 124
R&S Related Cisco Education Offerings
Course Description Cisco Certification
CCIE R&S Advanced Workshops (CIERS-1 & Expert level trainings including: instructor led workshops, self CCIE® Routing & Switching
CIERS-2) plus assessments, practice labs and CCIE Lab Builder to prepare candidates
Self Assessments, Workbooks & Labs for the CCIE R&S practical exam.
• Implementing Cisco IP Routing v2.0 Professional level instructor led trainings to prepare candidates for the CCNP® Routing & Switching
• Implementing Cisco IP Switched CCNP R&S exams (ROUTE, SWITCH and TSHOOT). Also available in
Networks V2.0 self study eLearning formats with Cisco Learning Labs.
• Troubleshooting and Maintaining
Cisco IP Networks v2.0
Interconnecting Cisco Networking Devices: Configure, implement and troubleshoot local and wide-area IPv4 and IPv6 CCNA® Routing & Switching
Part 2 (or combined) networks. Also available in self study eLearning format with Cisco Learning
Lab.
Interconnecting Cisco Networking Devices: Installation, configuration, and basic support of a branch network. Also CCENT® Routing & Switching
Part 1 available in self study eLearning format with Cisco Learning Lab.
BRKRST-1014 © 2016 Cisco and/or its affiliates. All rights reserved. Cisco Public 125
Design Cisco Education Offerings
Course Description Cisco Certification
Designing Cisco Network Service Architectures Provides learner with the ability to perform conceptual, intermediate, and CCDP® (Design Professional)
(ARCH) Version 3.0 detailed design of a network infrastructure that supports desired capacity,
performance, availability required for converged Enterprise network (Available Now)
services and applications.
Designing for Cisco Internetwork Solutions Instructor led training focused on fundamental design methodologies used CCDA® (Design Associate)
(DESGN) Version 3.0 to determine requirements for network performance, security, voice, and
wireless solutions. Prepares candidates for the CCDA certification exam. (Available Now)
BRKRST-1014 © 2016 Cisco and/or its affiliates. All rights reserved. Cisco Public 126
Data Center / Virtualization Cisco Education Offerings
Course Description Cisco Certification
Introducing Cisco Data Center Networking (DCICN); Learn basic data center technologies and skills to build a CCNA® Data Center
Introducing Cisco Data Center Technologies (DCICT) data center infrastructure.
Implementing Cisco Data Center Unified Fabric (DCUFI); Obtain professional level skills to design, configure, CCNP® Data Center
Implementing Cisco Data Center Unified Computing (DCUCI) implement, troubleshoot data center network infrastructure.
Designing Cisco Data Center Unified Computing (DCUDC)
Designing Cisco Data Center Unified Fabric (DCUFD)
Troubleshooting Cisco Data Center Unified Computing
(DCUCT)
Troubleshooting Cisco Data Center Unified Fabric (DCUFT)
Product Training Portfolio: DCNMM, DCAC9K, DCINX9K, Gain hands-on skills using Cisco solutions to configure,
DCMDS, DCUCS, DCNX1K, DCNX5K, DCNX7K deploy, manage and troubleshoot unified computing, policy-
driven and virtualized data center network infrastructure.
Designing the FlexPod® Solution (FPDESIGN); Learn how to design, implement and administer FlexPod Cisco and NetApp Certified
Implementing and Administering the FlexPod® Solution solutions FlexPod® Specialist
(FPIMPADM)
BRKRST-1014 © 2016 Cisco and/or its affiliates. All rights reserved. Cisco Public 127
Cloud Cisco Education Offerings
Course Description Cisco Certification
Understanding Cloud Fundamentals Learn how to perform foundational tasks related to Cloud computing, and the essentials
(CLDFND) of Cloud infrastructure
CCNA Cloud
Introducing Cloud Administration Learn the essentials of Cloud administration and operations, including how to provision,
(CLDADM) manage, monitor, report and remediate.
Implementing and Troubleshooting the Learn how to implement and troubleshoot Cisco Cloud infrastructure: compute,
Cisco Cloud Infrastructure (CLDINF) network, storage.
Learn how to design private and hybrid Clouds including infrastructure, automation,
Designing the Cisco Cloud (CLDDES)*
security and virtual network services
CCNP Cloud
Automating the Cisco Enterprise Cloud Learn how to automate Cloud deployments – provisioning IaaS (private, private with
(CLDAUT)* network automation and hybrid) and applications, life cycle management
Building the Cisco Cloud with Application Learn how to build Cloud infrastructures based on Cisco Application Centric
Centric Infrastructure (CLDACI)* Infrastructure, including design, implementation and automation
Learn how to manage physical and virtual infrastructure using orchestration and
UCS Director Foundation (UCSDF)
automation functions of UCS Director.
* Available Q2CY2016
BRKRST-1014 © 2016 Cisco and/or its affiliates. All rights reserved. Cisco Public 128
Deployment Experience
BRKRST-1014 © 2016 Cisco and/or its affiliates. All rights reserved. Cisco Public 129
Web Based User Interface
Centralized Management and
Administration
Installed applications
System management
System monitoring
BRKRST-1014 © 2016 Cisco and/or its affiliates. All rights reserved. Cisco Public 130
System Management
Feature Administration
Provision
Enable / disable
User Administration
Provision
Role assignment
BRKRST-1014 © 2016 Cisco and/or its affiliates. All rights reserved. Cisco Public 131
System Monitoring
Services Status
System status
Controller status
Metrics status
Logs status
BRKRST-1014 © 2016 Cisco and/or its affiliates. All rights reserved. Cisco Public 132
System Monitoring (cont’d)
Adhoc queries
Filtered queries
BRKRST-1014 © 2016 Cisco and/or its affiliates. All rights reserved. Cisco Public 133
System Monitoring (cont’d)
Memory usage
System load
Network usage
BRKRST-1014 © 2016 Cisco and/or its affiliates. All rights reserved. Cisco Public 134