Brocade Vrouter: Agile Networking and High Performance
Brocade Vrouter: Agile Networking and High Performance
Brocade vRouter
1
This product includes software developed by the OpenSSL Project for use in the OpenSSL toolkit.
•• Virtual VPN (vVPN) gateway High Availability and
KEY FEATURES •• Virtual Route Reflector (vRR) Redundancy
• Purpose-built for NFV Mission-critical networks can deploy the
• Advanced IPv4 and IPv6 unicast and Powerful Network Brocade vRouter with the confidence that
multicast routing, firewall, NAT, and VPN Connectivity high availability and system redundancy
• Intel DPDK support At the core of the Brocade vRouter is a can be achieved through industry-
powerful routing engine with full support standard failover and synchronization
• VMware ESXi, KVM, Hyper-V, XenServer,
AMI for IPv4 and IPv6 dynamic routing mechanisms, such as stateful firewall
protocols (BGP4/4+, OSPFv2/v3, RIP), failover and VRRP.
• Stateful firewall
Multicast, Policy-Based Routing (PBR),
• IPsec VPN, OpenSSL, and DMVPN
NAT, and DHCP. The Brocade vRouter IPv6 Compatibility
• Suite-B for L3 IPsec The Brocade vRouter is the only software-
also supports a variety of 10/100/1000
• RESTful API, NETCONF/YANG, CLI, Mbps and 10 Gbps Ethernet NICs. based routing and security solution
Web GUI with proven IPv6 functionality and
• World-class 24×7 support Robust Firewall Protection interoperability, ensuring a future-proof
• Available on major public clouds, The system’s firewall features robust IPv4/ investment in a solution that offers a
including Amazon Web Services (AWS) IPv6 stateful packet inspection to intercept simplified migration path from IPv4 to
and Azure2 and inspect network activity and protect IPv6.
critical data.
RELIABLE SUPPORT OPTIONS Simplified Administration
Brocade Essential Support Secure Connectivity and Authentication
Organizations can establish secure site- The Brocade vRouter can be managed
• Provides 24×7 access to Brocade
Technical Support expertise, reducing to-site VPN tunnels with a standards- through a familiar network-centric
time to resolution based IPsec VPN between two or Command Line Interface (CLI),
• Provides unmatched expertise in data more Brocade vRouters or any IPsec Web-based GUI, or through external
center networking to optimize network VPN device with support for Dynamic management systems using the Remote
performance Multipoint VPN (DMVPN). The Brocade Access API or NETCONF/YANG. All
• Simplifies management through online vRouter supports Suite-B for L3 IPsec, network management sessions can be
technical support tools which includes strong encryption securely managed using SSHv2, RADIUS,
and authentication methods for next- or TACACS+.
generation data security, and can provide
secure network access to remote users Virtual Routing and
A Wide Variety of Use Cases with embedded SSL-based OpenVPN Forwarding
Designed to provide high-performance
functionality. The Brocade vRouter supports Virtual
virtual routing, the Brocade vRouter can
Routing and Forwarding (VRF) domains
be used for: Reduced Operating Costs with VRF-Lite capability (also known as
•• Virtual Customer Edge (vCE) routers The Brocade vRouter can help multi-VRF CE). VRF-Lite support allows
organizations eliminate or reduce single- admins to separately manage access
•• Virtual Customer Premise Equipment
purpose hardware, since routing, firewall, into a dedicated management VRF or
(vCPE)
and VPN capabilities can be provided via a segregate users in their dedicated routing
•• Secure cloud access VM on existing servers. This helps reduce and forwarding domains for security, or
power and space requirements, leading to allow overlapping address ranges.
•• ACL offload from hardware routers
lower operating costs.
•• Virtual Top-of-Rack (vToR) Layer 3 Monitoring and Reporting
routing at the server edge, offloading Efficient Traffic Management The Brocade vRouter presents complete
the Layer 3 routing capability from ToR The Brocade vRouter provides a variety logging and diagnostics information that
switches of QoS queuing mechanisms that can be can be monitored using industry-standard
applied to inbound and outbound traffic and embedded Linux tools.
•• High-performance BGP routing
for identifying and prioritizing applications
•• Virtual Firewall (vFW) and traffic flows.
2
Not all features will function on all clouds.
2
Brocade Global Services technology deployments, and optimize the
Brocade Global Services has the performance of networking infrastructures.
expertise to help organizations build
Maximizing Investments
scalable, efficient cloud infrastructures.
To help optimize technology investments,
Leveraging 20 years of expertise in
Brocade and its partners offer complete
storage, networking, and virtualization,
solutions that include professional
Brocade Global Services delivers world-
services, technical support, and education.
class professional services, technical
For more information, contact a Brocade
support, and education services,
sales partner or visit www.brocade.com.
enabling organizations to maximize their
Brocade investments, accelerate new
IP Address Management
Encapsulations
•• Ethernet •• GRE
•• 802.1Q •• QinQ
Firewall
Tunneling/VPN
3
Brocade vRouter Specifications (continued)
Additional Security
Performance Optimization
•• Label Distribution Protocol (LDP) •• Data plane support for MPLS forwarding
•• Resource Reservation Protocol (RSVP-TE)
QoS Policies
Automation
4
Brocade vRouter Specifications (continued)
Administration and Authentication
Hypervisor Support
RFC Compliance
Multicast •• RFC 1112 Host Extensions for IP Multicasting •• RFC 4601 Protocol Independent Multicast - Sparse Mode
•• RFC 2236 Internet Group Management Protocol Version 2 (PIM-SM)
•• RFC 2710 Multicast Listener Discovery (MLD) for IPv6 •• RFC 3973 Protocol Independent Multicast - Dense Mode
(PIM-DM)
•• RFC 3376 Internet Group Management Protocol Version 3
•• RFC 3618 Multicast Source Discovery Protocol (MSDP)
•• RFC 3810 Multicast Listener Discovery Version 2 (MLD v2)
for IPv6 •• RFC 2236 Internet Group Management Protocol, Version 2
•• RFC 4604 Using Internet Group Management Protocol •• RFC 3376 Internet Group Management Protocol, Version 3
Version 3 (IGMPv3) and Multicast Listener Discovery •• RFC 2710 Multicast Listener Discovery (MLD) for IPv6
Protocol Version 2 (MLDv2) for Source-Specific Multicast
•• RFC 3973 Protocol Independent Multicast-Dense Mode
(PIM-DM) Protocol Specification (Revised)
OSPF •• RFC 2328 OSPF Version 2 •• RFC 1583 Compatibility OSPF Version 2
•• RFC 2370 The OSPF Opaque LSA Option
OSPFv3 •• RFC 5340 OSPF for IPv6 •• RFC 5838 Support of Address Families in OSPFv3
RIP and RIPng •• RFC 1058 Routing Information Protocol •• RFC 2080 RIPng for IPv6
•• RFC 2453 RIP Version 2 •• RFC 2081 RIPng Protocol Applicability Statement
BFD •• RFC 5880 - BFD RFC (Not supported sections - 4.3, 4.4, •• RFC 5883 - Bidirectional Forwarding Detection (BFD) for
5, 6.4, 6.6, 6.8.13, 6.8.14, 6.8.18) Multihop Paths (Not supported sections - 4.2)
•• RFC 5881 - BFD for IPv4/v6 RFC 5882 - Generic •• RFC 7331 – BFD MIB
Application of Bidirectional Forwarding Detection (BFD) (Not
supported sections - 4.3, 7)
5
Brocade vRouter Specifications (continued)
BGP •• RFC 4271 A Border Gateway Protocol 4 (BGP-4) •• RFC 5082 The Generalized TTL Security Mechanism
•• RFC 1997 BGP Communities Attribute (GTSM)
•• RFC 2439 BGP Route Flap Damping •• RFC 5291 Outbound Route Filtering Capability for BGP-4
•• RFC 2545 Use of BGP-4 Multiprotocol Extensions for IPv6 •• RFC 5292 Address-Prefix-Based Outbound Route Filter for
Inter-Domain Routing BGP-4
•• RFC 2918 Route Refresh Capability for BGP-4 •• RFC 5492 Capabilities Advertisement with BGP-4
•• RFC 4273 Definitions of Managed Objects for BGP-4 •• RFC 5925 The TCP Authentication Option (MD5)
•• RFC 4360 BGP Extended Communities Attribute •• RFC 6793 BGP Support for Four-octet AS Number Space
•• RFC 4456 BGP Route Reflection—An Alternative to Full •• RFC 2842 Capabilities Advertisement with BGP-4
Mesh IBGP •• RFC 4760 Multiprotocol Extensions for BGP-4
•• RFC 4724 Graceful Restart Mechanism for BGP - Only •• RFC 3065 Autonomous System Confederations for BGP
Helper mode •• RFC 2796 BGP Route Reflection—An Alternative to Full
•• RFC 4760 Multiprotocol Extensions for BGP-4 Mesh IBGP
•• RFC 5065 Autonomous System Confederations for BGP
IPsec •• RFC 2401 Security Architecture for the Internet Protocol •• RFC 3706 A Traffic-Based Method of Detecting Dead
•• RFC 2402 IP Authentication Header (AH) Internet Key Exchange (IKE) Peers
•• RFC 2406 IP Encapsulating Security Payload (ESP) •• RFC 4307 Cryptographic Algorithms for Use in the Internet
Key Exchange Version 2 (IKEv2)
•• RFC 2407 The Internet IP Security Domain of Interpretation
for ISAKMP •• RFC 4478 Repeated Authentication in Internet Key
Exchange (IKEv2) Protocol
•• RFC 2408 Internet Security Association and Key
Management Protocol (ISAKMP) •• RFC 7296 Internet Key Exchange Protocol Version 2 (IKEv2)
•• RFC 2409 The Internet Key Exchange (IKE) •• RFC 7815 Minimal Internet Key Exchange Version 2 (IKEv2)
Initiator Implementation
•• RFC 2412 The OAKLEY Key Determination Protocol
•• RFC 3526 More Modular Exponential (MODP) Diffie-
Hellman groups for Internet Key Exchange (IKE)
Tunneling •• RFC 1853 IP in IP tunneling •• RFC 1702 Generic Routing Encapsulation over IPv4
•• RFC 4213 Basic Transition Mechanisms for IPv6 Hosts and Networks
Routers •• RFC 2784 Generic Routing Encapsulation
•• RFC 3884 Use of IPsec Transport Mode for Dynamic
Routing
General •• RFC 2461 Neighbor Discovery for IP Version 6 (IPv6) •• RFC 3315 Dynamic Host Configuration Protocol for IPv6
•• RFC 2464 Transmission of IPv6 Packets over Ethernet (DHCPv6)
Networks •• RFC 3736 Stateless Dynamic Host Configuration Protocol
•• RFC 1918 Address Allocation for Private Internets (DHCP) Service for IPv6
•• RFC 4330 Simple Network Time Protocol (SNTP) Version 4 •• RFC 3442 The Classless Static Route Option for Dynamic
for IPv4, IPv6, and OSI Host Configuration Protocol (DHCP) version 4
•• RFC 4291 IP Version 6 Addressing Architecture •• RFC 2136 Dynamic Updates in the Domain Name System
(DNS UPDATE)
•• RFC 4941 Privacy Extensions for Stateless Address Auto-
configuration in IPv6 •• RFC 5735 Special Use IPv4 Addresses
•• RFC 4862 IPv6 Stateless Address Auto-configuration •• RFC 3513 Internet Protocol Version 6 (IPv6) Addressing
Architecture
•• RFC 4861 Neighbor Discovery for IP version 6 (IPv6)
•• RFC 2606 Reserved Top-Level DNS Names
•• RFC 2332 NBMA Next Hop Resolution Protocol (NHRP)
•• RFC 6241 Network Configuration Protocol (NETCONF)
•• RFC 3046 DHCP Relay Agent Information Option
•• RFC 6020 YANG - A Data Modeling Language for the
•• RFC 3442 The Classless Static Route Option for Dynamic
Network Configuration Protocol (NETCONF)
Host Configuration Protocol (DHCP) version 4
•• RFC 6022 YANG Module for NETCONF Monitoring
•• RFC 2131 Dynamic Host Configuration Protocol
6
Brocade vRouter Specifications (continued)
SNMP •• RFC 1525 Definitions of Managed Objects for Source •• RFC 3415 View-based Access Control Model (VACM) for
Routing Bridges the Simple Network Management Protocol (SNMP)
•• RFC 2742 Definitions of Managed Objects for Extensible •• RFC 3417 Transport Mappings for the Simple Network
SNMP Agents Management Protocol (SNMP)
•• RFC 2786 Diffie-Helman USM Key Management •• RFC 3419 Textual Conventions for Transport Addresses
Information Base and Textual Convention •• RFC 3584 Coexistence between Version 1, Version 2, and
•• RFC 2856 Textual Conventions for Additional High-Capacity Version 3 of the Internet-standard Network Management
Data Types Framework
•• RFC 2864 The Inverted Stack Table Extension to the •• RFC 3635 Definitions of Managed Objects for the Ethernet-
Interfaces Group MIB like Interface Types
•• RFC 3165 Definitions of Managed Objects for the •• RFC 3826 The Advanced Encryption Standard (AES) Cipher
Delegation of Management Scripts Algorithm in the SNMP User-based Security Model
•• RFC 3231 Definitions of Managed Objects for Scheduling •• RFC 4001 Textual Conventions for Internet Network
Management Operations Addresses
•• RFC 3411 An Architecture for Describing Simple Network •• RFC 4273 Definitions of Managed Objects for BGP-4
Management Protocol (SNMP) Management Frameworks •• RFC 5591 Transport Security Model for the Simple Network
•• RFC 3412 Message Processing and Dispatching for the Management Protocol (SNMP)
Simple Network Management Protocol (SNMP) •• RFC 5953 Transport Layer Security (TLS) Transport Model
•• RFC 3413 Simple Network Management Protocol (SNMP) for the Simple Network Management Protocol (SNMP)
Applications
•• RFC 3414 User-based Security Model (USM) for Version 3
of the Simple Network Management Protocol (SNMPv3)
Brocade vRouter VM
vCPU #0
Control Pane
vCPU #1
Interface
Hypervisor vSwitch
7
Table 1. Bare metal, PCI passthrough, and SR-IOV LAN device support.
10 Gigabit Ethernet (GbE) Bare Metal ESXi KVM ESXi KVM Xen
1 Gigabit
vNICs
rte_hyperv_pmd Hyper-V Y
virtio KVM Y
Brocade 10G-SFPP-SR Y
Brocade 10G-SFPP-LR Y
Brocade 10G-SFPP-ER Y
Brocade E1MG-SX-OM Y
Brocade E1MG-LX-OM Y
Brocade E1MG-LHA-OM Y
Notes:
• Supported NICs will vary based on the software release version of the Brocade vRouter.
• Please consult the Release Notes and Brocade vRouter documentation for a more detailed list of supported devices and drivers.
8
Ordering Information and 24-vCPU, each available with
Licensing Options subscription-based or perpetual-based
The Brocade vRouter is offered with a terms (see Table 2). Contact Brocade
flexible set of licensing options designed for more information on ordering and
to meet customers’ specific requirements. licensing.
These purchase options include a term-
Recommended Hardware
based license, with terms of one or three
and Software Configurations
years, or a perpetual license. In addition,
Tables 3 and 4 show are recommended
the Brocade vRouter is offered with a data
hardware and software configurations for
plane capacity-based license with options
maximizing the routing performance of the
of 1-vCPU, 2-vCPU, 3-vCPU, and
Brocade vRouter.
MIB Support Table 2. Software licenses available for the Brocade vRouter.
BGP4-MIB RFC 1657 1-year subscription software license (1 license) with 1-vCPU
BR-5600S-1V-SVV-SW-1
HOST-RESOURCES-MIB RFC 2790 data plane license
RMON-RIB RFC 2819 3-year subscription software license (1 license) with 1-vCPU
BR-5600S-1V-SVV-SW-3
IF-MIB RFC 2863 data plane license
EVENT-IB RFC 2981
Perpetual software license (1 license) with 1-vCPU data plane
IP-MIB RFC 2011 BR-5600P-1V
license
NOTIFICATION-LOG-MIB RFC 3014
IPv6-MLD-MIB RFC 3019
IPM-ROUTE RFC 2932 Table 3. Example Layer 3 routing performance of the Brocade vRouter.
IPV6-TC RFC 2465
IPV6-UDP-MIB RFC 2454 Number of vCPUs per Data Plane Performance Throughput Expectation Range
KEEPALIVED-MIB 1 Up to 500 Mbps
OSPF-MIB RFC 1850
PIM-MIB RFC 2934 2 Up to 1 Gbps
9
Corporate Headquarters European Headquarters Asia Pacific Headquarters
San Jose, CA USA Geneva, Switzerland Singapore
T: +1-408-333-8000 T: +41-22-799-56-40 T: +65-6538-4700
[email protected] [email protected] [email protected]
© 2017 Brocade Communications Systems, Inc. All Rights Reserved. 05/17 GA-DS-1805-11
Brocade, the B-wing symbol, and MyBrocade are registered trademarks of Brocade Communications Systems, Inc., in the United
States and in other countries. Other brands, product names, or service names mentioned of Brocade Communications Systems, Inc.
are listed at www.brocade.com/en/legal/brocade-Legal-intellectual-property/brocade-legal-trademarks.html. Other marks may belong
to third parties.
Notice: This document is for informational purposes only and does not set forth any warranty, expressed or implied, concerning any
equipment, equipment feature, or service offered or to be offered by Brocade. Brocade reserves the right to make changes to this
document at any time, without notice, and assumes no responsibility for its use. This informational document describes
features that may not be currently available. Contact a Brocade sales office for information on feature and product availability.
Export of technical data contained in this document may require an export license from the United States government.
10