Professional Documents
Culture Documents
BRKRST 1014
BRKRST 1014
BRKRST-1014 © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public 6
What does your day to day look like?
7% Other
BRKRST-1014 © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public 8
SDN is not..
…an easy button
…a end-state
…narrowly defined
BRKRST-1014 © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public 9
Evolution of Network Configuration
1990s Today
hq>enable
hq# config terminal
hq(config)# interface fastethernet 1/1
NEXUS>enable NEXUS(config)# feature eigrp
hq(config-if)# ip address
NEXUS# config terminal NEXUS(config)# router eigrp Test1
1.1.1.1 255.255.255.0
NEXUS(config)# interface NEXUS(config)# interface
hq(config-if)# no shutdown
ethernet 1/1 ethernet 1/1
hq(config-if)# exit
NEXUS(config-if)# no switchport NEXUS(config-if)# ip router
hq(config)# router eigrp
NEXUS(config-if)# ip address eigrp Test1
hq(config-router)# network 1.1.1.0
1.1.1.1 255.255.255.0 NEXUS(config-if)# no shutdown
hq(config-router)# exit
NEXUS(config-if)# no shutdown NEXUS(config-if)# end
hq(config)# exit
NEXUS(config-if)# exit NEXUS# copy run start
hq# copy run start
BRKRST-1014 © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public 10
Drivers for change
• Familiar Manual, CLI-driven, device-by-device approach is inefficient
• Increased need for programmatic interfaces which allow faster and
automated execution of processes and workflows with reduced errors
• Need for a ‘central source of truth’ and touch-point
BRKRST-1014 © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public
Challenges
• Complexity
• Pace of Change – Technology & Competition
• Consistent Pressure for Improved Operational Efficiency
• IT Budgets, Staffing and Resources
• Accelerated Pace of Cloud, Virtualisation and XaaS Options
• Consumption Economics
© 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public 12
Microsegementation + Scale {^^} Brain
BRKRST-1014 © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public 13
“If you dislike change, you’ll dislike
irrelevance even more”
Gen. Eric Shineski
Chief of Staff, US Army
Use Cases
SDN Use Cases
BRKRST-1014 © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public 16
Traffic Engineering
An Intelligent WAN
WAN Transport
MPLS
$$$ Private
Cloud Virtual
Private
Cloud
Branch Internet
Low Cost Circuit, backhaul
Direct Cisco Internet, 4G
Cloud
Internet Web Security
Access $ Public
Cloud
ü Secure WAN transport across MPLS and/or ü Leverage Low Cost path for public cloud and
Internet for private cloud / DC access Internet access
Increase WAN Capacity Improve App Performance Scale Security at the Branch
© 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public
Traffic Engineering
Dynamic QoS
Session
Collaboration Policy
Application
Enterprise Network
AP
Single policy request produces automated change across all network elements enabling
high quality user experience
BRKRST-1014 © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public 18
Service Deployment
Network Plug ’n’ Play
Today’s Process Network PnP
Installer
Installer
Network Admin
User Problem:
Application is responding slow
BRKRST-1014 © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public
Key Concepts & Technologies
SDN Origins
BRKRST-1014 © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public
The Traditional Network…
Control Plane (CP)
Control and Data
Plane resides within CP DP CP DP
Physical Device
CP DP CP DP
CP DP CP DP CP DP CP DP
CP DP CP DP
CP
CP DP CP DP
CP DP CP DP CP DP CP DP
CP DP CP DP
CP CP DP CP DP
Controller
CP DP CP DP CP DP CP DP
© 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public
APIs and Data Models
Application Programming Interface
BRKRST-1014 © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public 27
RESTful API’s
Client Server
BRKRST-1014 © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public 28
NETCONF (RFC 6241)
Informational RFC 3535, SNMP has failed
Content Config
Operation <edit>
Messages <rpc>
Transport SSH
BRKRST-1014 © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public 30
YANG (RFC 7950)
YANG [1] is a data modeling language for the NETCONF network configuration
protocol…
BRKRST-1014 © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public 31
OpenFlow
What is OpenFlow?
API
Application
OF
OF Controller AGENT
ONF Members
Accton China Telecom Globe Business Neptune Swisscom
ADVA Optical Networking China Academy of Google Netberg Tsmc
Alibaba Group Holding Ltd Telecommunications H3C Technologies Netscount Tata Communications
Allied Telesis Ciena HCL Netronome Telecom Italia
Argela Cisco Systems HPE Nokia TTA
Aricent Group Citrix Systems Huawei North Bound Telefonica
ARM Corsa Technology Infinera Noviflow Telus
AT&T Criterion Networks (I) Pvt Institute for Information NTT Communications Tenceni
ATTO Research Korea Ltd Industry (III) NXP TreQ Labs
Barefoot Networks Cyretix Intel xNet Uberflow
Beijing Internet Institute Dell/Force10 Networks Inventec Oracle Vello Cloud
(BII) Deutsche Telekom ITRI (Industrial Technology PCCW Global Verizon
BISDN ECI Research Institute) Plantia Systems Vodafone
Blue Coat Ecode Ixia Ricoh Whitestack
Brain 4 Net Ericsson Juniper Networks Samsung Wipro
Broadcom ETRI (Electronics and KulKloud Sanctum Networks Ltd XILINX
Brocade Communication Telecommunications Lenovo SDN Essentials Yahoo
Systems Research Institute) Lumen Networks SDN Lab ZTE
Cavium Extreme Networks Luxoft Sedona Systems
Cengn Facebook Mellanox Technologies SIA
CenX Fiberhome Technologies Microsoft Sify
Ceragon Fujitsu NAIM Networks SK Telecom
China Mobile Research Goldman Sachs NEC Smoptics
Center Gigamon Nephos Spirent
http://opennetworking.org
BRKRST-1014 © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public 34
What Makes OpenFlow Different?
Flow Table
Ingres Source Dest Ether VLAN VLAN IP IP IP IP TCP/U TCP/U Action Priority Counter
s Port MAC Protoco
MAC Type ID Priorit SRC DEST TOS DP DP
l
y SRC DEST
25 Drop 100
* * Firewall/Security
* * * * * * * * *
0x0800 Controller 100
* * * * *
Inspection * * * * * *
Vlan10 80 Fwd Port 8 200
* 00:01:E7:* * * * * *
Combinations * * *
80 Rewrite 200
* * *
Multi-action *
; NAT * * * 192.168.1.*
* * * 10.1.2.3;
Fwd port 9
2 2
Redirect to OpenFlow
Controller
FLOW
CPU Forward to local
TABLE 3
Forwarding Stack (CPU)
7 Drop Packet
1 6
© 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public 36
OpenFlow Introduced Notable Features Flow-spec
Version Tuple
1.0 2009-12 Initial Specification [Still very prevalent in the market] 12
1.1 2011-02 Support for multiple flow tables; Added support for MPLS 15
Defined two operating modes – Hybrid | Pure OpenFlow
1.2 2011-12 Support for IPv6 34
Multiple Controller support
1.3 2012-06 Support for Rate Limiting; IPv6 Extensions, GRE 38
Version increasingly targeted by customers/manufacturers
1.3.1 2012-09 Support for Negotiation TLVs 38
1.4 2013-10 Support for Rule change ‘transactions’ (1.4.1 April 2015) 40
1.3.4 2014-03 Clarify table feature wildcard list should not include fields that are mandatory in some context 40
Only
Add section about control channel maintenance
Push MPLS should add a MPLS header before the IP header and before MPLS tags, not
before
VLAN which is not valid
1.5 2014-12 Egress Tables; Packet aware pipeline (IP, PPP); flexible encoding - OpenFlow 44
eXtensible Statistics (OXS); set-field action wildcard; Controller connection status
(1.5.1 April 2015)
© 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public
OpenFlow is one Fish in the Sea of SDN
© 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public
SDN Protocols in Internet
Application Frameworks, Management Systems, Controllers, ...
© 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public 39
Industry Communities, Projects and
Standards Bodies
Cisco Innovations:
FEX Architecture
Technical Advisory
802.1 Overlay
Board seat Open Network Research
Networking Project
Center at Stanford
University
Puppet Agent
Modules
Puppet Labs
Initiatives:
investor
Contributor - Neutron API
Technical Advisory Group Technical Committee Donabe
Chair, Management Area Cisco Innovations:
Working Groups: Projects OpenStack API for Nexus
Config, Hybrid, Extensibility, OpenStack Extensions
Futures/FPMOD/OF2.0
BRKRST-1014 © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public 41
SDN Controllers
SDN Controllers
• Open Daylight
• Cisco Open SDN Controller
• Cisco APIC (Application Policy Infrastructure Controller)
• Cisco APIC-EM (Enterprise Module)
• ….
SDN Controller – Overview
BRKRST-1014 © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public 44
Open Daylight
OpenDaylight
• The biggest networking OSS project by any measure (www.openhub.net):
RYU:95 RYU:2,783
FD.io: 276,133
© 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public 47
OpenDaylight Architectural Model Hydrogen
• Released February 2014
Helium
• Released October 2014
• 1.87M+ lines of code
• 28 Projects
• 256 Contributors
Lithium
• June 2015
Beryllium
• Feb 2016
Boron
• September 2016
© 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public 48
Open Daylight OF Toplogy
BRKRST-1014 © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public
Cisco Open SDN Controller (OSC)
Çisco Open SDN Controller (OSC)
• Based on OpenDaylight
• Includes Cisco value-added functions: installation
helpers, log and metrics aggregation, plug-in clustering
and monitoring
• https://cisco.com/go/opensdn
• Focus : Customers with some programming resources
that desire a commercially supported edition of a free,
community-support SDN controller, especially if focus is
on Open Flow.
BRKRST-1014 © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public 51
Cisco Commercial Distribution of OpenDaylight
© 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public 52
Open SDN Controller
Re-bases XNC on OpenDaylight Helium Release
© 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public 53
Open SDN Controller vs OpenDaylight
BRKRST-1014 © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public 54
Native Applications
Inventory
Device vendor
Platform IDs
Series numbers
© 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public 55
Native Applications (cont’d)
OpenFlow Manager
OpenFlow topology
visualization
© 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public 56
Cisco APIC
Cisco ACI: Full Stack SDN in Data Center
Centralized Automation and Fabric Management
BRKRST-1014 © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public 58
Cisco APIC-EM
(APIC-Enterprise Module)
What Is APIC-EM?
• A purpose-built, easy to use SDN controller
• Does NOT require programming experience [but does have REST NBI]
• Does NOT require HW/SW upgrades to take advantage of controller model
• Has specific applications built-in to address common network needs:
Policy Management, QoS Management, Zero-Touch Deployment and iWAN
• Available to SmartNet customers without charge
• Focus: Enterprise Customers with Few to No Programming Resources
that desires a Commercially-supported solution that preserves existing
investment and doesn’t require HW/SW upgrades
© 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public 60
APIC-EM - Platform Architecture
APIC-EM Network PnP IWAN Path Trace Network Inventory APIC-EM
Applications Advanced Topology Visualizer Applications
APIC-EM Controller
Northbound REST APIs
Inventory Policy
RBAC Policy Analysis
APIC-EM Manager Programmer
APIC-EM
Services Topology Data Access
Services
IWAN
Network PnP
Services Service Services
Addresses
Scale Out
Grapevine Elastic Service Infrastructure and HA
Requirements
BRKRST-1014 © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public 61
APIC-EM – Functions and Applications
(*) GA1 BRKRST-1014 © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public 62
Network Information Base – Device Inventory
Single Source of Truth
(*) GA1 BRKRST-1014 © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public 63
APIC-EM – Device Inventory
BRKRST-1014 © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public 64
Network Information Base – Host Inventory
Single Source of Truth
(*) GA1 BRKRST-1014 © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public 65
APIC-EM – Host Inventory
BRKRST-1014 © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public 66
Topology Visualizer
BRKRST-1014 © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public 67
Topology Visualizer – Embedded Device Information
Device Information
BRKRST-1014 © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public 68
Path Visualization
BRKRST-1014 © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public 69
Path Visualization: Enhanced Application Flow Visibility
Link source
CAPWAP tunnel information
visualization
Accuracy note
(in percentage)
Ingress/Egress
Interface
BRKRST-1014 © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public 70
Path Visualization: Topology View
BRKRST-1014 © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public 71
APIC-EM IWAN App - Application Policy
BRKRST-1014 © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public
Deploy End-to-End DSCP-Based Queuing Policies
EasyQoS seamlessly interconnect s all types of
hardware and software queuing models to achieve
consistent and compatible end-to-end treatments
aligned with the expressed business-intent
EM
BRKRST-1014 © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public 74
EasyQoS GUI
Change Application Business-Relevance
BRKRST-1014 © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public 75
Other Considerations
Remember This Inflection Point?
Telephony in 1998
BRKRST-1014 © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public 77
Business outcomes not technical silo’s
BRKRST-1014 © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public 78
What Skills Would Be Helpful for a
Network Engineer Branching Out?
• Basic Programming constructs
(conditionals, loops, functions/procedures)
• Basic Python / Javascript
• REST / Web Services
• Regular Expression
• XML / XSLT
• Basic SQL
• Basic shell scripting - grep
• #1 - Communicating Effectively with Programmers
BRKRST-1014 © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public 79
Job Roles: Cisco Network Programmability Evolution
Network Engineer
Development Network
Programmability
Curriculum Designer
Network Programmability
Support Engineer
Engineer
Traditional Networking
Open Infrastructure
Infrastructure
http://www.cisco.com/web/learning/certifications/specialist 80
BRKRST-1014 © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public 80
But I don’t have time….
• Book time to yourself in your calendar
• Map out your learning
• Set realistic achievable goals
• Attend an online or physical class
BRKRST-1014 © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public 81
BRKRST-1014 © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public 82
Where to learn more
Devnet Zone @ Cisco Live
BRKRST-1014 © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public 84
Walk-In Self Paced Labs @ Cisco Live
BRKRST-1014 © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public 85
Recommended CLMEL17 Sessions
• TECRST-2010 : Network Engineer v2.1 – Automating the SDN
Enterprise Campus / WAN – Adam Radford, Wednesday (watch the
recording...)
• BRKACI-2503 : Infrastructure as Code and DevOps for Network
Engineers – Chris Gascoigne Wednesday 2:30pm (watch the recording…)
• BRKCRS-2150 : APIC-EM Deployment and Operations – Adam Radford,
Thursday 8:30am
• BRKSPG-2380 : Goodbye to Manual Configuration : Service Centric
SDN, NFV and Orchestration – Bilal Alam – Thursday 12:50pm
• DEVNET-2037 : APIC-EM API – Adam Radford – Thursday 12pm
BRKRST-1014 © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public 86
https://developer.cisco.com
BRKRST-1014 © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public 87
https://dcloud.cisco.com
BRKRST-1014 © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public 88
What does your day to day look like?
7% Other
Caps can be collected Friday 10 March Learn online with Cisco Live!
at Registration. Visit us online after the conference
for full access to session videos and
presentations.
www.CiscoLiveAPAC.com
BRKRST-1014 © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public 91