6-WhitePaper CloudNFV
6-WhitePaper CloudNFV
best of Cloud
Computing, SDN and
NFV
An open platform for implementing Network Functions Virtualization (NFV) based on cloud
computing and Software Defined Networking (SDN) technologies in a multi-vendor
environment
We have a network today - the Internet - that spans the globe and has even Founding members of the
extended into space. There are challenges in making all of the roles of this
enormous collective undertaking profitable enough to guarantee full CloudNFV initiative include:
participation, and there are a lot of “revolutions” that have promised to help—
the cloud, software-defined networking (SDN), and most recently, network
6WIND
functions virtualization (NFV). There are many things we don’t know yet about CIMI Corporation
these new concepts, but one thing we do know is that they can’t make the
network of today any less pervasive, useful or powerful than it is now. Dell
Progress means moving up, not falling back.
EnterpriseWeb
Network functions virtualization is potentially the unifying revolution of the
three, the thing that combines the cost management initiatives needed by Overture Networks
operators, the revenue opportunities needed by everyone in the services Qosmos
value chain, and the experiences that will dazzle our grandchildren even more
than our current experiences have dazzled us.
Hosting network functions in the cloud is a step toward unifying the network Click on a company name above
and information technology forever, creating a seamless mesh of technical to view a summary of their
elements that support every conversation, every transaction, every participation in CloudNFV
experience. All we have to do is take the opportunity that NFV presents us
and go forward with it, to expand
from managing costs to creating
To virtualize anything profitable experiences. The cloud
effectively, we have to virtualize shows us how to go beyond NFV,
how to take the first step toward
everything from resources to our dazzling goal.
services to functions… even to
One step doesn’t climb all the way
the users themselves. That’s to the future, though. NFV is
another example of how the most
the big step because infinite general concept of virtualization –
flexibility is only a short the transformation of abstractions
into realizations – can change
distance from chaos. everything about technology. If we
are to get to that utopian cloud of
tomorrow, we have to embrace
that definition of “virtualization,” not just fill in the stress cracks virtualization
creates. To virtualize anything effectively, we have to virtualize everything
from resources to services to functions… even to the users themselves.
That’s the big step because infinite flexibility is only a short distance from
chaos.
Like the Internet, CloudNFV is open. It’s not a company that’s going to sell
itself for a big payday or a forum that’s going to charge for membership. It is
an architecture supported by an open partnership. Everyone is welcome, and
while we obviously can’t speak personally with everyone who wants to know
more about our activity, we’re committed to communicating with as many as
we can, using every means available. This document is where we start.
OK, fine, but let’s look at this through our carrier regulatory attorney’s eyes.
What happens if the server hosting the function fails? Do I “reroute” through
another virtual function I created on standby? Do I spin up another VM and
load another copy? How do I reconnect all this? What happens if a portion of
the local electric grid failed, and my backup is in the same substation zone as
my primary? We need more policies, because operations and management is
complicated.
All of this complexity can add up. We know that virtual routing works and that The NFV plan is to support
it can save on CapEx. But, let’s look at this through another set of eyes, that
of a carrier CFO. everything from bare metal to
Will the capital cost savings created by moving to virtual functions hosted on
an architected cloud as a
servers be eradicated by more complex operating processes as we scale out hosting platform. Once
to more virtualization? How do we even manage this new virtual stuff? Where
did we put that function anyway and how do we know how it’s behaving? deployed, they are managed
Even applying all of those policies that we just mentioned could be costly so as to create as good of a
enough to jeopardize capital savings.
service experience as the
Our CFO eyes would also see the problem with investing to cut costs – in
original devices would have
many ways, that’s a contradiction in terms at best. Why not try to get new
revenue? A. whole industry has grown up riding on “Internet dialtone” after all, created.
and operators should be able to not only compete, but win in such a business
model—if they have the right tools. Most of them are already committed to
investment in the cloud, so why not try to harmonize that cloud investment
and a new network architecture and support revenue gains as much as
manage costs?
It’s time for another set of eyes here, that of the high-level architect.
When such a person looks at Network Functions Virtualization, they see what
Figure 2 shows—a trio of critical elements. We have the “network functions”
that represent the logic to be deployed and assembled into services; the
“functions virtualization” that
represents the logic that
deploys and connects the
virtual functions; and the
“operationalization” – the
logic that keeps everything
running and does the billing
and business functions.
At the April 2013 NFV meeting in Santa Clara, a group of six companies With CloudNFV there’s a
agreed to work toward building such a prototype as an open platform to
validate and explore NFV issues and assumptions. We called that platform
simple goal – make every
CloudNFV because it was architected – from its inception – to make network application that can run in the
functions into cloud components.
cloud into a potential virtual
We all saw CloudNFV as function. Cloud computing
it’s depicted in Figure 3–
a stack of futuristic and NFV are one.
technologies combined
to create a new network
model. NFV principles
from the ETSI ISG are
translated into hosted
Figure 3. CloudNFV is a Stack of Technology functions using cloud
Revolutions computing principles—
OpenStack to be
specific. With CloudNFV there’s a simple goal –make every application that
can run in the cloud into a potential virtual function.
The network connections between functions and with users are created using
SDN. Management is accomplished through a data/resource model structured
according to TMF rules but optimized for virtualization and the cloud. We took
this approach deliberately to create a harmony of revolutions – to build the
greatest benefit case while gaining the most in terms of economies of scale
and operations.
When an order is complete, we find that some of that order requires virtual
functions to be deployed, and that component of the order is then dispatched CloudNFV is about a
to the NFV process called “Orchestration.” Here, we use policy rules and
resource status from Active Resource to pick the best spot to put all these harmony of revolutions,
virtual functions, and also how to connect them using virtual networking. We a harmony of
call the combination of the where-to-host and how-to-connect instructions a
manifest. This manifest is given to OpenStack, which uses its Nova compute standards, a harmony
APIs and Neutron networking APIs, to create the NFV component of the
of vision. It isn’t a new
service on real cloud resources using real network connectivity to link its
pieces and link the whole service to the user. standard. It’s a fusion
When the virtual functions are deployed and connected, the resources all of the standards that
report their status and traffic to Active Resource and management processes we all believe are
running against Active Resource let you either reflect the result of your
deployment as a bunch of virtual devices with familiar MIBS that support driving the industry. It’s
current management systems, or create your own completely new and not limited to NFV. It
streamlined management processes.
creates a framework to
Whichever route you pick, your virtual management state is derived from the
real status of real hosts and real networks. We call these “derived operations,” deploy legacy services
in fact, and we have structured the data model of Active Contract to reflect the based on legacy
TMF SID (GB922) description of Services, but also to reflect how applications
really deploy in the cloud. That’s what makes real-time virtualization-based devices or to deploy
management possible. software-as-a-service
So there you have it, at a high level. CloudNFV is about a harmony of in cloud computing.
revolutions, a harmony of standards, a harmony of vision. It isn’t a new
standard. It’s a fusion of the standards that we all believe are driving the
industry. It’s not limited to NFV. It creates a framework to deploy legacy
services based on legacy devices or to deploy software-as-a-service in cloud
computing. It isn’t a different approach to NFV, it’s an optimized approach to
the requirements that the ETSI ISG are
Yes, this is a proof of creating. All of us are members of the ISG,
concept, but it’s a proof and everyone who wants to integrate with
of a very broad concept. us in the future will have to be a member
We invite you to join to prove their commitment. We’re also
coordinating our activity with the TMF
us—no fees, no because we believe the TMF service
pressures, just framework is critical to integrating
cooperation to advance CloudNFV into effective operations
the three critical practices, particularly as we transition
concepts of cloud, SDN, between real and virtual devices.
and NFV as a single CloudNFV isn’t a product. It’s proof that
and open effort. NFV can be implemented as an open
concept, instead of a proprietary monolith.
If we dig just a bit deeper into Figure 4, we can demonstrate our vision of
contract-driven management. Active Contract records the resource
commitments associated with a given set of virtual functions. When we want
to manage an NFV-based service, we do so by integrating the resource state
from Active Resource with the resource commitments made in Active
Contract. We call this “derived operations” because in a virtual world there are
no real devices and so there are no meaningful MIBs.
To get the rest of the way to services, we’ve jumped at our next level to TMF
GB922 terminology. A Resource-Facing Service is a collection of one or
more packages that map to specific current TMF or TMF-linked OSS/BSS
processes. RFSs, like packages, treat what’s in them as a collection of
exposed interfaces to be connected. To CloudNFV, the process of connecting
those interfaces is symmetrical from packages all the way to the retail top of
the chain. RFSs can be linked with commercial terms and commercial SLAs
to create Customer-Facing Services, and it is these services that combine
to create the retail service offering that we call a Retail Service and that the
TMF calls a “product”.
When somebody wants to manage the Contract, they start with the Contract
itself (which provides the customer context, SLA objectives and resource
commitments) and use the Management Visualizers at each level of the
structure to view (and potentially alter) the variables that were deemed
appropriate to that particular structure. Each retail service, CFS, RFS and
package can define its own management view, but there are other
management options we’ll get to in a bit. A Management Visualizer has
instructions for both derivation of the variables it presents (where they come
from in Active Resource and how they are aggregated into a virtual vision of
status), and the presentation of those variables in terms of both format and
API. You can have any management derivation and presentation you like – a
-- just use a Management Visualizer to create it. You can also define multiple
presentations of the same derivations, etc. Everything is virtual, remember?
All of CloudNFV’s processes and functions are driven from Active Contract,
Active Resource, or both, gaining their information and functionality needs
through Visualizers that can build data models or process models equally
well. We optimize deployment using Visualizer data. We pass Manifests to
Orchestration through a Visualizer and when we manage something (real
So who does all of this? Our next step is to introduce the companies who
have implemented the CloudNFV vision. First, we’ll take a look at Figure 8in
terms of who does what, and then we’ll let each of the companies frame their
participation in their own way.
CIMI Corporation is the architect of the CloudNFV concept, the source of the
high-level design and the assembler of the team. Tom Nolle, president of
CIMI, is a well-known industry analyst, software architect and author.
Dell Inc. is the provider of the server systems, the data center SDN switches,
the Active Fabric Manager and OpenStack Neutron plugin, and the lab space
used for testing and demonstration. Data center hardware reliability is critical
to NFV. Dell has also been the systems integrator for CloudNFV and they
have coordinated the hosting of virtual functions for the demo.
Overture Networks is the provider of the orchestration logic for NFV, which
takes an optimized “manifest” of deployment and connectivity requirements
and realizes the actual instantiation via OpenStack APIs. Overture is the key
to multi-vendor network support (via Neutron) within CloudNFV and they also
provided the metro/Carrier Ethernet switching for inter-data-center
connectivity.
Qosmos plays two critical roles in CloudNFV. First, their traffic probes
provide us with monitoring of the critical flows that let us optimize network
utilization and performance. Second, their “DPI-as-a-Service” capability is
used in our demonstration to illustrate the NFV concept of Service Chaining.
Company Background
6WIND, a networking and telecom software company, provides high-performance data plane solutions that accelerate the
performance of Virtual Network Functions and Virtual Switches. As the #1 supplier of high-performance networking
software for LTE infrastructure, generally implemented today on physical platforms, 6WIND is well-positioned to solve the
networking performance challenges for Virtual Network Functions in NFV.
6WINDGate includes a
comprehensive set of networking
protocols (IP forwarding, routing,
virtual routing, PPP, firewall, IPsec,
IKE, TCP termination etc.), ensuring that all VNFs are accelerated.
6WINDGate is fully compatible with standard Linux networking APIs so the VNF applications run unmodified.
6WINDGate enables operators to achieve best-in-class cost-performance from VNFs running under KVM, such as
firewalls and security gateways.
Second, 6WINDGate accelerates the Open vSwitch (OVS) that switches network traffic to the Virtual Machines (VMs) in
which the VNFs are instantiated.
Typically, 6WINDGate delivers a 10x improvement in OVS switching performance, with no changes required to the OVS
code itself. In many cases, this 10x increase in switching performance results in at least a 3x improvement in the number
of VMs that can be instantiated per server (the VM density).
As part of improving OVS performance, 6WINDGate accelerates the secure tunneling protocols such as IPsec, GRE,
VLAN etc which are required for high-bandwidth VM-to-VM traffic.
In these two environments, 6WINDGate runs within KVM, under the control of the OpenStack orchestration layer.
Dell Inc. is delighted to be a founding member and the Proof-of-Concept system integrator
of the CloudNFV™ open project. CloudNFV™ was launched by a consortium of seven
companies, led by CIMI Corporation, to realize the vision of NFV using standard open cloud
computing and SDN technologies, and to demonstrate so in an open Proof-of-Concept
phases. Dell will be hosting the PoC in its Silicon Valley lab.
Dell’s vast portfolio of globally available data center infrastructure, cloud and multi-cloud
management software solutions, and related services for development, integration and
support help customers worldwide to quickly deliver applications, streamline the
management of systems (including servers, networking, storage, NEBS compliant OEM
infrastructure), expand your virtual environment, and rapidly adopt cloud-based
infrastructure.
Dell is a leader in helping customers build, modernize and optimize data centers with a
unique transformative approach. Our experiences in data center deployment and
management, and our focus on results for customers add to the ingredients of success in
realizing the vision and benefits of NFV.
We are excited being part of CloudNFV™ and the coming transformation of our customer’s
network infrastructure, and the positive impact we can have in enabling a new Internet.
About Dell
Dell Inc. (NASDAQ: DELL) listens to customers and delivers innovative technology and services that
give them the power to do more. For more information, visit www.dell.com.
Dell is a trademark of Dell Inc. Dell disclaims any proprietary interest in the marks and names of others.
Dell Media Contact: Franklin Flint, OEM Telecommunications Marketing & Strategy,
[email protected]
EnterpriseWeb enables CloudNFV’s Active Virtualization framework, which provides an extensible model for
semantically relating the entities, policies, services, resources, protocols and processes that all participate in
the delivery of a Virtual Network Function over diverse network and cloud hardware.
“Active” Virtualization is a critical distinction at the heart of CloudNFV. It extends well-established notions of
virtualization to allow for a more loosely-coupled and dynamically adaptable architecture.
Virtualization is an abstraction or set of abstractions that conveniently ‘hides’ complex relationships between
devices, software and services to effect a functional sub-system that can be addressed/automated collectively.
As with many conveniences, there is a trade-off. For virtualization to work the model generally imposes a fixed
set of rules that govern the relationships to provide a guarantee, which supports a specific utilization, but
precludes many others – it’s programmable, but not adaptable (rules are “baked-in”). Moreover, changes in
the components or the relationships between the components can break applications – it’s brittle. Traditional
virtualization can create physical constraints that compromise agility.
We see this in the design of Web-Services and RESTful APIs, which hide their implementation details behind static interfaces. If a
Service or API doesn’t meet a specific need of an application, even if the new requirement represents only a minor change in the
relationship of components, it nonetheless requires development of yet another discrete Service or API. This leads to library
growth, which increases related maintenance costs and lowers overall development productivity – an unintended, but material
consequence of the design.
EnterpriseWeb achieves the benefits of virtualization, hide complexity to automate collections of devices,
software and services, without the tight-coupling. With EnterpriseWeb the models bind to resources
dynamically – they stay truly virtual. This allows the components of an orchestrated service to independently
evolve. Components can be changed and even replaced, during live operations, without breaking the model.
The approach supports optimization as the model can query a network for the latest and most appropriate
resources. This is Active Virtualization.
In CloudNFV, we model services as combinations of virtual functions and network behaviors. Every service is
an abstraction. When those services are ordered we create an optimized map of how the abstraction becomes
real—and we then use CloudNFV’s orchestration model to instantiate virtual functions, then connect those
functions with each other and with users. We record the resource assignments, and we derive a continuous
view of the operating state of the service and all its components from those records—drawing on our
repository of resource state information collected from everywhere in the network and the cloud. Our
CloudNFV partners, 6WIND, Dell, Overture Networks and Qosmos can all provide us with telemetry on service
and resource conditions, and we translate these into meaningful management views.
EnterpriseWeb supports the agility goals of CloudNFV and the differentiated services that will dominate carrier
revenue models in the future.
Qosmos plays an active role in initiatives piloted by the Open Networking Foundation (ONF™) and ETSI
Network Functions Virtualization (NFV) Industry Specification Group (ISG), contributing to emerging
network standardization for DPI and Network Intelligence.
As a member of the ONF™, Qosmos participated in the elaboration of the MEC L4-L7 Requirements
document which was behind the L4-L7 service requirement adopted by the Technical Architecture
Working group. Qosmos continues to be an active contributor in this group.
As part of the ETSI NFV ISG, Qosmos contributed to the Software Architecture group for the use case
definition of the Virtual Networking Function Component (VNFC). Qosmos’ DPI engine was used as an
illustration in the definition.
Qosmos is a founding participant of the CloudNFV™ open project which was launched by a consortium of
companies, led by CIMI Corporation, to implement the NFV model using standard cloud computing tools
and principles as described by the ONF and NFV ISG. Qosmos is delighted to be part of this initiative and
to have the opportunity to demonstrate Proof-Of-Concept in the SDN & NFV deployment phases.
“Having DPI-as-a-service is a critical element in a number of service provider NFV applications and use
cases such as policy-based traffic shaping and management applications” Qosmos says.
The way to provide DPI VNFC characteristics will allow the service providers to optimize the VM
placement and orchestration upon the physical resources.
About Qosmos:
A pioneer in Network Intelligence based on DPI, Qosmos is the leading independent OEM provider on
the market, serving more than 50 vendors worldwide. Based in Paris, Qosmos has offices in Silicon
Valley, Singapore and London. For more information, please visit www.qosmos.com
Qosmos Media Contact
Madeleine Renouard, Marketing Communications Manager
Tel: +33 (0)1 70 81 19 00 / [email protected]