the stanford clean slate program l.
Download
Skip this Video
Loading SlideShow in 5 Seconds..
The Stanford Clean Slate Program PowerPoint Presentation
Download Presentation
The Stanford Clean Slate Program

Loading in 2 Seconds...

play fullscreen
1 / 20

The Stanford Clean Slate Program - PowerPoint PPT Presentation


  • 218 Views
  • Uploaded on

The Stanford Clean Slate Program. OpenFlow (Or: “Why can’t I innovate in my wiring closet? ”). Nick McKeown nickm@stanford.edu. http://cleanslate.stanford.edu. Outline. OpenFlow Enabling innovation on campus Standard way to control flow-tables in commercial switches and routers

loader
I am the owner, or an agent authorized to act on behalf of the owner, of the copyrighted work described.
capcha
Download Presentation

PowerPoint Slideshow about 'The Stanford Clean Slate Program' - finian


An Image/Link below is provided (as is) to download presentation

Download Policy: Content on the Website is provided to you AS IS for your information and personal use and may not be sold / licensed / shared on other websites without getting consent from its author.While downloading, if for some reason you are not able to download a presentation, the publisher may have deleted the file from their server.


- - - - - - - - - - - - - - - - - - - - - - - - - - E N D - - - - - - - - - - - - - - - - - - - - - - - - - -
Presentation Transcript
the stanford clean slate program

The Stanford Clean Slate Program

OpenFlow

(Or: “Why can’t I innovate in my wiring closet?”)

Nick McKeown

nickm@stanford.edu

http://cleanslate.stanford.edu

outline
Outline

OpenFlow

  • Enabling innovation on campus
  • Standard way to control flow-tables in commercial switches and routers
  • Being deployed at Stanford
  • Consider deploying it at your campus too

The Stanford Clean Slate Program http://cleanslate.stanford.edu

innovations in campus wiring closets
Innovations in campus wiring closets

Experiments we’d like to do

  • Mobility management
  • Network-wide energy management
  • New naming/addressing schemes
  • Network access control

Problem with our network

  • Paths are fixed (by the network)
  • IP-only
  • Addresses dictated by DNS, DHCP, etc
  • No means to add our own processing

The Stanford Clean Slate Program http://cleanslate.stanford.edu

openflow switching
OpenFlow Switching
  • A way to run experiments in the networks we use everyday.
  • Bring GENI to college campuses.

A “pragmatic” compromise

Allow researchers to run experiments in their network…

…without requiring vendors to expose internal workings.

Basics

An Ethernet switch (e.g. 128-ports of 1GE)

An open protocol to remotely add/remove flow entries

The Stanford Clean Slate Program http://cleanslate.stanford.edu

experimenter s dream vendor s nightmare
Experimenter’s Dream(Vendor’s Nightmare)

Standard

Network

Processing

User-

defined

Processing

Experimenter writesexperimental codeon switch/router

sw

hw

The Stanford Clean Slate Program http://cleanslate.stanford.edu

no obvious way
No obvious way

Commercial vendor won’t open software and hardware development environment

  • Complexity of support
  • Market protection and barrier to entry

Hard to build my own

  • Prototypes are flakey
  • Software only: Too slow
  • Hardware/software: Fanout too small (need >100 ports for wiring closet)

The Stanford Clean Slate Program http://cleanslate.stanford.edu

furthermore we want
Furthermore, we want…
  • Isolation: Regular production traffic untouched
  • Virtualized and programmable: Different flows processed in different ways
  • Equipment we can trust in our wiring closet
  • Open development environment for all researchers (e.g. Linux, Verilog, etc).
  • Flexible definitions of a flow
    • Individual application traffic
    • Aggregated flows
    • Alternatives to IP running side-by-side

The Stanford Clean Slate Program http://cleanslate.stanford.edu

openflow switching8
OpenFlow Switching

Controller

OpenFlow Switch

OpenFlow Switch specification

PC

OpenFlow

Protocol

SSL

Secure

Channel

sw

Flow

Table

hw

The Stanford Clean Slate Program http://cleanslate.stanford.edu

flow table entry type 0 openflow switch
Flow Table Entry“Type 0” OpenFlow Switch

Rule

Action

Stats

Packet + byte counters

  • Forward packet to port(s)
  • Encapsulate and forward to controller
  • Drop packet
  • Send to normal processing pipeline

Switch

Port

MAC

src

MAC

dst

Eth

type

VLAN

ID

IP

Src

IP

Dst

IP

Prot

TCP

sport

TCP

dport

+ mask

The Stanford Clean Slate Program http://cleanslate.stanford.edu

openflow type 1
OpenFlow “Type 1”
  • Definition in progress
  • Additional actions
    • Rewrite headers
    • Map to queue/class
    • Encrypt
  • More flexible header
    • Allow arbitrary matching of first few bytes
  • Support multiple controllers
    • Load-balancing and reliability

The Stanford Clean Slate Program http://cleanslate.stanford.edu

secure channel
Secure Channel
  • SSL Connection, site-specific key
  • Controller discovery protocol
  • Encapsulate packets for controller
  • Send link/port state to controller

The Stanford Clean Slate Program http://cleanslate.stanford.edu

slide12

OpenFlow

OpenFlow-enabled

Commercial Switch

Normal

Software

Secure

Channel

Normal

Datapath

Flow

Table

Server room

OpenFlow

Access Point

OpenFlow

Controller

PC

OpenFlow

The Stanford Clean Slate Program http://cleanslate.stanford.edu

openflow usage models
OpenFlow Usage Models
  • Experiments at the flow level
    • User-defined routing protocols
    • Admission control
    • Network access control
    • Network management
    • Energy management
    • VOIP mobility and handoff
  • Experiments at the packet level
    • Slow: Controller handles packet processing
    • Fast: Redirect flows through programmable hardware
    • Modified routers, firewalls, NAT, congestion control…
  • Alternatives to IP
  • Experiment-specific controllers
  • Static or dynamic flow-entries

The Stanford Clean Slate Program http://cleanslate.stanford.edu

example experiment at the flow level mobility
Example Experiment at the flow levelMobility
  • Lots of interesting questions
  • Management of flows
  • Control of switches
  • Access control of users and devices
  • Tracking user location and motion

The Stanford Clean Slate Program http://cleanslate.stanford.edu

experiments at the packet level

OpenFlow-enabled

Commercial Switch

Normal

Software

Secure

Channel

Normal

Datapath

Flow

Table

Experiments at the packet level

Controller

PC

Laboratory

NetFPGA

The Stanford Clean Slate Program http://cleanslate.stanford.edu

openflow usage models16
OpenFlow Usage Models
  • Experiments at the flow level
  • Experiments at the packet level
  • Alternatives to IP
    • Flow-table is Layer-2 based
    • e.g. new naming and addressing schemes

The Stanford Clean Slate Program http://cleanslate.stanford.edu

openflow consortium
OpenFlow Consortium

http://OpenFlowSwitch.org

Goal: Evangelize OpenFlow to vendors

Free membership for all researchers

Whitepaper, OpenFlow Switch Specification, Reference Designs

Licensing: Free for research and commercial use

The Stanford Clean Slate Program http://cleanslate.stanford.edu

openflow status
OpenFlow: Status

Commercial Ethernet switches and routers

  • Working with six vendors to add to existing products
  • Expect OpenFlow “Type 0” to be available in 2008-09

Reference switches

  • Software: Linux and OpenWRT (for access points)
  • Hardware: NetFPGA (line-rate 1GE; available soon)
  • Working on low-cost 48-port 1GE switch based on Broadcom reference design

Reference controller

  • Simple test controller
  • NOX controller (Martin Casado; available soon)

The Stanford Clean Slate Program http://cleanslate.stanford.edu

deployment at stanford
Deployment at Stanford

Stanford Computer Science Department

Gates Building

~1,000 network users

23 wiring closets

Stanford Center for Integrated Systems (EE)

Paul Allen Building

~200 network users

6 wiring closets

Working with HP Labs and Cisco on deployment

The Stanford Clean Slate Program http://cleanslate.stanford.edu

if you are interested in deploying openflow on your campus please contact me

If you are interested in deploying OpenFlow on your campus…Please contact me!

nickm@stanford.edu

http://OpenFlowSwitch.org