Juniper SDN NFV战略和解决方案

1、SDN / NFV 战略和解决方案 SDN / NFV 目标和展望 问题网络由专有设备构造；提供新业务意味着更多的设备，更多的电力要求，更多的空间需求 能源费用的增长，费用的上升和稀奇的技能，导致了更多的投资要求 硬件设备生命周期的缩短，导致了频繁的设计-集成-部署周期中没有或鲜有利润回报SDN / NFV 的目标降低投资和运维费用简化操作流程 降低能源消耗 缩短新业务推向市场的时间 服务快捷 更快速的业务开通 (更快速的收益变现)帮助网络按需扩展 SDN 战略Juniper SDN 战略网络优化广域网NorthStar虚拟化/服务数据中心/内容提供商ContrailJuniper SDN/N

2、FV 解决方案的构成物理网络虚拟层虚拟化的基础设施管理 & 控制网络服务编排CPE (L2, L3, UCPE)(v)MXContrail Cloud RAVNF*VRFvSRXVNFVNFContrail Controller3rd Party EMSSD/ND/CSDContrail Service OrchestrationvRReference architecture to speed up mini-DC/ NG POP deployments Eth. NID PartnersuCPE OptionOn boarded vCPE or Stitching to VM based

3、vCPEService ChainvSRX as vCPE context and/or Security services3rd Party VNFsvSRX on uCPELocal services VMService chaining control (MX&VM)Openstack integrationamdocsvRNorthStar ControllerAmdocsOSS/BSSReportsPortal业务逻辑编排Junos SpaceJuniper SDN / NFV 解决方案基于标准的有状态广域网SDN控制器北极星广域网SDN控制器 北极星优势节省运维费用节省建设费用 新

4、业务收益的机会Bin Packing or Network Defragmentation优先流量调度Bandwidth Calendaring维护模式路径多样化(Link, Node, SRLG)跨域路由全局并行优化 北极星应用SOFTWARE-DRIVEN POLICYTopology DiscoveryPath ComputationPath InstallationPCEP - LSP discoveryIGP-TE, BGP-LS - TED discoveryJVision Streaming AnalyticsPCEP Control/Create traffic enginee

5、red LSPANALYZEOPTIMIZEVIRTUALIZERoutingNetconf/YANGPCEPJuniper Intelligence3rd PartyAlgorithmsNETCONF/YANGMX/PTX/TPTXGUIREST APIPCE演化方式 : 基于国际标准 PCE: Path Computation Element可以计算网络中路径的实例。可以是网络节点、服务器、或应用. PCE: Path Computation Element计算路径 PCC: Path Computation Client 在网络中接收并实施接收到的路径。路径信令仍为RSVP-TE PCE

6、P: PCE protocolPCE/PCC 间的通讯协议 部件内容PCEPCEPPCCPCCPCCNFV 管理 & 编排开放SDN解决方案，应用于云和NFV以在安全、可用性、性能、自动化和扩展性方面提升业务的敏捷性 .功能虚拟化网络服务 多编排器支持 (OpenStack & CloudStack)对服务整体从建立到交付的生命周期编排提供一个开放的架构 功能参考架构PODs集成管理工具 +Contrail Cloud Platform与Contrail Networking结合，通过Juniper的OpenStack发行版提供云编排器和自动化平台的交钥匙解决方案 功能服务器管理分布和Scal

7、e-Out 存储计算资源编排+ + Contrail NetworkingContrail NetworkingContrail Cloud PlatformContrail Service OrchestrationContrail 是基于开放技术的领先云网络和服务编排器解决方案。Contrail 可以同时满足企业的数据中心虚拟化和运营商对新业务开通流程优化的需求。Junipers Contrail 概述NFV 管理 & 编排Junipers Contrail 架构网络功能虚拟化基础设施 Virtual Network, Hardware & Integration with Virtual

8、ization Layer Virtualisation LayerVirtualComputingNFVIVirtualStorageVirtualNetworkComputingHardwareStorageHardwareNetworkHardwareVi-HaContrailvRouterQFX, MXOpenStack, KVMVirtual StorageVirtual ComputingContrail vRouter: Contrail vRouter是一个转发平面 (分布式路由器) ，它运行在虚拟化服务器的hypervisor层面 .它将网络从数据中心内物理的路由器和交换机扩

9、展到了驻留与虚拟化服务器虚拟Overlay网络 Production OnlyOverall (from 21 options)OpenStack Survey: NetworkingJUNIPER IS THE TOP VENDORContrail 基于通用的overlay网络VMHypervisor with vRouter ServerTenant VRFEncapsulation TunnelXMPP (BGP)DatacenterRoute ReflectorBGPProvider NetworkL3 VPNs for Inter-Site ConnectivityTraffic s

10、egmentation in the WANMPLS over MPLS label encapsulation tunnelsBGP route signalingContrail Virtual Networks in DatacentersTraffic segmentation in the LANMPLS over GRE or VXLAN label encapsulation tunnels XMPP (with BGP payload) route signalingProtocols, ArchitectureCustomer SiteCE Router PE RouterC

11、ustomer VRFEncapsulation TunnelOpenStack Cloud ManagerContrail Controller使用Contrail Service Orchestration 的服务链 (Cloud CPE) Contrail leaks routes between left and right networksVNF1VNF2Left VRF Template_V_L_L3Right VRF Template_V_R_L3Left VR ContrailRight VR ContrailContrail vrouterMX/PE SDN GatewayC

12、ontrail Cloud Platform APPLICATION APIVNF ManagerPNF ManagerVIM DirectorHeatEngineNovaNeutronAnalyticsContrail Service Orchestration自动化网络服务链网络服务构造界面 混合服务链 (PNF+VNF)动态业务添加 服务链策略管理 Contrail Service OrchestrationAccessContrail ControllerDC/POP使用Contrail Service Orchestration 的服务链 (NFX) VNF1VNF2PE (SP E

13、dge)NFX Platform APPLICATION APIVNF ManagerPNF ManagerVIM DirectorContrail Service OrchestrationDedicatedAccess CircuitPOP/COJDMIPSec OTT AccessCustomer PremiseNetconfNetconfVPNLANWAN网络服务构造界面 自动化服务链建立 本地VNF 资源管理服务链策略管理 Contrail Service Orchestration使用Contrail Service Orchestration 的服务链(Cloud CPE) AP

14、PLICATION APIVNF ManagerPNF ManagerContrail Service OrchestrationVNF1VNF2SP/Campus EdgeEnterprise Branch SiteVIM DirectorDedicated Access CircuitCO/POPJDMOTT NetconfLANWANVNF1VNF2Ingress VRF Template_V_L_L3Egress VRF Template_V_R_L3Ingress VR ContrailEgress VR ContrailContrail vrouterContrail Cloud

15、PlatformDC/POPPrivate WAN InfrastructureInternet HeatEngineNovaNeutronAnalyticsContrail ControllerCustomer Self Care PortalAdministration PortalXMPPMX/PE SDN GatewaySDN/NFV 参考架构Contrail Service Orchestration & Contrail ControllerCompute PoolStorage PoolNetwork PoolContrail 云参考架构为建立一个交钥匙的云解决方案提供设计和其他

16、方面细节的帮助。设计使用开放和标准的硬件及软件部件（包括OpenStack和Contrail），以避免厂商锁定 Standard COTS X86 Hardware (pre-validated), runs as Compute, Storage, & Mgmt nodesNetworking hardware: Gatwy router(v)MX, 3rd partyToRs QFX, 3rd partyOOB Switch - EX, Software Compute, Storage, Network Orchestration, Server mgmt. monitoring, AP

17、Is, Networking services NFV-O / Cloud MgmtDocumentation: Reference Architecture / Design Docs, etc.Documentation for network servicesSupport & Svcs: PS (optional) to integrate all the componentsOngoing maintenance & SupportJuniper PS / JTAC VAR PartnersApplication Pool清晰的控制和转发平面分离 虚拟化的Trio 转发引擎与 MX

18、功能和软件版本保持一致 管理维护于物理MX一致 NFV Multiple PersonalitiesvBNGvCPEvRRvPEvBNG/vSCGvLNSvDC/vPC GatewayPhysical NICsManagement trafficHypervisor: KVMCoresMemoryBridge / vSwitchPhysical layerVirtual TRIO + Intel DPDK CHASSISDRPDDCDVirtual Forwarding Plane (VFP)Virtual Control Plane (VCP)PCI Pass through SR-IOVV

19、irtIOVirtual NICs虚拟化网络功能(VNFs)Junipers vMX MX平台的虚拟化版本Junos Routing Protocols and SDKJunos Rich and Extensible Security StackFirewallVPNNATRoutingAnti-VirusWeb FilteringContent FilteringAnti-SpamAppTrackAppFWAppQoSIPSJunos Space Security Director & Virtual Director, CLI, JWEB, SNMP, HA/FTPERIMETER SE

20、CURITYCONTENT SECURITYAPPLICATION SECURITY完整的状态防火墙SRX 的虚拟化版本，对虚拟化、私有和混合环境提供防火墙保护 , 支持 active/active 和 active/passive 等多种HA模式, 多平台支持; VMware, KVM 和 Contrail 以及集成的自动化管理功能 丰富的路由和网络功能 基于成熟的Junos 软件底层，在灵活的虚拟环境下提供VPN链接和路由功能 先进的安全服务 集成UTM，包括 IPS, Full Anti-virus, Anti-spam, Web-filtering, Content- filterin

21、g 和 AppSecure 2.0虚拟化网络功能(VNFs)Junipers vSRX SRX平台的虚拟化版本我们的解决方案允许用户:为何选择Juniper SDN / NFV ?多维度的网络性能扩展，通过先进的硬件和SDN技术获得效率的大幅提升 使用Junos, SDN 和 NFV自动化网络运维，加快新应用和服务推向市场的速度，并降低成本。 使用业界灵活、开放、多维度的SDN/NFV解决方案，快速创建和定制高收益的服务项目 自动化创建扩展业界支持, 成功案例和创新一线运营商接纳Juniper NFVJuniper Named Domain 2.0 Supplier for Next Gene

22、ration NFV/SDN Network Tim Harden, President, AT&T Supply ChainJuniper Named as a Key Technology Partner for SDN StrategyRoger Gurnani, CIO, VerizonNFV based offer for SMB via EasyConnect solutionElastic Service Infrastructure to enable cloud-ready enterprisesCOLT vCPE Success StoryVirtualized CPE S

23、ervice for Enterprise Customers 69% Faster time to market 41% Lower TCO Service agility with NFV Lower risk of introducing new services New commercial models: Pay-as-you-go, CAPEX to OPEX transformationColt has partnered with Juniper to deliver an industry game-changer, vCPE:/us/en/company/case-stud

24、ies/service-provider/colt/Orange Business Services vCPE + CSB Success StoryEasy Connect with VPN Connection to Cloud Service ProvidersIPVPN delivered with Self Service PortalsIn Market Trials NOW!Service agility with NFVIncrease value of VPN Connection thru interconnection with Cloud SPOBS Light Reading Article: /nfv/orange-unveils-nfv-based-offering-for-smbs/d/d-id/714503MPLS/SDN WC OBS Talk: /watch?v=c3C-HlwCYyQ业界创新与JuniperInitiative focused on implementa