CloudCom2010

Sustainable Network Resource Management Systemfor Virtual Private Clouds

Takahiro MiyamotoMichiaki Hayashi

Kosuke NishimuraKDDI R&D Laboratories Inc.

2010/12/2CloudCom20102

Cloud computing environmentInfrastructure as a Service (IaaS)

VMDBVMDB

Enterprise user A

Enterprise user B

Network

Virtual Private Cloud

…How about network?

On-demand provisioning ofservers (Virtual Machines)

and storages VMAppVMApp

VMAppVMApp

VMAppVMApp

VMAppVMApp

VMAppVMApp

VMAppVMApp

VMAppVMAppVM

WebVM

Web

VMWebVM

Web

VMWebVM

Web

2010/12/2CloudCom20103

Problem of general virtual private clouds

Virtual private cloud #1

virtual private cloud #2

Securityisolation

Physicalnetwork

Virtualnetworks

Wide area network Data center network

Affect to the other networks

Traffic congestion(e.g. TCP incast)

2010/12/2CloudCom20104

Approach

Performance isolation among virtual private cloudsObjective:

Assign different queues at network equipment

Handle various network equipment

Orchestrate with VM provisioning

2010/12/2CloudCom20105

Network resource management system (NRM) Manages bandwidth and topology of physical

network Allocates guaranteed bandwidth to each virtual

network

Physical network

Bandwidth-guaranteedvirtual network

VLAN Virtualrouter

Virtualrouter

Network resourcemanagement system (NRM)

Control

Time

Virtual NW#1

Virtual NW#2

Virtual NW#n

2010/12/2CloudCom20106

NRM (1) G-lambda project A joint project of NICT, AIST, NTT and KDDI R&D labs

To define and standardize the web service interface between network and applications

Computing resource manager

Resource Coordinatorrequest

NRMNRM

provisioningprovisioning

2010/12/2CloudCom20107

NRM (2) Dynamic Circuit Network A project of Internet2 Multiple domains can negotiate by using the Inter-

Domain Controller (IDC) protocol.

DC

IDC

DC

IDC

DC

IDC

IDC:Inter-Domain ControllerDC:Domain Controller

request

IDCprotocol

IDCprotocol

2010/12/2CloudCom20108

Problem to handle various network equipment

WAN data centeroffice

NRM forCPE

NRM forswitch A

NRM forswitch C

NRM forvirtual

switchesNRM forrouter

NRM forswitch B

Orchestration mechanism among NRMs

This model needs time and costs to develop new NRMs.

2010/12/2CloudCom20109

Problem to handle multipoint network NRMs can support only point-to-point provisioning Full-meshed path provisioning Bandwidth arrangement among paths

1Gbps

250Mbps?

250Mbps?

250Mbps?

250Mbps?

…too complicated to users

VMAppVMApp

VMAppVMApp

VMAppVMApp

VMAppVMApp

2010/12/2CloudCom201010

Proposed mechanisms

Performance isolation among virtual private cloudsObjective:

Assign different queue at network equipment

Handle various network equipment

Control network easily

Virtual network point

Changing mechanism of software modules

2010/12/2CloudCom201011

Problem of NRMs

NRMfor router1

NRMfor router2

NRMfor switch1

Conventional NRM

Control drivers are embedded.

Control drivers are developed independently.

Universal socketrouter1 router2 switch1

Sustainable NRMSustainable NRM

Driver server

2010/12/2CloudCom201012

CHAMELEON software architecture CHAnging MEchanism of software moduLE based on

the cONtext (CHAMELEON) Install control drivers

without any modification of NRMs under the operation of the NRM

Keep the control drivers as cache

Repository serverUniversal socket

router1 router2 switch1

Sustainable NRM

2. install

1. send deviceinformation

2010/12/2CloudCom201013

Processing time to install and control

control network equipmentinstall the control driver

0

1000

2000

3000

4000

5000

dow

nlo

ad

cac

he

em

bedd

ed

dow

nlo

ad

cac

he

em

bedd

ed

dow

nlo

ad

cac

he

em

bedd

ed

dow

nlo

ad

cac

he

em

bedd

ed

dow

nlo

ad

cac

he

em

bedd

ed

dow

nlo

ad

cac

he

em

bedd

ed

RPR MPLS core switch aggregation switch ToR switch virtual switch

[ms]

2010/12/2CloudCom201014

Proposed mechanisms

Performance isolation among virtual private cloudsObjective:

Assign different queue at network equipment

Handle various network equipment

Control network easily

Virtual network point

Changing mechanism of software modules

2010/12/2CloudCom201015

VMAppVMApp

VMAppVMApp

VMAppVMApp

VMAppVMApp

1Gbps

VMAppVMApp

VMAppVMApp

VMAppVMApp

VMAppVMApp1Gbps

Virtual network point

Virtual network point

data center

WAN

office

VMAppVMApp

VMAppVMApp

User view

Mapping to physical linksby NRM

VMAppVMApp

2010/12/2CloudCom201016

Tested network configuration

core switch

aggregation switch

ToR switch

virtual switchMPLS routerRPR

Wide area network Data center network

RPR: Resident Protection RingMPLS: Multiple Protocol Label SwitchingToR: Top of Rack

2010/12/2CloudCom201017

Mapping from virtual network point to physical links

Step1: Split logical links based on network domains

2010/12/2CloudCom201018

Mapping from virtual network point to physical links

Step1: Split logical links based on network domainsStep2: Aggregate logical links

2010/12/2CloudCom201019

Mapping from virtual network point to physical links

Step1: Split logical links based on network domainsStep2: Aggregate logical links

2010/12/2CloudCom201020

Conclusion Ideal virtual private clouds Security isolation Performance isolation

Sustainable network resource management system Handling various network equipment

Controlling network easily

Future works Demonstration of performance isolation Scalability evaluation of the proposed mechanisms

Virtual network point

Changing mechanism of software modules