Solutions for OPNFV at the EDGE:OPTIMIZED customer edge processing

Sam FullerHead of Strategy and Solutions

NXP Semiconductors

AGENDA

üWho We Are & Our Key Message

üVirtualization (e.g. Network Functions Virtualization)

üVirtualized Acceleration

üVirtualized Edge Processors for Distributed NFV

A NEW POSITION OF STRENGTH(1)

✓ 50+ year history ✓ 17,300 employees✓ $4.59b in revenue

✓ 50+ year history ✓ 28,000 employees✓ $6.03b in revenue

>$9BINANNUALREVENUE

11,000+ENGINEERS

~45,000EMPLOYEES

9,000+PATENTFAMILIES

35+COUNTRIES

5th LargestSEMICONDUCTOR

COMPANYGLOBALLY

Note:1. Allfinancialfiguresare basedontrailingtwelve monthreported information

ACCELERATING TECHNOLOGY TRENDS DRIVE OPPORTUNITIES

Secure Connections for a Smarter World

Everything Connected

1B+ additional consumers online,

30B+ connected devices

Everything Smart

40B+ devices with intelligence shipped

in 2020,

Everything Secure

Potential savings to economy up to

half trillion dollars

Source: Euromonitor; Gartner; ARM Holdings; UBS; Center for Strategic and International Studies; McAfee, NXP analysis, International Telecommunications Union

ProcessingConnectivity Security

Our Key NFV Message

VirtualNetworkFunctionswillbedistributedthroughoutthenetwork1

2

3

Acommonecosystemwillbesharedthroughout

VirtualNetworkFunctionsInfrastructurewillbeoptimizedforplacement-specific needs

Scale-outperformancePerformanceEfficiency

Virtualization

Motivates a New Vision for the NetworkTransform the Network – inspired by cloud computing

Many diverse,customsystems

Fewer,homogenousCOTSsystems Standardize onfewerCOTScomponents

Virtualize services tosupportscaleoutsolutionsSimplifyservicesintorudimentaryelements

Migratecontrol andmanagement policytocentral location

Placevirtualworkloadstoreducecost,increasevalue

VM VM VM

Virtualize

Centralize

Clou

dify

SDNController

NFV Use-cases and Deployment Trends

Source:2015InfoneticsNFVSPSurvey

DeploymentSpreadAcrosstheNetworkNotjustData-Center,Platform-as-a-Service

Distributed NFV : Don’t Replace Networking With Computing; Blend them

• Systems in the field provide• I/O, Acceleration• Low latency

• The NFVI must be capable of geographic distribution• VNF hosting distributed throughout network• Capability, capacity, context determine where VNFs run

• Services can be chained across domains

RigidDataCenterCentralization IntelligentFlexibleCloud

NFV

ComputingNetworking

DataCenter

DistributedNFVplacesworkloadwhereitismostefficientandleverageslocalacceleration– yieldinggreaterperformance/W

NXPFocus

Virtualized Acceleration

Catalog

SD-WANvNF

Virtual Enterprise CPE (vE-CPE) Use Case

VirtualizedCPE

SMB/Enterprise

ServiceProvider

NFVOrchestration

WAN

1WAN

2

vAR w/localbreakout

vNF ForwardingGraph

Internet

HighbandwidththroughvirtualswitchtoprocessservicechainsandsecuretunnelingrequirementdrivesneedtooffloadvSwitch andIPSECprotocolprocessingfromcores

vPE

BGPtableupdates

Secure(IPSec)tunnel

Open Platform for NFV – Mapping to Hardware

• VirtualizedDatapath ProtocolOffloadsIPSec tunneling,Virtual forwarding(OvS),TrafficControl

• VirtualizedAccesstoAcceleratorsUsingvirtioInterfacesCrypto,Ipsec (protocoloffload),veth (logicalswitchports),etc.

NFVComputeNode

Open,Scalable,Performance/CostOptimizedSolutionSoftwareFullyCompatiblewithOpenStandardsUsingVirtualizedAcceleration

GeneralPurposeProcessors(ARMv8)

Software VirtualizationLayer(SDN)

Instance(VNF)

Instance(VNF)

Instance(VNF)

HardwareVirtualizationLayer

NetworkIO HighSpeedSerialIOI/OProcessing

VirtualForwarder(Open vSwitch Datapath)

VirtualForwarder(OVS)

StandardInstallationEnvironment

CoherentInterconnect

CPU MemoryHierarchy

Acceleration I/O

• DrivingstandardizationLinux,ODP,Virtio,DPDK

• DrivingrelevantopenstandardsbodiesETSINFV,OPNFV (DPACC),ONF,LNF

• StandardSWinstallationenvironment• UEFI,ONIE,ACPI,uboot

Platform-independentbinaryapplicationimages

StandardVirtualPlatformwithtransparent(virtualized)acceleration

Virtual Edge Processors

LS1012A• 1Gbps Crypto• 1-2W

LS1043A• 2-3lite-VNF• 10GigE• 5Gbps Crypto• 5-10W

LS2080A• 6-8heavy-VNF• 8x10GigE• 20Gbps Crypto• 20-35W

Home,SMB,Gateway Routers&

Access Points

VirtualizedEdge&CPENetworkingEquipment

CloudNFVInfrastructure

LS1046• 3-4lite-VNF• 2x10GigE• 10Gbps Crypto• 10-12W

Industry’smostscalableARM64communications processorline-up

LS2088A• 8- 10heavy-VNF• 8x10GigE• OVSOffload• 20Gbps Crypto• 30-45W

LS1088A• 6-8lite-VNF• 2x10GigE• OVSOffload• 10Gbps Crypto• 15-20W

LEADING THE 64-BIT ARM® WAVE IN NETWORKING

LS1023A• 10GigE• 5Gbps Crypto• 2-5W

LiteVNF– Under1GbpsthroughputHeavyVNF– Greaterthan1Gbps throughput

Virtualizable CPE with QorIQ LS1088A

OpenFlowAgent

QorIQ LS1088AOPNFVPlatform

vSwitch

OARouter vNF1

Veth-port

ODPODP

UserSpace

KernelSpace

KVMHypervisor

Veth-port

ü Supports fullycompliantOPNFVplatform

ü VNFsourcecompatibleusingDPDKAPI

ü 6-8LitevNFs withdedicatedcores

ü OVSOffloadfreesupGPPcore(s)ANDsignificantlyimprovesnetworkthroughput(>5Xvs.singleGPPcore)

ü IPSECHWAccelerationincreasesCPEcapacity

ü Significantcostsavings1GEth 1/10GEth

vNF2

Veth-port

ODP

Router Firewall

Veth-port

ODP/DPDKODP/DPDK

Veth-port

DPI

Veth-port

ODP/DPDK

OvSOffloadHardware

1GEth 1GEth 1/10GEth

PowerandCostOptimizedforUseatPremiseandNetworkEdge

IPSECOffloadHW

vCPE Smart Edge and Dynamic Service Chaining

eth0IPSEC

ServiceProviderEdge/CloudvCPE

Internet

ControllerNode->OpenstackController->OpenContrail->FloodlightController

vNFBringup:ControllerwillbootdefaultvNF’s onLS2085AandLS1043AusingOpenstack controller.ServiceChaining:ContrailtrafficpolicyistoforwardalltrafficthroughFirewallvNFofLS1043andLS2085toprovidesafeInternetaccesstoenterpriseclients

vRoutervRouter

vhost0

eth0 ni1

vhost0

wlan0

ServiceChaining:UsingOpenContrailusercanselectparticularvNF’s tobepartoftheTrafficPolicyonLS1043andLS2085eg:addingReputationService&GlobalThreatAnalysisinservicechainonLS2085andAppIDon

LS1043.

TrafficFlow:AfteraddingAppIDvNFonLS1043&ReputationService&GlobalThreatAnalysisvNFonLS2085ARDBusingContrailGUI

vNF

Firewall

vNF

Firewall

vNF

DHCP&QoS

vNF

IPSEC

vNF

AppID

vNF

GlobalThreat

vNF

Rep.Service

MAN

O

Trend Micro VNFs for NXP QorIQ NFV Platforms

TrendMicro

EMSandVN

FsTrendMicro

CloudServices

ActiveUpdate

ReputationServices

IDS/IPS

VNF1

App-ID URLFiltering

VNF3VNFN…

EMSWebUI

Customer

Systems

QorIQ ProcessorPlatform

OVS-DPDK

LogSystem OSS/BSS

VNFM

Database Orchestrator

VIMKVM

GlobalThreatIntelligence

Report/Management

System

IDS/IPS

VNF2

NXP QorIQ NFV Platform

• ARMv8:LS1043,LS1046,LS1048,LS1088,LS2080,LS2088StandardHardwarePlatforms

• CentOS,UEFI,Debian,UbuntuStandardLinuxDistro

• KVM,QEMU,Docker,CephStandardVirtualizationcomponents

• OP-NFV:OpenDayLight,OpenStack,OpenContrailStandardOrchestrationandManagement

• DPDK,ODP,OVS,VirtioStandardAPIandlibraries

• vFirewall,vNAT,vRouter,vVPNReferenceVirtualNetworkFunctions

• Benchmarks,User-guide,DocumentationOut-of-the-BoxExperience

SUMMARY

üNFV is a technology that will be deployed throughout the network including at the premise and the edge

üOptimized solutions (hardware and software) will be developed to support distributed NFV deployments

üAcceleration of cryptography and virtual switching enhance the value of NFV solutions

üNXP QorIQ processors provide optimized solutions for vCPE deployments at the customer premise and the network edge

NXP,theNXPlogoandQorIQaretrademarksofNXPB.V.Allotherproductorservicenamesarethepropertyoftheirrespectiveowners.ARMisaregisteredtrademarkofARMLimited(oritssubsidiaries)intheEUand/orelsewhere.Allrightsreserved.©2016NXPB.V.