NFV Orchestration of SLA Guarantee Services in

ONF Showcase Demo
Theme:
Data Center SDN
Title:
NFV Orchestration for SLA guarantee services
Luxoft Team:
 Adrian loan Istrate ([email protected])
 Ash Bhalgat ([email protected])
Partners:


Qosmos: David Le-Goff
Certes Networks: Adam Boone
www.luxoft.com
Cloud SP
Use Case Description
Tenant
Participants: Luxoft SuperCloud NFV Orchestrator, Luxoft Firewall,
Certes vCEP VPN engine, Qosmos SAM DPI engine

Qosmos SAM DPI on-switch service provides network intelligence
NFV Orchestrator
that there is existing recreational video traffic (you tube) in the
network that's consuming high bandwidth

VNF Control SDKAPI
Tenant request comes to Luxoft SuperCloud Orchestrator for SLA
guarantee VPN traffic between 2 remotes sites H1 & H3

TNM
vCEP
SuperCloud’s BWoD feature does nail up network connectivity
vCEP
FW
VPN
automatically between sites. It also throttles bandwidth for
recreational traffic to honor tenant SLA
H1

H3
Certes Network’s VPN VNF service encrypts traffic only for tenant's
subscribed network path as directed by SuperCloud

GW
Youtube,
Video
Firewall VNF service that's chained after VPN, allows this traffic to
pass through at both sites

Firewall allows remote site (H3) traffic access only through VPN
www.luxoft.com
DPI
H2
Demonstration Goals
 SuperCloud’s ability to orchestrate NFV services as per ETSI NFV standard architecture
•
VNF On-boarding
•
VNF lifecycle management
 SuperCloud’s ability to orchestrate service chains for tenant paid service path
 SuperCloud’s BWoD capability to intelligently allocate bandwidth to honor SLAs
 SuperCloud integration with Qosmos DPI service to classify traffic based on application ID
 SuperCloud’s ability to provide secure connectivity for corporate traffic in cloud-like
environment via integration with Certes vCEP VPN VNF service
•
www.luxoft.com
L2-based encryption of the traffic between H1 and H3
Cloud SP
Use Case Demo Steps

Tenant
SuperCloud Roles and Responsibilities:
-
ADMIN: Infrastructure Provider– owns/manages switches, SDN
Controller, VDUs
-
PROVIDER: Service Provider – owns/manages hosts, network services
-
USER: Tenant or End user – uses hosts to connect

Admin starts topology (switches, hosts, and SDN controller)

Admin(/Provider) performs DPI & vCEP image onboardin

From the web interface, Provider defines the service graph
consisting of VNFs (DPI, vCEP1 and vCEP2) and Endpoints (H1,
NFV Orchestrator
TNM
vCEP
vCEP
FW
VPN
H1
Youtube/Video Traffic
Secure Traffic
Regular Traffic
VNF Control SDKAPI
H3
H2, H3, GW-Internet/YouTube/Video) if that does not exist.

From the web interface, Provider instantiates the service based on
GW
Youtube,
Video
template

User initiates various traffic flows to available destinations (H1
H3, H1 YouTube, H1 Internet)
www.luxoft.com
DPI
H2
References
 Luxoft SuperCloud NFV Orchestration Platform:
http://supercloud.luxoft.com
 Qosmos SAM DPI: http://www.qosmos.com/products/dpi-modulefor-vswitch/
 Certes Networks Cryptoflow
VPN:http://certesnetworks.com/solutions/cryptoflows/
www.luxoft.com
THANK YOU
www.luxoft.com