DATA CENTERS 3 am ‘pata Center Definiton, Data Center Demands (Adding, Moving, Deleting Resources, Failure Recovery, Muitenancy ‘Traffic Engineering and Path Efficiency), Tunneling Technologies for the Data Center, SDN Use Cases in the Data Center, oN Solitons forthe Data Center Network — VLAN EVPN— VaLAN - NVGRE 3.1 Data Center Definition Aa data center is a physical facility where an organization stores critical applications and data. Data center design 5 tased on networks of computing and storage resources that enable the delivery of shared applications and data. Key components of data center design include routers, switches, firewalls, storage systems, servers, and application delivery controllers. 3.1.1 Definition of a Modern Data Center + Modem data centers are very different from just a few moments ago. Infrastructure has moved from traditional on~ premises physical servers to virtual networks supporting applications and workloads across pools of physical infrastructure and multi-cloud environments. Fig. 3.1.1: Modern Data Centers + Inthis-era, data exsts and is connected across multiple data centers, edges, public and private clouds. Data centers, ‘both on-premises and in the cloud, need to be able to communicate with these multiple locations. A public cloud is also a collection of data centers. When your application is hosted in the cloud, it uses the cloud provider's data center resources.A rasa greet oie oe ba nae ok Grove. Tn rove the. a anno cnc OE a 4113. do Dts Cortes Opera? «a er nn gay roe ort pfemance me eth ft re ta center ata cents. 32.14 Data Center Facility «acme components rie cic inasrcure to support the center hardware and software Th 0! power subse sniaruptie pov supplies (UPS), velton, coding ystems, fire suppress everson camecton enteral etn. ——to te quar 5%) +162 Ansptcs Workload Driving Computing Demands sn adtin to dts storage for1F pein dd nes prcesing AST 3a TH aa: ge ee Sta pei ct tol Se ceo Foe pe dn posing nae rts cron fies O08) generate byl, at 5 ae ema! daa pee Io nek oes mars O°) and nan on premises data cent (25% 3.63. Workloads and Providers spe nur oft wots so nes ware dane tore and processed Just under Pa (A mpuen sd ity corn tense mo Bi tbe proces coset the dt sous. Tomes remanent cet ari tga momentum alongside relatively neni MTOC 3.64 The Undecided Opportunity “+ Format tenant and micr-modul ata crter providers orarizatons tht have not yt decided onthe inasracture ae Uke votes for pital pries. They represent opportunities. «= equte fh ponders Sat when comes nara prt, pubc cloud prover: "> fot ce foro storage and proce, ma spt evenly across pubic oud Respondents (21%) sles? ‘mu of pub, phate and shared dita centr, Adeiionally, 28% chose ether a network operator (14%) °° Se 4 one“+ Tunneling i commont edn wal pra eon retora ow the use of unsported weal. ‘How does packet encopaation work? «ata sent rea nected nt packets A pK PHO rede spc te nsnatn ote pace nd te prota ud and 2 pond ta represen el conn ftp « nencapnaed packages emertiayapacage min another pctog. ean encapuate Packet. her cri papoat a te tt pact go toe pao vc of the ecotng packet. The onl pact bacomes he pons ‘ny i encapaation net? + Abpacies var newer ptosis (tanurdand ways of fomating dt to reach th destination. Homer careers suppor protocols Suppose a company wants to set up a WAN (Wide Area Network) conres:ig ofice Aad fice 8 + ne company ses the ‘encryption ky const of wo parts: errs (vn Ran a set up fet A SECTE Conn, rw protons and S0Me CHES ABOW USNS toy 1+ The proces of undoing encryption called decryption. the packet fully encrypted Including the hese: netw oveswl tbat forward the paca ots destination because they do not have the key a Caonet understand the header By wrapping an encxyped pacha isi another unencrypted packet, the pce! (an be ert namaly ovr he nto. VPN tunnel + ALVIN» see ncrypiad conacion ome pub shaved network Tunalng Is the process by which VFS packet rach ter anded destnaton vu 2 priate networ. + Many VPs use te Psec protocol ste. sacs» set of protocols that run at the network layer st above Petr at th sae tne The See Sal 0 prom! wt 7p comnts in Hbedito estabish secure tunnels. SSH operates atthe seventh lpe of he OS! mode te. oo ae IPP, nd GRE operate at eto ye 2 Network ic inside an Dc tut ly encrypted buts decrypt when traces the Network of device. Psa so has 2 made tat does ot aes tune ced “yanapor mode) omena - —— in the Enterprise archanecture in commu EvNKAN sana bse NN TT ge 0 th, OND BIN way Pon ato Ban EVN AN Oy oo 1 ran oe i na ar he “oy mach re ts nw {EVPN-VALAN and Juniper Hetworey 4 Bul on 8 VILAN ova with an EVP ‘tomate ta Certrs provides an ation sag ae n fr Engineered Campuses and Secire connect mute carpuies and ta 5. way. Wt robust ecrvev — — (PX Series Stee, x Seis Site = seroms budngs oF arent DUE Tang VPN technology ‘ames standard compen = roe sre te sane VIAN dings and aes. EVPN-VALAN ag, een es a EVRA ats 8) OO ged acon ee and Sees crus + We ore uniquely postioned to main ey Te sae AN e se 8 campuses and data centers OH Potent. Conn both wth ES eee ae putes oth within and between todays eohing cneriztins 0 Ive 38.1 EVPN-VXLAN Fags. network Group-based poles te corporate 0 oe chen telat of ACL ON IS Ty yar which ane UES oF vices cy ‘Wy Is EVPN-VXLAN becoming popular? fEVPN and VLAN wark together to ig. 38.2: Datacenter fabvicachitecture ‘Moser data centers ruting a ale yplcy wean IP fabric architecture with an EVPN-VXLAN covet. + Wid ars, actions etwort ayes can be colapsed into a two-tier spine-and-leaf architecture optimized lgescale envionment. This high inconnected Layer 3 network acs as an underlay that provides ish ‘esiene ad ou latency aos the network and can be ely xcaled out as needed, ‘+ BVPN VKLAN overiay sks on top of a IP fabric, 50 it extends and interconnects Layer 2 data center dom ‘allowing endpoints (such as servers and virtual machines) to be deployed anywhere on the network, incudi"d etre dita certers. Imulthoming mitigation oop a0 Whereis EVPN used ? sO be eeenenenen endo SEPM Fi anerd creeper ema ——— rigng (nee Edge Rote BEING RNY Fig. 33:EV0N mutton: n coliaped core or dation compu eae date Campus tac Cos LAN Configuration Network | Sey Insp proto act format ge Pa 331. Backers and Transport Proto 1 RVGRE pinay spared by Mic ng anda anspor otc 10M 3.9_What Is NVGRE? = VGRE is» network inuation mato that ses encapsulation and tunneling t deploy subnets with mary ‘wu Ns (ANS, Because ANE ca spa nt only Layer 2 (ata ink lye) and Layer 3 (network yer, ut “io dota data centers deoig sont wth VANS provides m-enancy 3rOss on-premises and coud ‘ervronments ado balancing eto hares. GRE ss to sche the problems aud by 2 nite number of VANS not werking in complex vituszes ‘erveonments and eterding neon segments tothe lng distances required for dstbuted datacenters NVGREsandats re roped by Microsc tel, HP and Dal This conics wth anther encapsiatin schere van 3:10 What Is VXLAN 7 1 VALAN, tname soggens a vital tw tcnology fr etendag VANS. was developed to sve tieBERERSERE ‘SDN Solutions for the Data Center Network 7 Write short note on following VLANs ~ VPN VsLAN- NVGRE?SDN PROGRAMMING Feanmvo, sot, Northbound Apples Promeming Itrace, Curent Languages and Tos, Composition of ne noncucon of Network Fundlons Vituaizalon (NEV) and Sofware Defined Networks: Concepts, Implementation | pc Applications 41 Northbound API 411 What is Northbound API ‘anorhbound interface isan application programming interface (APD or protocol that allows a lower-level network component to communicate with a higher-level or more central component, while -- conversely ~-a southbound interface allows a higher-level component to send commands to lower-level network components. Northbound and southbound interfaces are most associated with software-defined networking (SDN), but can also tbe used in any system that uses a hub-and-spoke or controller-and-nodes architecture. It is easy to confuse rorthbound/southbound interface with northbound/southbound data flow or traffic. ‘The interface defines the sender, receiver and data format; it expresses the conceptual level of communication and ‘covers the entire bidirectional API. Conversely, if data or traffic is said to be northbound, southbound or east-west, that merely describes whether it is going toward or away from the core. Therefore, we say that southbound ‘commands are sent from the kernel to the node over the northbound interface. The northbound interface of SDN is the communication between the SDN controllers in the top application layer and the central control layer. The application layer consists of network orchestration services, network designer software, operator software, or third-party applications that make decisions about the overall network design. In SDN, operators or orchestration software do not issue commands or configurations directly to network nodes. Instead, operators use the application layer to issue commands to the control layer through the northbound interface. A northbound interface is often a Representational State Transfer API or REST API exposed by an SDN ‘controller. 412 Types of Northbound API's Northbound API Types: - be Northbound APIs expose information produced by SDN controllers to applications. The Northbound API consists Bremner: Synchronous : A synchronous API is initiated by a client and information is presented through the server in ‘esponse to the APL Synchronous APIs fall into two categories : ®) GetvFeteh : These APIs get information about the network without affecting the state ofthe network.«Sycvoncus APs are impamented trough Represestatonl Sate Transfer REST APS using Standard Hp , POST and DELETE methods. REST proves a uriform interface between cent and server, allowing them ty Independent wihout sat warts, Ech tne information i ‘The cup fo this message type pays the fl uch as om statistics of porActions used by iat jer ten ST to nets ton fe fon emacs which 2 fw deed bad one lastdeecnd Number of packets taney the flow Priory ofthe fom. Protocol wey the fow or mame. TCP) Source aes ofthe fon “asl coteneUs sete of pt nd prs whch conan pa sb eure dip an destination dP/POM “aha 49th APL Query Premaeters ‘Outpt Parameter Definition Data 0 of shin the path ‘Te cuputforths mesge oe dst towing eat Title 4130: Po A Opt Parmeter output Parameter Definition Fow-groupin which the new flows are iste. Lito new Hows installed onthe contol Hey atthe new fw Seats of flow ntalition Te fow vst Aes he it» pop er resin OM Flan gan MSY on Dt AP ‘ow Sete As eT 705 ra es on e318 tp Anowpe rons Sas | Deletes a ows oid wih apc ow 30 | ow group | ate stowin te te | status Indicates ifthe weft ge fow-roup tae been deletes ‘ror Messages : The SON REST AP retuns an error massage when the folowing eo ocinare formation on Packt roe a Paes cea 2 te tr sac ager Petaling HOME we mies tener Event Type ‘Switch tate Change| «stare up —_| cevenrsuteny |e sy Por state change | © (eventpomn | +la AL a igen in contest we he conor cases met od oes. Tne ‘programmers write these application inthe rave language of the controle Pee hoy (controle) The ‘remote AP provides an abstraction layer between te two diferent environments. allows diferent technol, to exchange infomation wth each ether sing eter Extesble Matup Language OM OF vert. Ob "Notation (SON), Applicaton using his type of AP can be writen under ary GL and even un on diferent hg, Sts are uly decorative ‘+ 051s ensure high evel development tok by adding new abstraction to varous programming aspects such 4g ‘monitoring, ect, and wtuzatn abo makes ese fo optima the wef ReWOrE SOURS Some Ds re prblem-specf tok we ater fer more gene betractons ad an be uid to bul | trosde nen splations. 4.3.3 SDN Programming Languages Under TheLoupe ‘+ Here is an overview of the eight SON programming languages sts them in chronological order, describes their development and the rltonshipe bebween them Stat with the fist SON programming language, Flow. based Management Language FM), +The second branch is more commonly used and indudes ve languages (Feneic, NetCore, Frenetc-OCam), Pyretc and NetKAT). These language are cosy elated and evolved from eachother: 4.3.4 Flow-based Management Language Flow-Based Management Language (Put) isthe fist SON programming language. FML Is a language for spectying fom polices. FAL is based on nonecusie data revival with negation, where each statement represents «simple W-then réationhi, FAL can static allow or dey certain flows depending on the actual tase, Inthe example shown below, FAL wes a stat oly ollow flows om TCP port 43 and source IP 102.11 ‘low (low) Prot = 443.AHe ©1043 ‘Policies can ato be crested using eel sources. Maia values for jter, bandwith and delay can aso be Parameterized, but this ype of configuration i uncommon, 1+ Nettle i the second SON ce a a eta faces tnd wd civ param cmmuricatan pata. Ye tie-vaning vrion alos yout cee amc pact Wate egal evn, Te ee coat a Sea ee re | a cess bated 00 FRP, Js tke Neteany * ous protaty Pedeploymentsin ca 437 Frenetic rogramming languages st includes a Wary of fincas vies a dectratve, SQL quer lnguage ny, 1+ Frenetc has components 1t enables code reise and i SED ON pag ge we Nghe! pce an npg ee fat language:wtich presented formal semantics and pros of cece The org ete ure es ‘HTT strate (OstPort=11011011) (43nd returns tue he ea mar of ie bets set es rn 10m ofthe packet comes om apart seer (eaddr= 1002. ‘Moreps-Dstpor:110111011 ea ee ee ee_Aviuntnd network function NF sa large commerce sel (COT) sever, HCN, SAGE de, ven doud computing pl one ot more vital mune oF COHAN UNG Ya Of sofa yt processes mplemened in nsnactue iate vendor stead of ving custom areas apne foreach networ uncon. yx cba stamp posesino ad 06 cue YANO i ln = al «Spang he nt cin st fam he ctr te arm GoW 2 ale cree ta cs tec mou ranger. wp epee fe Sencha Senne ‘met pa et pg «te ny cota etre ein Tm SO hp Sv strates eet dod wt mero Nett cin non 0. sah inlet eet eo es ore «Ths mans msenerigeanmon eet omens ch payee = cor bcd sont nd mes Tt nae py Se pea oneal «tanta poor nd ute uence ht fe! nan pc ns ge cma hamant «Ter rd nc lg spt ee oe i Se ea t= ene sat etn ba ey te thn arta ning ly Oo al thane canbe ome oy pr + ppt goat so a ly teal ba Ds seater tia «Toon clan de sr 5 6 ee trom San ee a agen pts oP. Howes SDN nb ad {mary nr ps Wan engadget than SDN So NP tat trae pr 25 4A, tramewers That hve cond td a gr 1. radia Neer co 6 es peer nk acon at nb ley en {tart hte alsin uancos 2. ewok Funcions uation esc (Dh cn ohare nde congones cin * So while NEV is independent of SDN othe cncpt of SDN, NF a SDN wo. NEV infrastructure and creat amore damit eon Fee + oven pat a aig a ‘specially when consider management and Fs is deployed between Ton ota te Fh che Pe one "segs ‘disparate geographically located NFVinastatues NS — ee —=———“‘i_éaeée'?;neon pote wh nf sepring nto cn adda ne spy yer cd sere and new changes, meso ey apne + Ceraloed Margera Wh SOM he contol nts ety ' egeay cred peving conte vw t Secret sores te spon rw sal cn Ray eee ace {rom the fesbilty of SON. Her dynamic and stoma! So menage configure, secure and optimize network sete. M OR nes ret sina gy + insur ayer, control ayer and appcton ne lf wich a ontop ft tar nace er Consisting mainly of wanepon sles. 452 Data Plane "This evelincae al city ltd to and eu oma ita paket ety and vr1 Bull outing tbe 2. Setpactet processing POM ‘The control planes of sow data pare and contro plane, The itera + vctna eters cach such forming tables that determine where Incoming dt ack ctr sends new flow ery toe “+ Atypical SOM architecture consis of tre ayes 1 Applation ating a: bsvecion tothe sppzations witlen on ep of 2. nrastructre smovaren of dt pacts. ‘The ayers commanicte vi» st of intertoces cle the northbound APs (between application and ‘nd soutioound APs (between corto and inka aye 454 Implementation Ieper: ices common nator applatons sich as irtruson detection, Frewalsond eg tne SON controler which ats asthe bain of the network. It so allows hardware yer This cons of physical swches which forms the data plane and cases out acu contro ye) erent + Open SW is implanted wth Opow iT ro persion pO controller communicates with the switch through a hard:-bound API using the Opensow | a" 457 SDN via APIs * th SON over APL functions are invoked on remete des suchas suites ng astra meta sw SNMP and CLL or newer methods sch a: Rest APL Here deve are tangs with onl pista aim ‘Sntoles to manipulate remote devices ising APE, mses it easy to build orchestration stare * SOW over API doesnot requie Openow-eabl shes and works wal wth cy wes ON om 8 en'SON manages the traffic load over vaius paths erase of ined enn. 2 Find the best path for packet transfer betaeen to endpoints 6. SON to known for Useful fe electing trafic when theres sclaton, athetation. and inspection onthe pth, Hands posible network toplogy changes caused by dng new dest etn paths, ang new path