论文标题

SD-Access:设计和部署软件定义的企业网络方面的实用经验

SD-Access: Practical Experiences in Designing and Deploying Software Defined Enterprise Networks

论文作者

Paillisse, Jordi, Portoles, Marc, Lopez, Albert, Rodriguez-Natal, Alberto, Iacobacci, David, Leong, Johnson, Moreno, Victor, Cabellos, Albert, Maino, Fabio, Hooda, Sanjay

论文摘要

多年来,企业网络已变得越来越复杂,试图跟上挑战传统解决方案的新要求。只需提及许多可能的示例中的一个,例如虚拟LAN(VLAN)等技术来解决物联网(IoT)用例引入的可扩展性和操作要求。为了满足这些挑战,我们已经确定了在现代企业网络中常见的四个主要要求:(i)可扩展的移动性,(ii)端点细分,(iii)简化管理和(iv)资源优化。为了解决这些挑战,我们设计了SDA(软件定义的访问),这是一种利用软件定义网络(SDN)和其他最先进技术的现代企业网络的解决方案。在本文中,我们介绍了SDA的设计,实施和评估。具体而言,SDA:(i)利用覆盖方法与事件驱动协议(LISP)的组合,以动态适应流量和移动性模式,同时保留资源,以及(ii)为可扩展的细分施加动态端点组,并具有低操作负担。我们介绍了在两个现实生活中部署SDA的经验:一个企业校园,以及带有移动机器人的大型仓库。我们的评估表明,与传统的企业网络相比,SDA可以(i)通过使用集中式路由服务器的反应协议,将总体数据平面转发状态最高70%,并且(ii)减少了与其他方法相对于其他方法的大规模移动性方案中的移交延迟。最后,我们讨论在部署和操作SDA时学到的经验教训,以及有关使用事件驱动协议和基于组的细分的可能优化。

Enterprise Networks, over the years, have become more and more complex trying to keep up with new requirements that challenge traditional solutions. Just to mention one out of many possible examples, technologies such as Virtual LANs (VLANs) struggle to address the scalability and operational requirements introduced by Internet of Things (IoT) use cases. To keep up with these challenges we have identified four main requirements that are common across modern enterprise networks: (i) scalable mobility, (ii) endpoint segmentation, (iii) simplified administration, and (iv) resource optimization. To address these challenges we designed SDA (Software Defined Access), a solution for modern enterprise networks that leverages Software-Defined Networking (SDN) and other state of the art techniques. In this paper we present the design, implementation and evaluation of SDA. Specifically, SDA: (i) leverages a combination of an overlay approach with an event-driven protocol (LISP) to dynamically adapt to traffic and mobility patterns while preserving resources, and (ii) enforces dynamic endpoint groups for scalable segmentation with low operational burden. We present our experience with deploying SDA in two real-life scenarios: an enterprise campus, and a large warehouse with mobile robots. Our evaluation shows that SDA, when compared with traditional enterprise networks, can (i) reduce overall data plane forwarding state up to 70% thanks to a reactive protocol using a centralized routing server, and (ii) reduce by an order of magnitude the handover delays in scenarios of massive mobility with respect to other approaches. Finally, we discuss lessons learned while deploying and operating SDA, and possible optimizations regarding the use of an event-driven protocol and group-based segmentation.

扫码加入交流群

加入微信交流群

微信交流群二维码

扫码加入学术交流群,获取更多资源