SDN Realized Application Directed Networking

http://opennetsummit.org/workshops/?utm_source=ONS&utm_medium=speakerdeck&utm_campaign=ONS2015

http://opennetsummit.org/conference/?utm_source=ONS&utm_medium=speakerdeck&utm_campaign=ONS2015

http://opennetsummit.org/webinars/?utm_source=ONS&utm_medium=speakerdeck&utm_campaign=ONS2015

http://archives.opennetsummit.org?utm_source=ONS&utm_medium=speakerdeck&utm_campaign=ONS2015

http://opennetsummit.org/conference/?utm_source=ONS&utm_medium=speakerdeck&utm_campaign=ONS2015

http://twitter.com/opennetsummit

© Copyright 2014 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice.

Sarwar Raza

Director, Advanced Technology

Group

SDN Realized Application Directed Networking

© Copyright 2013 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice. 2

Living the Dream….


The ‘S’ in my personal SDN Deployment..

SDN – Circa 1999…


SDN Over the Years

Orchestrators and Network Applications

D = DefinedDirected Application

SD

N A

rch

itec

ture

Distributed Systems Architecture Control

Wire Protocols Infrastructure


Today’s “Application Aware” Approach

Service Source

Inspect, Infer & Act


Gain Contextual Insight Via Back-End

Integration

Service Source

Directories,

etc


Encryption &

tunnelling subvert

‘application aware’

approaches


Service Source

Spiraling Complexity & Cost


Context


Leverage application

context via

programmable

software-defined

networks


The Application Directed Paradigm

Service Source


The Application Directed Paradigm

Service Source

Directories,

etc


Application Directed Infrastructure HP Network Optimizer for Lync


Francisco-Javier

Ramón Salguero Head of Network Virtualisation Labs

Telefónica GCTO Unit, Telefónica I+D

Chair of Performance and Portability Expert

Group, ETSI NFV ISG


Teaming Up on SDN-enabled

Security Services

SDN Applications for

Security


SDN to cover the Many A’s in Security

AUTHENTICATION: Knowing WHO gets involved

AUTHORIZATION: WHAT & HOW can be done

ACCOUNTING: Register HOW MUCH resource usage

ENHANCED (OR REGULAR) AAA

ANALYSIS: Identify threats & attacks

ACTION: Alleviate incident & Collect information for response

NON-UNIFORM TREATMENT


Virtual DPI Probe: Completing the A’s

Extensible runtime elements

Forensic analysis feasible

Higher reachability to network footprint

Line rate (>80 Gbps) with table signatures

Advanced

analysis

Fine-grained

enforcement

RAW USER

TRAFFIC

OF Controller

OF Switch

Deeper

REAL-TIME

ANALYSIS

Network

Big Data RELEVANT

INFO Metadata interface

RAW USER TRAFFIC MITIGATION

Copy

POLICY

DECISIONS

Security

Alarms OpenFlow

Other data

xDRs

CENTRALISED

INTELLIGENCE

NFV

domain

ANALISIS

ENFORCEMENT

SDN

domain


Initial pilot in part of Telefónica I+D Corporate network

Apply reputation databases using

HP Network Protect SDN

Application

Identify & block infections at

customer terminals

1st step on action: Malware Interception

HP VAN SDN Controller

(Network Protector)

TEF Network

Mobile

Customer

Landline

Customer

Reputation

Database

DNS Server

HP VAN SDN Controller

(Network Protector)

DNS Server


Going Forward: General Security Application

Model


Guessing vs. Knowing

Application ‘Aware’ Application Directed

?

Traffic classification

Identity inference

Context inference

Telemetry

Inferred network policy

Inferred action

Traffic

classification

Telemetry

Network policy

Coordinated action

Identity

Event context

Service request

? User App


Stop Guessing. Start Knowing.


Thank you

[email protected]

@razasarwar

www.hp.com/go/sdn

SDN Realized Application Directed Networking

Technology

Transcript of SDN Realized Application Directed Networking