Welcome!

Security Authors: Jim Kaskade, Nikita Ivanov, Gilad Parann-Nissany, Pat Romanski, Elizabeth White

Related Topics: SDN Journal, Java, SOA & WOA, Virtualization, Cloud Expo, Security

SDN Journal: Blog Feed Post

SDN, Network Packaging, and Separation of Control and Forwarding

SDN needs to be about moving from knob-based behavior specification to something that is more automatable

It’s not clear to me whether there is really a conclusion to a technology trend. I suppose that one trend begets another and that morphs into another. So in some sense, discussing the SDN end game is really foolish. It seems most likely that we all stop talking about SDN in another year, maybe two, and the conversation returns to networking. Or data centers, or the WAN, or whatever. And then eventually we talk about IT infrastructure, because it will ultimately become so integrated that calling out isolated elements will seem old-fashioned.

That said, let’s talk about the SDN end game a little…

For many, SDN is about separating the control and forwarding planes. I’ll just point out that these planes have been separate for years in most modern networking equipment. That they might no longer be distributed within the same sheet metal is interesting but not really that game changing. I don’t mean to suggest that there is not value in changing the packaging (a la what Cumulus is doing), but there is nothing inherently good or bad about packaging. The Cumulus value proposition (as it relates to physical equipment costs) is that they will charge less for the software than the big guys have been so far. [Lest this be perceived as a slight, I believe this to be a valuable thing to do. I like what these guys are doing, and how they are doing it is very crafty.]

The big players already skew their R&D costs towards software. That they capture dollars via the hardware simply reflects the buying culture. Imagine that all the major equipment vendors dropped their hardware prices are started charging more for software (which is typically free or discounted to zero in a normal purchase). The difference between Cumulus and the rest would be that Cumulus is charging less for the software.

Part of this is because there is less software there. If we are honest, part of Cisco’s pricing premiums are tied to the 47 thousand features that come with an IOS (or IOS-XE, or CatOS, or whatever) device. So long as those features are important to you, you have to pay the premium because there is only one vendor in the world who has them. Again, this doesn’t make Cisco inherently good or evil – it just means they have priced their product according to demand.

What is really happening with SDN (and with Cumulus in particular) is that people are contemplating for the first time in a very long time new architectures. Those new architectures are somewhat less dependent on the history of networking features. To a large extent, the industry is going on a feature diet. The result is that there are now more commercial options because the foundational feature set is both smaller and different.

If the feature set is smaller, the premium that people are willing to pay is lower. And for companies building from scratch, the effort (read: development cost) is lower. They can charge less and still be whole. When you add in more mature open source options for what have typically been the networking staples (routing protocols, for instance), the barrier to entry for new networking solutions has never been lower.

Oddly enough, the biggest thing standing between customers and lower prices in this case is the customers themselves. Those that are willing to adopt a new Ground Zero for feature completeness will essentially create more choice and flexibility for themselves. They can use that, in part, to get better pricing advantages.

Note that none of this has anything to do with whether the control plane runs on an x86 inside the sheet metal or outside. That’s just a distraction.

So if SDN isn’t about the packaging, what is it about? There are a hundred thousand definitions, but the real pain point being addressed is work flow. The reason the network is so difficult to manage is because it relies on pinpoint precision on a box-by-box basis. Fine-grained control over the policy that drives network behavior is extremely powerful, but that power comes at a cost.

For most people, the choice between power and ease of use was never really a conscious one. We were collectively sold on a set of reference architectures and best practices. In the early days, this was exactly what everyone needed. The problem is that inertia is ridiculously strong, and once the decision to manage through pinpoint, manual control was made, it was never really revisited. Customers demanded more precision (read: configuration knobs or protocol extensions), and this shaped the way the entire industry evolved. The price of admission into any network was a set of features. Only a few companies could provide these, and so the options remained few and the prices stayed high.

How do you combat this dynamic?

SDN needs to be about moving from knob-based behavior specification to something that is more automatable. The only way to be more automation-friendly is to be less device-specific, and that begs for abstraction. Once you abstract out the devices, the edge policy isn’t as tied to the underlying hardware. This means we can more easily separate the control and forwarding planes. Oddly enough, this means that the initial desire for SDN to be about separation is actually somewhat correct.

The problem with starting at that point, though, is that people miss a whole lot of the in-between stuff, and it’s those icky details that will ultimately determine success or failure for people pursuing a new way of doing things.

[Today's fun fact: When Albert Einstein died, his final words died with him. The nurse at his side didn't understand German. <Insert Der Wienerschnitzel joke here>]

The post SDN, network packaging, and separation of control and forwarding appeared first on Plexxi.

Read the original blog entry...

More Stories By Michael Bushong

The best marketing efforts leverage deep technology understanding with a highly-approachable means of communicating. Plexxi's Vice President of Marketing Michael Bushong has acquired these skills having spent 12 years at Juniper Networks where he led product management, product strategy and product marketing organizations for Juniper's flagship operating system, Junos. Michael spent the last several years at Juniper leading their SDN efforts across both service provider and enterprise markets. Prior to Juniper, Michael spent time at database supplier Sybase, and ASIC design tool companies Synopsis and Magma Design Automation. Michael's undergraduate work at the University of California Berkeley in advanced fluid mechanics and heat transfer lend new meaning to the marketing phrase "This isn't rocket science."

@ThingsExpo Stories
"Matrix is an ambitious open standard and implementation that's set up to break down the fragmentation problems that exist in IP messaging and VoIP communication," explained John Woolf, Technical Evangelist at Matrix, in this SYS-CON.tv interview at @ThingsExpo, held Nov 4–6, 2014, at the Santa Clara Convention Center in Santa Clara, CA.
The 3rd International @ThingsExpo, co-located with the 16th International Cloud Expo – to be held June 9-11, 2015, at the Javits Center in New York City, NY – is now accepting Hackathon proposals. Hackathon sponsorship benefits include general brand exposure and increasing engagement with the developer ecosystem. At Cloud Expo 2014 Silicon Valley, IBM held the Bluemix Developer Playground on November 5 and ElasticBox held the DevOps Hackathon on November 6. Both events took place on the expo floor. The Bluemix Developer Playground, for developers of all levels, highlighted the ease of use of...
We are reaching the end of the beginning with WebRTC, and real systems using this technology have begun to appear. One challenge that faces every WebRTC deployment (in some form or another) is identity management. For example, if you have an existing service – possibly built on a variety of different PaaS/SaaS offerings – and you want to add real-time communications you are faced with a challenge relating to user management, authentication, authorization, and validation. Service providers will want to use their existing identities, but these will have credentials already that are (hopefully) i...
There's Big Data, then there's really Big Data from the Internet of Things. IoT is evolving to include many data possibilities like new types of event, log and network data. The volumes are enormous, generating tens of billions of logs per day, which raise data challenges. Early IoT deployments are relying heavily on both the cloud and managed service providers to navigate these challenges. In her session at Big Data Expo®, Hannah Smalltree, Director at Treasure Data, discussed how IoT, Big Data and deployments are processing massive data volumes from wearables, utilities and other machines...
The Internet of Things is tied together with a thin strand that is known as time. Coincidentally, at the core of nearly all data analytics is a timestamp. When working with time series data there are a few core principles that everyone should consider, especially across datasets where time is the common boundary. In his session at Internet of @ThingsExpo, Jim Scott, Director of Enterprise Strategy & Architecture at MapR Technologies, discussed single-value, geo-spatial, and log time series data. By focusing on enterprise applications and the data center, he will use OpenTSDB as an example t...
The Internet of Things promises to transform businesses (and lives), but navigating the business and technical path to success can be difficult to understand. In his session at @ThingsExpo, Sean Lorenz, Technical Product Manager for Xively at LogMeIn, demonstrated how to approach creating broadly successful connected customer solutions using real world business transformation studies including New England BioLabs and more.
The security devil is always in the details of the attack: the ones you've endured, the ones you prepare yourself to fend off, and the ones that, you fear, will catch you completely unaware and defenseless. The Internet of Things (IoT) is nothing if not an endless proliferation of details. It's the vision of a world in which continuous Internet connectivity and addressability is embedded into a growing range of human artifacts, into the natural world, and even into our smartphones, appliances, and physical persons. In the IoT vision, every new "thing" - sensor, actuator, data source, data con...
The Internet of Things will put IT to its ultimate test by creating infinite new opportunities to digitize products and services, generate and analyze new data to improve customer satisfaction, and discover new ways to gain a competitive advantage across nearly every industry. In order to help corporate business units to capitalize on the rapidly evolving IoT opportunities, IT must stand up to a new set of challenges. In his session at @ThingsExpo, Jeff Kaplan, Managing Director of THINKstrategies, will examine why IT must finally fulfill its role in support of its SBUs or face a new round of...
DevOps Summit 2015 New York, co-located with the 16th International Cloud Expo - to be held June 9-11, 2015, at the Javits Center in New York City, NY - announces that it is now accepting Keynote Proposals. The widespread success of cloud computing is driving the DevOps revolution in enterprise IT. Now as never before, development teams must communicate and collaborate in a dynamic, 24/7/365 environment. There is no time to wait for long development cycles that produce software that is obsolete at launch. DevOps may be disruptive, but it is essential.
WebRTC defines no default signaling protocol, causing fragmentation between WebRTC silos. SIP and XMPP provide possibilities, but come with considerable complexity and are not designed for use in a web environment. In his session at @ThingsExpo, Matthew Hodgson, technical co-founder of the Matrix.org, discussed how Matrix is a new non-profit Open Source Project that defines both a new HTTP-based standard for VoIP & IM signaling and provides reference implementations.
The 3rd International Internet of @ThingsExpo, co-located with the 16th International Cloud Expo - to be held June 9-11, 2015, at the Javits Center in New York City, NY - announces that its Call for Papers is now open. The Internet of Things (IoT) is the biggest idea since the creation of the Worldwide Web more than 20 years ago.
The definition of IoT is not new, in fact it’s been around for over a decade. What has changed is the public's awareness that the technology we use on a daily basis has caught up on the vision of an always on, always connected world. If you look into the details of what comprises the IoT, you’ll see that it includes everything from cloud computing, Big Data analytics, “Things,” Web communication, applications, network, storage, etc. It is essentially including everything connected online from hardware to software, or as we like to say, it’s an Internet of many different things. The difference ...
"There is a natural synchronization between the business models, the IoT is there to support ,” explained Brendan O'Brien, Co-founder and Chief Architect of Aria Systems, in this SYS-CON.tv interview at the 15th International Cloud Expo®, held Nov 4–6, 2014, at the Santa Clara Convention Center in Santa Clara, CA.
Connected devices and the Internet of Things are getting significant momentum in 2014. In his session at Internet of @ThingsExpo, Jim Hunter, Chief Scientist & Technology Evangelist at Greenwave Systems, examined three key elements that together will drive mass adoption of the IoT before the end of 2015. The first element is the recent advent of robust open source protocols (like AllJoyn and WebRTC) that facilitate M2M communication. The second is broad availability of flexible, cost-effective storage designed to handle the massive surge in back-end data in a world where timely analytics is e...
How do APIs and IoT relate? The answer is not as simple as merely adding an API on top of a dumb device, but rather about understanding the architectural patterns for implementing an IoT fabric. There are typically two or three trends: Exposing the device to a management framework Exposing that management framework to a business centric logic Exposing that business layer and data to end users. This last trend is the IoT stack, which involves a new shift in the separation of what stuff happens, where data lives and where the interface lies. For instance, it's a mix of architectural styles ...
Scott Jenson leads a project called The Physical Web within the Chrome team at Google. Project members are working to take the scalability and openness of the web and use it to talk to the exponentially exploding range of smart devices. Nearly every company today working on the IoT comes up with the same basic solution: use my server and you'll be fine. But if we really believe there will be trillions of these devices, that just can't scale. We need a system that is open a scalable and by using the URL as a basic building block, we open this up and get the same resilience that the web enjoys.
An entirely new security model is needed for the Internet of Things, or is it? Can we save some old and tested controls for this new and different environment? In his session at @ThingsExpo, New York's at the Javits Center, Davi Ottenheimer, EMC Senior Director of Trust, reviewed hands-on lessons with IoT devices and reveal a new risk balance you might not expect. Davi Ottenheimer, EMC Senior Director of Trust, has more than nineteen years' experience managing global security operations and assessments, including a decade of leading incident response and digital forensics. He is co-author of t...
SYS-CON Events announced today that Gridstore™, the leader in hyper-converged infrastructure purpose-built to optimize Microsoft workloads, will exhibit at SYS-CON's 16th International Cloud Expo®, which will take place on June 9-11, 2015, at the Javits Center in New York City, NY. Gridstore™ is the leader in hyper-converged infrastructure purpose-built for Microsoft workloads and designed to accelerate applications in virtualized environments. Gridstore’s hyper-converged infrastructure is the industry’s first all flash version of HyperConverged Appliances that include both compute and storag...
The 3rd International Internet of @ThingsExpo, co-located with the 16th International Cloud Expo - to be held June 9-11, 2015, at the Javits Center in New York City, NY - announces that its Call for Papers is now open. The Internet of Things (IoT) is the biggest idea since the creation of the Worldwide Web more than 20 years ago.
P2P RTC will impact the landscape of communications, shifting from traditional telephony style communications models to OTT (Over-The-Top) cloud assisted & PaaS (Platform as a Service) communication services. The P2P shift will impact many areas of our lives, from mobile communication, human interactive web services, RTC and telephony infrastructure, user federation, security and privacy implications, business costs, and scalability. In his session at @ThingsExpo, Robin Raymond, Chief Architect at Hookflash, will walk through the shifting landscape of traditional telephone and voice services ...