Changes between Version 15 and Version 16 of Internal/OpenFlow/ofTopology
- Timestamp:
- Jul 17, 2012, 5:48:02 AM (12 years ago)
Legend:
- Unmodified
- Added
- Removed
- Modified
-
Internal/OpenFlow/ofTopology
v15 v16 1 1 = Building Network Topologies = 2 This page aims to describe some things-to-consider when setting up topologies for experimentation. 2 This page aims to be a compilation of various notes regarding things to consider when, as well as techniques for, setting up topologies for network experiments. We consider the case where nodes share a broadcast domain at L2, and can hear all traffic. 3 4 The first section describes methods for simulating point-to-point links between two nodes sharing a single switch. The second section describes possible ways to describe a desired topology to an automated system so that it can build the topology for a user. 5 6 == Contents == 3 7 I. [#p2p Simulating Point-to-Point Links] [[BR]] 4 8 II. [#tdescr Topology Description Methods] 5 9 6 10 == Prerequisites == 7 This page assumes that you have a setup similar to [http://www.orbit-lab.org/wiki/Documentation/OpenFlow SB9], as well as a node with a working install of NetFPGA drivers or !OpenvSwitch, depending on how links are being set up. For the !OpenFlow methods, you also need a !OpenFlow controller that allows you to push flows to your software defined switch. You should have access to the switch that the nodes are sharing as well, since you need to slice it into VLANs. The following links describe setup and use of theses components (internal links):11 We assume that you have a setup similar to [http://www.orbit-lab.org/wiki/Documentation/OpenFlow SB9], of several nodes connected to shared switch(es). For NetFPGA-based topology setups, you need nodes with NetFPGA drivers and bitfiles. For software-based switching, we use !OpenvSwitch or Linux bridging. For the !OpenFlow methods, you also need a !OpenFlow controller that allows you to push flows to your software defined switch. You should have access to the switch that the nodes are sharing as well, since you need to configure VLANs and the likes. The following links describe setup and use of theses components (internal links): 8 12 9 13 * [http://www.orbit-lab.org/wiki/Documentation/OpenFlow/vSwitchImage OpenVswitch] - A software-defined virtual switch with !OpenFlow support, no special hardware required. … … 12 16 * As for the !OpenFlow controller, there is a [http://www.orbit-lab.org/wiki/Internal/OpenFlow/Controllers collection] to choose from. 13 17 14 The system used here is Ubuntu10.10 (kernel: 2.6.35-30-generic). Command syntax will change depending on your distro.18 The nodes that were used for the topologies in this page are NetFPGA cubes running Ubuntu10.10 (kernel: 2.6.35-30-generic). 15 19 16 20 = I. Simulating point-to-point Links = #p2p 17 18 This section aims to provide a rough overview of the steps one needs to take in order to simulate point-to-point links between nodes sharing a single switch (e.g. within the same broadcast domain), using standard and !OpenFlow-controlled nodes. In general, we want to partition the shared switch so that the nodes are isolated from each other, and then introduce relays that can move traffic between these partitions in a controlled manner. The way the traffic is relayed produces the topology. The general topology we use to describe our methods is the following: 19 {{{ 20 A-[r]-B 21 }}} 22 Where A and B are nodes 'trapped' in their partitions, and [r] is a relay node that straddles the partitioning on the shared switch. We call A and B ''end nodes'' and [r] a ''network node''; From this logic it follows that the partition is the ''link'' (despite it actually being a logical setup on the shared switch, rather than a wire). Given that the partitions have identifiers, such as IP block addresses, nodes on the same link must share the identifier, and relays must know the identifiers of all partitions that it connects. 23 21 This section introduces topology setup using the simplest case of a single link between two nodes. 22 23 == 1.1 Overview == 24 In general, a topology describes the restrictions on traffic flow between multiple nodes. We build a topology by first partitioning the shared switch so that the nodes are isolated from each other, and then introducing relays that can move traffic between these partitions in a controlled manner. The way the traffic is relayed produces the topology. Our base topology, in which all nodes can reach eachother, is a fully connected graph: 25 {{{ 26 (A) A - B 27 \ / 28 C 29 }}} 30 31 We build the following topology from the one shown above to demonstrate our methods: 32 {{{ 33 (B) 34 A-[r]-B 35 }}} 36 Where A and B are nodes 'trapped' in their partitions, and [r] (C in fig. A) is a relay node that straddles the partitioning on the shared switch. We call A and B ''end nodes'' and [r] a ''network node'' joining together two links; From this logic it follows that the partition is the ''link'' (despite it actually being a logical setup on the shared switch, rather than a wire). Given that the partitions have identifiers, such as IP block addresses, nodes on the same link must share the identifier, and relays must know the identifiers of all partitions that it connects. 37 38 We cover a handful of ways to realize the setup in Fig. B. 24 39 == Contents == 25 1.1 [#pre1 Some Considerations] [[BR]] 26 1.2 [#basic Non-OpenFlow Methods] [[BR]] 27 1.2.1 [#KernIP Kernel IP routing] (Layer 3) [[BR]] 28 1.2.2 [#brctl Linux Bridge] (Layer 2) [[BR]] 29 1.2.3 [#filt Packet filters] (Layers 2-4) 30 1.3 [#of OpenFlow Methods] 31 1.3.1 [#OVS OpenvSwitch] [[BR]] 32 1.3.2 [#nfpga NetFPGA OpenFlow switch] [[BR]] 33 1.3.3 [#pt Prototyping] - With Mininet [[BR]] 34 1.4 [#morals1 Summary] 35 !OpenFlow is rather layer-agnostic, defining traffic rules based on a combination of any of the 12 packet header fields that may be used for matching under the !OpenFlow standard. These fields correspond to layers 1~4. 36 37 == 1.1 Some Considerations == #pre1 40 1.2 [#pre1 Some Considerations] [[BR]] 41 1.3 [#basic Non-OpenFlow Methods] [[BR]] 42 1.3.1 [#KernIP Kernel IP routing] (Layer 3) [[BR]] 43 1.3.2 [#brctl Linux Bridge] (Layer 2) [[BR]] 44 1.3.3 [#filt Packet filters] (pending) (Layers 2-4) 45 1.4 [#of OpenFlow Methods] (Layers 1-4) 46 1.4.1 [#OVS OpenvSwitch] [[BR]] 47 1.4.2 [#nfpga NetFPGA OpenFlow switch] [[BR]] 48 1.4.3 [#pt Prototyping] - With Mininet (pending) [[BR]] 49 1.5 [#morals1 Summary] 50 51 == 1.2 Some Considerations == #pre1 38 52 The techniques used to partition the broadcast domain will heavily depend on two things: 39 53 1. the type of experiment … … 58 72 Note, virtual interfaces are workarounds to being restricted to one physical interface. Any setup with nodes with multiple interfaces (e.g. using NetFPGAs) will not require the above configs, lest you want more interfaces than you have. For nodes with multiple physical interfaces, the steps describing 'eth0.xxx' can be replaced by the names of each unique interface. Keep in mind, however, that if the interface is connected to a switchport configured as a trunk, it must also be made VLAN aware even if it does not hold multiple virtual interfaces. 59 73 60 == 1. 2non-OpenFlow Methods == #basic74 == 1.3 non-OpenFlow Methods == #basic 61 75 These methods should work on any *nix machine, so they can serve as "sanity checks" for the system you are using as the network node. 62 76 63 === 1. 2.1 Kernel IP routing === #KernIP77 === 1.3.1 Kernel IP routing === #KernIP 64 78 Kernel IP routing has the least requirements, in that no extra packages are required if you have multiple Ethernet ports on your node. As its name indicates, it works strictly at layer 3. Partitioning occurs across IP blocks; you would need one block per link. It can be combined with VLANs and/or virtual interfaces if you are limited in the number of physical interfaces you have on your relay. 65 79 … … 118 132 Do this for each remote subnet that the node should be able to communicate with. Once all of the nodes are configured, you should be able to ping end-to-end. 119 133 120 === 1. 2.2 Linux Bridge === #brctl134 === 1.3.2 Linux Bridge === #brctl 121 135 In terms of implementation, this is probably the simplest method. 122 136 … … 142 156 The Linux Foundation keeps a page that may be useful for various troubleshooting: http://www.linuxfoundation.org/collaborate/workgroups/networking/bridge 143 157 144 == 1. 3!OpenFlow Methods == #of158 == 1.4 !OpenFlow Methods == #of 145 159 This section assumes that you have all of the !OpenFLow components (e.g. OVS, NetFPGA drivers) set up and working, and that you have several choices of controller. The controller used primarily in this section is the Big Switch Networks (BSN) controller. 146 === 1. 3.1 !OpenvSwitch === #OVS160 === 1.4.1 !OpenvSwitch === #OVS 147 161 !OpenvSwitch (OVS) is a user-space software defined switch with !OpenFlow support, complete with its own implementation of a controller. It can, and is assumed to be, built as a kernel module throughout this page. 148 162 … … 227 241 }}} 228 242 229 === 1. 3.2 NetFPGA !OpenFlow switch === #nfpga243 === 1.4.2 NetFPGA !OpenFlow switch === #nfpga 230 244 This method is probably the most involved and difficult to get right, although in theory would be the best since you would get the programmatic flexibility of the OVS switch and the speed of a hardware-implemented device. 231 245 … … 247 261 This set of flows basically implements VLAN stitching based on source MAC address. Unlike in the Linux bridge, one cannot see the VLAN-stripped packets on the virtual interface (tap0 on the NFPGA, br0 on bridge); they will already have the proper tag, since the processing is probably occurring in the FPGA and not in the kernel. 248 262 249 == 1. 4Morals of the story == #morals1263 == 1.5 Morals of the story == #morals1 250 264 For quick setup of a network toppology using nodes sharing a medium, point-to-point links should be defined at as low a layer as possible. The next best thing (that is even better because of its flexibility) to actually going in and connecting up the topology using cables is to carve up the shared switch into VLANs. This lets you restrict the broadcast domain however you want, without hard-wiring everything, even when you are restricted to just one physical interface per node. 251 265 … … 268 282 == 2.1 Some Considerations == #pre2 269 283 The minimum requirements for a format are: 270 * ability to describe a graph (node s and edges)284 * ability to describe a graph (node-edge relations) 271 285 * ability to add descriptions to nodes and edges 272 * can be parsed easily 273 Being easy to read and write is a added bonus. 286 * can be parsed systematically 287 288 Additionally useful properties are: 289 * Being human readable/writable 290 * support in various programming languages (notably Ruby) 274 291 275 292 Some things that we would like to be able to describe are … … 277 294 * node behavior (a switch, host, router, service...) 278 295 * edge weight (throughput, connectivity, delay...) 296 * dynamic behavior (changes across time) 279 297 280 298 == 2.2 Some Formats == #fmts 299 We focus on the formats described in [https://gephi.org/users/supported-graph-formats/ this] link. 300 281 301 === 2.2.1 GEXF === #gexf 282 302 link: http://gexf.net/format/index.html [[BR]]