Software Define Networking Sec and Network Programamability Flashcards
- Traditional Routing and Switching Planes
- Configuration and monitoring
- Typically done via the traditional CLI or GUI
- Each Vendor has this proprietary way to configure its devices
Management plane
- Traditional Routing and Switching Planes
- Layer 2 protocols and Control
- Layer 3 Protocols (OSPF,BGP,RIP etc)
Control Plane
- Traditional Routing and Switching Planes
- institutes how data is forwarded inside the hardware from interface to interface
Data Plane
Introduced the notion of centralized controller. Has a global view of the network and it uses the common management protocol to configure the network infrastructure devices
- Centralizes management by abstracting the control plane from the data forwarding function in the discrete networking devices.
- Is an architecture designed to make a network more flexible and easier to manage
SDN
SDN Controller
Provide the ability to automate settings and networking policies and configurations in a very flexible and scalable way.
-is an industry-leading secure, open, and comprehensive Software-Defined Networking (SDN) solution. It radically simplifies, optimizes, and accelerates infrastructure deployment and governance and expedites the application deployment lifecycle.
Cisco ACI Solution
Is a network virtualization technology that leverages encapsulation technique similar to vlan to encapsulates layer 2 ethernet frames within UDP packets (over UDP 4789 , by default)
Virtual Extensible LAN (VXLAN)
the ip address that represents the leaf VTEP is called?
Physical Tunnel endpoint (PTEP)
Additional functions of APIC
- “observer”: monitors the health, state and performances information of CISCO ACI pod
- “boot director”: in charge of booting process and firmware updates
- “application director”: manages the formation and control of the APIC appliance cluster
- “virtual machine manager” is an agent between the policy repository and hypervisor management system (VMware centre”
- “event manager: manages and stores all the events and faults initiated from the APIC and CISCO ACI fabric nodes
- “appliance element”: maintains the inventory and state of the local APIC appliance
allows you to tunnel layer 2 ethernet packets with different encapsulation over a layer 3 network
Overlay network
enforce network segmentation in VM Level or containers regardless of VLAN or subnet
micro-segmentation
Open source initiative trying to provide micro segmentation
Neutron from openstack Open vswitch (OVS) Open Virtual network (OVN) Opendaylight (ODL) Open platfrom for network function vritualizatio(OPNFV) Contiv
is used to communicate between the SDN controller and the switches and routers within the infrastructure. Enable SDN to dynamically makes changes based on real-time demands and scalability needs.
Southbound API
are typically restful API that are used to communicate between the SDN controller and the services and applicaiton running over the network. in short it is the link between the application and sdn controller
Northbound APPI
is a technology that addresses the virtualization of layer 4 through layer 7 services. Eg firewall, load balancer, security services
Network Functions Virtualization
Open source solutions of. NFV. aims to be the base infrastructure layer for running virtual network functions
OPNVF