Milin Desai, Director, Product Management at VMware, presented his company’s views on network virtualization, its advantages, current and future products at a late day VMUG session on May 1, 2013 in Santa Clara, CA.
The talk on Network Virtualization was in the context of a Software Designed Data Center (SD-DC), where all intra-structure (compute, storage, networking, security, etc) is virtualized and delivered as a service. In this scenario, control of all DC equipment is via VMware software running in commodity x-86 based servers.
The physical DC network was positioned as a bottleneck and barrier to realization of the SD-DC. In particular, the network was said to have many weaknesses:
- Slow provisioning of new applications and services
- Limited placement of workloads (which are dependent on network connectivity/availability and/or security constraints)
- Limited mobility of apps (due to phyical constraints)
- Hardware dependent on type of server (which is inflexible)
- Intensive operations (to maintain or change the network)
In sharp contrast, these limitations disappear when using network virtualization (to be defined later in this article):
- Programmatic provisioning
- Place any workload anywhere (e.g. on any physical infrastructure)
- Decouple applications and services from physical hardware
- Operationally efficient
- Pool resources; notion of “logical compartmentalization”
Milin said that “With network virtualization, only IP hardware (i.e. IP switch fabrics operating at L3 using merchant silicon) is needed for the physical network. Such a ‘logical network’ auto-extends or contracts when a workload moves.” It is also “operationally ready with admin visibility,” he added.
But hey, what’s network virtualization, anyway? Really!
Definition of Network Virtualization:
As Milan did not clearly define “network virtualization” we picked this description from many on the web:
“Network virtualization is a process of abstraction which separates logical network behavior from the underlying physical network resources. Network virtualization allows network aggregation and provisioning, combining different physical networks into a single virtual network, or breaking a physical network into multiple virtual networks that are isolated from each other.”
Network virtualization lends itself to cost savings, efficiency, security and flexibility — four key benefits for any client. “The whole point of everything we’re doing with virtualization is to get more utilization out of hardware,” said Dave Sobel, CEO of Evolve Technologies, a solution provider headquartered in Fairfax, Va. In physical environments, adding switch ports requires cabling, connections and configuration — along with the investment in physical switch ports. In a virtual environment, logical switch ports are created and abstracted from the underlying physical ports. This allows more “virtual” switch ports to be added and “connected” (or directed) to other logical switch ports quickly and without having to commit real ports or cable them together in the data center.
VMware’s Scott Lowe has another point of view. He wrote in an email: “”Increasing the utilization of physical network hardware (i.e., consolidation) is not a key driver for network virtualization, as it was with server virtualization. The real value is in the agility and flexibility that it brings to customers’ data center networks.”
More benefits of network virtualization:
Let’s suppose that the client required a separate network for iSCSI traffic, application development or some other business purpose. Traditionally this would require the creation (and expense) of a different physical network, but network virtualization would allow a new logical network to be created and configured using the same physical hardware. The new network could be isolated from other virtual networks even though it’s using the same physical cables, switches, routers and other devices. This ensures security between virtual networks. Further, the new network could be created, configured and managed with few (if any) changes to the physical network.
This kind of flexibility is impossible with physical networks. “When we are out of ports in a physical switch we need to buy another one,” said Carlos E. Vargas, lead analyst at Exelon Corp., an energy company in Chicago. “In the virtual world we just change the size of our switch and reboot the virtual host and we are back in business.”
Instead of a precise definition, Milo Desai explained network virtualization in terms of what functions it accomplishes:
- Decouples virtual and physical spaces- no hardware dependencies (because physical network hardware is reduced to IP switching/packet forwarding engines)
- Accomodates logical network changes without disturbing the host server
- Automates network operations, e.g. provisioning, adding ports, reconfiguration, etc
VMware network virtualization software implementations (to be described later) do away with L2 VLANs entirely and operates at the IP Layer (L3). It provides functions such as: IP switching with SLAs, Routing and IP addressing, firewall, and load balancing in software running on commodity compute (x86 based) servers.
The physical network below the network virtualization layer only needs to provide IP network layer connectivity. Potentially, this functionality could be provided by simple, low cost “IP packet forwarding engines” built using merchant silicon. The physical network hardware is responsible for all of the functionality necessary to construct and maintain a resilient L3 fabric, including the use of IP routing protocols such as BGP or OSPF to enable Equal Cost Multipathing (ECMP). All of the functionality required for provisioning and managing workloads—building logical L2 domains, IP addressing, NAT, firewalling, and load balancing—run in network virtualization software on any x86-based compute server.
In VMware’s implementation, the physical Data Center network is composed of low cost IP data forwarding hardware (i.e. L3 switch fabric using merchant silicon). If that’s the case, than profit margins of the legacy switch fabric vendors (Cisco, HP, Dell, Juniper, Brocade, etc) will decline precipitously and they are in danger of being replaced by even lower cost network equipment made by Taiwanese and Chinese contract manufacturers.
Not wanting to be so disruptive as to put legacy DC switch fabric vendors out of business, two representatives of VMware said that they believe the “physical DC network will become more network virtualization aware” by including new functionality (yet to be defined).
From IEEE Discussion list member Victor Grado, “Network Virtualization might be a threat to Data Center network equipment vendors, in much the same way that open source software (e.g. Open Daylight) for software-defined anything and related approaches represents a threat to VMware (and already does, witness Amazon, Google, Facebook, etc, not using VMware).”
One former Cisco employee told me at the VMUG reception that indeed, VMware’s network virtualization was a threat to Cisco’s dominance of the Data Center Switch market. He also said that the two companies are no longer co-operating closely as they did for years.
Tom Nolle on Virtual Networking’s Dirty Operations Secret wrote:
“Huawei seems to be projecting a future where network equipment takes a smaller piece of the infrastructure budget—IT and software getting a growing chunk. Genband seems to be envisioning a UC/UCC space that’s also mostly in as-a-service software form, and they’re also touting NFV principles. It would seem that the industry is increasingly accepting the transition to a “soft” network.
The challenge for “the industry” is that it’s probably not true that a simple substitution of hosted functionality for dedicated devices would cut operator costs enough to alter the long-term industry profit dynamic.”
VMware’s Virtual Switch- “the starting point for Network Virtualization”
Milo began this discussion by noting that virtual server access ports now exceed the number of physical server access ports deployed in the data center. The former is growing @ 32% CAGR, while the latter is growing at less than half that at a 15% CAGR. Source: Crehan Research Inc.
The attributes of VMware’s vSphere Distributed Switch (VDS) are as follows:
- Unified network virtualization management independent of physical fabric
- Manage a Data Center wide switch vs. individual switches per host
- vMotion aware so that statistics and policies follow the VM, simplifying debugging and troubleshooting
- Advanced traffic management features such as load-based teaming (LBT) and Network I/O Control (NIOC)
- Monitoring and Troubleshooting features, including NetFlow and port mirroring
Deployed since 2007, this product is being used by Navisite, eBay and Rackspace, among other companies.
VMWare’s NSX-Network Virtualization platform for Data Centers:
The two VMware network virtualization software products under the NSX platform are:
1. VCloud Networking & Security-shipping now.
Three use cases of VCloud were presented:
- Datacenter automation
- Self Service IT
- Large scale, multi-tenant cloud
2. NVP (from Nicira acquisiton)- can do logical networking without using IP Multi-cast. Now in version 3.1, NVP has been publicly and commercially available for quite some time as per this press release:
VMware plans to merge the company’s homegrown vCloud Networking and Security product line with the NVP technology that it acquired from Nicira. This new single-product family will be called VMware NSX. It will be based on a common technology foundation that works across multiple hypervisors and cloud management systems beyond those from VMware.
Next up: Diagram(s) with description of VMWare’s network virtualization interfacing with L3 switch fabrics, ETSI NFV reference architecture and Intel SDN/NFV reference design concepts.
References from the VMUG-Silicon Valley meeting of May 1, 2013:
SDN vs. network virtualization: Q&A with VMware’s Martin Casado
Virtual Network Design Guide
VMware vCloud Networking
VMware Announces VMware NSX in a Move Towards SDDC