Intel® Open Network Platform Server Reference Architecture (Version 1.1) NFV/SDN Solutions with Intel® Open Network Platform Server Revision 1.1 September 2014 LEGAL By using this document, in addition to any agreements you have with Intel, you accept the terms set forth below. You may not use or facilitate the use of this document in connection with any infringement or other legal analysis concerning Intel products described herein. You agree to grant Intel a non-exclusive, royalty-free license to any patent claim thereafter drafted which includes subject matter disclosed herein. INFORMATION IN THIS DOCUMENT IS PROVIDED IN CONNECTION WITH INTEL PRODUCTS. NO LICENSE, EXPRESS OR IMPLIED, BY ESTOPPEL OR OTHERWISE, TO ANY INTELLECTUAL PROPERTY RIGHTS IS GRANTED BY THIS DOCUMENT. EXCEPT AS PROVIDED IN INTEL'S TERMS AND CONDITIONS OF SALE FOR SUCH PRODUCTS, INTEL ASSUMES NO LIABILITY WHATSOEVER AND INTEL DISCLAIMS ANY EXPRESS OR IMPLIED WARRANTY, RELATING TO SALE AND/OR USE OF INTEL PRODUCTS INCLUDING LIABILITY OR WARRANTIES RELATING TO FITNESS FOR A PARTICULAR PURPOSE, MERCHANTABILITY, OR INFRINGEMENT OF ANY PATENT, COPYRIGHT OR OTHER INTELLECTUAL PROPERTY RIGHT. A “Mission Critical Application” is any application in which failure of the Intel Product could result, directly or indirectly, in personal injury or death. SHOULD YOU PURCHASE OR USE INTEL'S PRODUCTS FOR ANY SUCH MISSION CRITICAL APPLICATION, YOU SHALL INDEMNIFY AND HOLD INTEL AND ITS SUBSIDIARIES, SUBCONTRACTORS AND AFFILIATES, AND THE DIRECTORS, OFFICERS, AND EMPLOYEES OF EACH, HARMLESS AGAINST ALL CLAIMS COSTS, DAMAGES, AND EXPENSES AND REASONABLE ATTORNEYS' FEES ARISING OUT OF, DIRECTLY OR INDIRECTLY, ANY CLAIM OF PRODUCT LIABILITY, PERSONAL INJURY, OR DEATH ARISING IN ANY WAY OUT OF SUCH MISSION CRITICAL APPLICATION, WHETHER OR NOT INTEL OR ITS SUBCONTRACTOR WAS NEGLIGENT IN THE DESIGN, MANUFACTURE, OR WARNING OF THE INTEL PRODUCT OR ANY OF ITS PARTS. Intel may make changes to specifications and product descriptions at any time, without notice. Designers must not rely on the absence or characteristics of any features or instructions marked “reserved” or “undefined”. Intel reserves these for future definition and shall have no responsibility whatsoever for conflicts or incompatibilities arising from future changes to them. The information here is subject to change without notice. Do not finalize a design with this information. The products described in this document may contain design defects or errors known as errata which may cause the product to deviate from published specifications. Current characterized errata are available on request. Contact your local Intel sales office or your distributor to obtain the latest specifications and before placing your product order. Copies of documents which have an order number and are referenced in this document, or other Intel literature, may be obtained by calling 1-800-548-4725, or go to: http://www.intel.com/design/literature.htm. Intel and Intel logo are trademarks or registered trademarks of Intel Corporation or its subsidiaries in the United States and other countries. * Other names and brands may be claimed as the property of others. Copyright © 2014, Intel Corporation. All Rights Reserved. 2 Solutions Guide — Intel® Network Builders Revision History Revision Date Comments 1.1 September 18, 2014 Minor edits throughout document. 1.0 August 21, 2014 Initial document for release of Intel® Open Network Platform Server 1.1. 3 Solutions Guide — Intel® Network Builders NOTE: This page intentionally left blank. 4 Solutions Guide — Intel® Network Builders Contents 1.0 Audience and Purpose ................................................................................................. 7 2.0 Summary .................................................................................................................... 9 2.1 Recommended Setup and Validation Procedures .........................................................................11 2.2 Network Services Examples ......................................................................................................12 2.2.1 Suricata (Next Generation IDS/IPS engine) ...........................................................................12 2.2.2 vBNG (Broadband Network Gateway) ...................................................................................12 3.0 Hardware Components ...............................................................................................15 4.0 Software Versions ......................................................................................................17 4.1 Obtaining Software Ingredients ................................................................................................18 5.0 Installation and Configuration Guide .........................................................................19 5.1 Instructions Common to Compute and Controller Nodes ...............................................................19 5.1.1 BIOS Settings ...................................................................................................................19 5.1.2 Operating System Installation and Configuration....................................................................20 5.2 Controller Node Setup .............................................................................................................22 5.2.1 OpenStack (Icehouse)........................................................................................................22 5.2.2 OpenDaylight (Hydrogen) ...................................................................................................26 5.3 Compute Node Setup ..............................................................................................................29 5.3.1 Host Configuration.............................................................................................................29 6.0 Testing the Controller Node .......................................................................................35 6.1 Preparation with OpenStack .....................................................................................................35 6.1.1 Deploying Virtual Machines .................................................................................................35 6.2 Using OpenDaylight ................................................................................................................43 6.2.1 Preparing OpenDaylight to Connect with the Compute Host .....................................................43 6.2.2 Connecting OpenDaylight to the Compute Host......................................................................43 6.2.3 Configuring OpenFlow Rules Using OpenDaylight....................................................................46 7.0 Testing Compute Node Performance ..........................................................................53 7.1 Intel® DPDK and Linux Kernel L3 Forwarding on the Host .............................................................53 7.1.1 L3 Forwarding Performance Characterization .........................................................................54 7.2 Port-Port Forwarding on Host Using Intel® DPDK Accelerated Open vSwitch and Open vSwitch ..........55 7.2.1 Port-port vSwitch Performance Characterization ....................................................................56 7.3 L3 Forwarding in the VM Using Open vSwitch (OVS) and DPDK vSwitch ..........................................56 7.3.1 Single VM L3 Forwarding Performance Characterization ..........................................................57 7.4 L3 Forwarding in Two VMs Using Open vSwitch (OVS) and DPDK vSwitch with userspace vHost .........58 7.4.1 Two VMs L3 Forwarding Performance Characterization............................................................59 7.4.2 Scalability Tests for Two VMs Using userspace vHost as vNICs.................................................59 7.5 VM-VM IPSec Tunnel Performance Using Quick Assist Technology ..................................................60 Appendix A Test Methodology........................................................................................63 A.1 Defining Packet Throughput..........................................................................................................63 A.2 Network Protocols .......................................................................................................................63 A.3 RFC2544....................................................................................................................................63 A.4 Netperf ......................................................................................................................................63 Appendix B Installing and Running DPDK vSwitch on the CLI........................................65 B.1 Intel DPDK 1.7 with Fedora 20 ......................................................................................................65 B.1.1 Building a DPDK Target from Source...............................................................................65 B.1.2 Hugepage Configuration................................................................................................65 B.1.3 Loading DPDK igb_uio and Binding the Drivers to 10 GbE Interfaces ...................................66 B.2 Guest Operating System Installation and Configuration ....................................................................67 5 Solutions Guide — Intel® Network Builders B.2.1