Testing Network Routers for Extreme Scale and Performance
-
Upload
spirent-communications -
Category
Technology
-
view
515 -
download
0
Transcript of Testing Network Routers for Extreme Scale and Performance
‹#› PROPRIETARY AND CONFIDENTIAL
Relentless growth in devices and traffic causing upheaval in SP networks
…SPs looking to the latest generation of edge routers with capabilities for DPI, MPLS VPNs and ability to classify and police subscriber traffic…
- Infonetics-2014 SP-Router-Switches-Analysis
More routers and higher speed interfaces (10G, 40G, 100G) are needed to handle broadband and video…multicast for video, security & sophisticated QoS schemes…
- Infonetics-2014 IP Edge and Core router market drivers
‹#› PROPRIETARY AND CONFIDENTIAL
ChallengesCan the service provider edge handle millions of subscribers & smart devices and line rate user traffic on 10, 40 & 100G links?
Will my core router support 120K BGP sessions & 4 million routes?
Will the IDS/IPS systems, firewalls and load balancers meet their performance and security requirements?
‹#› PROPRIETARY AND CONFIDENTIAL
Spirent enables end to end testing of SP and cloud networks
FX2 MX2Cloud Data center
‹#› PROPRIETARY AND CONFIDENTIAL
Spirent mX2 Test Module
Spirent mX2 family of HSE modules provide support for 1G, 10G, 40G and 100G speeds at industry leading densities and performance
• Ideal for validating highest performing Edge & core routers
Spirent TestCenter platform and the mX2 modules provide customers with the lowest TCO & strong differentiators
Security
Realism
Scale
Reliability
mX2-40G-Q3
STC N11U
‹#› PROPRIETARY AND CONFIDENTIAL
SECURITYFind and Fix
Vulnerabilities Quickly
REALISMEmulate complex
topologies & traffic
with realismSPIRENTmX2
SCALEMulti dimensional protocol scale
RELIABILITYTest failure detection & recovery with msec accuracy
‹#› PROPRIETARY AND CONFIDENTIAL
Security
TestCenter
• Validate security (traffic and control plane separation of different clients) in multi-tenant NFV or VPN environments
Avalanche
• Assess perimeter security with 1000s of attacks testing
• Find zero day vulnerabilities with Fuzzing
• Emulate malware infected host behavior
L3 Network
VTEP 1
VTEP 1
VTEP 1
VM13VM13
VM13
VM13VM13
VM13
VM13VM13
VM13
STC
DUT VTEP
‹#› PROPRIETARY AND CONFIDENTIAL
Realism
Create realistic user traffic patterns
• IMIX traffic profiles
• Realistic LAG traffic using various hashing schemes
Emulate complex topologies and accurately generate control plane traffic with multiple layers of protocols
• DHCP over VPLS
• Targeted LDP over RSVP
• BGP over LAG
STC Port
STC emulates entire backhaul
‹#› PROPRIETARY AND CONFIDENTIAL
Performance
Industry leading single and multi-protocol scale
• 120K BGP sessions per module
• 1150 BFD sessions @100ms per port
• Major improvements over MX
Put an entire city in a module
• 1 million DHCP subscribers and IoT endpoints
Powered by Intel’s multi-core multi-threaded architecture
DUT
STC
10K BGP sessions/port
80K DHCP sessions/port
Emulates complex networks
‹#› PROPRIETARY AND CONFIDENTIAL
Reliability
Validate E2E service QoE by measuring real-time results on billions of flows
Verify sub-50 ms failure detection and recovery capabilities of DUTs
Study real-time cause and effects on millions of streams while injecting failures at high scale
DUT PE
STC PE
STC PSTC P
Primary
Backup
‹#› PROPRIETARY AND CONFIDENTIAL
mX2 Use case # 1 – Port grouping/LAG
Customer need Validate Port grouping/LAG functionality in DUTs
Test device functionality
• Connect mX2 CFP-2 100G port to DUT on one side and 10x10G mX2 ports on other side of DUT. Setup LAG with the 10G ports
• Validate control and data plane LAG on the DUT including routing protocols (high scale BGP), hashing algorithms, failure, automatic bandwidth adjustments, resilience, and packet loss/jitter
Spirent N11U DUT Spirent N11U
100G on MX
10x10G LAG on mX2