Contact Info

Headquarters:

706 Brewster Avenue Montreal, Qc, H4C 2K1
contact@noviflow.com
+1(438)807-4360

USA Office:

440 N Wolfe Road Sunnyvale,CA 94085
contact@noviflow.com
+1(408)217-6219
Follow Us

NoviFabric: Service Chain Proxy

For IPv6 Segment Routing

PROBLEM

Why an SRv6 Service Gateway?

With the implementation of 5G across mobile networks, carriers are under increasing pressure to deliver services closer to the network edge. To enable this transition, carriers are employing strategies such as service virtualization, decentralizing network infrastructure and implementing traffic engineering using SRv6. To make this last strategy possible, carriers need an easy way to make services addressable network-wide using SRv6 at multi-terabits per second.
Furthermore, the increasing complexity of implementing security at the edge is becoming a limiting factor to protecting data, identity and network resources the core, as well as becoming a barrier to network adaptability, latency and scalability, and driving up both OPEX and CAPEX.
NoviFlow’s NoviFabric provides a secure carrier-grade proxy service to these services, with an integrated load balancer that it provides elastic scaling of those services to meet the customer bandwidth requirements as usage fluctuates in real-time.

 

In the following video, Bell Canada’s Daniel Bernier describes the challenges facing network operators in this fast-evolving environment:

SOLUTION

NOVIFLOW DELIVERS NoviFabric IPv6 SEGMENT ROUTING (SRv6 Service Gateway)

NoviFlow’s NoviFabric programmable forwarding plane solution adds SRv6 with support for SID and uSID (C-SID-NEXT) to its existing packet brokerage, load balancing and network telemetry services, effectively reducing the overall cost for the Service Provider Edge by integrating these network functions into an easy to manage and deployable solution. Deployed with Intel’s Barefoot Tofino programmable switch fabric empowered by NoviFlow’s NoviWare Network Operating System, the solution leverages the performance and flexibility advantages of P4 as a programming and control language for Software Defined Networking.

 

NoviFlow’s Jesper Eriksson describes NoviFabric our SRv6 Segment Routing solution:

 

To make this possible NoviFabric provides the ability to insert a Service Chain Proxy into an IPv6 Segment Routing network. For example, a proxy service that can direct traffic to a chain of security services that a packet needs to visit – DDoS, Firewall, IPS – could be inserted in the Segment Routing network to protect the rest of the network. Using NoviFabric, Service Providers can easily insert an array of infrastructure services anywhere in an SRv6 network.

The SRv6 SID associated with a Service Proxy identifies both the hop location and the Service Policy to be executed (service chain). Via this functionality of the proxy, network services become network addressable resources and are available from anywhere in the network. NoviFabric separates the ability to access network services from their physical location, thus enabling more efficient use of valuable network services as well as optimal use of the hardware resources needed to run these services.

Used with industry standard cybersecurity appliances and services, NoviFlow’s NoviFabric delivers high throughput and dynamically scalable network services into the Terabit/s range while reducing total customer network CAPEX and OPEX. By integrating SRv6 capability into NoviFabric, the solution efficiently addresses even the largest deployments and enables cost-effective dynamic scaling to right-size capacity for the most highly variable demands.

  • NoviFabric implements full SRv6 Service Gateway and Service Proxy functionality, with built-in load balancing and service chaining
    • Introduces a new variant of SRv6 binding segment allowing one or more network services to be bound to a service policy and segment ID (both SID and uSID / C-SID-NEXT)
    • Act as the orchestrator for an enforcement point for the above service policy
    • Invokes in order the network services defined in the service policy
    • Load balances one or more pools of physical (PNF) or virtual (VNF) network services
  • Multi-terabit throughput, flexible port configurations in a small footprint
  • Supports both remote API calls and a CLI for configuration
  • Based on white-box OCP compliant hardware you can source your own supply channels
  • Software Programmable Parser
  • Allows network services to be addressable and reachable from anywhere in the network rather than being hard-wired to a specific physical location in the network
  • NoviFabric filters and balances traffic across arrays of network appliances or virtual machines without the cost of external load balancing appliances and it Improves performance of security applications by moving policy enforcement into network fabric itself
  • Protects investments in network hardware and allows for faster introduction of new features because the entire stack from the switch silicon to the application is programmable
  • Replaces multiple existing load balancers, and consolidates multiple services in a Terabps range programmable network fabric
  • May be used in the mobile backhaul and GiLAN to support service chaining
  • Supports multi-Terabit/s throughput capacity at each SRv6 network services proxy
  • Traffic engineering, service chaining of addressable service resources
  • Modernization and innovation of security services deployments within a carrier network
  • Network simplification and significant OPEX / CAPEX savings
NoviAnalytics for NoviFabric and NoviDashboard for NoviFabric
  • NoviAnalytics for NoviFabric allows operators to live monitor over 75 different hardware sensors, OS log files and application messages to fully understand the operational health of the NoviFabric. Troubleshooting a problem or performing preventative maintenance ensures a higher level of uptime.
  • NoviDashboard provides you a single pane of glass to monitor your whole fleet of NoviFabric. The information updates are real-time indicators of the overall health of the platform. If a sensor reports a fault or out of tolerance, live historical data, with the key information needed for troubleshooting, is available within two clicks.

Want to know more?

Top