External Use
TM
Internet of Things (IoT)Service Delivery using NFV/SDNFTF-NET-F0160
A P R . 2 0 1 4
Jeff Maguire | Digital Networking [email protected]
TM
External Use 1
Agenda• Session Introduction and Objectives• Networking Market Trends• Internet of Things (IoT)• NFV / SDN Technology Overview• Freescale’s VortiQa and Open Software Solutions• Freescale’s QorIQ Product Highlights• Freescale QorIQ Delivery Platforms• Conclusion
TM
External Use 2
Session Overview and Objectives
IntroductionThis 1 hour session will explore the “who, what, where and why” questions behind market trends that are driving dramatic shifts in how devices will be connected, configured and services delivered to the end user from the Cloud.
ObjectivesUnderstand market trends and the forces behind themConnect dots between trendy buzz words (IoT, IoE, NFV, SDN, Fog,…)Explore some examples of service delivery platformsSelection of applicable Freescale technology
Speaker BackgroundOver the past 2 years working in Digital Networking strategy group I have been investigating transformations of the networking market. I’m part of an active Freescale team which surveys and contributes to the Open Networking Foundation (ONF), ETSI’s NFV group and several open projects. Diverse background including SBC, custom ICs, telematics and microcontrollers.
TM
External Use 3
The New Virtualized Network
The world’s networks are increasingly virtualized, giving rise to SDN and other software-based approaches to network infrastructure
The Internet of Things is dramatically growing the number of network endpoints, adding to the worldwide flood of data which must be secured, analyzed and transported
5G is emerging, not just with requisite performance enhancements, but also with the requirement to support exponentially more devices and network endpoints
2
SDN
5G
IoT
3
1
TM
External Use 4
Market Trends / DriversDestiny for the first time is now driven by network users over equipment vendors
General Market Goals• Improve feature/service innovation and deployment velocity• Decouple hardware and software development, leverage software community• Open collaboration and interoperability
History Lessons and Predictions• Web to Cloud Service Providers (Pioneering Settlements)− High-Agility platforms (SaaS, PaaS, IaaS)− OpEx/CapEx efficiency with scale out capabilities− Cloud drove infrastructure multi-tenancy
• Telecom Server Providers (City Building)− Enhanced Cloud for performance and resilience− Rapid and high-agility service delivery for revenue generation− Multi-tenancy, multi-vendor, multi-operator interoperability
• Enterprise (Colonization - The Final Frontier)− CapEx/OpEx savings through scale-out Hybrid-Cloud model− BYOD multi-client diversity with good debug and support model− Availability of trusted open source solution and support vendors
• Brave New World (One World Order – Sharing Technologies)
TM
External Use 5
The Brave New WorldCathedral to the Bazaar of ideas: Linux-style collaboration
• ETSI Industry Specifications Group (ISG)− Standardizing service virtualization, limited lifetime, leverage SDOs
• Open Networking Foundation (ONF)− Standardizing Open SDN (e.g. OpenFlow)
• Open Networking Users Group (ONUG)− User only community driving use-case for Open SDN
• OpenStack− Cloud orchestration, coupled independent open projects
• OpenDayLight (ODL)− SDN controller platform under Linux Foundation
• Open Networking Lab (ON.LAB)− Research lab for SDN promotion, generate open source code
OpenCloud: everything as a Service (XaaS)Open Network OS (ONOS): SDN controller with networking AppsOpenVirteX (OVX): SDN controller virtualization platform
• Open Compute Project (OCP)− Hardware reference designs− Software: Open Networking Linux (Big Switch), ONIE (Cumulus)
• Open Data Plane− Networking acceleration API
TM
External Use 6
Internet of ThingsDifferent Services,Different TechnologiesDifferent Meanings for Everyone
And the Word“SMART”Is Everywhere!
Miniaturization & advances in packaging technologiesAdvances in flashNew class of powerfulbut low-cost & low-power MCUsCloud-based services
TechnologyInnovations
Technology
Software
Applications
Sensing EmbeddedProcessing Connectivity
SmartHealth
AccelerometerMagnetometer
GyroscopePressureAltimeter
Temperature etc.
MCUMPU
Hybrid MCU/MPUNetwork Processor
NFC6LoWPANSub-GigZigBee®
GPSBT/BTLE
Wi-Fi®RFID
Cellular
SmartParking
SmartTags
SmartEnergy
SmartHomes
SmartGrid
SmartLighting
SmartCars
RemoteApplianceAvoidance
BLDGAutomation
Air QualityControl
Auto Safety
Supply ChainAutomation
PedestrianNavigation
M2M
MANYOTHER
SERVICES
TM
External Use 7
IoE and Fog ComputingIoT/M2M with distributed Edge Computing
$19 Trillion CES2014, Cisco KeynoteChambers, CEOyoutube.com/watch?v=TepUznT42ro
TM
External Use 8
SDN Market Growth2013 Year of Feasibility, 2014 Year of Deployment
© 2013 SDNCentral. All Rights Reserved.
Getting Started With Software-Defined Networking (SDN)
TM
External Use 9
Where are We?Freescale QorIQ multicore for an evolutionary SDN market!
Slide 24
Slide 45
Slide 19
Slide 26
ONS2014 Keynotes Guru Parulkar, ONS Chairyoutube.com/watch?v=QxiAFoPTNP8Vinod Khosla, Khosla Venturesyoutube.com/watch?v=q61VkqZRjck
circle of trust
YOUAREHERE
TM
External Use 10
NFV with SDN enables Software Virtualization of Big-I/O systems with Big-MIPS Systems
Operator driven value propositionRapid, elastic and scalable service deployment model
“Apps” platform with open source grass roots innovation
NFV with SDNC
loud
NFV
Traditional
I/O MIPSSystems
Virtual Machine(Server)
Traditional
I/O MIPSSystems
Virtual Machine(Server)
Traditional
I/O MIPSAppliances
Virtual Appliance(COTS)Traditional
I/O MIPS
Systems
Traditional
I/O MIPS
Systems
Traditional
I/O MIPS
Switching
SDN
Control/ServicePlane
SDN CtlrVM
App App App
DP DP DPVM VM VM
DP DP DPSDNaaS
Cloud Data CenterCOTS Servers
TM
External Use 11
NFV and SDN – Empowering InnovationDriving a new business model in the networking marketNFV – service providers enabling networking Apps developers• Cloud Computing – base software platform for network service functions• Standardization – service provider and Apps vendor interoperability• Network Appliances – become software Apps where feasible
SDN – operators exposing the network to Apps developers• OpenFlow – software platform for an interoperable network data plane• Control Layer – virtualizes Network-as-a-Service (NaaS) for multi-tenancy• Control / Apps Plane – software running on high-volume compute platforms • OpenFlow L4-7 – high-bandwidth network appliances embedded in data plane
Network Functions Virtualisation Relationship with SDN*
* Diagrams from “NFV and SDN: What’s the Difference?”SDN Central, Prayson Pate, Mar 30, 2013
ETSI-ISG NFV:28 Tier-1 SP, >184 companies, >900 delegates2 White Papers, 5 Specs, 9 PoCsNFV phase 2 (2015) -> ImplementationPromote open community, open frameworkONF – Open SDN (OpenFlow):140 companies, board dominated by operators18 SDO liaisons, 17 research relationshipsWhite papers, Soln Briefs, Tech Reports, WebinarsOpenFlow conformance program, 4 LabsSt
rate
gic
Part
ners
hip
TM
External Use 12
NFV Use CasesUse cases map out extensive service provider network coverage and decomposition
Defined Use Cases1) NFVIaaS (2)2) VNFaaS (vPE - vE-CPE) (4)3) VNPaaS4) VNF Forwarding Graphs (2)5) vEPC (2)6) vBTS/vC-RAN (2)7) vGateway (Residential)8) vCDN9) vBroadband
Annotated with PoCs exercised per use case*Identified Solution Space
etsi.org/deliver/etsi_gs/NFV/001_099/001/01.01.01_60/gs_NFV001v010101p.pdf
* Status publically disclosed at time of ONS2014
TM
External Use 13
NFV Proof of ConceptsPoCs are showing initial feasibility within 4 months
1) CloudNFV Open NVF Framework2) Service Chaining for NW Function Selection in
Carrier Networks3) Virtual Function State Migration and Interoperability4) Multi-vendor Distributed NFV5) E2E vEPC Orchestration in an multi-vendor open
NFVI environment6) Virtualized Mobile Network with Integrated DPI7) C-RAN virtualization with dedicated hardware
accelerator8) Automated Network Orchestration9) VNF Router Performance with DDoS Functionality
• Limited Metro Edge to Client Gateway
etsi.org/technologies-clusters/technologies/nfv/nfv-poc
Explored Territory
* Status publically disclosed at time of ONS2014
TM
External Use 14
ONF SDN Architecture OverviewTranslating white papers to actual multi-tenant implementations
White PaperConceptual Vision
ArchitectureOverview
opennetworking.org/sdn-resources/sdn-library/whitepapersopennetworking.org/sdn-resources/sdn-library/technical-papers
TM
External Use 15
ONF ActivitiesDriving Open SDN adoption since 2013
Solution Briefs• OpenFlow-enabled SDN and Network Functions Virtualization• Migration Use Cases and Methods• SDN Security Considerations in the Data Center• OpenFlow-Enabled Mobile and Wireless Networks• SDN in the Campus Environment• Operator Network Monetization Through OpenFlow-Enabled SDN• How OpenFlow-Based SDN Transforms Private Cloud• OpenFlow-Enabled Hybrid Cloud Services Connect Enterprise and Service Provider Data Centers• OpenFlow-Enabled Cloud Backbone Networks Create Global Provider Data CentersApplications Platform• Open Standardization• NBI Info Model, Use Cases• NFV utilizes SDNaaS (partnership)Feasibility• Table Type Patterns (Profiles)• OpenFlow-2.0Interoperability• Conformance Program• Biannual Plug Fest• SDN Solutions Showcase
MarketingEducation
NorthboundInterface
ForwardingAbstractions
Testing &Interop
Wireless &Mobile
OpticalTransport
CarrierGrade
Layer 4-7 SecurityExpansion ONF Relationships, ONS2104 Key Note by Dan Pitt
opennetworking.org/working-groups/working-groups-overview
TM
External Use 16
Freescale is Embracing the NFV / SDN Revolution
Networks getting larger & smarter− Network Traffic – Exponential traffic growth from Mobile,
Cloud, Big Data, BYOD, IoT− NFV – Improve agility, scalability and cost of
provisioning networking services− SDN – A common software platform that provides
network visibility & controllability to network operators− NFV / SDN provides the framework for future networking
innovation
Freescale’s commitment− Multicore processors for flexible solutions to software-
aware networking with packet processing acceleration− Contributions to SDN, NFV standards− 700+ network software engineers globally
SoftwareDefined
Networks
OpenInnovation
NetworkFunctions
Virtualisation
Software-Defined NetworkNetwork Functions VirtualizationFreescale Development− OpenFlow Switch & Controller (v1.3.x)
− Participation in ONF / NFV working groups
− Participated in ONF PlugFest, Jun/Nov 2013
− Participating as a “Founding Participating Company” in the SDN Solutions Showcase at the upcoming Layer123 SDN and OpenFlow World Congress
− Anticipate pilot activity in ONF OpenFlow v1.3.x Conformance Certification Program
− Active customer and partner engagements
TM
External Use 17
Networking Software and Services
DevelopmentTools
RuntimeProducts
SolutionsReference
Linux®
ServicesIntegrationServices
DevelopmentTools
RuntimeProducts
SolutionsReference
LinusServices
IntegrationServices
• CodeWarrior− IDE− Debug− Compiler− Trace
• QorIQ Optimization Suite− Scenarios Tools− DDrV
• Storage Controller• SDN Switch• Wireless LAN• Data Concentrator• Smart Converged
Gateway• Digital Signage
• Commercial Support
• Frozen Branch• Application
Specific Hardening• Feature
Acceleration
• VortiQa Software Products− Application
Identification Software (AIS)
− SDN solutions− Mobile Transport
• Systems Consulting
• Design Services• Porting• Migration
Software Products and Custom Services
TM
External Use 18
QorIQ VirtualizationScalable virtualization technology for the deeply embedded network edge
COSCOS
Multicore Hardware
COS
Linux
LXC LXC LXC
App
CPU
CPU
CPU
CPU
USDPAA USDPAA
• KVM Linux® kernel driver to spin up VMs
• QEMU user space emulator is used in conjunction with KVM
• Solution is open source• Virtual machines is only
limited by particular SoC resources (CPU cycles, memory)
• Topaz is a lightweight AMP framework for partitioning SoC resources
• Best of both worlds– bare metal performance with enforced partitioning
• Resolves many issues around running multiple unsupervised OS’s
• Threads appear as cores to the OS layer
• Fast failover capabilities
• Linux® ContainersOS level virtualization
• Secure partitioning of Linux apps into domains
• Lightweight overhead compared to KVM
• Control resource utilization within domains such as CPU, I/O BW
Deployed withCloud Orchestration
TM
External Use 19
VortiQa PortfolioModule Application
SDN—Switch SDN—Controller
VortiQa application identification software (AIS)
Deep Packet Inspection: Identify the type of traffic on the network
VortiQa mobility transport software
Transport Functions: IPsec, QoS, PDCP and GTP for eNodeBs and Base stations
VortiQa open network (ON) switch softwareData Plane Functions: layer 2, layer 3 and above; firewall, NAT, QoS, DPI, etc. POC available; General availability in March 2014
VortiQa open network (ON) director softwareController Functions: PoC available; General availability in March 2014
NEXT-GENERATION TECHNOLOGY
LinusServices
RuntimeProducts
TM
External Use 20
VortiQa Open Network (ON) Switch SoftwareOpenFlow Switch version 1.3.x datapath with L4-7 extensions
Key Features• Full OpenFlow® v1.3.x compliant with L4-7 extensions: IPFwd, IPSec, Firewall/NAT, QoS• Virtualized datapath instances with unconstrained table pipeline and flow indexing• Multipart messaging support including tables features and port description• Stand-alone and Open vSwitch integration with OVS-DB support
Datapath+ Datapath+
OF-Agent OF-Agent
Network Layer Apps+
Apps+ Apps+ Apps+
Northbound I/F
Dat
a Pl
ane
App
s P
lane
Federated / Multi-TenantLogically Centralize
Control
NBI-Agent+
Con
trol P
lane
VortiQa
TM
External Use 21
Key Features• Full OpenFlow® 1.3.x compliant with vNF Apps: Routing, IPFwd, IPSec, Firewall, QoS• High-performance C-based implementation with zero buffer copy • OpenStack Neutron integration
Datapath+ Datapath+
OF-Agent OF-Agent
Network Layer Apps+
Apps+ Apps+ Apps+
Northbound I/F
Dat
a P
lane
App
s Pl
ane
Federated / Multi-TenantLogically Centralize
Control
NBI-Agent+
Con
trol
Pla
ne
VortiQa
VortiQa Open Network (ON) Director SoftwareEmbedded OpenFlow Controller with pre-integrated Linux open source Apps
TM
External Use 22
Comprehensive Embedded IoT Solutions Landscape
KinetisMicrocontrollersDesign Potential. Realized
Vybrid Controller SolutionsRich Apps in Real Time.
i.MX Applications ProcessorsYour Interface to the World.
QorIQ Processors built on Layerscape ArchitectureAccelerating the Network’s IQ
Real-time, highly integrated solutions with best-in-class 2D
graphics to enable your system to control,
interface, connect, secure and scale.
Industry’s most versatile solutions for multimedia and
display applications, with multicore scalability and market-leading power,
performance & integration.
Industry’s most scalable ultra-low-power, mixed-signal MCU solutions based on the
ARM® Cortex™-M4 and Cortex-M0+ architectures.
Industry’s first software-aware, core-agnostic networking
system architecture for the smarter, more capable
networks of tomorrow – end to end.
Automotive Networking
Industrial
Consumer
Industrial
Consumer
Industrial
Consumer
Industrial
Consumer
Automotive
Freescale has the industry’s broadest range of solutions built on ARM® technology for automotive, industrial, consumer and networking applications.
Scalable Industry Standard Solutions, Software and Development Ecosystem
TM
External Use 23
QorIQ Communications Multicore Roadmap
High Performance40W+ TDP
Mid rangePerformance15-40W TDP
Value<10W TDP
WirelessQonverge
2012 20132Q 3Q 4Q1Q4Q
T4240/4160Up to 12x e6500
20142Q 3Q 4Q1Q 2Q 3Q 4Q1Q
LS3xxxA
LSxxxAT1040/204x e5501
T20804x e6500
LS1020/21/22A2x A7
Production ProposalPlanningExecution
Sample
Production
LS1xxxA
20152Q 3Q 4Q1Q2016
LS3xxxP
LS2xxxA
LS1xxx
LS2xxxA
9131
B4860B4420
B4xxx
T1xxx
LS2xxxA
B2xxx9132
T20814x e6500
T1042/224x e5501
B1xxxB3420/21
SDKsSDK 1.6 SDK 1.7SDK 1.5SDK 1.4
+ AIOP LibrariesUSDPAA for LS
+H/W Table-walkDPAA GSO/GROOpenSSL
4x10GE/12x1GE (DCB )4xPCIex4, 2xRIO, Interlaken-LASEC5-40G,DCE-20G,PME-10G
Pin CompatibilityT2081->T1042/22
PacketAcceleration
Engine
64-BitSupport
TM
External Use 24
New Architecture for a New Network
0
10
20
30
40
50
60
PQ3 P Series T Series Layerscape
Network IO DDR CPU Acceleration CPU + NPU + Accel
Many-core processor approach is not sustainable due to power, software complexity and integration costs
Need to provide right mix of high performance and programmability
Advance Packet Processing• Tightly coupled accelerators
called as C functions
• H/W preloaded task state, headers, stack frame
• Customer programmable
• Run-to-completion model using standard C (C99)
MUST HAVE:
4-6x Performance over general purpose cores in a lower power envelope
TM
External Use 25
QorIQ LS2 Family Key Features
Unprecedented performance and ease of use for smarter, more
capable networks
High performance cores with leading interconnect and memory bandwidth• 8x ARM Cortex-A57 cores, 2.0GHz, 4MB L2
cache, w Neon SIMD• 1MB L3 platform cache w/ECC• 2x 64b DDR4 up to 2.4GT/sA high performance datapath designed with software developers in mind• New datapath hardware and abstracted
acceleration that is called via standard Linux objects
• 40 Gbps Packet processing performance with 20Gbps acceleration (crypto, Pattern Match/RegEx, Data Compression)
• Management complex provides all init/setup/teardown tasks
Leading network I/O integration• 8x1/10GbE + 8x1G, MACSec on up to 4x 1/10GbE• Integrated L2 switching capability for cost savings• 4 PCIe Gen3 controllers, 1 with SR-IOV support• 2 x SATA 3.0, 2 x USB 3.0 with PHY
SDN/NFVSwitching
DataCenter
Wireless Access
TM
External Use 26
QorIQ Hardware AccelerationAutonomous packet processing maximizes virtualized computational mileage
TM
External Use 27
Edge Computing – The Distributed CloudFreescale market-leading performance per Watt per Dollar
DC SolutionsiNIC / SSL AccelCompute / StorageToR/EoR RouterADC / WoC
D
Metro Edge SolutionsMetro RoutersL4-7 AppliancesContent DeliveryEdge-Based Services
M
Access SolutionsAggregation RoutersBroadband AccessMobile Access
A
CPE Access SolutionsCampus RouterWireless APFemto AP
P
IoT GatewayBuilding / FactorySmart Energy TransportationDigital SignageMedical / FitnessRemote Monitoring
G
QorIQ-HighLS3 / T4 / P58~24-Cores1~2.2+GHzDCB EthernetDCE,PME AccelSecurity AccelQorIQ-MidLS2 / T2 / P4/34~8-Core0.8~2GHzDCB EthernetDCE,PME AccelSecurity Accel
QorIQ-ValueLS1 / T1 / P11~2-CoreSecurity AccelAudio SubsysLCD ControllerMotor ControlIndustrial
QorIQ-ValueLS1 / T1 / P22~4-Core0.8~1.4GHzSecurity Accel
FreescaleT4240 1U Box
FreescaleUTM Appliance
Freescale iNICPCIe Card
AMC Cards
FreescaleSmart EnergyData Concentrator Freescale
IoT Gateway
Freescale TowerRapid Prototyping PlatformNo Limits – Make It!
ComputeServer
Freescale802.11ac/nOpenWRT
Enterprise WLAN
FreescaleSmall Cell
DataCenter
EdgeRouter
AccessSystem
Gateway/Router
Ser
vice
-Pro
vide
r Net
wor
ksC
usto
mer
Net
wor
ksIoTGateway
Sensor/Actuator
Sensor/Actuator
Sensor/Actuator
IoTGateway
Sensor/Actuator
Sensor/Actuator
Sensor/Actuator
NFVServices
CPESDN
SDN
SDN
VortiQaSoftware
QorIQProcessors
FreescaleiSCSI SAN
TM
External Use 28
Cleantech Server® 64-bit Product Line
• QorIQ T4240 Processor based 64-bit Server− Industry leading TCA, OpEx and TCO − High compute/bandwidth density per size/weight− Industry leading CoreMark benchmark score
• Servergy’s Value-Added RapidIO Fabric− Extremely scalable high-bandwidth interconnect− RapidIO offers ultra-low/deterministic latency, complete protocol offload, ultra low-power
operation• Proven PowerLinux Software Platform
− Distros (Red Hat, SUSE, Ubuntu, Oracle, etc..)− High-Performance Virtualization Support− Software Use Models (LAMP Stack, Java, SCADA, Enterprise Databases, etc…)− Applications (OpenStack, Eucalyptus, memcached, DRBD, Ceph, Oracle, etc.)
• Mature PowerLinux Developer Ecosystem− Founder, PowerLinuxUsersGroup.com (PLUG)™− Members of global Power.org and LinuxFoundation.com− Remote PowerLinux Environment (RPLE)™ Compute Farm− P-Cubed ™ (PowerLinux Dev/Compute Node Board)− Proven and Mature Global Data Center and Cloud Architecture
“Worlds Highest Performance-Per-Watt 64-bit Power Architecture ® Server!”
D
TM
External Use 29
QorIQ T4240 ProcessorMarket-Leading Compute Density
x86 Thermal Performance Throttling
QorIQ Thermal Independent Performance
Compute Density per Blade
i7
Dual Socket Server
I7 CPUs 260W~300K CoreMark
i7T4
T4s 240W** Tj 105C~700K CoreMark
T4240 Quad
T4
T4
T4
T4
T4s 234W** T j75C~1040K CoreMark
T4240 Sextuple
T4
T4
T4
T4
T4
ProcessorT‐Junction
Deg C25 30 35 40 45 50 55 60 65 70 75
CoreMark 61,000 58,000 58,500 57,000 55,500 52,000 48,000 46,500 42,500 38,000 34,000
CoreMark/ Thread
7,625 7,250 7,313 7,125 6,938 6,500 6,000 5,813 5,313 4,750 4,250
CoreMark 173,488 173,488 173,488 173,488 173,488 173,488 173,488 173,488 173,488 173,488 173,488
CoreMark/ Thread
7,229 7,229 7,229 7,229 7,229 7,229 7,229 7,229 7,229 7,229 7,229
Intel i7 2600
T4240
-42%
-0%
TM
External Use 30
• IPSEC• TCP offload• SDN/Firewall/ACL• Deep Packet Inspection• OpenSSL + record offload• WAN Optimization (WoC)• Apps Delivery Ctrl (ADC)• Vendor defined applications
• iNIC offloads all networking, server focuses on revenue generating applications
• Freescale DPDK driver preserves DPDK applications
• Scalable software compatible virtualized iNIC platform across QorIQ SoCs with C29x key acceleration
• QorIQ hardware acceleration for security, pattern matching, compression and packet processing
10G Eth
OpenFlowAgent
L4-7 Apps
iNIC: QorIQ T2080/T4240 + c29x
10G Eth
10G Eth
10G EthUser Space Open vSwitch
H/W Accel. Packet Forwarding Engine
Veth-port Veth-port Veth-port
DCE SECPME
PCIe Gen-2 x8
x86 Linux Server Platform
Hypervisor
PCIe (SR_IOV) 128VFPF VF1 VF2 VF3 VFn
OpenFlow ControllerVM0
Freescale DPDK Driver
Veth-port
VM1
Veth-port
Freescale DPDK Driver
MQorIQ L2-7 Intelligent NIC (iNIC)Maximizing server revenue in a virtualized networking world
D
VM Management withCloud Orchestration
TM
External Use 31
C29x Crypto CoprocessorPublic/Private Key Management Acceleration
• Public Key Cryptography− RSA, DSA− Diffie Hellman− Elliptic curve (ECC)
• Large key size− Up to 4096-bit
• High-speed transfer rate− PCIe Gen2.0 x1/x2/x4
• Software− Linux® Kernel Cryptographic API− OpenSSL Crypto API
• Operating Mode− Offload: PCIe Accelerator− HSM: HW Security Module Subsystem− x86 or QorIQ Host
C291 C292 C293
Security Engines 1 2 3
Typical Power (65C) ~4W ~6W ~10W
2048 bit RSA OPS/sec 8K 18K 32K
1024 bit RSA OPS/sec 31K 64K 116K
Dev board shown, ODM production board available
ENet
Host PCIe
HSM Link
C29xC29xC29x
DDRDDRDDR Flash DDR Flash HSMBoot/Store
MD
TM
External Use 32
APP
APP
Service
Service APPDB
Data Center
APP
APP
Edge Network Service Network
Metro Network Core NetworkData Center Cloud
Internet/Enterprise Network
Consumers, Enterprise,
Government or City, Network Operator
Low latency
•Low RTT brings a responsive & immersive consumer experience and enables new M2M scenarios.
Backhaul avoidance
•Processing and caching at the edge can reduce uplink and downlink traffic flow.
Core network offload
•Processing at the edge can reduce load on core network, especially for M2M cases
Device CPU offload
•Offloading processing from the device to enables advanced immersive and assistive solutions with reduced device CPU requirements and lower battery drain.
Edge & location information
•Edge information and location has better fidelity than at the core. More accurate, higher sample frequency, lower latency of delivery.
The edge environment has capabilities that can be exploited?
IBM Edge Apps
Freescale QorIQ
IBM Edge-Based Software ServicesBenefits of running applications at the network edge on QorIQ processors
PAM
TM
External Use 33
L2-7 SDN Switch with Service ProvisioningExtending OpenFlow for L4-7 service deployment in the data plane
Scalable Integrated SDN SwitchL3+ SDN switch featuring OVS offloading with multicore enhancements:• VortiQa ON Switch: OF-Agent and L4-7 service data plane• VortiQa ON Director: embedded OF-controller with pre-built Linux L4-7 Apps• Scalable across the virtualized QorIQ multicore networking SoCs platform• Scalable C29x crypto private/public key acceleration solutions• Pin-compatibility across QorIQ T2081/T1042/T1022 processors
OpenFlow OF-AgentEmbedded OF-ControllerL4-7 Service Processing
QorIQ T2081(OF-Agent / L4-7)(opt OF-Controller)
PCIeC29x
(SSL Key)C29x(SSL Key)C29x(Key Accel)
M
ToR/Edge Switch BoxOpen vSwitch OffloadingOF-v1.3 capable switch
Centec48-Port Switch(L2-3+ Switch)
PCIe QorIQ P1010Mgmt CPU
OF-Agent
10GELinks
V350
VortiQa
D A P
VM Management withCloud Orchestration
TM
External Use 34
NEW
FemtoBSC9131/0 (45 nm)8-16 users
PicoBSC9132 (45 nm)32-100 users
MetroB3421 (28 nm)100-256 users
Macro/CRANB4860 (28 nm)1000+ users
• Broad portfolio from femtocell to macrocell with on-time, on-specification release track record• Common architecture and software tool sets including CodeWarrior Development Suite and operating systems• Software and tools ecosystem catering for Tier-1 wireless OEMs and broad market customers• Rich third-party ecosystem for tools, operating system and application software
Freescale Complete SoC Portfolio for Wireless Base StationsAddressing All Market Trends• QorIQ Qonverge Base Station-on-Chip SoC
Series
• Advanced core and acceleration technologies, highly-balanced architectures for baseband processing integration, advanced process technologies
• Freescale delivers industry’s first complete SoC portfolio from home femto to multi-sector macro base stations
• Software compatibility across different devices
• Layer 1 and transport software stacks for small cell solutions to further expedite time to market
• Adopted by industry-leading base station OEMs
AM
TM
External Use 35
BSC9131 Reference Design Femtocell Platform
BSC9131 Form Factor Reference Design Board
• Features:− Complete communications platform enabling CDMA2K, LTE,
WCDMA/HSPA+ − Dual-band system covering up to 2.7 GHz− Development and debugging tools available from Freescale and our
partners
• Benefits:− Form factor design helps speed customers time to market− Turn-key hardware design − Seamless RFIC integration solutions
• Demonstrations Available:− LTE FDD− Wi-Fi + LTE FDD
P
TM
External Use 36
IoT SDN GatewayNFV managed services to an on premise QorIQ SDN Gateway
HANPAN WAN
WLAN
SDNIoT Gateway
Intelligent Monitoring and Response:• Seamless connectivity of devices to internet• Big Data analysis and context sensitive response• Service Provider Cloud managed premise SDN gateway• Deploy edge services in virtualized gateway environment• “Anytime – anywhere” access & control
PC
Mobile
Broadband
ICD(monitor)
Smart TV
Tablet
BluetoothLow Energy
DataCenterEdge
NFVServices
G
Wi-Fi Security Cameras
MedicalFitness
Transportation
Energy
BuildingFactory
Digital Signage
P
VM Management withCloud Orchestration
TM
External Use 37
Freescale Tower PlatformEnabling rapid prototyping of IoT Solutions
Choose Peripheralsand Plug-Ins (TWRPIs)
Connect with TWR-ELEV
Choose ProcessorTWR-P1025
G
PROFIBUS ASIC/FPGA
RS‐485Transceiver
• PROFIBUS L2 on QE• Single-chip solution• Master & Slave• freescale.com/profibus
• Programmable Logic Controller (PLC)• Pre-integrated Commercial Software• PLC + EtherCAT + RTOS• freescale.com/goPLC
• High Availability Ethernet• Primary for Power Substation market• Low-cost industrial multi-node rapid prototyping
LAN ALAN B
DAN
• WLAN-AP• Supports mini-PCIe Wi-Fi cards• OpenWRT software stack• Tower Wi-Fi cards (freescale.com/Tower)
• IoT Gateway• Supports mini-PCIe Wi-Fi cards• LCD, ZigBee, Sub-GHz, Metro, SNAP• Tower cards (freescale.com/Tower)
P
TM
External Use 38
IoT Service Delivery DemosFreescale IoT service delivery demos on NFV/SDN technology
DataCenter
EdgeRouter
AccessSystem
Gateway/Router
Ser
vice
-Pro
vide
r Net
wor
ksC
usto
mer
Net
wor
ksIoTGateway
Sensor/Actuator
Sensor/Actuator
Sensor/Actuator
IoTGateway
Sensor/Actuator
Sensor/Actuator
Sensor/Actuator
NFVServices
NIDCPESDN
SDN
SDN Demos
Dem
onst
rate
d S
ervi
ce D
eliv
ery
QorIQ T4 Server
QorIQ T2 OF-Agent / L4-7 ProcessingT2 OF-Agent + L4-7 ProcessingCentec Award Winning ToR SDN SwitchVortiQa v1.3 OF-Agent+L4-7IBM Edge-based Services
Metro Edge / Data Center ToR
BSC913xFemto Cell
CPE / IoT GatewayQorIQ T1/LS1 802.11ac/nWLANGatewayOpenWRTVortiQa v1.3 OF-Switch+L4-7Edge-based Services
2
3
QorIQ T4+C29x Compute / iNICiNIC OVS offload with DPDK supportOpenStack / Open Daylight FrameworkVortiQa v1.3 OF-Controller+L4-7
Data Center1
VortiQaSoftware
QorIQProcessors
VM Management with Cloud Orchestration
DC SolutionsiNIC / SSL AccelCompute / StorageToR/EoR RouterADC / WoC
D
Metro Edge SolutionsMetro RoutersL4-7 AppliancesContent DeliveryEdge-Based Services
M
Access SolutionsAggregation RoutersBroadband AccessMobile Access
A
CPE Access SolutionsCampus RouterWireless APFemto AP
P
IoT GatewayBuilding / FactorySmart Energy TransportationDigital SignageMedical / FitnessRemote Monitoring
G
TM
External Use 39
SummaryFreedom to locate service deployment anywhere with high-agility!
• FreeSCALE Breadth− QorIQ: data center to gateway communication processors− QorIQ Qonverge: mobile access baseband− C29x: SSL Crypto acceleration coprocessors− Kinetis: MCUs for deeply embedded IoT applications− Xtrinsic: wide range of sensors
• High-Agility− Data center to gateway NFV virtualization− Versatile edge computing deep into the premise edge− VortiQa OpenFlow v1.3 SDN with L4-7 extensions− Complementary QorIQ optimized open source solutions
• Elasticity− QorIQ multicore SoCs serve a wide application set− Best-in-Class performance per watt multicore embeds anywhere
TM
External Use 41
Data Path Acceleration Architecture Philosophy
• DPAA is design to balance the performance of multiple CPUs and Accelerators with seamless Integrations− ANY packet to ANY core to ANY accelerator or network
interface efficiently WITHOUT locks or semaphores.• “Infrastructure” components− Queue Manager (QMan)− Buffer Manager (BMan)
• “Accelerator” Components− Cores− Frame Manager (FMan)− RapidIO Message Manager (RMan)− Cryptographic accelerator (SEC)− Pattern matching engine (PME)− Decompression/Compression Engine (DCE)− DCB (Data Center Bridging)− RAID Engine (RE)
• CoreNet− Provides the interconnect between the cores and the
DPAA infrastructure as well as access to memory.
D$ I$
D$ I$L2$ e500mc
CoreD$ I$
CoreNet™Coherency Fabric
BufferMgr
Frame Manager1GE 1GE
1GE 1GE10GE
D$ I$
D$ I$L2$ e500mc
CoreD$ I$
QueueManager
Sec 4.x PME 2
RMan RE
Parse, Classify,Distribute
Buffer
1/10G 1/10G1G
1G
1G
1G
Frame Manager
1G
1G
D$ I$
D$ I$L2$ e6500Core
D$ I$
D$ I$
D$ I$L2$ e6500Core
D$ I$
DCE DCB
P Series T Series
… …
… …
TM
External Use 42
Security Block - Version 5.0
Public Key Hardware Accelerators (PKHA)RSA and Diffie-Hellman (to 4096b)Elliptic curve cryptography (1023b)
Data Encryption Standard Accelerators (DESA)DES, 3DES (2K, 3K)ECB, CBC, OFB modes
Advanced Encryption Standard Accelerators (AESA)Key lengths of 128-, 192-, and 256-bitECB, CBC, CTR, CCM, GCM, CMAC, OFB, CFB, and XTS
ARC Four Hardware Accelerators (AFHA)Compatible with RC4 algorithm
Message Digest Hardware Accelerators (MDHA)SHA-1, SHA-2 256,384,512-bit digestsMD5 128-bit digestHMAC with all algorithms
Kasumi/F8 Hardware Accelerators (KFHA)F8 , F9 as required for 3GPPA5/3 for GSM and EDGEGEA-3 for GPRS
Snow 3G Hardware Accelerators (STHA)Implements Snow 3.0
ZUC Hardware Accelerators (ZHA)Implements 128-EEA3 & 128-EIA3
CRC UnitStandard and user defined polynomials
Random Number Generator, random IV generation
Supports protocol processing for the following: • IPSec• 802.1ae (MACSEC)• SSL/TLS/DTLS• 3GPP RLC• LTE PDCP• SRTP• 802.11i (WiFi)• 802.16e (WiMax)
Job QueueController
DescriptorControllers
CHAs
DM
AR
TIC
QueueInterface
Job Ring I/F
TM
External Use 43
Pattern Matching Engine (PME) 2.X Overview
• Regex support plus significant extensions:− Patterns can be split into 256 sets each
of which can contain 16 subsets− 32K patterns of up to 128B length− 9.6 Gbps raw performance
• Combined hash/NFA technology− No “explosion” in number of
patterns due to wildcards− Low system memory utilization− Fast pattern database compiles
and incremental updates• Matching across “work units”− Finds patterns in streamed data
• Pipeline of processing− PME offers pipeline of filtering, matching,
and behavior base engine for complete pattern matching solution
On-ChipSystem
BusInterface
PatternMatcherFrameAgent
(PMFA)
DataExamination
Engine(DXE)
StatefulRule
Engine(SRE)
KeyElementScanningEngine(KES)
HashTables
Access to Pattern Descriptors and State
Pattern Matching Engine components
Cache Cache
User Definable Reports
Core
Net
BM
anQ
Man
TM
External Use 44
DCE Logical Block Diagram
• Deflate− As specified as in RFC1951
• GZIP− As specified in RFC1952
• Zlib− As specified in RFC1950− Interoperable with the zlib 1.2.5
compression library• Encoding− supports Base 64 encoding and
decoding (RFC4648).
• Operate up to 600 MHz− 10 Gbps Compress− 10 Gbps Decompress− 20 Gbps Aggregate
32KBHistory
Frame Agent
QManI/F
BManI/F
BusI/F
Decompressor
Compressor
QMan Portal
BMan Portal
ToCorenet
4KBHistory