About EANTC

1 EANTC Test Report: Huawei s Cloud-based BNG Page 2 of 15 About EANTCEANTC ( european AdvancedNetworking Test center ) isinternationally recognized asone of the world's leadingindependent test centers fortelecommunication in Berlin, the companyoffers vendor-neutral consultancyand realistic, reproducible high-quality testing servicessince 1991. Customers include leading networkequipment manufacturers, tier 1 service providers,large enterprises and governments 's Proof of Concept, acceptance tests andnetwork audits cover established and next-generationfixed and mobile network of ContentsIntroduction .. 2 Test Highlights .. 2 Executive 3 Cloud-Based BNG Architecture .. 3 Cloud-based BNG Test Setup .. 4 Functionality Test Bed .. 4 Performance and Scalability Test Bed .. 5 Solution Under Test .. 6 Cloud-based BNG Functionality.

2 7vBNG-UP Provisioning Using 7 Subscriber Access Functionality .. 8 Centralized IP Address Pool Management .. 8 Multicast Functionality .. 8 Carrier-Grade Network Address 9On-Demand Bandwidth Reservation .. 9 Hierarchical Quality of Service (HQoS) .. 9 Performance and Scalability .. 10 Subscriber Session Setup Rate .. 10 Subscriber Session Capacity .. 10vBNG-UP Devices Management Scalability .. 11 Resiliency .. 11 Data center Disaster Recovery .. 12 Subscriber Database 12 Centralized Resource Management .. 13 Conclusion .. 14 IntroductionEANTC verified a set of functionality, performance,resiliency and security features of Huawei sBroadband Network Gateway (BNG) solution back inFebruary of 20171. Following the solution s continueddevelopment and success of previous tests , the vendorrecommissioned EANTC for a second round of new testing phase took into account the solution sadditional performance and high-availability optionsas well as recently added functionalities.

3 The test casesdesign emphasized on the broadband subscriber squality of experience as well as the reliability,manageability and architectural benefits for 1 below illustrates Huawei s Cloud-based BNGdeployment with a separation of the control and userplane. The central part of the Cloud-based BNGsolution is the virtualized BNG Control Plan (vBNG-CP) component, which is the implementation of thecontrol plane for the broadband access. Thevirtualized BNG User Plane (vBNG-UP) is responsiblefor user traffic forwarding based on flow definitionretrieved from Highlights Cloud-based BNG solution supported dual stack IPoE and PPPoE plus dual-stack PPPoE session with Prefix Delegation Demonstrated VXLAN and CUSP configuration using NETCONF and tested secured CUSP communication Up to million single stack IPv4 or IPv6 subscriber sessions per vBNG-CP (tested without RADIUS authentication and accounting) Established million IPoE or PPPoE single stack sessions at the average rate of 10,400 sessions/s without RADIUS authentication Scaled up to 200 vBNG-UP devices per vBNG-CP deployment Cloud-based BNG supported redundancy concepts Cloud-based BNG solution supported multicast, CGN and HQoS functionalityEANTC Test Report.

4 Huawei s Cloud-based BNG Page 3 of 15 Our tests substantiated Cloud-based BNG solution scontrol plane performance and scalability, function-ality, security and resiliency mainly using two differenttest beds as described in the section Cloud-basedBNG Test Setup .Figure 1: Control and User Plane SeparationExecutive SummaryOur team of engineers successfully executed andverified a series of tests at Huawei s lab in Nanjing,China. Huawei s Cloud-based BNG proved to performexceptionally well, establishing new PPPoE or IPoEsingle stack sessions at an average rate of10,400 sessions per second. EANTC witnessed that asingle vBNG-CP deployment provided up million of single stack user session performance numbers were achieved without abackend performing RADIUS authentication andaccounting and also without transmitting of QoSpolicies for the segregated control and user plane architecture ofCloud-based BNG solution proved to manage up to200 vBNG-UP devices using single Cloud-based BNG solution was subject to BNG-UP access link and vBNG-CP failure scenarios whereinit successfully recovered broadband access services.

5 Our tests also verified a set of Cloud-based BNG sfunctionalities such as dual-stack subscriber accesssupport, on-demand subscriber bandwidth reser-vation, Hierarchical Quality of Service (HQoS),Carrier-Grade Network Address Translation (CGNAT)and the manageability test area, EANTC verified thesuccessful usage of the NETCONF protocol by vBNG-CP s management module to provision secured CUSP(Control plane and User plane Separated BNGprotocol) and VXLAN tunnels on vBNG-UP EANTC witnessed centralized Cloud-basedBNG resource visualization capability of Huawei'sNetwork Cloud Engine (NCE) management BNG ArchitectureThe key element of Cloud-based BNG is theseparation of the control and user plane in a softwaredefined networking (SDN) and network functionvirtualization (NFV) architecture. The intention is tohandle the subscriber session signaling and additionalservices in a Cloud-based, virtualized controller, whilethe forwarding of user data is handled by the vBNG-UP central part of the Cloud-based BNG solution isthe vBNG Control Plan (vBNG-CP).

6 On the southbound interface, the vBNG-CP managesvBNG-UP devices. The vBNG-UPs can be controlledvia CUSP protocol to forward and handle specifictraffic flows. They use VXLAN encapsulation totransport necessary data from the subscriber s sessionsto the vBNG-CP during the session establishmentprocess. The vBNG-CP itself is a set of virtual networkfunctions (VNFs) using the standard MANO (NFVM anagement and Orchestration) 2: Cloud-Based BNG-CP ArchitectureAs shown in the Figure 2, vBNG-CP contains 5different RouterSubscriberPPPoE/IPoE sessionVXLANUser planeControl planeCUSPR outerUPMNG-BUPACC-BFWD-Bx2 OVSOMU-BControl PlaneswitchManagementswitch1 GbE link10 GbE linkFabric virtual linkBase virtual link(SR-IOV)x2 UPMNG-AUPACC-AFWD-Ax2 KVM/QEMUOVSOMU-AKVM/QEMUx2 Control linkComputing NodeVirtual MachineSwitchEANTC Test Report: Huawei s Cloud-based BNG Page 4 of 15 The UPMNG (User Plane Management) VMprocesses BRAS services (such as usermanagement, AAA, and RADIUS), managesOpenFlow and NETCONF channels between agroup of UPs and CPs, and manages UP devicestates.

7 A group of UPs corresponds to a process ofthe UPMNG VM. Multiple process instances aredeployed on the VM. UPMNG instances run in anactive/standby configuration on different computenodes to provide resilience against faults. EANTC verified the scale-in and scale-out and resiliencyfunctionality of UPMNG modules during the initialtesting phase in February of 2017. The testedsoftware version of the vBNG-CP was HUAWEIVNE 9000 Patch Version: V100R003 SPH001. UPACC (User Plane Access Control) componentsprocesses user access protocol packets, such asPPPoE/IPoE packets, sent by the vBNG-UP devicesto grant user access. UPACC stores the informationof PPPoE and IPoE subscribers and it can scalebased on the number of line cards installed andconfigured on the vBNG-UP devices. UPACC instances run in an active/standby configurationon different compute nodes to provide resilienceagainst faults.

8 This is one of the key deploymentchanges on this vBNG-CP version compared to theprevious version that we tested in February of2017. OMU (Operational and Management Unit)manages UP resources (such as IFNET, VPN, androute) and is resposible for system state monitoring. FWD (Forwarding) components manage the IPchannel between the vBNG-CP and vBNG-UPelements. Load balancing is used to implementmultiple instances. In our tests , we created a poolof 2 FWD instances on the vBNG-CP to providesufficient capacity for 20 million compute nodes use KVM/QEMU as thevirtualization platform, and OpenStack for theorchestration of the BNG Test SetupAs shown in Figure 3 and Figure 4, Huawei deployedtwo test beds for this testing phase; one for thefunctionality, resiliency and security testing andanother for performance and scalability testing.

9 Inboth test beds Huawei used the same software versionof vBNG-CP and vBNG-UP devices. Three differenttypes of vBNG-UP devices were used in the function-ality test bed while for the performance tests Huaweideployed a fourth vBNG-UP type. According toHuawei all the four vBNG-UP devices deployed in thetest beds can support the tested functionality. AlsoHuawei claims that any device from their NE40 EUniversal Service Router1 and ME60 MultiserviceControl Gateway2 lineups can be used as verify the function and traffic forwarding of theCloud-based BNG components, we used an externaltraffic generator, the TestCenter N11U from Spirentconnected to the vBNG-UP devices on the subscriberside and to the core router on the network Test BedFor our functional and security tests we deployed avBNG-CP component on a set of compute used one control node and two computenodes for the vBNG-CP deployment shown schematically in Figure 1included the minimal requirements of the vBNG-CPcomponents in a redundant active/standbyconfiguration for the functionality external RADIUS server was used forauthentication and accounting of the user sessions.

10 Inaddition, EANTC tested the following features andfunctionality in Huawei s Cloud-based BNG solution: Single stack, dual-stack including dual-stack withPrefix Delegation (PD) user access Multicast Network address Translation (NAT) Quality of service (QoS) Resiliency featureHuawei used ME60-X8, NE40E-X8 and NE40E-X2-M16 devices utilized as vBNG-UPs in the functionalitytest X16A, X8A, X3A, X16, X8, X3, X2-M16A, X2-M8A, X2-M16, X2-M8, M2F, M2H, M2K and X1-M42. X16A, X8A, X16, X8, X3, X2-M8A and X2-M16 AEANTC Test Report: Huawei s Cloud-based BNG Page 5 of 15 Figure 3: Test Setup Functionality TestsPerformance and Scalability Test BedFor the performance and scalability tests , we used fiveHuawei NE40E-X8 vBNG-UP devices. Each devicewas populated with 4 Line Processing Unit (LPU)modules (2 Physical Interface Cards (PIC) per LPU).Huawei claims that a NE40E-X8 can support up to512,000 subscribers with the minimum requirement of4 LPUs.