Light Reading
Who's responsible when something goes wrong in a world of virtual functions running on commercial hardware?

Liability Issues Increase in Virtual World

Carol Wilson
6/4/2014
50%
50%

NICE -- TM Forum Live! -- For all the admitted enthusiasm about network functions virtualization here, there is also a growing number of concerns being raised here, the most recent being that of how liability is shared for service failures or outages once multiple software-based functions run on logically separate hardware.

In multiple sessions on NFV, service providers have admitted there is not yet a clear understanding of how liability will be shared and how service level agreements (SLA) will be designed, delivered, and guaranteed once they move off purpose-built telecom hardware onto more agile virtualized network gear.

"When you have different providers providing virtual network functions on the same NFV infrastructure, you need to take into account the different roles," said Laurent Leboucher, VP of APIs and Digital Ecosystems for Orange (NYSE: FTE) in a Wednesday morning panel. "When something goes wrong, who is responsible? This is a new source of complexity, making fault management more difficult. We will need to manage this complexity."

The overall role of managing VNFs will fall to the network orchestrator, says Caroline Chappell, senior analyst with Heavy Reading and chair of the session at which Leboucher was speaking. "The orchestrator will have to understand the implications of where it places specific VNFs."

Those decisions will be based on factors such as liability, security, network performance and other business issues, all of which now will typically become part of the contract process. A company providing a VNF will also provide requirements for running it. Those requirements become part of the policies put in place with the network orchestrator, Chappell says. As for the hardware running the virtual functions, it is part of the NFV infrastructure, which is what provides SLAs up to those VNFs, she says.

"The service provider will have to have a well-mapped, well-managed NFV infrastructure," she adds. The hope is the industry can get a common approach to the NFV infrastructure that can be trusted.

"The liability then lies with whoever runs the NFV infrastructure, and that can be an operator or a systems integrator," Chappell says. "The role of systems integrators could change under virtualization."

The Heavy Reading analyst says the challenge will be to be able to abstract the virtual infrastructure at each layer of the network, which could potentially lead to separate SLAs and performance requirements for individual layers, creating the need for understanding who is responsible for what.

It's one more layer of complexity for the technology ultimately being counted on to simplify the network operator's efforts to bring service to market more quickly.

— Carol Wilson, Editor-at-Large, Light Reading

(11)  | 
Comment  | 
Print  | 
Newest First  |  Oldest First  |  Threaded View
Page 1 / 2   >   >>
TomNolle
50%
50%
TomNolle,
User Rank: Light Sabre
6/6/2014 | 8:20:25 AM
Re: It's all about Federation
No, but we're clearly talking past each other.  I don't disagree with your points, so let's just leave it at that.
Joe Stanganelli
50%
50%
Joe Stanganelli,
User Rank: Light Sabre
6/6/2014 | 3:33:00 AM
Not so much unclear; just obscure, maybe
Well, it's unclear unless you're an attorney or insurance specialist with a modicum of data privacy knowledge.  Mostly it has to do with basic contract law, although special regulations may come into play as well, depending upon the jurisdiction (as discussed here).

This is why cyber insurance is becoming more popular.  Your cyber insurance carrier can help clarify your liabilities for you, and a good cyber insurance policy can cover a wide range of things you wouldn't normally think of.
brookseven
50%
50%
brookseven,
User Rank: Light Sabre
6/5/2014 | 7:57:51 PM
Re: It's all about Federation
Tom,

You are missing the point.  Let's go down the road 10 years and say there are 100 different products approved for deployment in virtual environment by 1 carrier.  The carrier now has to know the valid combination of instances to run on the shared infrastructure.  Even if it is ONLY sharing with itself...it still has to know.  

Unless we are saying that 1 hardware server = 1 application, then we are running a number of possibly different application on the same hardware.  Once you do that, the ability to prove that a server can support that load becomes difficult in a test and integration environment.

Now I have done this in a SaaS vendor in the IT space.  The way we dealt with it was to build standard packages of VMs that can be run on the same server and test that as a unit.  We could do that, because we were not offering the broad arrange of services that you see in a carrier. We only did this on our servers in our data centers and we only bought 1 type of server.  With that we were able to predict performance across a number of load variations.  Even then, we knew there were potential risks to what we were doing.

Which is sort of the problem here.  To keep to the same level of assurance that is normal in the custom hardware space, lots of the desired flexibility is lost.  Remember you have to be able to support this network with relatively low level people.  The software equivalent of card swappers.

Again, I repeat - many of these challenges already exist inside of business critical SaaS operations in the IT space.  They have been dealt with.  Let me use one that most folks are familiar with....Anybody study the implementation of Gmail in your group?  Its a 24/7/365 service that has scaled massively.  People complain bitterly when their are interruptions.  Just saying, it might be a good place to start.

seven
TomNolle
50%
50%
TomNolle,
User Rank: Light Sabre
6/5/2014 | 4:57:39 PM
Re: It's all about Federation
I think that's the point operators are raising with Carol, in two dimensions.  First, it's complex enough to figure out what an SLA means when the service elements are hosted components instead of fixed appliances.  Second, it's harder if you assume that the pool of virtual functions and NFV Infrastructure isn't totally homogeneous; that there are different contributors perhaps demanding different configurations.  I think that most operators will never support a vast mix-and-match component/resource universe for that reason; they'll offer users some preconfigured choices to let them pick what they want, and provide SLAs on the combinations they've prequalified.
Yulot
50%
50%
Yulot,
User Rank: Moderator
6/5/2014 | 4:41:38 PM
Re: It's all about Federation
@TomNolle: You are right to refer to it being magnified. The risk is indeed always there. Even in "traditional" or non virtualized networks, operators are not managing very well the end-to-end chain of devices, network elements and applications. They sometimes do a good job on a per segment basis, but they fail to really know their performance throughout the end to end chain at one specific moment in time, to understand how or what degrades the service. This is also why they never really commit to minimum SLA, but rather quote what the maximum can be in optimal conditions instead. So I guess it will be magnified indeed in virtualized or SDN environments.
TomNolle
100%
0%
TomNolle,
User Rank: Light Sabre
6/5/2014 | 1:37:29 PM
Re: It's all about Federation
I didn't make that assumption, actually.  I was responding to Carol's point about the diversity of suppliers, which is different from the question of whether you can write an SLA for a VNF hosted on shared infrastruture.  Whatever the crosstalk issues are with respect to VNFs on VMs, they're similar to issues of how traffic from one source impacts other users who share routers or trunks.
brookseven
50%
50%
brookseven,
User Rank: Light Sabre
6/5/2014 | 12:53:33 PM
Re: It's all about Federation
Tom,

There is an assumption in your comment that the working of one VM on a server can not in any way impact the workings of another.  That is not true.  There is all kinds of separation, but if you load up instances on other VMs on the same machine then there is less CPU available for your VM.  The challenge with that is that these compute peaks can happen inside the time to trigger a new instance being created to offload work.

You can't say that you are on a shared infrastructure and make an assumption that you have absolute control on the things you are sharing.

seven

 
jabailo
50%
50%
jabailo,
User Rank: Light Sabre
6/5/2014 | 12:45:22 PM
Me and My Landlord
I wonder if these issues will end up like those between me and my landlord.

This past week I have been besieged in my apartment with toxic smells coming from my neighbors back patio.   It's like a combination of rug cleaner and trash (I think it's used fluid).  

I complained and the result was a ten day notice for him to clean up his property.  However, that means I could be smelling this result for 10 days more.

Everyone is doing everything right according to the rules, but the problem doesn't get solved.
TomNolle
50%
50%
TomNolle,
User Rank: Light Sabre
6/5/2014 | 9:02:12 AM
Re: It's all about Federation
If that's their concern it would be interesting, because it suggests a lot more disorder in selecting and on-boarding VNFs than we now have in controlling how devices are admitted into networks.  Most of the operators I've talked with are assuming that they would have a very specific process for certifying functionality in their labs, just as they have for physical devices like switches, routers, firewalls, etc.  The security risk associated with relaxing VNF certification processes would IMHO be more of an issue than SLA risks.

I think the biggest risk on the SLA front is that NFV is still a kind of microcosmic process and SLAs are still an end-to-end requirement.  If you can't manage all of the components of a service in a consistent way you can't guarantee it, no matter what technology you use.  NFV introduces new technology choices and so it magnifies that risk, but SDN would do exactly the same thing.
Carol Wilson
50%
50%
Carol Wilson,
User Rank: Blogger
6/5/2014 | 5:21:18 AM
Re: It's all about Federation
Tom,

That's an interesting perspective. What I'm hearing here is individual carriers talking about how they guarantee SLAs for their own customers and negeotiate with their own hardware and software suppliers when their own networks are based on VNFs from different companies running in generic hardware from someone else. 

It's not something they've dealt with in the past. 
Page 1 / 2   >   >>
Flash Poll
From The Founder
It's clear to me that the communications industry is divided into two types of people, and only one is living in the real world.
LRTV Custom TV
Razorsight Expert's Advice on Real-Time Analytics

11|27|14   |   1:43   |   (0) comments


Razorsight's powerful cloud-based Predictive Analytics solutions are used by the world's leading communications and media brands to drive smarter decisions, enable faster actions and optimize outcomes. Get expert advice.
LRTV Interviews
From 4G to 5G: Alcatel-Lucent's Dave Geary

11|25|14   |   09:09   |   (1) comment


Dave Geary, President of Wireless at Alcatel-Lucent, talks about the evolution of the 4G market, small cells, partnerships, 5G and the IoT.
LRTV Huawei Video Resource Center
Building a Secure Telefonica Network With Huawei's High-End Firewall

11|24|14   |   4:37   |   (0) comments


Andrew Davies, IP architect of the Telefonica, a leading digital communications company, discusses the Huawei security gateway solution and putting the solution into the testbed.
LRTV Huawei Video Resource Center
Huawei Partners with Spirent to Verify CE12816's 10GE Port & TRILL Networking Capabilities

11|24|14   |   2:50   |   (0) comments


Spirent Communications is the world's leading supplier for telecom testing appliances and solutions. Spirent has been in a close partnership with Huawei for a long time.
LRTV Huawei Video Resource Center
Saudi Airlines & Its ICT Transformation

11|24|14   |   2:07   |   (0) comments


In this video, Saudi Airlines discusses its network problems and how Huawei's Agile Network is its all-in-one solution.
LRTV Huawei Video Resource Center
Huawei's Agile Switch Benefiting Saudi Arabia's Yamamah Hospital

11|24|14   |   2:40   |   (0) comments


Saudi Arabia's Yamamah Hospital speaks about how Huawei's Agile Switch has improved the medical service's network infrastructure.
LRTV Huawei Video Resource Center
FanPlay & Huawei Build a Wireless Agile Smart Stadium

11|24|14   |   2:13   |   (0) comments


FanPlay is a cloud-based white label service, which is effectively a football fan engagement platform underpinned by mobile payment technology.
LRTV Huawei Video Resource Center
Building an Agile Stadium

11|24|14   |   3:54   |   (0) comments


Stadiums may be thousands of tons of concrete and steel, but they now need to be agile. Being at the stadium may not be as alluring as it once was. Sports franchises and stadium operators discuss how to get fans back.
LRTV Huawei Video Resource Center
Huawei Helps ChinaCache Tackle Challenges in the Internet Industry

11|24|14   |   3:09   |   (0) comments


ChinaCache is China's largest content distribution network supplier. Huawei's CE12800 has provided ChinaCache with very strong support in its establishment of an infrastructure network.
LRTV Huawei Video Resource Center
Cefinity on Managed Security Services & Next-Generation Firewall

11|24|14   |   7:05   |   (0) comments


Cefinity is a cloud management service provider in Southeast Asia. Ivan Zhang, CEO of the company, discusses the implementation of security service management in the cloud era.
LRTV Huawei Video Resource Center
Huawei's Agile Gateway in the Eyes of Cefinity

11|24|14   |   2:11   |   (0) comments


Cefinity is a managed service provider for enterprise networks. The company currently uses Huawei's AR series routers for the most complete range of functions. CEO Ivan Zhang speaks about the advantages of the AR series routers.
LRTV Huawei Video Resource Center
CTO of Bus-Online Talks About Huawei's Agile Gateway

11|24|14   |   2:53   |   (0) comments


Bus-Online covers around 100 million users everyday. In addition to providing mobile TV, and advertising services to the public, Bus-Online has also entered the field of mobile Internet.
Upcoming Live Events
December 2, 2014, New York City
December 3, 2014, New York City
December 8-10, 2014, Reykjavik, Iceland
February 10, 2015, Atlanta, GA
April 14, 2015, New York City, NY
May 6, 2015, McCormick Convention Center, Chicago, IL
May 13-14, 2015, The Westin Peachtree, Atlanta, GA
June 9-10, 2015, Chicago, IL
Infographics
Irish Telecom outlines the rise of VoIP technology, including its adoption within businesses and their perception of its quality.
Hot Topics
Net Neutrality Even Mark Cuban Could Love
Mitch Wagner, West Coast Bureau Chief, Light Reading, 11/26/2014
Eurobites: Net Neutrality Battle Looms
Paul Rainford, Assistant Editor, Europe, 11/27/2014
Why 5G Is a Different Beast
Robert Clark, 11/26/2014
New Juniper CEO Can Be Thankful for $14.5M
Mitch Wagner, West Coast Bureau Chief, Light Reading, 11/25/2014
Amazon Eyes Ad-Supported Video – NY Post
Mari Silbey, Independent Technology Editor, 11/25/2014
Like Us on Facebook
Twitter Feed