ONES 4.4 Release: Key Features for AI Fabric Visibility and Automation


Aviz Networks has released ONES 4.4, the latest version of its Open Networking Enterprise Suite. This release improves fabric visibility, access control, deployment options, and AI fabric automation for multi-tenant, multi-vendor environments.

1. Cumulus Buffer Histograms
ONES 4.4 collects ASIC buffer histograms and shows them as heat maps. Two new widgets sit under Monitor → Traffic → Advanced: Egress Buffer Depth Histogram (per traffic class) and Ingress Buffer Depth Histogram (per priority group). Hovering over a cell shows the depth range, share of samples, and dwell time.

2. QoS Buffer Metrics
Seven new widgets track ingress, egress, headroom, and pool shared buffer occupancy, plus shared buffer pool occupancy on the Capacity page. They help validate lossless (RoCE) configurations and catch buffer exhaustion early.

3. RADIUS Authentication
ONES acts as a RADIUS client and hands credential checks to a RADIUS server such as FreeRADIUS, which validates users against OpenLDAP or Active Directory. Optional MFA with Google Authenticator is supported.

4. Role-Based Access Control (RBAC)
Four predefined roles: Super Admin, Network Admin, Network Operator, and Read Only. Permissions are enforced at the API level, so UI and API users follow the same rules.

5. Kubernetes Deployment with Helm
ONES can run on K3s or kubeadm clusters using Helm charts. It includes a bundled image registry for air-gapped sites and a dry-run mode.

6. Arista EOS for North-South AI Fabrics
Arista EOS is now an option next to NVIDIA Cumulus and SONiC. ONES generates and pushes the switch configuration using Arista CLI, and Arista telemetry moves to gNMI streaming.

7. NVIDIA RTX PRO Server Orchestration
Each Scalable Unit has 32 servers, two leaf switches, and two spine switches. ONES supports up to 32 SUs, or 1,024 servers and 8,192 GPUs, in four-GPU and eight-GPU configurations.

8. Flexible YAML Customisation
Download a fabric YAML, customise it with the Flexi YAML generator, and upload it back. ONES validates the result. Regeneration is limited to the North-South tier to protect existing deployments.

9. Day-0 Host Configuration
Automated NIC discovery, configuration, and verification for BlueField-3 and ConnectX-8, covering Spectrum-X, RoCE, adaptive routing, congestion control, and IPG settings.

10. Aviz Gateway, DSX Air, and Network Policy
Aviz Gateway integration adds gateway and firewall capabilities for multi-tenant AI fabrics. NVIDIA DSX Air support lets teams test designs before deployment, with no ONES license needed in DSX Air. A new network policy framework, built with the Aviz Network Operator (ANO), controls tenant-to-tenant, workload, and service communication using VRF route leaking and access controls.

Conclusion
ONES 4.4 helps operators see microbursts that averages miss, tighten access control, deploy on Kubernetes, and automate multi-vendor AI fabrics with more flexibility.

Comments

Post a Comment

Popular posts from this blog

Scaling Deep Network Observability for 5G: Reflections from a Real Deployment

Image
  I recently went through a detailed implementation showing how deep network observability enhances 5G mobile user experience while reducing operational complexity. What stood out was how grounded the deployment was in real traffic and production-scale constraints. Some practical observations: • Fragmented systems increase cost and operational overhead • Frequent infrastructure upgrades create instability and repair expenses • Optimised filtering significantly reduces DPI hardware requirements • Real-time KPI computation improves SLA monitoring and service assurance • Standardised data export through streaming pipelines simplifies integration One misconception addressed during the walkthrough was that deeper observability automatically means more hardware. In reality, efficient filtering and intelligent packet processing reduce hardware footprint while improving performance. My biggest takeaway is that scalable observability in 5G environments requires architectural efficiency,...
Read more

Evolving Packet Brokering for Modern Network Observability

Image
  I recently reviewed a technical overview describing how packet brokering platforms are evolving to support large-scale observability in modern data centers and service provider networks. The discussion focused on scalability, automated deployment, and operational efficiency. Some practical observations: • Network visibility platforms are expanding support for 400G switching hardware used in modern data center fabrics • GRE encapsulation enables mirrored traffic to move across Layer-3 networks while preserving packet metadata • Zero-Touch Provisioning simplifies onboarding for new or factory-reset switches • Packet brokers aggregate traffic from TAPs and SPAN ports and apply filtering and distribution policies • CLI improvements help operators manage large monitoring environments more efficiently One notable element was how GRE tunneling extends observability beyond Layer-2 boundaries. By encapsulating mirrored traffic into GRE tunnels, monitoring systems can receive full packet c...
Read more

How Network Copilot Uses Agentic AI to Correlate FortiGate and Splunk

Image
I recently went through a detailed implementation explaining how Network Copilot correlates FortiGate firewall telemetry with operational data indexed in Splunk . What stood out was how grounded the discussion was in real operational workflows rather than theoretical AI claims. Some practical observations: • Network and security logs are typically distributed across multiple platforms • Troubleshooting often requires manually correlating events between systems • Network Copilot ingests metrics, events, logs, and traces from firewall environments • Operators can interact with the system using natural language questions • Explainable root cause analysis improves operational confidence One misconception addressed during the walkthrough was that AI in operations means replacing engineers. In reality, the system augments teams by surfacing insights faster and correlating information across environments. Another interesting point was how the platform learns from real firewall deployments...
Read more