Application Centric Infrastructure

Transcription

1 Application Centric Infrastructure Marc Samsom Februari 2014

2 Service Providers setting new Time-to-Delivery Benchmarks Months Local IT departments Weeks Days Hours Minutes Service Providers Current Performance Goal

3 THE NETWORK HAS REMAINED CONSISTENT the same Cisco IOS Command Line 25 years C

4 Current Network State Primary Concerns (March 2014) Current network state The primary concerns 1.Security Slow to provision New Customers/Services Overall Network Complexity 2.SLA s Delayed New Service Rollouts Timely New Technology Adoption Network Connectivity 3.Cost Cost of Network Operations Cost of Network Equipment 4.Management Network Service Levels Security Vulnerabilities Gigaom Research 600 Customers (300 ENT, 300 SP) Share of Respondents scoring 4,5 on a 1-5 scale of concern (Percent) 2010 Cisco Confidential 4

5 The time is NOW to talk about SDN - ACI 2010 Cisco Confidential 5

6 Strategic Role of the Network in the App Economy 78% C Network is even more critical to delivering applications than a year ago. Cisco Global IT Impact Survey 6

7 Data Center Trends Cause Disruptions Application Trends Applications DISTRIBUTED Web 2.0 / DevOps Public/Private Clouds 25% CAGR Big Data 1 10G LoM 3 75% Bare-Metal 2 45% Multi-Hypervisor 4 Linux Containers Impact on IT Infrastructure InterCloud 2/3 rd of all Workloads in Cloud by 2017 Design and A Scale New Application Centric Operations Infrastructure Model is Required Consumption Model 1 Cisco Global Cloud Index 2 IDC Worldwide Virtual Machine Forecast 3 HP 4 Information week 2013 Virtualization Management Survey

8 F5 and Cisco Are Now Partners! Cisco ACI Launch Nov 13 Cisco - Leader in Networking and F5 - Leader in ADC partnering to provide: Deep technology integrations across all L2-L7 network services Simplified data center and cloud rollouts Comprehensive application-centric policy framework and enforcement Intelligent services orchestration High Performance application delivery and security Fabric Extensible platform supporting future service growth and needs Accelerated application deployments C

9 F5 and Cisco Partnership Partnering to integrate F5 Synthesis architectural framework into the Cisco (ACI) Sharing a common vision for simplifying networking end to end by taking an application-centric policy-driven approach Joint testing for VMDC2.3 for traditional data center deployments F5 LTM tested with Nexus ACE customers can migrate to F5 utilizing VMDC2.3 guidance Exploring additional opportunities to bring joint solutions to Data Center customers Discussions underway to integrate RISE (Nexus 7000) and vpath (Nexus 1KV) technologies Partnering to integrate F5 LTM with Cisco sourcefire NGIPS F5 and Cisco Sourcefire enhance security posture and improved operational efficiency C

10 F5 MISSION Deliver the most secure, fast, and reliable applications to anyone anywhere at any time Cisco Confidential 10

11 A bit of Cisco History Luca Cafiero Co-CEO Mario Mazzola Chairman of the Board Prem Jain Co-CEO & CFO Soni Jiandani Senior VP Marketing Andiamo Systems Insieme Executive Team 2014 Cisco Confidential 11

12 SDN - APPLICATION CENTRIC APPROACHES 1 Programmable APIs 2a Classic SDN 2b Hybrid SDN 3 Virtual Overlays Applications Applications Applications Applications Vendorspecific APIs Vendorspecific APIs Controller Vendorspecific APIs Controller Vendorspecific APIs Virtual Switch Overlays CLI, SNMP, Control Plane Data Plane Data Plane Control Plane Data Plane Control Plane Overlays Data Plane ACI ACI ACI

13 CISCO APPLICATION CENTRIC INFRASTRUCTURE SDN 1 Programmable APIs 2b Hybrid SDN 3 Virtual Overlays API Applications Applications Applications Vendorspecific APIs Vendorspecific APIs Controller Vendorspecific APIs Virtual Switch Overlays APIC API Control Plane Data Plane Control Plane Data Plane Control Plane Overlays Data Plane ACI ACI ACI

14 Cisco Application Centric Infrastructure in a Nutshell ACI OPEN AND SECURE ACI_Architecture_v1.2.2

15 Application Centric Infrastructure (ACI) Vision Rapid Deployment of Applications onto Networks with Scale, Security and Full Visibility Cisco Nexus 9500 and 9300 Application Centric Policy Controller ACI C

16 APPLICATION CENTRIC INFRASTRUCTURE Data centers and cloud network infrastructures, both physical and virtual, will no longer be configured, are not only software defined (or programmed), but instead are Policy Driven and Application Centric.

17 APPLICATION CENTRIC INFRASTRUCTURE BUILDING BLOCKS OPEN RESTFUL APIs CENTRALIZED POLICY MODEL OPEN SOURCE CONTROLLER APPLICATION CENTRIC NETWORK ABSTRACTION NEXUS 9500 and 9300

18 APPLICATION CENTRIC INFRASTRUCTURE KEY DIFFERENTIATORS Operational Simple Lowest TCO Zero-touch Provisioning Health Metrics Visibility /Telemetry Troubleshooting Open API Open Source Advanced Security 3 rd Party Integration 1. Application Centric Policy Model 2. Physical + Virtual 3. Open and Secure

19 AN INNOVATIVE APPROACH TO POLICY Contract Contract Contract OUTSIDE F/W ADC WEB ADC DDC DB What is an application policy? End Point Group (EPG) A set of VMS / servers with the same policy Contracts: A set of rules governing communication between groups Service Chains: A set of network services between groups

20 ACI Device Package Defines services appliances Lists service functions offered by the services appliance Provides scripts for driving service configuration Plan is to open the API so that anyone can create a device package and have a community similar to Puppet manifests or Chef recipes APIC Policy Element Configuration Model APIC Script Interface Device Specific Python Scripts Device Interface: REST/CLI Script Engine APIC Appliance

21 FW_ADC 1 ACI SERVICE REDIRECTION POLICY Automated and scalable L4-L7 service insertion Packet match on a redirection rule sends the packet into a services graph. Service Graph can be one or more service nodes predefined in a series. Service graph simplifies and scales service operations Application Admin Service Admin EPG 1 Begin Stage 1 ASA 5585 Policy-based Redirection Chain FW_ADC 1 Stage 2 F5 EPG 2 End

22 HAVE YOU SEEN THIS BEFORE? Stateless Computing - Configuration Mobility SERVICE PROFILE Identity for a Server

23 Cisco Application Centric Infrastructure: Building on the Transformative Approach of UCS Network SME Security SME Application SME APIC Physical Networking Nexus 7K Hypervisors and Virtual Networking Compute L4 L7 Services Storage Multi DC WAN and Cloud Nexus 2K Integrated WAN Edge 1 Subject Matter Expert Define Policies 2 Policies Used To Create Application Network Profile Templates 3 Automated policy configuration across the infrastructure 4 Life cycle management for day 1, day 2 operations SYSTEMS APPROACH: Rapid Deployment of Applications with Scale, Security and Full Visibility

24 Don t think about the exact script/code, it s the Policy that matters! You might not realize it, but your brain is a code-cracking machine. For emaxlpe, it deson t mttaer in waht oredr the ltteers in a wrod aepapr, the olny iprmoatnt tihng is taht the frist and lsat ltteer are in the rghit pcale. The rset can be a toatl mses and you can sitll raed it wouthit pobelrm. S1M1L4RLY, Y0UR M1ND 15 R34D1NG 7H15 4U70M471C4LLY W17H0U7 3V3N 7H1NK1NG 4B0U7 17.

25 ACI = SECURE BY DEFAULT

26 Centralized Security Security Policy Management L4-7 Service Automation Multi-Tenancy At Scale Compliance Lifecycle Management Deep Visibility and Control Systems Approach Physical And Virtual

27 APPLICATION VISIBILITY A SINGLE VIEW OF YOUR APPLICATION APIC HEALTH SCORE 96 % LATENCY 5 Microsecond(s) DROP COUNT 25 Packets Dropped VISIBILITY 8 VMs 5 Physical Load Balancer Firewall 27

28 The ACI Fabric HYPERVISOR HYPERVISOR HYPERVISOR

29 #2: AGILITY PHYSICAL, VIRTUAL AND CLOUD Health Score Systems Telemetry Latency Isolation Tenant 0 Packets dropped Health Score Systems Telemetry Latency Application Isolation 25 Packets dropped APP VISIBILITY MOBILITY

30 3 Migration Approaches - EPG mapping on ACI VLAN / Subnet to EPG OPERATIONS DESIGN App knowledge / Regulation / App lifecycle mgmt. / etc. OPERATIONS DESIGN Hybrid Case OPERATIONS DESIGN

31 Application Centric Infrastructure Key Differentiators Operational Simple Lowest TCO Zero-touch Provisioning Health Metrics Visibility /Telemetry Troubleshooting Open API Open Source Advanced Security 3 rd Party Integration 1. Application Centric Policy Model 2. Physical + Virtual 3. Open and Secure

32 Three Barriers holding back 40G Adoption Price of the Port Price of the Optic Price of the Fiber/Cable Infrastructure

33 Innovations in Hardware BiDi Optics 40G BiDi Optics 40G Over 10G Multimode Fiber Saves TENS OF MILLIONS OF DOLLARS When Upgrading to 40G Switch Infrastructure* *90% of data centers globally. BiDi s 100m reach covers >90% of the DC distribution links Paul Kolesar, CommScope, IEEE Next Gen Optics Study Group, Sep

34 SCALABLE 1 GE/10 Gbps/40 Gbps/100 GE PERFORMANCE NEXUS 9000 SWITCH FAMILY 2 Modes: Standalone and ACI Fabric Available today Nexus 9300 Nexus /10G SFP+ & 12 QSFP+ Aggregation line card 36 40G QSFP+ 96 1/10G-T & 8 QSFP+ ACI Ready Leaf Line Card 48 1/10G-T & 4 QSFP+ 12-port QSFP+ GEM ACI-ready Leaf line card 48 1/10G SFP+ & 4 QSFP+ C Slot FLEXIBLE FORM FACTORS CAN ENABLE VARIABLE DATA CENTER DESIGN AND SCALING PERFORMANCE PORTS PRICE POWER PROGRAMMABILITY

35 Adoption ACI ENABLED HARDWARE MARKET TRANSITION Server Virtualization Network Virtualization Intel/AMD Virtualization Support True virtualization and abstraction requires hardware innovation Network Virtualization enabled hardware

36 APPLICATION CENTRIC INFRASTRUCTURE KEY DIFFERENTIATORS Operational Simple Lowest TCO Zero-touch Provisioning Health Metrics Visibility /Telemetry Troubleshooting Open API Open Source Advanced Security 3 rd Party Integration 1. Application Centric Policy Model 2. Physical + Virtual 3. Open and Secure

37 Investment Protection: Extend ACI to Installed Base Leverage Existing Nexus / IP Network Extend ACI Policy Model in Virtual and Physical world ANP PROFILE Customer Existing DataCenter Network (Nexus 7k/6k/5k 2k) Application Virtual Switch ACI POLICY White Paper -

38 THE BROADEST ECOSYSTEM OF PARTNERS L4..7 Services, System Management, Virtualization, Orchestration and Application Vendors

39 ACI =OPEN AND SECURE FROM THE GROUND UP OPEN SOURCE OPEN STANDARDS NSH VXLAN OPFLEX OPEN INTERFACEs JSON REST XML OPFLEX

40 ACI BUSINESS VALUE IN 20 SECONDS Application Centric Infrastructure simplifies and accelerates the deployment of applications" ACI enables automated provisioning of Application Network Profiles These profiles specify the Connectivity, Security, Services, QoS and SLA required per-application ACI enhances operational support by providing per-application visibility and health monitoring Seamless Mobility Application Level Visibility Operational Simplicity Automation Scalability Application Performance Comprehensive Security Open APIs and Ecosystem

41 APPLICATION CENTRIC INFRASTRUCTURE - SUMMARY ACI Vision: Rapid Deployment of Applications onto Networks with Scale, Security and Full Visibility OPEN RESTFUL APIs CENTRALIZED POLICY MODEL OPEN SOURCE CONTROLLER APPLICATION CENTRIC NETWORK ABSTRACTION NEXUS 9500 and

42 F5 and Cisco ACI Joint Solution Benefits F5 DEVICE PACKAGE FOR APIC APIC ACI Fabric Automated layer 4-7 application service insertion, policy updates, and optimization within the ACI-enabled fabric with BIG-IP Preserves richness of F5 Synthesis offering through policy abstraction Accelerated application deployments with reliability, security and consistent scalable network and L4-L7 services - Existing F5 HW/SW, topologies integrate seamlessly with Cisco ACI Programmability (irule / iapp / icontrol) Data Plane Control Plane Management Plane F5 SYNTHESIS FABRIC Virtual Edition Appliance Chassis Application agility using policy driven application delivery approach to significantly reduce operating costs - provisioning workflows is efficient and faster while maintaining operational best practices across multiple teams C

43 F5 + Cisco Nexus 9000/ACI Deployment Scenarios F5 with standalone Nexus 9K or Cisco ACI Standalone Nexus Nexus 9300 or Nexus 3K designs Insert F5 10G or 40 Traditional deployment model NX-OS STANDALONE Physical/Virtual Nexus 9500 Nexus 9300 Physical and/or Virtual Nexus 9300 Cisco ACI - Nexus 9K + APIC + F5 device package customers can take complete advantage of ACI ACI Nexus 9300 Nexus 9500 Nexus 9300 C

44 Benefits of Using F5 Device Package F5 Synthesis value proposition is preserved in Cisco ACI Cisco ACI allows F5 to bring the value to ACI instead of normalizing across vendors F5 is a seamlessly integrated with Cisco ACI Preserves existing BIG-IP deployment topologies and L2-L3 interoperability no network redesign No HW upgrades needed on BIG-IP - no net new $$$ spending Flexibility in rolling out L4-L7 services on F5 fabric with APIC F5 Application policy framework aligns seamless with APIC policy framework Accelerated application deployments - Provides true application centric solution using profile based approach Portfolio of services combining application delivery and security Extensible to other L4-L7 services to address application requirements - GTM, AAM, AFM, APM, ASM Deep application performance visibility (future) Extensive application health score data Device package can integrate applications health score data from BIG IP C

45 ACI Delivering Business Outcomes Cisco ACI is an open*, future-proofed data center architecture that can continue to grow as we enhance client services. Chuck Crane Network and Security Architect, Axciom (Transitioning from AWS to Private Cloud) Cisco s open* standards approach makes ACI even stronger. We conducted testing on ACI it fully delivered everything we expected, and proved to be quite stable and mature. Nik Weidenbacher Principal Engineer, SunGard Lower Costs/TCO This will enable Telstra to deliver service agility, security and performance that our customers expect from an enterprise grade cloud. Erez Yarkoni Executive Director, Telstra Greater Business Agility Lower Capital Expenses Reduced Costs/ Complexity Lower Operating Cost Resource Optimization 58 % Reduce Network Provisioning 25 % CAPEX Reduction 21 % Reduce Management Costs 45 % Reduce Power and Cooling Costs % Compute and Storage Optimization Source: Cisco IT * 4/2014 Cisco announced Opflex a standards track southbound protocol for integration of ACI with a broad ecosystem of L4-7 Services. Opflex was coauthored by: Microsoft, Citrix, IBM, and Sungard Availability Services C

46 IT Teams Network Security Operations Virtualization Development / Application Owners Cloud Storage C

47 Automation and Orchestration Multi tenancy Application Security & Compliancy 40GB SDN project Existing UCS customers Network Operational Challenges Network Programmability VMware Customer C

48 It s critical that we are able to deliver hundreds of thousands of transactions per second, so latency and 40G throughput is a number one concern. After evaluating numerous vendor solutions, Cisco's Nexus 9000 switching platform provided us with the best performance to support our evolving data centers, while protecting existing IT investments." Bob Hammond, CTO, Millennial Media Symantec is an early adopter of Cisco's ACI, leveraging the technology within our own Agile Data Center. Cisco ACI brings the scalability and efficiency we need while enabling us to truly bring next generation networking capabilities to our customers. Jon Sanchez, Director of Data Center Services, Symantec 2014 Cisco Confidential 48

49 ACI Demo Hands-On Labs in Dcloud! Nexus 9000 NX-OS lab is available for everybody. Access to ACI APIC labs can be requested by your local Cisco DCV SE

50 Useful links Cisco ACI workshops registration: ciscoevents.nl/aci Cisco F5 ACI integration (Big IQ): 50

51 Thank you. In Collaboration with