Bringing the Cloud to Remote Offices: Application Visibility and Survivability

Transcription

1 Bringing the Cloud to Remote Offices: Application Visibility and Survivability Matt Bolick Technical Marketing Engineer July 25, Cisco and/or its affiliates. All rights reserved. All specifications subject to change without notice. 1

2 The Impact of Cloud Applications Cisco Cloud Connectors onepk The Universal Network API Application Visibility and Control 2012 Cisco and/or its affiliates. All rights reserved. All specifications subject to change without notice. 2

3 CAMPUS Vertical Apps Share Point TDM, H323 Windows or Mac BRANCH THE NETWORK Voice, Video SAP, Oracle Old Priorities: Local application performance File & print sharing Voice quality Web security Media processing DATA CENTER Most Interactions are Controlled within LAN via Desktop - PC s and Phones 2012 Cisco and/or its affiliates. All rights reserved. All specifications subject to change without notice. 3

4 CAMPUS Vertical Apps Share Point Citrix, VMWare IOS, Android Windows or Mac SIP, H264 BRANCH THE NETWORK New Priorities: WAN/Cloud performance VDI support Video quality Cloud security Management and visibility DATA CENTER Voice, Video SAP, Oracle Interactions are Controlled through WAN by Users with Multiple Devices 2012 Cisco and/or its affiliates. All rights reserved. All specifications subject to change without notice. 4

5 Typical WAN can t handle more than 20 VDI sessions Typical user of cloud application prefers 50ms of latency- most IT Managers can t predict behavior 1 Private Cloud / Virtual Desktop 90% of organizations backhaul Internet traffic over costly WAN links for Security Hybrid Cloud Islands with no Any to Any VPN connectivity to the Enterprise SaaS / Hybrid Cloud Reduced: Opex and Headcount to manage IT infrastructure Inconsistent policy and visibility to manage DC, Branch and Cloud Infrastructure Private / Hybrid Cloud Performance Security 41% 35% Operations 13% Need for a Major Architectural Shift in the Network 2012 Cisco and/or its affiliates. All rights reserved. All specifications subject to change without notice. 5

6 2012 Cisco and/or its affiliates. All rights reserved. All specifications subject to change without notice. 6

7 Delivering Optimal Experience, Pervasive Security, and Simplified Operations Users Integrated Management and Policy Cloud Connectors Cloud Services Collaboration Survivability Web Security Storage 3 rd Party Cloud-Ready Network Services Visibility Optimization Security Collaboration App Hosting Branch Cloud-Ready Platforms ISR ASR CSR Private/Public/Hybrid Branch Office DC HQ / Data Center OS Cloud 2012 Cisco and/or its affiliates. All rights reserved. All specifications subject to change without notice. 7

8 Definition of a Cloud Connector: A cloud connector is a piece of software within a branch router that improves the performance, security or availability for cloud applications in remote sites Cisco and/or its affiliates. All rights reserved. All specifications subject to change without notice. 8

9 Cloud Connectors bring a piece of the cloud into the branch to improve: Performance Security Availability Apps ISR with Cloud Connectors Cloud ISR G2 Services Improve Cloud Performance Further HQoS WAAS AVC PfR 2012 Cisco and/or its affiliates. All rights reserved. All specifications subject to change without notice. 9

10 ScanSafe Connector Direct Local Internet Access ScanSafe Connector on ISR Internet A portion of ScanSafe web filtering intelligence is brought into the branch router. Enterprise HQ 2012 Cisco and/or its affiliates. All rights reserved. All specifications subject to change without notice. 10

11 WEBEX Cloud Connector A Headquarters CUBE WEBEX CUBE Enterprise IP WAN (MPLS) Cisco Solution Webex CCA service over customer WAN to WEBEX CUCM + CUBE deployed at customer and WEBEX Cloud How does it work? A speical configuration is placed on WEBEX Cloud and on customer premise with CUCM + CUBE Call to WEBEX numers are routed via SIP to Cisco WEBEX Data Center How is this a connector CUBE Branch Office Connector Function CUBE Branch Office CUBE Branch Office Connector function is a dial-peer on the router that sends calls from CUCM (inside) to WEBEX (outside). Special configuration on CUCM (ie dedicated SIP Trunk) and WEBEX is required. Dial peer connects the on premise CUCM to Cloud based WEBEX using SIP with special configuration to associate WEBEX Calls with customer IP Addressing. Benefits Free audio calls covered by WEBEX subscription Voice SLA offered by private IP WAN 2012 Cisco and/or its affiliates. All rights reserved. All specifications subject to change without notice. 11

12 Cloud Storage Connector (PoC) MSP Admin Portal Manage end-user accounts, service provisioning and billing End-User Virtual Portal Users access their own cloud backups and folders, restore and share files. Cisco ISR G2 and UCS E-Series with Cloud Storage Gateway MSP Network Cloud storage is cached in the branch. Branch files are backed up to the cloud. Agent-Less Solution Branch Office Backup Agent for Roaming Laptop 2012 Cisco and/or its affiliates. All rights reserved. All specifications subject to change without notice. 12

13 VM VM VM Cloud Connector Build-Your-Own Cloud Connector Cloud Connected Service UCS-E Series ISR Host Router onepk API Cloud Service 2012 Cisco and/or its affiliates. All rights reserved. All specifications subject to change without notice. 13

14 Compact, Multipurpose Blade Housed in ISR G2 8 GB - 48 GB DRAM Options Maximum 130 W Power Draw 80% Less Than Server Intel Xeon E quad core or six-core processor iscsi Initiator Hardware Offload Remote and Schedulable Power Management Front-panel VGA, 2 USB, and serial console connectors Lights Out Configuration & MGMT Through CIMC Two SD cards: one for the CIMC and temporary storage of OS and one for a blank virtual drive Two External and Two Internal GE Ports with TCP/IP Acceleration Up to 3 SATA, SAS, SSD hard drives or 2 HDD and a PCIe card On board hardware RAID 0, 1 and 5 Configuration Options with Hot-Swap Capability Wire-Free, Plug-and-Play Modularity, Low Shipping Weight (7 lb / 3.2 kg) 2012 Cisco and/or its affiliates. All rights reserved. All specifications subject to change without notice. 14

15 Ensure appropriate service level for cloud services QoS PfR Map services to appropriate WAN links Best-in-Class App Acceleration WAAS Medianet Tools tailored to the needs of collaboration applications Verify the performance of apps over the WAN IPSLA AVC Revolutionary application recognition and reporting tools Hosting platform for a variety of services and connectors UCS-E OnePK Powerful connectivity between applications and network devices 2012 Cisco and/or its affiliates. All rights reserved. All specifications subject to change without notice. 15

16 2012 Cisco and/or its affiliates. All rights reserved. All specifications subject to change without notice. 16

17 Vast Toolkit Familiar Many knobs Controlled Access Special Purpose Tools Not Vast Enough Gaps Inconsistencies Not programmatic CLI SNMP HTML XML AAA CDP Syslog Routing Protocols Netflow Span Monitoring Routing QoS Discovery Security Interfaces Data Plane 2012 Cisco and/or its affiliates. All rights reserved. All specifications subject to change without notice. 17

18 Consistency Across Platforms Modern Programming Languages Rich Actions Multiple Deployment Models Monitoring QoS Routing Discovery APP Data Plane Interaction Security Data Plane Interfaces 2012 Cisco and/or its affiliates. All rights reserved. All specifications subject to change without notice. 18

19 Innovate Leverage and extend the infrastructure in pace with business needs Allow closed rapid in enterprise innovation cycles Quickly Quickly develop systems and applications that leverage the deployed base of Cisco switches and routers One Time Reduce development/deployment times write once, deploy anywhere With Less Churn Extend/upgrade/add features without upgrading OS Consolidate services / reduce hardware footprint 2012 Cisco and/or its affiliates. All rights reserved. All specifications subject to change without notice. 19

20 1) Write An App Application 2) App Talks To Devices 3) Devices Do Stuff IOS IOSd/XE XR NX-OS 2012 Cisco and/or its affiliates. All rights reserved. All specifications subject to change without notice. 20

21 1) Write An App C APIs Application Java APIs Python APIs 2) App Talks To Devices Thrift / Sockets 3) Devices Do Stuff Network Abstraction Network Abstraction Network Abstraction IOS IOSd/XE XR Network Abstraction NX-OS 2012 Cisco and/or its affiliates. All rights reserved. All specifications subject to change without notice. 21

22 Base Element Utilities Discovery Developer Element Capabilities Configuration Management Interface/Ports Events Location Information Syslog Events and Queries AAA Interface Netflow Events DHCP Events Network Element Discovery Service Discovery Topology Discovery Debug Capabilities Tracing Interfaces Management Extensions Data Path Packet/Flow Classifiers Copy/Punt/Inject Statistics Policy Interface Policy Interface Feature Policy Forwarding Policy Flow Action Policy Integrated Value Routing Protocol Change Events RIB Table Queries Extensions LISP Mapping Server Resolver Registration Discovery/Security Identity Authentication Events End point identity Device Type Identity and location Diagnostic Analysis pathtrace/iamp Interface Custom collectors Custom collection profiles And More! 2012 Cisco and/or its affiliates. All rights reserved. All specifications subject to change without notice. 22

23 2012 Cisco and/or its affiliates. All rights reserved. All specifications subject to change without notice. 23

24 2012 Cisco and/or its affiliates. All rights reserved. All specifications subject to change without notice. 24

25 Classification Mechanism Statistical Classification Encrypted, Day-Zero Behavioral Classification P2P, VoIP, Skype, VoIP MPE Multi-Packet Engine RTP, Skype, Bittorrent Statefull (flow based) L7 Signatures HTTP, NNTP, POP3 Stateless L4 Port based Telnet, SNMP, SSH No protocol Classification Year 2012 Cisco and/or its affiliates. All rights reserved. All specifications subject to change without notice. 25

26 ISR G2 IOS PA FNF App Visibility & User Experience Report ISR G2 ASR1K ISR G2 ASR1K NFv9 App BW Transaction Time WebEx 3 Mb 150 ms Citrix 10 Mb 500 ms ASR1K High Med Low Reporting Tools Deep Packet Inspection Reporting Tool Perf. Collection & Exporting Reporting Tool Control DPI engine (NBAR2) identifies applications using L7 signatures ISR G2 & ASR collect application bandwidth and response time metrics, and export to management tool Advanced reporting tool aggregates and reports application performance Use QoS or PfR to control application network usage to improve application performance 2012 Cisco and/or its affiliates. All rights reserved. All specifications subject to change without notice. 26

27 How do I ensure my SLA is met My is slow! WAN My query is taking long time! Branch Data Center NFv9 Reporting Tool 2012 Cisco and/or its affiliates. All rights reserved. All specifications subject to change without notice. 27

28 Cisco Prime Assurance Manager (PAM) Cisco Prime NAM Cisco Insight New Application visibility report Multi-tenant with role-based access Support application visibility report and response time Support ISR G2, ASR, and WAAS Comprehensive Enterprise Performance Management with global dashboard & drill-down Network infrastructure monitoring Application visibility report, response time, and medianet perf-mon Configuration through NCS Supported Platform ASR1K, SCE ISR G2, ASR1K, WAAS, Netflow devices ISR G2, ASR1K, WAAS, NAM, Netflow devices 2012 Cisco and/or its affiliates. All rights reserved. All specifications subject to change without notice. 28

29 Cloud Connected Solution: UCS E Series: onepk: Application Visibility and Control: Cisco and/or its affiliates. All rights reserved. All specifications subject to change without notice. 29

30 Thank you.