Evolving the Data Center Critical Cloud Success. A Light Reading Webinar Sponsored by

Transcription

1 Evolving the Data Center Critical Cloud Success A Light Reading Webinar Sponsored by

2 Webinar Logistics Participate in the webinar: Ask questions, share feedback via the survey, and access the Information panel. Personalize your experience: Click the buttons at the bottom of your screen to open supporting content and user tools at your own convenience. Technical Issues: Ask the support team for live assistance in the ask-a-question window. Enjoy the webinar and thank you for viewing!

3 Today s Presenters Caroline Chappell Senior Analyst Heavy Reading Satish Iyer Campaign Lead, Cisco Cloud MegaTest Carsten Rossenhoevel Managing Director European Advanced Networking Testing Center (EANTC)

4 Agenda Data Center Evolution and the Cloud Putting Cisco s CloudVerse to the Test Test Bed Validation of Cisco s Cloud Data Center Infrastructure solution Q&A

5 Drivers for Data Center Transformation Improve Business Operations Reduce cost Increase business agility Accelerate innovation Support New Services IaaS PaaS SaaS

6 Evolving Data Center Requirements Low Opex Simplified and Unified Management of Resources Automated Provisioning Low cost scalability High Security Multi-tenant isolation Configuration accuracy VM policy management User Experience Rapid Response High-level UI

7 Benchmarking Cloud Technology Will It Work? Over 40% of telcos say reliable cloud delivery is their greatest challenge Can You Prove It? 66% of operators want to see proofs of concept and cloud working in technology labs Can My Cloud Service Provider Deliver? Enterprises say due diligence effort is a barrier to cloud service uptake

8 Cloud Applications Unified Data Center Cloud Intelligent Network Cloud Enablement Services Enabling Cloud Applications/Services by Uniquely Combining the Unified Data Center and Cloud Intelligent Network 2012 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 8

9 independent public test complete Cloud infrastructure Cisco was the first vendor to accept the challenge 2012 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 9

10 Video Cloud Applications CRM Collaboration Unified Data Center Cloud Intelligent Network IaaS Using Comprehensive End to End Infrastructure 2012 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 10

11 A Facts-based Reality Check for Cloud Delivery 6 Months of Planning 8 Weeks of On-Site Testing 25 Test Suites Across DC, Network and Applications $75 Million Equipment Involved in Test 80 Engineers Supporting Testing 2012 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 11

12 Quality Assurance of Cloud Solutions In-Situ Cloud service tests Quality audit of live cloud services Well-suited to evaluate public cloud offerings Can only monitor functionality and performance of single service Friendly tests only, to avoid harming the platform In-Vitro Cloud solution tests Functional, performance and availability test of solutions in the lab Best for proof of concept testing (prior to purchasing) Unlimited testing of scale, failure situations, security breaches, management actions and new applications

13 EANTC Test Plan Development Guidelines What are Service Providers interested in? What do customers care about? Simplified Operations Flexibility Security Replacing legacy IT Uninterrupted availability Security Quick uptimes Deriving Metrics Developing Tests per Metric

14 System Under Test per Test Area Today Cloud Data Center Infrastructure Servers UCS Network Infrastructure Nexus 7000 Nexus 5000 Nexus 2000 Nexus 1000 Catalyst 6500 MDS Management UCS Manager BMC Cloud Lifecycle Manager Network Services Manager Cloud Intelligent Network - IPv6 Core CRS-1, CRS-3 Edge ASR 9000 Branch Router ASR 1000 Management Prime Register Mobile Core ASR 5000 April 04 May 16 Cloud Video Services: Videoscape Transcode Manager, Cisco Media Processor (CMP) Cisco Transcode Manager (CTM) Cisco Mediasuite Content Delivery System Internet Streamer (CDS-IS)

15 Test Requirement Categories

16 Test Bed Design We created a single test bed Realistic setup of integrated solution Used for almost all tests (few exceptions: Mobile Video, HCS, and PCRF setup)

17 Test Equipment Six weeks of lab testing EANTC conducted the test and documented all results Ixia Communications supported EANTC s test extensively XM12 with Xcellon-Ultra NP modules Video testing (stateful) capacity of 40 Gbit/s XM12 with Xcellon-Flex modules Network Load Testing capacity of 800 Gbit/s ImpairNet to emulate delay in the network Virtual Test Appliances IxNetworkVM (network emulation) IxLoadVM (application emultion)

18 Testing the Virtual Environment Testing in a virtual environment requires embedded test tools Virtual test ports (IxNetwork-VM and IxLoad-VM) act as VMs to: Generate network and application traffic, measure performance Test security within the virtual space emulated 3 tier web installation Identify impact of VM mobility Software Test Ports Function as VMs Required for tests of Tenant Isolation, Virtual Securtiy Gateway, VM-FEX

19 Test Cases Security Tenant Isolation VSG LISP Manageability BMC CLM UCS Manager Cisco Network Services Manager Performance FabricPath QoS VMFex Applications HCS: Call Manager Siebel CRM

20 Multi-Tenancy Isolation Security Manageability Performance 1 of 2 Validate security isolate tenants from each other Procedure: 1. Send background traffic (allowed) 2. Send full mesh in parallel (not allowed), look for cross-talk

21 Tenant Isolation: Results Security Manageability Performance 2 of 2 100% End to End Tenant Isolation Verified Results: No loss for North-South profile Little loss for East-West profile ( % of 24 Gbit/s) 100% Loss for Isolation profile (full meshed tenants)

22 Virtual Security Gateway (VSG) Security Manageability Performance 1 of 2 How can firewall rules be enforced on virtual servers? How does VM migration affect security? Virtual firewall, integrated with Cisco Nexus 1000V Realistic policies consistently enforced in the virtual space, even as virtual machines were migrated.

23 Locator/ID Separation Protocol (LISP) Allowing for routing exceptions Move VM between Data Centers, check client s session No need for client or web server IP address reconfiguration. Security Manageability Performance Automatic service restoration during workload mobility across cloud (LISP)

24 BMC Cloud Lifecycle Management Integration Security Manageability Performance Provisioning software: Tenants & VMs Walkthrough: Provisioned one tenant (less than 25 minutes) Provisioned one VM Provisioned five tenants (over 1 hour) One Gold, one Silver and three Bronze Provisioned 50 windows VMs (under 1 hour) 10 VMs per tenant

25 United Computing System Manager Security Manageability Performance 1 of 2 Typically, server outages => configuration on the spot => long maintenance windows Question: How does Cisco s UCS service profiles help? Preconfigure profiles and measure: 1. Outage for card failure and restoration Stateless Compute 2. Time required to bring up 8 new blades

26 Out of Service Time [Minutes] Security Manageability Performance United Computing System Manager: Results 2 of 2 14,0 12,0 10,0 Time Taken to Respond [Minutes] 11,7 10,8 9,9 13,1 8,0 6,0 4,0 2,0 0,0 1,7 Blade VM First blade Last Blade VM 1 Blade Failed 8 Blades Booted Measured load time with pings Reduced admin cost with UCS automated service profiles Measured out of Service Time

27 Cisco Network Services Manager Security Manageability Performance Provisioning tool Configuration of multiple tenants Formerly known as OverDrive Network Hypervisor Demo represented Provision of 10 tenants Took 8:26 minutes

28 Data Center Scalability and Performance Security Manageability Performance Problem: spanning tree and LAG present issues in massive, fluid (virtual) environments 1 of 3 Cisco s answer: FabricPath Based on TRILL

29 Fabric Path Results Security Manageability Performance 2 of 3 A total of Gbit/s with no frame loss

30 Fabric Path Resiliency Results Security Manageability Performance 3 of 3 No loss during restoration. Maximum delay of 200 microseconds, Out of service time for link failures under 200 milliseconds

31 Tiered Services (QoS): Goals Security Manageability Performance 1 of 4 What happens when the cloud overruns its uplink capacity? Goal: verify prioritization by the edge router (ASR 9010) of Gold, Silver, and Bronze traffic Procedure: Slowly decrease upstream bandwidth, check loss.

32 Tiered Cloud Services (QoS): Test Procedure Security Manageability Performance 2 of 4 Tested in 5 steps: Step 1 Full bandwidth, four links, no loss Step 2 Three links, expect bronze loss only Step 3 Two links, expect bronze loss only Step 4 Single link, expect bronze loss only Step 5 Single link, decrease bronze traffic and increase silver traffic, bronze and silver loss

33 Run5 Run4 Run3 Run2 Run1 Tiered Cloud Services: Results Security Manageability Performance 3 of 4 Tiered Cloud Services - Downstream Frame Loss Gold Tenants Silver Tenants Bronze Tenants Bitrate [Gbit/s] Transmitted Received Transmitted Received Transmitted Received Transmitted Received Transmitted Received 6,8 6,8 6,8 6,8 6,8 6,8 6,8 6,8 6,8 6,8 2,1 2,1 2,1 2,1 2,1 2,1 2,1 2,1 1,1 3,2 2,2 1,0 3,0 11,1 21,0 25,2 25,2 25,2 25,2 25,2 No loss observed for prioritized customers Higher priority SLAs for Gold and Silver tenants confirmed

34 Latency - Logarithmic Scale [µs] Tiered Cloud Services: Results Security Manageability Performance 4 of 4 Tiered Cloud Services - Latency in Logarithmic Scale [µs] Run1 Run2 Run3 Run4 Run Gold Tenant Silver Tenant Bronze Tenant No latency increase for prioritized customers

35 Virtual Machine Fabric Extender (VM-FEX) Performance VM-FEX performance versus Distributed Virtual Switching Security Manageability Performance 1 of 2

36 Throughput [Gbit/s] Virtual Machine Fabric Extender (VM-FEX) Performance: Results Security Manageability Performance 2 of Disc Read Performance 107 VM-FEX Nexus 1000v Input/Output Operations Data Transmission Rate Average Response Time VM-FEX increased performance for all four applications: Layer 3 traffic, HTTP traffic, iscsi traffic, and video encoding 10 8 Throughput Performance 9,78 9,87 8,38 8, VM-FEX Host Nexus 1000v Host 0 L2/L3 Traffic HTTP Traffic Emulated Traffic

37 Summary Secured tenants using isolated architecture and virtual firewall Scaled FabricPath infrastructure up to Gbit/s and increased application performance with VM- FEX Managed infrastructure (CNSM & BMC) and computing layer(ucs mgr) Demonstrated enterprise applications: HCS, Siebel