Enabling the Cloud for the us government

Transcription

1 strategic white paper Enabling the Cloud for the us government

2 table of contents [1] Introduction LGS Dedication to Serving the U.S. Government 03 [2] Cloud for the USG Trends & ChallengeS 04 [3] LGS Cloud Solutions 3.1 Cloud Network Enabler Data Center Connect (DCC) DCC Building Blocks ALU Hewlett-Packard Strategic Alliance Data Center Automation Application Assurance (AA) Service Aware Management Data Center Interconnect Interior Data Center Fabric Optical Transport 14 [4] Cloud Security 15 [5] Summary 18 [6] GLOSSARY 19 2

3 1. Introduction LGS Dedication to Serving the U.S. Government LGS Innovations LLC solves the most complex networking and communications challenges facing the U.S. Federal Government. Building on its Bell Labs heritage, LGS delivers groundbreaking research and advanced networking and communications solutions that provide an information advantage and contribute to the mission success of its customers. LGS is an independent subsidiary of Alcatel-Lucent (ALU) dedicated solely to serving the U.S. Federal Government (USG). LGS is working to apply advanced networking technologies to enable cloud services for the USG. Our cloud solutions provide on-demand network access with sufficient bandwidth and carrier grade redundancy for mission critical services and applications. By transforming the government s ability to quickly and securely send and receive information of all kinds anywhere, at any time, on any device LGS contributes to mission success, from protecting the homeland to increasing service to the citizen. The topic of cloud computing is broad and touches many areas in the enterprise market. This white paper addresses the networked data center, as it pertains to cloud and application enablement. LGS focuses on the challenges that the USG faces migrating to a cloud services delivery model and the potential benefits realized through LGS solutions of cloud enablement products and services for the networked data center. We leverage the Alcatel-Lucent Data-Center Connect solution for networked data center design, planning and data center automation. 3

4 2. Cloud for the USG Trends & Challenges An important aspect of cloud computing is convenient, on-demand network access to a shared pool of configurable computing resources (e.g. networks, servers, storage, applications, and services) that can be rapidly provisioned and released with minimal management effort or cloud service provider interaction. National Institute of Standards & Technology s (NIST) definition of cloud computing technologies and services is used as a framework to baseline our cloud-based, configurable computing solutions. The NIST Cloud Computing Reference Architecture defines five major actors in the conceptual cloud: consumer, broker, provider, Figure 2-1: NIST Conceptual Cloud Model auditor and carrier as represented in Figure 2-1. The following summarizes Extensible framework for cloud services their roles in the reference architecture. Cloud Consumer - user of cloud apps and services Cloud Auditor assesses security, performance, & usage Cloud Provider delivers apps & services to consumers Cloud Broker manages & negotiates service performance between consumers & providers Cloud Carrier provides transport & connectivity between consumers & providers. NIST s service orchestration layer offers basic classes of services: Software as a Service (SaaS), Platform as a Service (PaaS), and Infrastructure as a Service (IaaS). Resource Abstraction and Control incorporates virtualization technologies to establish and efficiently manage resources to ensure reliable and secure usage. Service classes and their control mechanisms have a critical dependence on the underlying physical resources that provide network access to end-users with connectivity to USG Agency locations and backbone interconnection of data centers. Migrating to the cloud has the potential to dramatically change the way the USG accesses and provides services. Cloud is a highly flexible, on-demand framework that leverages innovative technology and business models that together create new service delivery mechanisms. Shifting to a cloud model has key benefits for the USG. Efficiency Improved IT resource utilization, cost savings through data center consolidation and optimization, and shortened procurement lead times. Agility More responsive to urgent agency needs, ubiquitous access, and scalable services. Innovation Shifts focus from asset ownership to service management, leverages commercial innovations, and is better linked to emerging technologies. Performance Improved end user Quality of Experience (QoE). Green Improved energy efficiency. Savings: The USG is migrating to cloud-based solutions to reign in their IT budgets in the current cost-sensitive environment. The Federal Cloud strategy outlines a decision framework for cloud migration, which estimates that the USG spends $80B each year on over 12,000 systems in major agencies with $20B potentially targeted for migration to cloud computing. 1 NIST Cloud Computing Reference Architecture, Special Publication , September,

5 Also estimated is that the USG dramatically increased the number of data centers over the past decade from 400 to over 2000; it currently has a goal to shut 800 data centers by Privacy/Security: Typical IT environments contribute to increasing costs, low resource utilization and inflexible, difficult to manage systems. Coupled with these constraints, there are data security challenges facing the Federal IT sector that should be addressed on the road to cloud migration. Ensure security and privacy in a virtualized environment Data integrity, separation, protection, and management Long term storage and records management Availability of critical government services The Department of Defense (DoD) has unique challenges such as the processing of information at multiple classification levels under multiple authorities (DoD, DHS), the Certification & Accreditation process, and the ability to respond to rapid changes in DoD mission requirements. Additionally, a published NSA briefing cites the Gartner Group s findings that security risks applied to the DoD include: Protection of sensitive data, regulatory compliance, data location, segregation, and recovery Security standards (SAML, WS*) Secure provisioning of applications into the cloud Controlling/restricting what applications can run in which cloud instances Binding specific platforms/virtual machines to applications Protecting cloud computing platforms from cyber attack User Experience: An advantage of migrating to cloud services is the potential to offer a superior end-user experience. With adequate local access and modern networking protocols and operations, cloud services can be delivered with reproducible Quality of Service (QoS). Across the Agency all users can experience a common operating environment with centralized identity management and mutual authentication between the users and the networked cloud. Ultimately, centralized IT support can be offered more efficiently and at a higher uniformity/proficiency than when users depend on the expertise of local IT administrators and desk top support. Green Technology: Data centers (DCs) throughout the USG are historically underutilized since they must provide sufficient capacity to meet the peak load required by their users and that load is increasing dramatically. By networking, automating, and orchestrating operations, the DCs work in concert to share load. The average usage goes up markedly, so that fewer data centers are needed and then newer, more energy efficient equipment can be justified. Thus cloud computing leverages the use of green technology. Furthermore, the LGS solutions described in Section 3 are power efficient since they propose to distribute data centers near end-users to reduce transport power dissipation, and furthermore are designed with energy efficiency as a primary requirement. 2 Federal Cloud Computing Strategy, Vivek Kundra, US CIO, February 8, DoD Cloud Computing Security Challenges, Chris Kubic, Chief Architect, Information Assurance Architecture and Systems Security Engineering Group, National Security Agency 5

6 3. LGS Cloud Solutions for data centers LGS Innovations and ALU s key cloud solutions strengths enable data centers to virtually interoperate. Our innovations in Service Aware Routing and Optical Networking are supplemented with middleware and services that automate the operation of distributed, dynamic DCs. Cost effective and efficient cloud service management and application assurance are the fundamental end user benefits realized by these leading networking and management capabilities. Virtualized network infrastructure Dynamic load sharing across Data Centers Application assurance Service aware management LGS Innovations has partnered with Alcatel-Lucent (products/services) Automated provisioning services and Bell Labs (research) to offer a carrier-grade networked cloud architecture, which integrates best-in-class solutions with advanced network technologies. This innovative approach improves application and service responsiveness, realizes data center resource scalability and efficiency, and provides end-to-end management at the service and application levels. Our solutions are agile, secure, and offer multiple deployment options. For example, our cloud architecture moves high-bandwidth or Multi-vendor architecture Support for industry standards Carrier grade 5-9 s availability LGS/ALU Solution Discriminators latency-sensitive applications closer to the user. The Data Center Connect (DCC) solution is an adaptive architecture, using ALU s award-winning IP/MPLS service routers, optical switches, and transport. DCC can also be integrated with Hewlett-Packard s data center storage and server infrastructure. This cloud-enabling data center infrastructure is coupled with application and service assurance technologies and professional and management services, thus offering an end-to-end cloud services network. 3.1 Cloud Network Enabler As the government transforms its IT infrastructure, the network becomes a key enabler of cloud services delivery. Large numbers of resources residing in multiple locations can be consolidated and managed as a single source to deliver services over high bandwidth with sufficient redundancy for mission critical applications. Through virtualization technologies, layer 2 & layer 3 Virtual Private Networks (VPNs) extend connectivity across the network and virtualize data center resources. Alcatel-Lucent IP/MPLS routers and optical products dynamically connect end users and multiple data centers at the network level so that the users can be optimally served by available computing, storage, and applications resources. This provides transparency and efficient performance without relying on geographic or physical presence to users across customer campuses, thereby extending the virtualized data center network. Figure 3.1-1: LGS/ALU Virtual Data Center Connectivity Optimizes shared capacity & minimizes cost Figure illustrates service transparency between data centers whose resources are pooled across the network. This expands the scope of virtualization by drawing on technologies that are already deployed in ALU service router networks and are based on VPLS (Virtual Private LAN Services) and PBB (Provider Backbone Bridging)/VPLS to massively scale customer VLANs and MAC addresses on the cloud network. 6

7 Through virtualization technologies, LGS cloud infrastructure portfolio creates an agile network fabric that maintains organizational isolation and supports multi-tenancy with carrier-grade % reliability in a services-oriented architecture. 3.2 Data Center Connect (DCC) Virtualization is a key enabler of cloud computing. By integrating the virtual network with a virtual data center under common management products and services, Alcatel-Lucent offers the Data Center Connect (DCC) solution to yield cost and performance benefits. DCC delivers a scalable solution which interworks physically separate data centers to end users. DCC leverages ALU s strength in WAN routing, optical transport, and management solutions with automated data center service delivery. 3.3 DCC Building Blocks The DCC building blocks are ALU products, general services and professional services, shown in Figure The DCC solution infrastructure, coupled with an OEM s server and storage platforms, offers complete multi-data center fabric, service aware management, and services capabilities. 1. Data Center Fabric Optical Transport and Data Center Switching 1830 Photonic Service Switch (PSS) portfolio SAN extension, bandwidth aggregation Virtualization and routing Service Router (SR) 7750, SR 7710 Layer 2 & Layer 3 virtualization for inter-data center machine mobility Application Assurance Enterprise Switching ESS 7450 Scalable, MPLS-enabled Ethernet Service Switch Intra-data center networking (either ALU or OEM) Top of Rack (TOR) OmniSwitch 6850/6850E (or new OS6900) End of Row (EOR) OmniSwitch 9000E Core OmniSwitch 10K 2. Service Aware Management Service Aware Management (SAM 5620)/ Service Level Agreements (SLAs) and Quality of Experience (QoE) Data Center Automation delivered through Relevance Services 3. Services General Services - Engineering, design, integration, installation, maintenance Professional Services Analysis, planning, transitioning to cloud 7

8 Figure 3.3-1: LGS/Alcatel-Lucent Data Center Architecture End-to-end solution 8

9 3.4 ALU Hewlett-Packard Strategic Alliance The DCC solution is designed to work with Hewlett-Packard s Integrated LAN and WAN for end-to-end application delivery Converged Infrastructure. ALU and HP offer a 10-year strategic alliance that brings industry leading technologies and data center products to the market. The alliance combines Integrated supplier relationship: one-stop shop ALU s advanced routing and optical solutions with HP s Enhanced innovation capabilities and service industry leading server, virtualization, and data center operations. This complementary, multi-vendor approach inte- delivery model grates HP s interior data center fabric, Storage Area Network Reduced cost of ownership of infrastructure (SAN), Server and Local Area Network (LAN) products with ALU s Wide Area Network (WAN) routers and switches at the Managed networking and IT services edge and optical inter-dc connectivity transport. ALU-HP ALLIANCE The ALU-HP joint architecture applies to not only large data centers, but also to medium and micro-sized data center footprints. Micro-data centers can be placed closer to the end user, which lowers latency between the user and the provider servers and minimizes provider backhaul bandwidth costs. This arrangement offers the same end-to-end, services-oriented network architecture. Through ALU s partnership with HP, LGS is able to offer an integrated, end-to-end data center solution. This business model leverages HP s IT transformation expertise with ALU s networking leadership along with LGS focus to migrate the USG to secure, carrier-grade cloud computing. 3.5 Data Center Automation Data center automation delivers unified service provisioning and orchestration of the network and the cloud VMs. Data center optimization requires efficiencies to streamline operations and minimize costs. ALU s Relevance product and services achieves these goals and is incorporated as part of the DCC solution. Integrated management Automated provisioning Streamlined operations Relevance is an automation tool that does both network and VM provisioning through a portal for remote management, billing, and Customer Relationship Management (CRM). Relevance is used extensively to orchestrate and automate the data center connect solution. Figure illustrates Relevance s functions in a data center environment. RELEVANCE BENEFITS 9

10 Figure Data Center Orchestration & Automation Portal-based services 3.6 Application Assurance (AA) Application Assurance applies QoS to an application and identifies, monitors, and controls the performance of specific applications within a service group. In layer 2 and layer 3 VPNs, services are organized by major service type. A service aware router views packet loss, roundtrip delay, jitter, QoS, etc. from the context of the service being delivered, and all applications within each service class are treated equally. For instance, in the example shown in Figure 3.6-1, all Business Data applications belong to the same L2 or L3 VPN QoS queue, even though some services are critical to the business while others are discretionary. An application aware network assigns and controls QoS and other attributes on a per-application group or per-application basis. For example, application aware networks can identify different application groups within the Business Data QoS group, then drill down one step further and identify individual applications within an application group. For instance, HTTP application group within the Business Data queue contains unique applications such as YouTube and E-learning. By identifying individual applications running over the network, services may be introduced that monitor and control these applications to improve visibility and application performance. 10

11 Figure Application Assurance Advanced business VPN services The ALU SR7x50 Service Routers have the ability to perform application level visibility and control through an integrated services adaptor (ISA) that does in-line data processing per application. The Application Assurance ISA module (AA-ISA) in the SR7x50 supports the following features: Per-protocol, per-application, and per-application-group volume statistics Volume statistics collected per VPN, between VPN sites, and between servers Near real-time application monitoring (per VPN, per site) of individual or aggregated voice/video or TCP flows Application green wall to quickly identify applications that drop below enterprise performance thresholds Ability to drill down multiple levels for details Customizable archive reports 3.7 Service Aware Management Service-aware management is a unique set of integrated layer 2 and layer 3 VPN operations, administration, and management (OA&M) tools for service control of applications and network elements. This product suite simplifies service activation, enables end-to-end service assurance and provides rapid troubleshooting and better reporting capabilities at the network and service layers. This enables the cloud provider to deliver a customer self-care portal for SLA monitoring. The ALU Service Aware Management portfolio achieves network and service management for cloud services delivery across the network layers, highlighted in Figure

12 Figure Service Aware Management Portfolio Granular service control of applications, services and transport 3.8 Data Center Interconnect As indicated in Section 3.3, inter-data center network virtualization and routing is supported though ALU s IP service router and Ethernet switching platforms: SR 7750, 7710, and ESS The award winning 77x0 Service Router (SR) product family is a suite of multiservice edge routers designed to deliver high-performance, high-availability routing with service-aware operations, administration, management, and provisioning through the 5620 SAM. High performance, high availability routing Service aware The 7750 SR integrates the scalability, resiliency, and predictability of MPLS Scalable, resilient along with the bandwidth and economics of Ethernet and a broad selection of legacy interfaces, to enable a converged network infrastructure for the delivery SR/SWITCHING BENEFITS of next-generation services. In the data center, the 7750 SR may be deployed as a multiservice edge router for carrier Ethernet and IP VPN business services or as the aggregation router. With support for service-enabled high density 10GigE and 100GigE interfaces, the 7750 SR is also well suited for core routing applications. Available in five chassis variants, the 7x50 SR scales gracefully from 90 Gb/s to 2 Tb/s of capacity, providing cost-effective solutions to address the smallest to the largest locations. The 7450 ESS is designed to support business VPN services. It integrates the scalability, resiliency, and predictability of MPLS along with the performance and economics of Ethernet, to enable a metro-wide, converged packet aggregation infrastructure using carrier Ethernet to deliver next-generation services. The 7450 ESS scales carrier Ethernet metros to 100 Gigabit Ethernet and enables seamless evolution from 10 to 100 Gb/s infrastructures. Additionally, with the industry s most advanced PBB/VPLS implementation, customers have the ability to flexibly deploy either native carrier Ethernet or MPLS-based services and functions in any combination as the network plans require. 12

13 Leveraging the carrier-optimized and highly fault-tolerant Service Router Operating System (SR OS), the 7450 ESS provides advanced, highly flexible service-aware QoS, and a robust operations, administration, and maintenance (OA&M) toolkit to enable next-generation service delivery. The 7450 ESS is available in five chassis configurations. 3.9 Interior Data Center Fabric Interior data center fabric may be applied through the current ALU OmniSwitch product portfolio or alternatively through an OEM such as Hewlett-Packard s DC products. The ALU products include the OmniSwitch 6850 (or 6850E) or the new OmniSwitch 6900 for the Top of Rack (TOR), the OmniSwitch 9000E family for the End of Row (EOR), and the OmniSwitch 10K for the Core. The Alcatel-Lucent OmniSwitch 6850 series is an L2 and L3 high-speed, GigE fixed configuration, stackable LAN switch family with 1GbE and 10GbE interfaces. Fully tunable & reconfigurable Rapid setup The new Alcatel-Lucent Enterprise OmniSwitch 6900 (OS6900) Stackable E2E photonic quality assurance LAN Switches are compact, high-density 10GbE and 40GbE platforms that offer unmatched versatility. In addition to high performance and extremely OPTICAL TRANSPORT BENEFITS low latency, the OmniSwitch 6900 platforms offer extensive QoS, layer 2 and layer 3 switching, as well as system and network level resiliency. Through the use of optional modules, the OmniSwitch 6900 can offer the highest 10GbE port density in its class with up to 64 10GbE ports in a 1U form factor. The OmniSwitch 6900 modularity also allows for up to 640GbE uplink ports. With its benchmark power efficiency, this makes the OS6900 product family the most efficient and versatile switch in its class. The OmniSwitch 9000 (OS9000) products are fully featured, high-performance 10Gigabit Ethernet (10GigE) Chassis LAN switches. The OS9000E delivers wire-rate support of multiple-virtual routing and forwarding (VRF), the foundation for network virtualization in the data center. The OmniSwitch 10K Modular Ethernet LAN Chassis is the first of a new generation of network adaptable LAN switches. This high-capacity, high performance modular switch provides a secure networking environment and meets high availability demands with uninterrupted uptime. It improves application performance and user experience with deep packet buffers, lossless virtual output queuing (VOQ) fabric, and extensive traffic management capabilities. It simplifies layer 2 network deployments and offers scalability to meet current and future bandwidth requirements. The OmniSwitch 10K has a sufficiently high density of wire-speed 10GigE ports (256*10G) and other features that it can eliminate the need for the distribution layer in data centers (or for separate End of Rack switches). 13

14 3.10 Optical Transport The 1830 Photonic Service Switch (PSS) provides datacenter interconnectivity optical transport with meshed traffic patterns. It is built on Reconfigurable/Tunable Optics (ROADM/TOADM), enabling rapid connectivity setup from months to days. With a high-density design, the Alcatel-Lucent 1830 PSS goes beyond traditional ROADM architecture limitations by offering a unique, fully tunable and reconfigurable (T&ROADM) 88-channel architecture for any-to-any wavelength switching, and integrates unique wavelength tracking capabilities essential for end-to-end photonic traffic quality assurance and fault localization at the wavelength level. It supports advanced design tools for simplified and automated network lifecycle from planning to commissioning and service activation. 14

15 4. CLOUD SECURITY The migration of legacy services to a cloud computing framework must address security issues. LGS offers a secure networked cloud solution through centralized, integrated threat management. Our ALU network routers (SR7750) and its modular features (MS-ISA card) mitigate Distributed Denial of Service (DDoS) attacks. This industry-leading, fully networked environment enables centralized security management to be implemented efficiently as part of our cloud security solution. The following table lists key cloud security threats with our mitigation approach. Cloud Security Associated Risks LGS Network Mitigation Mechanisms Network Virtualization Maintain network security associated Our network architecture deploys industrystandard with multi-tenancy, VM isolation, VM co-residency technologies to maintain virtualiza- tion through advanced protocols supported by our service routers and gateways. Technologies include MPLS, Virtual Private Routed Networks (VPRN), Virtual Private LAN Services (VPLS) and Provider Backbone Bridging (PBB). Authentication & Access Control Manage identities to provide access control PBB is used within the DC while MPLS and PBB over VPLS are used between DCs and from DCs to clients to create a highly available, low-latency fabric. Our service aware network architecture provides integrated, centralized policy management for Unified Communication and Collaboration (UCC). Centralized access control with role-based identities Application quality and policy management, end-to-end across the virtualized enterprise network. Threat Management Isolation, availability, data corruption Cloud based threat mitigation is achieved by the ALU SR 7750 Threat Management System (TMS). In partnership with Arbor Networks and integrated onto the TMS-ISA card, DDoS attack traffic is removed at the network edge Secure traffic is delivered to the DC across the IP/Ethernet service network Network-wide flow analysis & deep packet inspection (DPI) Massive scale vs. firewall/ips/ids systems 15

16 Cloud Security Associated Risks LGS Network Mitigation Mechanisms Encryption Key Management Identifying proper encryption usage & scalable key management Broadband networks enabling cloud computing depend on optical networks. Encrypted Wavelength service is a feature of the ALU 1830 PSS (Photonic Service Switch) : AES128 Key management tool uses a web interface Incident Handling Detection, reports, remediation Integrated TMS in SR 7750 utilizes incident detection, analysis and reporting from Arbor Networks. Incident reports sent to Security Operations Center (SOC) which takes action to mitigate the threat. Data Privacy & Availability Confidentiality, storage retention, restoral Armed with attack fingerprint information, security managers identify the attack, determine the source, analyze the form and mitigate the impact of an attack. Data migrated to the cloud has enhanced security because of network features that permit centralized data management, privacy and availability. Our optical switching platforms support SAN protocols which provide reliable interfaces to the data center fabric across the enterprise. PC Attacks: Malware Pipes Infected PCs are referred to as bots, with groups of bots controlled centrally and focused on specific attacks referred to as a botnets. Our carrier-grade IP networks insure continuity of operations and system reliability for cloud. ALU s integrated SR 7750 TMS-ISA feature identifies & mitigates botnet attacks for network-based DDoS protection. Identifies DDoS-related botnets via their network behavior and takes action to stop botnet channels before serious infection of enterprise desktops and servers can begin. This removes a significant processing burden on enterprise content filtering appliances/software, leaving them free to focus on identifying and filtering other threats more effectively. 16

17 Cloud Security Associated Risks LGS Network Mitigation Mechanisms Secure Internal Data Center Fabric Spoofing, DDoS, isolation Integrated security features of ALU and User Access to the Network OmniSwitch reside within the DC and at user access to the networked DC. Authentication methods such as MAC, 802.1x and web Denial of Service Defense Automatic Quarantine Management User Network Profiling Traffics Anomaly Detection (IDS) User port spoofing protection Spanning protection mechanism Network Access Control Host Integrity Check with Cyber Gatekeeper (validates endpoint compliance with security policies) 17

18 5. Summary LGS Innovations offers the U.S. Federal Government an agile cloud infrastructure that achieves IT efficiencies, minimizes costs, and optimizes performance through industry-standard virtualization technologies. The key building blocks of our solution are the network infrastructure with integrated threat management, the virtualized data center, application assurance technology, and unified service orchestration. Our cloud solution leverages innovations from the commercial enterprise market and supports these critical operational and management criteria for our U.S. government customers. These include secure multi-tenancy, data portability, virtual machine mobility, infrastructure scalability, low-latency /high bandwidth fabric, unified service management and reduced power dissipation. The LGS cloud infrastructure is supported by our professional services teams to smoothly transition the customer to the cloud and by our deployment services teams to provision, integrate, and maintain the systems. The U.S. Federal Government turns to LGS Innovations to research, develop and deploy networking and communications solutions for its missions around the world, trusting the company to address its most challenging communications needs. LGS Innovations is the U.S. Federal Government s one-stop shop for any network need from infrastructure requirements such as trenching and cabling, to network architecture and network operations, to Systems Engineering and Technical Assistance (SETA) consulting and product-only solutions. LGS Innovations: The Network Experts TM. 18

19 6. Glossary AA-ISA CPAM CRM DCC EoR ESS FCoE HP IP LAN MAC MPLS OA&M PBB PE PSS QoS RAM ROADM SAM SAN SLA SR TMS-ISA TOADM ToR VLAN VOQ VPLS VPRN VRF WAN Application Assurance-Integrated Service Adapter Control Plane Assurance Manager Customer Resource Management Data Center Connect End of Row Ethernet Service Switch Fiber Channel over Ethernet Hewlett-Packard Internet Protocol Local Area Network Media Access Control Multiprotocol Label Switching Operations Administration & Maintenance Provider Backbone Bridging Provider Edge Photonic Service Switch Quality of Service Reporting and Analysis Manager Reconfigurable Optical Add Drop Multiplexor Service Aware Manager Storage Area Network Service Level Agreement Service Router Threat Management System Integrated Service Assurance Tunable Optical Add Drop Multiplexor Top of Rack Virtual Local Area Network Virtual Output Queuing Virtual Private LAN Services Virtual Private Routed Networks Virtual Routing & Forwarding Wide Area Network 19