CENIC s Network. The CSU s Private Cloud Fabric for Disaster Recovery and Shared Services

Transcription

1 The CSU s Private Cloud Fabric for Disaster Recovery and Shared Services Presented by Steven Mann, Associate Director, Network Services CSU Monterey Bay CENIC 2014 Sonoma State University, March 11, 2014

2 Who is Steven Mann, anyway? 1984 Keyboardist / MIDI Musician 1990 Small Business Application Developer Pebble Beach Resorts Windows Admin / DBA Servers / Storage / Network Telephony / RF / IP-Video Call Center / Cell Phone Towers / Fiber CSUMB Network Operations Lead Servers / Storage / Telephony Associate Director, Network Services 2013 NTA Chair

3 Network Evolution at CSUMB 2006 Campus commi/ed to Virtualiza7on, piloted VOIP 2007 TIU supplied a new Datacenter - re7red legacy server room Built new Library which included a second data center Installed ARUBA wireless in state buildings 2009 Added backup Dark Fiber GigaMAN to CENIC s network 2011 CNI provided a new access layer Cisco 3750 V2 s 2012 ALU adopted as new Switch & Route vendor for the CSU 2013 Upgraded border circuits to 10G - SRX Firewalls and ALU Borders 2014 New Aruba WLAN controllers including our first ac AP s

4 CSUMB Jumps to Light Speed and Goes 10-Gig

5 Soledad CENIC Sunnyvale CSUMB Border Network Migration to 10G Nov- Dec, 2013 ASR Gigaman 1G BEFORE Gigaman 1G ASR CMTS inet Customers ISG 2000 Firewalls Active / Standby inet Customers Aruba G WiFi Controllers Cisco 6509 Cores Active / Standby = 1 GB = 10 GB = Traffic Campus Wired Customers Campus WiFi Customers Access / Distribution

6 AFTER Soledad New 10G Decaman CENIC Sunnyvale New Dark Fiber 10G Decaman Gigaman 1G CSUMB Border Network Migration to 10G Nov- Dec, 2013 CMTS inet Customers SRX Firewalls Active / Standby inet Customers Aruba G WiFi Controllers Cisco E Cores Active / Standby = 1 GB = 10 GB = Traffic Campus Wired Customers Campus WiFi Customers Access / Distribution

7 Why do we do DR? Off-Site backups for disaster recovery and failover, for both data and voice services are critical elements of every enterprise datacenter s operational needs. The CSU and CENIC have been looking for value in Cloud Services offerings from commercial service providers for Hosted Datacenter Services all measured in Bandwidth, CPU, Storage and RAM the water meters of the industry. There is no clear pathway to real savings here yet In the meantime, Data Center mangers in the CSU are finding ways to meet these needs through collaborative agreements with Sister Campus facilities, and saving real dollars doing it.

8 Disaster Recovery Strategy CENIC s Network

9 NO MORE TAPE!! CENIC s Network

10 Disaster Recovery Strategy CENIC s Network $

11 What are we actually doing? Co-locating equipment on sister campuses under an MOU. An MOU can incorporate any number of raw components that may be needed depending on the goal: Connectivity / Bandwidth the obvious fruit Rack Space / Power / Cooling / Physical Security BYOG Bring Your Own Gear Rackspace Ready Remote Hands for routine maintenance All of these components are rolled into the cost of services like Amazon, or Rackspace, which increases the cost to the customer.

12 Why are we doing it this way? 1. Those same services procured from another CSU campus are: Significantly cheaper if not free. Robust, secure and reliable. (competitive) Have the advantage of being in-house customers. 2. CENIC s Network is the Fabric that enables us. Peering traffic and VPN Tunnels create secure channels for most any application to be deployed as connections mature. Backup and DR Nodes are easily deployed on remote campuses.

13 Examples of organic co-location: CSU Long Beach EMC AVAMAR Backup Node at CSUMB 1. Runs in a Tunnel between Juniper Firewalls over CENIC. 2. CSULB provides equipment CSUMB provides DC Space. 3. In production since June of yrs of NO TAPE! 4. Eliminated the need / cost of 3rd party off-site storage (Iron Mountain) 5. Eliminated the need for additional rack space, power, and network ports by having the grid located off-site. 6. Reduced backup time from hours (daily) and 60 hours (weekly) down to 3 hours for 9TB of backups. 7. Reduced restore times dramatically.

14 CENIC s Network Example # 2 VM Ware Remote Cluster Zimbra Mail Store Off-Site Backup 1. Phase 1 Tunnel was initially capped at 50MB due to CSUMB bandwidth limitations. VM Ware Node Online with Critical VM s replicated Mail Store Fully Backed Up offsite without tape! 2. Phase 2 Post 10G Upgrade at CSUMB Bandwidth increased to 500MB. Backup/Restore times reduced to less than one hour for Zimbra Mail store.

15 Estimated Cost $avings vs. Rackspace Rackspace Power Bandwidth Savings Item Cal Poly SLO CSU Long Beach # Racks 2 1 $/Month $850 $850 # amps $/mo $19 $19 # TB $/GB/MO $0.12 $0.12 Annual Cost $58,320 $29,160 Years in Service 2 5 Estimated Savings Total Savings $116,640 $145,800 $262,440

16 CSU s VNOC A Shared Service using CENIC s Connectivity Provides common hosted platforms for: Network Health and Performance Monitoring Configuration Management Change Control Reporting Sacramento State and Fullerton VNOC Hosts 7 Campuses going full time in

17 What will CSU s Move to the Cloud Look Like? CSU intends to move as many services to the cloud as possible RFP for Cloud Services / IaaS Directive to reduce and eliminate datacenters within CSU Cloud Services Adoption Lifecycle and the CSU CSU does not seem to be positioned as Early Adopters Leveraging existing infrastructure still seems to make some sense until services mature (cost less). Many Campuses have state-of-the-art Virtual Environments already. ROIs need to be realized. Does it make sense to extend/migrate/sunset those environments to a Cloud Service provider with Hypervisor Links? What models are being used to calculate TCO for these efforts?

18 What will CSU s move to the cloud look like? Considerations for Each Service: SaaS or managed hosts? Security Each application is different some lend well to Cloud - others don t Costs are incurred in either case Do security risks change with cloud services? Is a campus datacenter more/less secure than commercial DC? What is the ISO s perspective on all of this? Service Level Expectations of the stakeholders don t change Legal considerations / penalties for performance Platform reliability of cloud providers Business continuity operational impact (severity) Size of Data Moving BIG DATA will cost BIG $$

19 What next for CSUMB? Implement Off-Site Backups Remote Online Cal Poly SLO Implement DR Site - SLO or Long Beach Remote VM Ware Node / Cluster Migrate eligible services to cloud based providers Move telephony to the cloud for features, mobility and service levels CALNET 3 Telco Vendors Now Approved Continue to build out LAN with 10G Uplinks

20 Reliability Confidence Matters. CSUMB Dark Fiber Circuit Outage - 3/3/14 Primary Circuit Failure

21 Reliability Confidence Matters. CSUMB Dark Fiber Circuit Outage - 3/3/14 Secondary Circuit Failover

22 Failover in action Fabric we can trust

23 Thank you! Steven Mann Associate Director, Network Services Cal State University, Monterey Bay