JUNIPER. One network for all demands MICHAEL FRITZ CEE PARTNER MANAGER. 1 Copyright 2010 Juniper Networks, Inc.

Transcription

1 JUNIPER One network for all demands MICHAEL FRITZ CEE PARTNER MANAGER 1 Copyright 2010 Juniper Networks, Inc.

2 2-3-7: JUNIPER S BUSINESS STRATEGY 2 Customer Segments 3 Businesses Service Provider Enterprise Routing Edge Data Center WAN Switching 7 Domains Security Core Access & Aggregation Campus & Branch Consumer & Business Device 2 Copyright 2012 Juniper Networks, Inc.

3 CLEAR MISSION AND FOCUSED STRATEGY Connect everything; empower everyone Silicon Systems Software Through high-performance network and industry innovation 3 Copyright 2012 Juniper Networks, Inc.

4 JUNIPER S VIRTUAL DATA CENTER 4 Copyright 2012 Juniper Networks, Inc. JUNIPER NETWORKS CONFIDENTIAL

5 MEGA TREND SERVER VIRTUALIZATION Physical Server Installed Base (Millions) Logical Server Installed Base (Millions) Millions Installed Servers Capital Savings Source: IDC 5 Copyright 2010 Juniper Networks, Inc.

6 TREND? - THE NETWORK IS VIRTUAL! VPN VLAN Virtual Router VPLS TRUNK Virtual IF s VRF MPLS Virtual Chassis 6 Copyright 2010 Juniper Networks, Inc.

7 TRAFFIC FLOWS IN THE CLOUD Clients Global High-Performance Network Data Centers Customer to DC DC to DC Server to Server 7 Copyright 2012 Juniper Networks, Inc. JUNIPER NETWORKS CONFIDENTIAL

8 SOLUTIONS TO SECURE THE FLOWS Clients Securing flows between servers 1 Securing flows between VMs 2 Global High-Performance Network Client to DC Data Centers Securing flows from DC to DC 3 DC to DC Server to Server Securing flows from Clients to DC 4 Applying User and Application Identity to DC Security Policy 5 8 Copyright 2012 Juniper Networks, Inc. JUNIPER NETWORKS CONFIDENTIAL

9 INCREASED VIRTUALIZATION REQUIRES SIMPLIFICATION 3. Legacy three-tier data center 2. Juniper two-tier data center 1. Juniper s data center fabric W Up to 75% of traffic E 9 Copyright 2012 Juniper Networks, Inc. JUNIPER NETWORKS CONFIDENTIAL

10 VIRTUALIZED DATACENTER INTERNET MX Series MX Series MPLS VPLS EX9200 Remote Data Center Remote Data Center EX9200 SRX5800 SRX5800 QFX3500 EX4200/EX4550 EX4200/EX4550 QFX Copyright 2013 Juniper Networks, Inc.

11 CLOUD-ENABLED SECURITY User App COMPANY A User App COMPANY B User App Virtualized Security Virtualized Services Security Services COMPANY C Policies Reporting Security Design STRM (Junos Space) Management & Compliance Services 1. AppSecure: AppDoS, AppTrack 2. Firewall 3. Authentication 4. Encryption 5. NAT 6. Intrusion prevention 7. Real-time visibility 8. Traffic prioritization 11 Copyright 2012 Juniper Networks, Inc. JUNIPER NETWORKS CONFIDENTIAL

12 CLOUD-ENABLED SECURITY Securing the Flows User App VM 1 VM 2 VM 3 VM 4 Internet CLIENTS Secure VDI Support IDENTITY SSL VPN vgw Virtual Gateway Hypervisor Virtual Machines DMZ Virtualized Security Services HR ZONE FINANCE ZONE Policies Reporting Security Design STRM (Junos Space) Management & Compliance 1. AppSecure: AppDoS, AppTrack 2. Firewall 3. Authentication 4. Encryption 5. NAT 6. Intrusion prevention 7. Real-time visibility 8. Traffic prioritization 12 Copyright 2012 Juniper Networks, Inc. JUNIPER NETWORKS CONFIDENTIAL

13 CLOUD-READY DATA CENTER SECURITY SOLUTION Management and Security Services Security Design STRM Security Threat Response Manager Physical Services Virtual Firewall SRX STRM IPS JWAS DoS DoS Protection SSL VPN JDDoS SRX Series AppSecure SPACE 13 Copyright Copyright Juniper Networks, Inc. Inc.

14 BEYOND THE CLOUD SDN SOFTWARE DEFINED NETWORKS 14 Copyright 2010 Juniper Networks, Inc.

15 SDN IN THE ENTERPRISE DATA CENTER Shaping the SDN Conversation with a Comprehensive Strategy Platforms Comprehensive Portfolio Only 1-Tier fabric Most flexible 2-Tier fabric Exciting roadmap! SWITCHING EX,QFX ROUTING MX MANAGEMENT JUNOS SPACE PLATFORMS Unified OS In-network & WF Automation Programmable ASICs SECURITY SRX, vgw SDN Protocols and Network APIs BGP-TE OpenFlow VMware vcenter Director APIs PCE Virtualization-Automation-Orchestration VXLAN Switching Puppet

16 SDN USE CASES Simplicity, Manageability, Flexibility, Automation Multi-tenancy aka Network slicing Segmenting customers in the cloud Gateways Ability to connect virtual and physical networks seamlessly Application oriented network Design driven by Apps Traffic engineering and bandwidth calendaring in the WAN For optimized Data Center Interconnect (DCI) Service chaining aka Network Function virtualization Flexibly deploying virtualized services (FW, UTM, Load balancers, SLB, )

17 SDN SERVICE CHAINING Cloud Application Datacenter Runs as a VM Internet Router Stateful Firewall Application Delivery Controller Hypervisor vswitch Web Server

18 JUNIPER S SDN STRATEGY: General Principles Separate Centralizec Use the cloud Common Platform Standard Apply Broadly 4 Juniper Steps Centralize Management Extract Services Centralize Controller Optimize the Hardware 1 Licensing Model Full Use/Elastic JUNIPER SOFTWARE ADVANTAGE Transferable Software Lifetime Assurance

19 6 PRINCIPLES OF SDN Separate networking into four planes Separate forwarding, control, services, and management Centralizec Centralize management, control, and services Use the cloud for Use the cloud elastic scale and flexible deployment enabling usage-based pricing

20 6 PRINCIPLES OF SDN Use common platforms for Common Platform network, security applications and management integration Use standard protocols for interoperability across vendors Standard OpenFlow, VXLAN, PCE, NVGRE Broadly apply SDN across the networking domains Apply Broadly

21 MANAGEMENT LAYER OF JUNIPER S SDN STRATEGY JunosV Contrail SDN Controller Junos Space SDK & APIs Programmable interface to customize apps & 3 rd party integration Junos Space Management Applications Junos Space Network Director, Security Director, Service Activation Director Junos Space Network Management Platform Element management, provisioning, automation

22 VIRTUAL SOFTWARE OVERLAY Use tunnel encapsulation to abstract the underlay network to address all challenges Orchestrator SDN Controller OpenStack VMware vcloud Director Microsoft System Center JUNOS SPACE NORTH-BOUND High Level of Abstraction Quantum,... JunosV Contrail Nicira (VMware) NVP Open Controllers and others VM Network (Physical and Virtual) VM SOUTH-BOUND Low Level of Abstraction Netconf, OpenFlow, PCEP, BGP-TE, ALTO,... Storage VM Server VM Server BENEFITS Physical Network (Fabric) Physical Network (Gateway) Physical and Virtual Network Services Ease of migration (no need for replacing physical underlay) Lower cost/complexity supported as a x86-based VM, simplifies device-level complexity of physical network Modularity, flexibility of software-only approach Ability to converge orchestration across physical and virtual network system components (Contrail/Space integration, config, etc.)

23 SERVICE DELIVERY CHALLENGES TIME TO SERVICE PRODUCT EVOLUTION OVER THE TOP THREAT NETWORK TO CLOUD OSS AGILITY Lengthy service provisioning times of days to weeks Lengthy new product introduction & certification times OTT cloud providers compete using internet Lack integration of Public and Private cloud offerings Expensive to replace or augment current OSS systems IP Activation process cumbersome Bundles limited by physical infrastructure (eg VAE) Network commoditised Leveraging network to differentiate Project Pivot addresses these challenges using existing Telstra assets without costly investments in network refresh and proprietary OSS systems

24 CONTRAIL CONNECTING TELSTRA UTM FW DPI WAN Opt SLB 3. Use of standard routing protocols to connect ANY Telstra customer to ANY service without interfacing with IP- RDM or similar PSL Contrail SDN NEXTIP VPN 2. Openstack standard interfaces provision virtual services 1. Standard API s allow for simple portal control Customer Site A Customer Site B

25 SERVICE GATEWAY ON / OFF SUMMARY: Project PIVOT demonstration takes the Juniper Firefly firewall, and the Contrail SDN software and overlays them into Telstra s own infrastructure to show a working SDN-enabled service chain to ANY NextIP customer

26 LIVE SERVICE CHAINING DEMO Contrail Enables Product-on-Product NextIP customer logs into VPN via Pulse User is able to browse the company Intranet but not the Internet Telstra Sales Rep logs into Activation portal Turns Gateway ON Contrail system spins up VM and instantiates vfw service Service chains the Internet Service to the FW and then into the IPVPN Customer is now able to access Intranet & Internet Single-touch activation and provisioning Standard API s and SDN interfaces Zero changes to the IP network Service Established in minutes

27 VMWARE INTEGRATION Automate the Physical and Virtual Network with Network Director Network Director, integrated with VMware vcenter Web-based unified orchestration for physical & virtual Network policies are automatically applied Automate sync between physical and virtual networks Virtual machine migration for workload mobility Junos Space Network Director plug-in for VM vcenter Provide visibility across virtual &physical networks Simplifying management and automation

28 VMWARE INTEGRATION Connecting Physical and Virtual Networks NSX Integration NSX L2 gateway support Juniper ToR switches VMware NSX L2 gateway services on MX Series EX9200 and QFX Series enable connectivity between VMware virtual and physical network environments VXLAN routing on MX Series and EX9200 platforms to support virtual networks between data centers or need to move applications between NSX clusters within a data center

29 HOW TO PREPARE FOR SDN TODAY? Make sure to invest in flexible platforms that your systems support open standards to build flat any to any networks your networking devices have programmable ASIC chipsets the network OS supports programmability and multiple SDN protocols

30 JUNIPER SDN 2013 JunosV Contrail Platform JunosV App Engine in MX Router Junos Space Management Platform Junos Security Director for Security Products Management Junos Network Director for Datacenter and Campus Switches Junos Virtual Director for Firefly and virtual gateway Service Now - Online Service Monitoring and Product Support JunosV Firefly - Virtual Firewall Services Junos DDOS Secure - Distributed Denial of Service Prevention Junos WebApp Secure - Intrusion Deception (Mykonos) Junos Spotlight Secure Global Hackers Database OpenFlow in MX Router, EX & QFX Switches Systems PCE (Path Computation Engine) in MX & PTX Routers BGP, BGP-TE in all Routing platforms

31