Agenda. Importance of UCS Director in an ACI Environment Integration Overview and Key Concepts Use-Case Demonstrations Conclusion Q&A

Transcription

1

2 Management and Automation of Application Centric Infrastructure with Cisco UCS Director Michael Zimmerman, Technical Marketing Engineer Shankar Varanasy, Product Manager BRKACI-2410

3 Agenda Importance of UCS Director in an ACI Environment Integration Overview and Key Concepts Use-Case Demonstrations Conclusion Q&A

4 Importance of UCS Director in an ACI Environment

5 It s All About the Applications Businesses make money through running applications, either directly or indirectly Online sales catalog (direct) HR application to onboard new Sales Rep. (indirect) IT operations typically revolve around the application lifecycle Provisioning Securing Maintaining Deprovisioning Sounds simple but what makes up an application

6 Application DNA DNA is a complex structure made up of various combinations of units called nucleotides Similar to DNA, applications can be quite complex and are made up of various combinations of units, we typically call them resources Types of resources include: Virtual Compute Physical Compute Network Storage Services (L4-L7)

7 3-Tier Sample Application Blueprint Web Application Database Rest Of World Firewall Load Balancer Virtual Machines Virtual Machine Virtual Machine

8 Application Complexity Multiple virtual and/or physical devices to deploy and manage Web Application Database Rest Of World Firewall Load Balancer Virtual Machines Virtual Machine Virtual Machine

9 Application Complexity Multiple network segments between devices Web Application Database Rest Of World Firewall Load Balancer Virtual Machines Virtual Machine Virtual Machine

10 Application Complexity Storage resource configuration and connectivity Web Application Database Rest Of World Firewall Load Balancer Virtual Machines Virtual Machine Virtual Machine Storage

11 Application Complexity Services and security routes, rules, policies and configurations Web Application Database Rest Of World Firewall Load Balancer Virtual Machines Virtual Machine Virtual Machine

12 Application Infrastructure Deployment Is an aggregation of many individual infrastructure operations across many different layers Numerous touch-points Various infrastructure teams/people (in most cases) Coordination to follow appropriate order of operations Cross-functional information sharing All of which leads to more time and money spent on the deployment of applications

13 Importance of UCS Director for ACI Automates the various operational tasks within the ACI fabric Tenants, Private Networks, Bridge Domains, App Profiles, EPGs, etc. Automated through APIC REST API Orchestration Workflow UCS Director Create Tenant Create Private Network Create Bridge Domain Create Application Profiles N And More REST API 183 Tasks for ACI Out-of-the-Box (UCSD 5.3)

14 Importance of UCS Director for ACI Complements the automation of ACI with the addition of endpoint automation End-to-end workflows encompassing operational tasks across all infrastructure layers; ACI fabric, virtual servers, physical servers, storage, services, etc. Orchestration Workflow UCS Director APIC Tasks Storage Tasks Virtual Server Tasks Physical Server Tasks N And More APIs SDKs etc Overall Tasks Out-of-the-Box (UCSD 5.3)

15 Integration Overview and Key Concepts

16 UCS Director ACI Integration UCS Director leverages the APIC REST-based API for ACI integration UCS Director REST API Configuration Thru Policy

17 UCS Director Methodologies for ACI 1. Build your own custom workflows using Workflow Designer and Task Library 1. Leverage out of the box ACI Application Container framework for defining, provisioning and managing tenants and applications in an ACI environment Note: Only supported with certain topologies and use-cases

18 Methodology #1: Build Your Own Workflows

19 UCS Director Infrastructure Task Library 183 Tasks for ACI 1500 Out-of-the-Box (UCSD 5.3) Infrastructure Tasks Out-of-the-Box (UCSD 5.3)

20 UCS Director Workflow Designer

21 UCS Director Workflow Designer Drag and Drop Tasks

22 UCS Director Workflow Designer Map Outputs to Inputs

23 UCS Director Workflows on Cisco Communities 1. Navigate to: 2. Click on UCS Director Workflows

24 With Great Power Comes Great Responsibility WARNING: Be careful when developing your own workflows No mechanism to check configuration best practices, etc. Recommend Advanced Services engagements Work together with your Cisco technical team Leverage out-of-box workflows or communities workflows for examples

25 Methodology #2: ACI Application Container Framework

26 ACI Application Container Framework The ACI Application Container framework operates in two required phases Phase I - Tenant Onboarding Deploy a tenant within the environment Provision required resources for application provisioning Phase II - Application Provisioning Actual provisioning of an application instance from a template Publishing as a self-service capability

27 Phase I: Tenant Onboarding

28 Supported Topologies (as of UCS Director 5.3) 1. VNX-based Topology ACI Spine ACI Spine APICs ACI Leaf ACI Leaf UCS FI UCS FI UCS Chassis EMC Ethernet Fiber Channel

29 Supported Topologies (as of UCS Director 5.3) 2. NetApp-based Topology ACI Spine ACI Spine APICs ACI Leaf ACI Leaf UCS FI UCS FI NetApp NetApp UCS Chassis Ethernet

30 UCS Director CVD w/ FlexPod & ACI CVD Link: pod_iaas_ucsd_52_aci.pdf

31 VMNET Port Group Dynamic VMNET VLAN UCS Physical Domain VMNET EPG VMNET Bridge Domain SVM-MGMT VLAN Interface ESXi Host 2 Vmkernel Interface NFS VLAN Interface LIF-SVM-MGMT NFS Datastore VMK-NFS Port Group Dynamic NFS VLAN UCS Physical Domain VMK-NFS EPG LIF-NFS EPG Consumer Flexible Volume Tenant Storage Virtual Machine SVM-MGMT VLAN Interface ESXi Host 1 VMkernel Interface LIF-NFS SMV-MGMT Bridge Domain LIF-SVM-MGMT EPG Cluster Node 2 Cluster Node 1 NFS VLAN Interface Phase I Tenant Onboarding VMware vsphere Cisco UCS Manager Cisco Application Centric Infrastructure NetApp Clustered Data ONTAP tcp_2049 udp_2049 tcp_111 udp_111 tcp_635 udp_635 Filter Rules Provider NFS Contract NFS Bridge Domain Private Network Tenant

32 Resource Groups Logical groupings used for resource management Assign device accounts to a resource group Determine what each device will advertise Capabilities Capacities Advertised capabilities and capacities can be used in resource allocation Resources divided into categories Virtual Compute, Virtual Network, Virtual Storage Physical Compute, Physical Network, Physical Storage

33 Resource Groups Compute Network Storage Virtual APIC Data Center UCS Domain Server Pool APIC Switch Pair Server Pool Storage Controllers vservers VMM Account Cluster Physical Compute Physical Network Physical Storage Resource Group Virtual Compute Virtual Network Virtual Storage

34 Environment Specific Inputs Configured as part of a resource group Specific detail about connectivity of resource group devices Includes other environmental information such as specific IP and VLAN pools

35 Resource Tags (Optional) Enables more granular control of resources within a resource group Mechanism to tag resources with certain attributes or values Tags can be used by UCS Director in resource selection and allocation Example uses: Create tiers of resources within a resource group: tag resources as gold, silver, bronze, etc. Minimize scope list for available resources: tag certain aggregates that can specifically be used

36 Resource Tags (Optional) aggr1 aggr2 aggr3 Storage Aggregate Storage Aggregate Storage Aggregate ESXi Cluster 1 ESXi Cluster 2 ESXi Cluster 3 Resource Group

37 Resource Tags (Optional) Create Tiers aggr1 aggr2 aggr3 Storage Aggregate Storage Aggregate Storage Aggregate ESXi Cluster 1 ESXi Cluster 2 ESXi Cluster 3 Tag: Tier Value: Gold Tag: Tier Value: Silver Tag: Tier Value: Bronze Resource Group

38 Resource Tags (Optional) Minimize Scope aggr1 aggr2 aggr3 Storage Aggregate Storage Aggregate Storage Aggregate ESXi Cluster 1 ESXi Cluster 2 ESXi Cluster 3 Tag: Tier Value: Gold Tag: Tier Value: Silver Tag: Tier Value: Bronze Resource Group Tag: Available Value: Yes

39 Resource Tags (Optional) 1. Define the tag and the possible tag values 2. Define the tag-able entities

40 Service Offering Think of a service offering as a definition of requirements: What does my tenant or application require? Split into 6 classes (match categories): Virtual Compute Virtual Network Virtual Storage Physical Compute Physical Network Physical Storage

41 Service Classes In each of the six service classes, define Whether resources should be dedicated or shared for the tenant/application Tags to be used for more granular resource selection and allocation Capabilities required for the tenant/application Capacities required for the tenant/application

42 Service Offering & Service Classes aggr1 aggr2 aggr3 Storage Aggregate Storage Aggregate Storage Aggregate ESXi Cluster ESXi Cluster ESXi Cluster Tag: Tier Value: Gold Tag: Tier Value: Silver Tag: Tier Value: Bronze Resource Group Tag: Available Value: Yes Service Offering Physical Storage Tag: Tier Value: Gold Physical Compute Physical Network Virtual Storage Virtual Compute Tag: Available Value: Yes Virtual Network

43 Tenant Profile Pair a service offering to a resource group Two mechanisms to determine valid resource group: Admin selection Resource Group tag-based selection

44 Tenant Profile 1. Select the Service Offering(s) and Resource Group selection method 2. Pair the available Resource Groups with Service Offerings

45 UCS Director Tenant On-Boarding Flow Chart Start Resource Tags Required? No Create Resource Group Define Service Classes Tenant Onboarding Wrapper Task Yes Create Pod Create Resource Tags Add Devices To Resource Group Define Tenant Profile Execute Onboarding Workflow Add Devices To UCS Director/Pod Tag Appropriate Resources Define Environment Specific Inputs Finish Create Service Offering

46 Demo: Part I - Tenant Onboarding

47 Phase II: Application Provisioning

48 Application Profile Central configuration point for application container provisioning with ACI Define a template for a single or multi-tiered application Components include: Network (or tier) definition Virtual machine definition per network (tier) Physical server definition per network (tier) Contract definition between networks (tiers) L4-L7 service definition between networks (tiers)

49 Application Profile Web App DB Define application network tiers or APIC EPGs Also defines APIC Private Networks and Bridge Domains for each EPG (tier)

50 APIC Network Policy (Optional) Operates within the scope of an APIC tenant Tied to one or more networks (or tiers) in the application profile Override default application provisioning behavior and settings Private network specification Subnet specification EPG specification Bridge Domain specification

51 APIC Network Policy (Optional) Default: Each provisioned bridge domain uses the tenant-level private network Default:

52 APIC Network Policy (Optional) Default: Immediate for both settings Default:

53 Application Profile Web App DB Define application server components

54 Application Profile Web App DB Define contract rules between network tiers

55 Application Profile Web App DB Define L4-L7 services between network tiers

56 L4-L7 Service Policy (Optional) Defines more specific information about the L4-L7 services to be added Firewall and/or Load-balancer Define ACI Device Package Refer to service specific policies (i.e. Firewall: ASAv VM Deployment Policy and APIC Firewall Policy

57 L4-L7 Devices (Optional) Defined within the Resource Group definition Provides information about the specific service device IP Pools Management Port Group

58 APIC App Container Flow Chart Start APIC Network Policies No L4-L7 Services? Application Profile Virtual Infrastructure Policy Add Service Container Catalog Item Yes Include Firewall? No L4-L7 Service Policy Application Container Template Finish Yes Yes Self-Service? ASAv VM Deployment Policy APIC Firewall Policy No Finish

59 Demo: Part II - Application Provisioning

60 Conclusion

61 Conclusion Cisco UCS Director dramatically reduces time to market for services and applications Out-of-the-box framework and workflows for provisioning application infrastructure w/ ACI adding more with each release Growing community of user created workflows (ACI and non-aci) Flexibility to create your own workflows or edit existing workflows UCS Director is the foundation for Cisco ONE Enterprise Cloud Suite, start your journey to private cloud with UCS Director!!

62 Q&A

63 Complete Your Online Session Evaluation Give us your feedback to be entered into a Daily Survey Drawing. A daily winner will receive a $750 Amazon gift card. Complete your session surveys though the Cisco Live mobile app or your computer on Cisco Live Connect. Don t forget: Cisco Live sessions will be available for viewing on-demand after the event at CiscoLive.com/Online

64 Continue Your Education Demos in the Cisco campus Walk-in Self-Paced Labs Table Topics Meet the Engineer 1:1 meetings Related sessions

65 Thank you

66

67 Data Center / Virtualization Cisco Education Offerings Course Description Cisco Certification Cisco Data Center CCIE Unified Fabric Workshop (DCXUF); Cisco Data Center CCIE Unified Computing Workshop (DCXUC) Implementing Cisco Data Center Unified Fabric (DCUFI); Implementing Cisco Data Center Unified Computing (DCUCI) Introducing Cisco Data Center Networking (DCICN); Introducing Cisco Data Center Technologies (DCICT) Prepare for your CCIE Data Center practical exam with hands on lab exercises running on a dedicated comprehensive topology Obtain the skills to deploy complex virtualized Data Center Fabric and Computing environments with Nexus and Cisco UCS. Learn basic data center technologies and how to build a data center infrastructure. CCIE Data Center CCNP Data Center CCNA Data Center Product Training Portfolio: DCAC9k, DCINX9k, DCMDS, DCUCS, DCNX1K, DCNX5K, DCNX7K Get a deep understanding of the Cisco data center product line including the Cisco Nexus9K in ACI and NexusOS modes For more details, please visit: Questions? Visit the Learning@Cisco Booth or contact ask-edu-pm-dcv@cisco.com

68 Network Programmability Cisco Education Offerings Course Description Cisco Certification Integrating Business Applications with Network Programmability (NIPBA); Integrating Business Applications with Network Programmability for Cisco ACI (NPIBAACI) Developing with Cisco Network Programmability (NPDEV); Developing with Cisco Network Programmability for Cisco ACI (NPDEVACI) Designing with Cisco Network Programmability (NPDES); Designing with Cisco Network Programmability for Cisco ACI (NPDESACI) Implementing Cisco Network Programmability (NPENG); Implementing Cisco Network Programmability for Cisco ACI (NPENGACI) Learn networking concepts, and how to deploy and troubleshoot programmable network architectures with these self-paced courses. Learn how to build applications for network environments and effectively bridge the gap between IT professionals and software developers. Learn how to expand your skill set from traditional IT infrastructure to application integration through programmability. Learn how to implement and troubleshoot open IT infrastructure technologies. Cisco Business Application Engineer Specialist Certification Cisco Network Programmability Developer Specialist Certification Cisco Network Programmability Design Specialist Certification Cisco Network Programmability Engineer Specialist Certification For more details, please visit: Questions? Visit the Booth or contact

69 Cloud Cisco Education Offerings Course Description Cisco Certification Designing the FlexPod Solution (FPDESIGN); Implementing and Administering the FlexPod Solution (FPIMPADM) UCS Director (UCSDF) Learn how to design, implement and administer FlexPod solutions Learn how to manage physical and virtual infrastructure using orchestration and automation functions of UCS Director. FlexPod Design Specialist; FlexPod Implementation & Administration Specialist Cisco Prime Service Catalog Learn how to deliver data center, workplace, and application services in an on-demand, automated, and repeatable method. Cisco Intercloud Fabric Learn how to implement end-to-end hybrid clouds with Intercloud Fabric for Business and Intercloud Fabric for Providers. Cisco Intelligent Automation for Cloud Learn how to implement and manage cloud deployments with Cisco Intelligent Automation for Cloud For more details, please visit: Questions? Visit the Booth or contact