You can t build a new future on old technologies Juniper Networks. Enabling the Hi-IQ network of tomorrow

Transcription

1 You can t build a new future on old technologies Juniper Networks Enabling the Hi-IQ network of tomorrow

2 Aligning business and IT strategy Agility and Economics Driving IT Transformation Consolidation Virtualization Clouds Big Data SDN

3 INDUSTRY TRENDS MOVE TO THE CLOUD Enterprise DC and Cloud Public Cloud XaaS Iaas Scale out IP fabric Small Blast Radius Hyper scale multi-tenancy Overlay virtual network L3 L3 CLOS L3 CLOS With Overlay Private Cloud Virtualized IT Low scale multi-tenancy Overlay Business Critical IT ITaas Vanilla Enterprise Consolidated IT Converged storage Simplified operation L2/L3 Cloud-enable Campus Simplified network & ops Virtualized network services

4 OVERLAY NETWORK ARCHITECTURE Underlay Network low/predictable latency Overlay Controller Overlay Underlay IP Fabric / consistent Latency / simple / scalable Server Hypervisor VM VM VM Server Hypervisor VM VM VM Server Hypervisor VM VM VM

5 Network Function Virtualization (NFV) NFV is the use of general purpose servers instead of specialized devices for network functions such as routers, firewalls, DPI, Analytics, voice gateways, video encoders, etc. Virtualized Network Applications Virtualized Network Applications VMs VMs Host/ Cluster Manager KVM Hypervisor Host/ Cluster Manager KVM Hypervisor SERVICE CENTER Linux Linux

6 EXAMPLE NFV - SECURING YOUR PRIVATE CLOUD Physical Servers Private Cloud Infrastructure Security Director vcenter SRX Virtual Director vcloud Director VM VM VM VM VM VM VM FIREFLY VM FIREFLY VM FIREFLY VM Department A Department B Department C

7 Extracting Intelligence from the Network Cloud Analytics Engine Open, standards based solution for extracting meaningful data from the network providing unparalleled visibility into physical and virtual networks from the application to the physical interface. Old Way Manually driven, per-device Low frequency and capacity data extraction Need to know what you want to know. Limited visibility into tunnels and paths New Way Automated, proactive & network-wide Data streamed at wire rate Network tells you what you need to know Easily correlate physical and virtual User requests data from switch

8 SDN is an ECOSYSTEM AUTOMATION ANALYTICS ORCHESTRATION MANAGEMENT Platform Applications APIs EASIER Automated orchestration & provisioning to enable private/hybrid clouds CONTROL PLANE FEDERATED CONTROLLER SCALABLE/RESILIENT CONTROL SDN CONTROLLER: NETWORK ORCHESTRATION Control Analytics Configuration FINANCE HR MARKETING FLEXIBLE Agility to enable multi-tenant networks VIRTUAL NETWORK OVERLAY SERVICES Virtual Applications, ADC, FW, IPS, NSTraffic Mon, DDoS, etc. FASTER Elastic scaling for rapid deployment of L4-L7 services PHYSICAL NETWORK FORWARDING Routing Security Switching LOW RISK Open, Programmable physical networks with futureproof investment protection

9 JUNIPER CREATES METAFABRIC ARCHITECTURE Simple Open Smart Easy to deploy & use Maximize flexibility Save time, improve performance

10 Orchestration NMS METAFABRIC VALIDATE ARCHITECTURE Security Compute DCI Routing Data Switching Center Switching Services Storage Network Juniper EX switching Juniper VCF - switching Juniper MX480 - routing ND Cloud Analytics - management Security Juniper SRX3600 security (adaptive) Juniper vgw Services F5 LTM solutions Virtualization VMware vsphere - solutions Compute IBM FlexSystem Chassis - solutions IBM x solutions Storage EMC VNX 5500

11 JUNIPER PRODUCT PORTFOLIO FOR METAFABRIC Network Director Security Director Virtual Director Physical and Virtual Security DDoS Secure Secure Analytics SRX Series Firefly WebApp Secure QFX5100 series Access Switch (ToR) NSX Layer2 Gateway EX9200 Core/ Aggregation Switch NSX Layer 2 Gateway NSX Layer3 Gateway Universal SDN Gateway MXSeries Routers WAN Gateway NSX Layer 2 Gateway NSX Layer3 Gateway Universal SDN Gateway

12 Switching - virtual chassis fabric Deployment option spine and leaf design mixed leaf options Adaptive Flowlet Splicing EX9200 QFX Q Virtual Chassis Fabric (VCF) 10G/40G QFX S EX RU, 48 SFP+ & 1 QIC 10G access Existing 10G access Existing 1G access

13 Configuration : ND Wizard-based setup VCF

14 VISIBILITY: KEY FOR OPTIMAL USER EXPERIENCE Complete Fabric Visibility

15 VISIBILITY: UTILIZATION HEATMAP Location wise grouping Granular port utilization view

16 VISIBILITY: LATENCY HEATMAP Per interface view of congestion & latency events

17 SWITCHING - DATACENTER/CORE - JUNIPER ARCHITECTURES Juniper Architectures Virtual Chassis Up to 10 members Virtual Chassis Fabric Up to 20 members In Service Upgrade for Continuous service delivery QFabric Up to 128 members Benefits Single point of management and control Purpose-built and turnkey Open Architectures MC-LAG QFX5100 IP Fabric L3 Fabric One Architecture Does Not Fit All, QFX5100 enables Choices! Benefits Flexible deployment scenarios Open choice of technologies and protocols

18 QFX5100 Topology-independent In-Service Software Upgrades QFX5100 Architecture Problem Network performance and resiliency at risk during switch software upgrade Junos VM (Master) Junos VM (Upgraded (Backup) Master) Solution TISSU Topology-independent in-service software upgrades (industry only) Kernal Based Virtual Machines Linux Kernel x86 Hardware Packet Forwarding Engine Benefits Seamless upgrade No traffic loss No performance impact No resiliency risk No port flap Switching architecture agnostic

19 EX9200 SERIES, SERVICE DELIVERY GATEWAY Delivering innovation inside and outside of the data center Flexible SDN enabled silicon to provide seamless workload mobility and connections between private and public cloud infrastructures USG (Universal SDN Gateway) The most advanced and flexible SDN bridging and routing gateway EVPN (Ethernet VPN) Next-generation technology for connecting multiple data centers and providing seamless workload mobility VMTO (VM Mobility Traffic Optimizer) Creating the most efficient network paths for mobile workloads

20 Datacenter Interconnect. Use Case : EVPN For Data Center Interconnect Data Plane Learning BGP Control Plane based learning on WAN Data Plane Learning VLAN 1 MAC1 E-VPN Cloud VMTO VLAN 1 MAC11 VxLAN Cloud Legacy L2 Cloud VLAN 2 MAC 2 EX9200 MX Series EX9200/ MX Series Data Center Site1 Data Center Interconnect Data Center Site 2 VLAN 2 MAC22 Benefits: Seamless interconnect between DCs - L2 stretch between DCs Seamless Workload migration - VM mobility across DCs Wide Applicability Interconnects Native L2 and overlay technologies

21 Spotlight Secure Threat Intelligence Platform Security Intelligence Open threat intelligence platform for distributing real time intelligence to SRX enforcement points. Old Way Single purpose devices with occasional updates Slow to react and defend No centralized intelligence New Way Open platform for security intelligence Continuous, real time threat updates Centralized control for all enforcement points Spotlight Secure Cloud

22 JUNIPER SERVICES PORTFOLIO NFV READY Network Services Virtual CPE Virtual PE Virtual Route Reflector Virtual Routing Engine Security Services Firefly Perimeter Virtual FW Firefly Host Hypervisor FW DDoS Secure Virtual WebApp Secure Virtual Virtual Secure Access Secure Analytics Virtual Application Services Virtual CGN Virtual CDN Virtual Junos Content Encore

23 SDN - Juniper contrail architecture a general purpose SDN platform Orchestration, Automation, Analytics Open source and partner eco system of orchestrators Api and sdk for integration with OSS / BSS OSS Control Plane - Physical, Virtual Open, standards-based, federated controller Scalable and resilient Configuration manager, Automation Control Plane Control Plane Control Plane Virtual Network Overlay Multi-tenancy for private and virtual public clouds Finance HR Marketing Gateway functions - connect to virtual to physical network Service chaining (physical and virtual) Physical Network Interoperability with traditional network devices Any-to-any non-blocking low-latency fabric: Q-Fabric or Clos

24 VLAN VXLAN VLAN VXLAN SDN - VMWARE NSX - INTEGRATION WITH NETWORK DIRECTOR Network Management + Underlay/Overlay visibility Network Director QFX 5100 (NSX L2 Gateway + ToR) IP Network (VCF/IP CLOS) QFX 5100 (NSX L2 Gateway + ToR) vswitc h (NVS) vswitch (NVS) Bare Metal Server Firefl y DDoS Secure Analytics Bare Metal Server Firefly DDoS Secure Analytics Web Server Web Server Web Server App Server App Server App Server

25 Network Director : Physical to Virtual Network Mapping

26 Junos Automation Stack Python Scripts Ansible Puppet Chef Ruby Scripts Reduce time to build/configure and collect PythonEZ Framework RubyEZ Library Open architecture Netconf XML-RPC Junos Junoscript SNMP CLI Three key features at the platform layer XML-RPC and Netconf Junos Script Junos EZ Chassis Data Plane (PFE) Junos Platform Automation Stack

27 NETWORK ANALYTICS IS A BIG DEAL Virtualization Cloud Adoption Business Agility Operational Simplicity Application Performance

28 COLLECTION OF INFORMATION: GUEST VM CAN BE ADDED JunOS ACTIVE Virtual Machine JunOS BACKUP Virtual Machine Guest Virtual Machine JSON LATENCY BUFFER UTILIZATION INTERFACE COUNTERS SFLOW Disclaimer: Items depicted in the guest VM are for instructional purposes and not validated Juniper solutions.

29 Analytics: Use Cases Latency Measurement & Visibility Capacity Planning & Optimization Break-Fix & Troubleshooting Network Telemetry

30 USE CASE 1 : MICROBURST 1second view Congestion Threshold not exceeded 5 Minute View Legacy Traffic View millisecond millisecond view view Congestion Threshold exceeded Enhanced Traffic view 10ms view 1sec view 5min view

31 31 Use Case 2 : Latency Calculations Provide per hop and end-to-end latency per traffic flow Analytics and Orchestration Layer Timestamp: T+2 Timestamp: T+1 S2 Timestamp: T+3 Timestamp: T+4 S1 S4 Compute Node A Flow Latency S3 Compute Node B S1 S2 S4 CA-B Red App: T+1 T+2 T+3 T+4 End To End Latency: 4

32 Evolution : Cloud Enabled Campus Architecture Network Layer Target Segments Core Distribution EX9200 EX4600 Large ENT Govt. FSI EX9200 Med-Small ENT Branch EX4600 EX9200 programmable core 480G per slot; 100G/40G/10G line card MACSEC line cards Network segmentation (MPLS, EVPN, VTEP) EX4600 most compact distribution ISSU Mixed Virtual Chassis with EX4300 Access EX4300 VC EX4300 VC EX3300 VC EX2200 EX4300 access Complete RJ45, POE+ and fiber portfolio Virtual chassis with standard connectors (QSFP+) 10/40GbE uplink options Management: Network Director Network heat map and analytics EX4600 support

33 WHY JUNIPER? Open System Embrace an ongoing partner eco-system for services innovation Avoid vendor lock-in Future-Proof Built in weeks with off-the-shelf software Architecture is an overlay to existing network which minimizes initial disruption Leverage Assets Network Overlay Architected leverages existing Network infrastructure Creates new revenue streams by leveraging existing customer base Ready to Deploy Production ready software of carrier quality