Cloud, SDN and the Evolution of

Transcription

1 Cloud, SDN and the Evolution of Enterprise Networks Neil Rickard Gartner is a registered trademark of Gartner, Inc. or its affiliates. This publication may not be reproduced or distributed in any form without Gartner's prior written permission. If you are authorized to access this publication, your use of it is subject to the Usage Guidelines for Gartner Services posted on gartner.com. The information contained in this publication has been obtained from sources believed to be reliable. Gartner disclaims all warranties as to the accuracy, completeness or adequacy of such information and shall have no liability for errors, omissions or inadequacies in such information. This publication consists of the opinions of Gartner's research organization and should not be construed as statements of fact. The opinions expressed herein are subject to change without notice. Although Gartner research may include a discussion of related legal issues, Gartner does not provide legal advice or services and its research should not be construed or used as such. Gartner is a public company, and its shareholders may include firms and funds that have financial interests in entities covered in Gartner research. Gartner's Board of Directors may include senior managers of these firms or funds. Gartner research is produced independently by its research organization without input or influence from these firms, funds or their managers. For further information on the independence and integrity of Gartner research, see "Guiding Principles on Independence and Objectivity."

2 Strategic Planning Assumptions Through 2017, the average enterprise network will see a 28% CAGR for bandwidth due to the use of cloud computing, mobile devices and video. Through 2015, at least 50% of cloud deployments will suffer from businessimpacting performance issues, requiring extensive network redesign to address them.

3 Application Mapping Key to Designing for Hybrid Cloud Environments Typical Practice Site Category Site Reliability Goal Technology A Data Center(s) % Dual Ethernet and/or MPLS Plus Internet VPN B HQ/Plant 99.99% Ethernet and/or MPLS Plus Internet VPN C Regional Office 99.9% MPLS Plus 3G/4G or DSL Backup D Small Office/Teleworker 99% Internet VPN Plus 3G/4G Backup Recommended Practice Application Performance Needs Reliability Goal Users Origin Telepresence ERP VoIP Low Latency and Loss Application-level SLA Application-level SLA Response Time Low Latency and Loss MOS Score SLA The networking function must get buy-in from the business for these decisions. Achieving % availability can cost 100 times more than 99.0% availability. Hybrid networks can support different SLAs for different applications at the same location. SLAs will vary from network to application level for different applications. 99.9% 4 x HQ Suites 3 x Partner Companies 99.9% Sales and Order Entry, Large and Regional Offices Peer to Peer Private Cloud 99.9% All Peer to Peer Best Efforts 99% All Public Cloud

4 Hybrid Cloud Services Increase the Pace of Change in the Enterprise Network Internet Public Cloud Provider Web 3G/4G Cellular Private Cloud Web ERP Leased Line Branch Locations DSL MPLS/Ethernet Network ERP Virtual Private Cloud/Infrastructure Utility Provider Distant Cloud Centers Higher Latency Internet Hosted Services Variable Performance Chaotic Traffic Flows Unpredictable Performance Cloud Providers That Will Not Allow Direct Connection to Their Centers No End-to-end Visibility All Must Be Resolved With Little or No Notice

5 Evolving the WAN to Support Cloud IT Delivery Branch Locations Internet SaaS Provider X Private Cloud MPLS IaaS Provider Front End Cloud to User: Improve Internet Connectivity Revisit WAN Resilience Create Portable Suite of Virtual Network Appliances for IaaS Deploy Network-based WAN Optimization for SaaS Back End Enterprise DC to Cloud: High Capacity Low Latency Networks Bandwidth on Demand (SDN?) High Performance WAN Optimization Network Service Providers have been slow to respond to enterprises cloud networking needs focusing on their own cloud offerings forcing enterprises to assemble their own solutions

6 The Hybrid WAN needs Gateways (and NFV) MPLS to Internet Gateways - For outbound internet needs SWG - For inbound VPN tunnels - For remote access Cloud/POP based WAN optimization Possibly cloud/pop based: - Routers - Zoning firewalls - WLAN/NAC controllers - ADCs Location, location, location - Services must be globally distributed, with VERY smart routing

7 Cloud Delivery Will Require You to Make Greater Use of Standards Storage Logical Network Elements Switching Best Practices Design and plan for networks with several zones. Use standard protocols wherever possible, to enable agility. Core Edge WAN Routing Data Center Expect to revisit security process every 12 months. Security Application Delivery WLAN Accept peering and integration as potential strategies. External sourcing can be a way to force standardization!

8 Virtual Network Appliances Needed When Moving Applications to IaaS WOC ADC Firewall Router Internet or WAN V-WOC V-ADC V-Firewall V-Router Pre-configured appliance suite should be ready to deploy on demand: Enterprises need to obtain access to an appropriate suite of virtual appliances Existing appliance vendors should be preferred for consistency Correct configurations need to be determined and tested Enterprise Data Centre Gartner, Inc. and/or its affiliates. All rights reserved. IaaS Provider

9 The Application Delivery Network Building the New Architectural Layer All Devices All Interactions All Apps All Users - Employees - Customers - Business Partners - User to App - Browser (HTML) - App to App - Collaboration (SIP) - User to User - Thin Client (TS) - Virtual Desktop (HVD) - App to App (XML) Doesn't have to start with LB Application Delivery Layer It's about providing a broad set of services All Locations All Deployments - Intranet - Internet - Cloud - Hybrid

10 The biggest benefit of virtualization and cloud computing: Increased data center agility. The biggest barrier to this agility: Network provisioning time

11 SDx the Nexus for Infrastructure? SDx = Consumption Virtualization & Cloud Infrastructure Software-defined anything (SDx) is a collective term that encapsulates the growing market momentum for improved standards for infrastructure programmability and data center interoperability driven by automation SDS SDC - Compute Storage Servers Data Center Facilities Network SDN SDI - Infrastructure SDDC - Data Center Provision

12 We need a new Data Center Network Architecture so we can.. Significantly improve network operations agility. Reduce the time required to provision network resources for a new VM from weeks to minutes. Eliminating the human middleware Bridge the gap between applications and the network Have a multipath network topology to enable support for both north-south and east-west traffic

13 SDN Definition: A new approach to designing, building and operating networks Control plane is decoupled from the data plane and is logically centralized. Communication between network devices and the SDN controller use communication protocols that may be open or proprietary (southbound interface). SDN controller supports an open interface to allow external programmability of the environment (northbound interface). Traditional SDN Services Control Forward Control Forward Controller Control Forward Forward Forward SDN Apps Forward Source: Ending the Confusion About Software-Defined Networking: A Taxonomy ID:G

14 What is the value of SDN? Agility: Allows for external control and automation of the network Automated provisioning Virtualization orchestration Service Chaining Management: Improves operational efficiencies Cost: Promises ability to leverage low-cost hardware (i.e., "white-box" switches) Decoupling network software and hardware can increase innovation in each layer Enterprises, hosting companies and network service providers will each prioritize these benefits differently.

15 The SDN Stack A New Network Model Policy Management and Enforcement Engine Compute (Phys or Virt) Net work Virtualization Application Delivery WAN Traffic Engineering Security (FW/IDS/IPS/WAF) Service Chaining (Constraint-based Paths) Storage (Block/File/Object) WAN Path Resiliency WAN Optimization Other Applications SDN Controller (Network Abstraction, Topology Database, Policy Mapping) Data Plane (Physical or Virtual Switches) Services Applications APIs Device Control Protocol

16 SDN Deployment Models 1 Device-based SDN deployment 3 Hybrid-based SDN deployment 2 Overlay-based SDN deployment

17 Where does the ADC Fit in? Integrating the Services Layer Services layer includes L4-L7 Services such as ADC, Firewall, WOC, DLP, IDS/IPS etc. Simplification of services provisioning (service chaining) Evolution from course-grain implementation of services to more fine-grain Examples and leading indicators - Per Application ADCs - Security Architectures changing IDS FW workloads ADC

18 Recommendations Map your applications, immediately Especially their availability and performance needs and where they will be hosted Develop a portfolio of techniques to optimize the performance of different types of cloud services synchronized with your enterprise's cloud adoption Software-based products for IaaS Solutions embedded in cloud services Proximity solutions where full access is not possible Explore the potential benefits and risks that SDN will bring to your organization. Beware of SDN-washing. Don't get hung up on architectural purity. Focus on achieving improved manageability and agility Look beyond the tactical to ensure solutions can evolve to meet the organizations longer term needs SDN has the potential to generate organizational disruption. Begin to integrate server, network and storage teams

19 Cloud, SDN and the Evolution of Enterprise Networks Neil Rickard Gartner is a registered trademark of Gartner, Inc. or its affiliates. This publication may not be reproduced or distributed in any form without Gartner's prior written permission. If you are authorized to access this publication, your use of it is subject to the Usage Guidelines for Gartner Services posted on gartner.com. The information contained in this publication has been obtained from sources believed to be reliable. Gartner disclaims all warranties as to the accuracy, completeness or adequacy of such information and shall have no liability for errors, omissions or inadequacies in such information. This publication consists of the opinions of Gartner's research organization and should not be construed as statements of fact. The opinions expressed herein are subject to change without notice. Although Gartner research may include a discussion of related legal issues, Gartner does not provide legal advice or services and its research should not be construed or used as such. Gartner is a public company, and its shareholders may include firms and funds that have financial interests in entities covered in Gartner research. Gartner's Board of Directors may include senior managers of these firms or funds. Gartner research is produced independently by its research organization without input or influence from these firms, funds or their managers. For further information on the independence and integrity of Gartner research, see "Guiding Principles on Independence and Objectivity."