Datacenter Networking Joy ABOIM Consulting System Engineer
Typical journey to a new Target Operating Model Standardise Vendors, architectures, devices (network, compute, storage) & their configurations Consolidate Applications, network, servers, storage and operational silos Virtualise Automate Abstraction of physical resources unified data center comprising network, compute and storage Orchestration and automated provisioning of virtualised (and where appropriate physical) infrastructure Market A new Target Operating Model (TOM) which is market driven (private or public cloud), outsourced, out-tasked or delivered internally as appropriate. 2012 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 2
Evolution of Data Center Networking Distributed Fabric Based Application Driven Cloud Cloud Monitoring Apps Provisioning Apps Networking Apps End-User Apps Programmable Provisionable Fabric L2, L3 Compute Compute Storage Storage Services Services L2, L3 Compute Compute Storage Storage Services Services Integrated Fabric & Cloud World of Many Clouds Manual Provisioning Limited scaling Rack-wide VM mobility Policy-based Provisioning Scale Physical & Virtual/Cloud DC-wide/Cross-DC VM Mobility Service-centric Provisioning Flexible Anywhere, Anytime Cross-cloud VM Mobility 2012 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 3
Expose Network Value Automation, Monitoring, Programmability POLICY Orchestration ANALYTICS Program for Optimized Experience Harvest Network Intelligence Network 2012 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 4
Customer Insights: Network Programmability Research/ Academia Massively Scalable Data Center Cloud Service Providers Enterprise Experimental OpenFlow/SDN components for production networks Customize with Programmatic APIs to provide deep insight into network traffic Automated provisioning and programmable overlay, OpenStack Policy-based control and analytics to optimize and monetize service delivery Virtual workloads, VDI, Orchestration of security profiles Network Slicing Network Flow Management Scalable Multi-Tenancy Agile Service Delivery Private Cloud Automation Diverse Network Programmability Requirements Across Segments: Automation, Monitoring & Flow Programmability 2012 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 5
and what about Open Dayight Basic Definitions What Is Software Defined Network (SDN)? What Is OpenFlow? In the SDN architecture, the control and data planes are decoupled, network intelligence and state are logically centralized, and the underlying network infrastructure is abstracted from the applications Note: SDN is not mandatory for network programmability nor automation Source: www.opennetworking.org Open protocol that specifies interactions between decoupled control and data planes Note: OF is not mandatory for SDN Note: North-bound Controller APIs are vendor-specific What is OpenStack? What is Overlay Network? Opensource software for building public and private Clouds; includes Compute (Nova), Networking (Quantum) and Storage (Swift) services. Note: Applicable to SDN and non-sdn networks Source: www.openstack.org Overlay network is created on existing network infrastructure (physical and/or virtual) using a network protocol. Examples of overlay network protocol are: GRE, VPLS, OTV, LISP and VXLAN Note: Applicable to SDN and non-sdn networks 2012 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 6
Network Programmability Models 1 Programmable APIs Applications 2a Classic SDN Applications 2b Hybrid SDN Applications 3 Network Virtualization/ Virtual Overlays Applications Vendor-specific APIs Vendor-specific APIs Controller Vendor-specific APIs Controller Vendor-specific APIs Virtual Control Plane Virtual Data Plane CLI, SNMP, Netflow, Vendor Specific (e.g. onepk) OpenFlow Vendor Specific (e.g. onepk) OpenFlow Vendor Specific (e.g. onepk) Overlay Protocols (e.g. VXLAN) Control Plane Control Plane Control Plane Control Plane Data Plane Data Plane Data Plane Data Plane Data Plane Openstack and Network Overlays Apply to All Models (Physical/Virtual) Custom Features Can Be Built 2012 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 7
Announcing : Cisco Open Network Environment The Industry s Most Comprehensive Networking Portfolio Hardware + Software Physical + Virtual Network + Compute Applications 1. Platform APIs Network One Platform Kit (onepk) - Programmatic APIs for Network HW (IOS, IOS-XR, NX-OS) 2. a Controllers And Agents SDN: - Controller SW (OpenFlow, onepk) - OpenFlow 1.x support 3. Virtual Overlays Open Clouds with Nexus 1000V - Multi-hypervisor - Multi-service - Multi-cloud - Openstack support 2012 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 8
onepk & OpenFlow 2012 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 9
OpenFlow is Built on onepk NETCONF Agent CIM Agent OpenFlow Agent ONE Agent Framework (proposed agents) Puppet Agent Prime agent Custom Agent onepk Mgmt Agents Apps onepk Presentation APIs (C, Java, Python,...) Comm libraries onepk Client Process boundary Comm libraries Element Interface onepk Abstraction APIs Developer Utilities Discovery Policy Routing Datapath Ext onepk Server Cisco Network Operating System (IOS, IOS-XE, IOS-XR, NX-OS) (Platform PI Code) Cisco Network Operating System (IOS, IOS-XE, IOS-XR, NX-OS) (Platform PD Code) 2012 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 10
ONE Controller 2012 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 11
Built-in GUI for Management Controllers & Agents: ONE Controller Overview Platform for generic control functions state consolidation across multiple entities Applications (Cisco) Applications (Customer) Applications (3 rd party) Apps/Applications Northbound API (REST, WebSockets, OSGi) Current Showcase Examples Flexible Network Partitioning and Provisioning ( Slicing ) Network Troubleshooting Custom Routing Network Slicing Network Troubleshooting Custom Routing Controller built-in Applications Flow Management Forwarding Logic Device Management Controller Core Infrastructure onepk API OpenFlow 1.x Protocol Southbound APIs (onepk, OneFlow,) SW product (Java-based) FCS planning underway (Beta target: 1Q CY13; FCS target: 3Q CY13) onepk onepk OF OF 2012 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 12
Virtual Overlays 2012 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 13
Cisco Virtual Networking Vision Powered by Nexus 1000V Multi-Hypervisor Multi-Services Multi-Cloud Key component of Cisco Open Networking Environment (Cisco ONE) Build / Partner / Buy strategy Partnership with Citrix announced Acquired 2 startups for tech & talent: Virtuata and vcider 2012 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 14
Cisco Virtual Networking and Cloud Network Services Cloud Network Services Virtualized/Cloud Data Center WAN Router Switches Servers Imperva SecureSphere WAF Citrix NetScaler VPX vwaas ASA 1000V Cloud Firewall Cisco Virtual Security Gateway Cloud Services Router 1000V Zone A Tenant A Zone B Physical Infrastructure vpath VXLAN Nexus 1000V Multi-Hypervisor (VMware, Microsoft*, RedHat*, Citrix*) Nexus 1000V VSG ASA 1000V vwaas CSR 1000V (Cloud Router) Ecosystem Services Distributed switch VM-level controls Edge firewall, VPN WAN optimization NX-OS consistency Zone-based FW Protocol Inspection Application traffic 6000+ Customers Shipping Shipping Shipping WAN L3 gateway Routing and VPN Full Availability: CQ1 13 Citrix NetScaler VPX virtual ADC Imperva Web App. Firewall 2013 Cisco-Citrix Alliance Webinar: - Oct 22, 2012 (Webinar, PPT) Imperva WAF update: June 5th, 2012 (Email Annoucement, Imperva FAQ) 2012 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 15
Virtual Overlay Networks Example: Virtual Overlay Networks and Services with Nexus 1000V Scalable Multi-tenancy Tens of thousands of virtual ports, L2 networks Hundreds of Servers Scalable segmentation: VXLAN Common APIs Incl. OpenStack Quantum API s for cloud automation/orchestration Virtual Services vpath for traffic steering / service chaining Virtual Services VSG, ASA 1000V (cloud-ready security), vwaas (application acceleration) CSR 1000V (cloud router) Multi-hypervisor ESX, Hyper-V, OpenSource Hypervisors (KVM/Xen) Hybrid Use Cases (Physical and Virtual) VXLAN to VLAN GW ASA 1KV vwaas VSG OpenStack Quantum API Tenant 1 Nexus 1000V REST API Any Hypervisor Tenant 2 Virtual Workloads Tenant 3 VXLAN Gateway Physical (VLAN) Network Physical Workloads 2012 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 16 ASA 55xx Tenant 1: virtual workloads protected by virtual firewall Tenant 2: virtual workloads protected by physical firewall (via VXLAN GW) Tenant 3: virtual & physical workloads in same L2 domain (via VXLAN GW
Cisco s Vision for Hybrid Cloud - InterCloud Private Cloud N1KV Switching ASA Firewall IOS Routing Crypto Secure Virtual Private Cloud Tenant B Secure Hybrid Cloud = Securely Connect Enterprise Private Cloud and Provider Public Cloud Use Cases Workloads Requirements Bursting Disaster recovery/avoidance Upgrade/migration Dev/QA Intern/Partner VDI Training Apps Initially low-value workloads Network consistency Security consistency Policy consistency 2012 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 17
Thank You!