Speeding Up Business By Simplifying the Data Center With ACI & Nexus Craig Huitema, Director of Marketing Session ID PSODCT-1200
Agenda Disruption Cisco SDN Programmable Networks Virtual Topology System Application Centric Infrastructure
Disruption
The Wedge Newport Beach, California J in Big wave pic
Disruption At The Wedge Photo Credit: dormstormer.com
The Wedge Disruptive Forces Business Challenges Photo Credit: Google Maps Operational Challenges
Business and IT Impacts On The Data Center Business Challenges Operational Challenges Business agility Managing capacity, complexity and risk 24-hour daily business Availability and business continuance Security and compliance Evolving application environment & technology transitions Reducing operational costs Changing IT service delivery model 2013-2014 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 7
Disrupt Or Be Disrupted Retail Transport Music Point-of-Sale Advertising Business Challenges Operational Challenges
Cisco SDN
Cisco SDN: Providing Choice in Automation and Programmability Application Centric Infrastructure Programmable Fabric Programmable Network DB DB Web Web App Web App Turnkey integrated solution with security, centralized management, compliance and scale Automated application centric-policy model with embedded security Broad and deep ecosystem VxLAN-BGP EVPN standard-based 3 rd party controller support VTS for software overlay provisioning and management across N2K-N9K Modern NX-OS with enhanced NX-APIs Automation Ecosystem (Puppet, Chef, Ansible etc.) Common NX-API across N2K-N9K Mass Market (commercial, enterprises, public sector) Service Providers Mega Scale Datacenters
Updates on Nexus Portfolio Offerings Application Centric Infrastructure Programmable Fabric Programmable Network DB DB Web Web App Web App NEW! ACI Release for Nexus 9000 (Shipping June 2015 ) Microsoft Azure and System Center Integration Programmability examples: vcenter plugin, ACI toolkit etc. Simplified operations Stretched fabric, multiple destinations from 30KMs to 150KMs Group-based policy on Openstack New ACI ecosystem partners (CliQr) NEW! Virtual Topology System (VTS) for software overlay provisioning and management across for Nexus 2K-9K (2H 2015) Standards-based fabric support on Nexus 5600/7x00 with VXLAN BGP EVPN (shipping with Nexus 9000 today) NEW! Unified Open NX-OS Release for Nexus 3000 and Nexus 9000 (Q3 2015) Enhancements to NX-API object store and model driven Native 3rd party RPM applications integration (tcollector, Nagios, Ganglia, Puppet / Chef etc.) Linux utilities support for seamless tool integration across compute and network SDK for custom application integration NEW! Common NX-API across N2K- N9K (2H 2015)
Automation & Programmability Enable You To Be The Disruptor, Not The Disrupted Photo Credit: Justin Huitema
Programmable Networks
Network Administration Yesterday And Today Same as it ever was Key Innovation: Notepad Box Centric
Why Automation? 12 10 8 6 4 2 $ Cost Quality Productivity 0 Low Automation Medium Automation High Automation Full Automation Various: http://www.methodsandtools.com/archive/archive.php?id=94, http://www.infoq.com/articles/test-automation-continuous-delivery, http://devopsanywhere.blogspot.com/2013/02/sysadmin-productivity-and-chef.html
From Servers To Networks Shift from manually configuring every server, OS, and virtual machine -> Operating a nimble set of infrastructure at scale 1 Server Admin: Hundreds of Servers -> 1 Server Admin: Thousands of Servers From CLI + Bash scripts + Reactive configuration -> Orchestrated configuration and integration with development
Power of Open NX-OS and Nexus Platforms Enables IT to Build an Agile, Open and Adaptable Architecture. Agile Open Adaptable More Programmability & Automation Enhanced Visibility & Troubleshooting Open & Modular Open Ecosystem Custom Apps Integration Workflow Automation Scripting High Scale/ Performance Efficient Operational Model Multi-vendor Interoperability Open Tools Set Support Orchestration Velocity of Adoption
NEW! Unified Open NX-OS Release for Nexus 3000 and Nexus 9000 (Q3 2015) Delivering Operational Flexibility and Lower OPEX Programmable Open APIs 3 rd Party DevOps Automation Tools Custom Application Development Managing Switch with Linux Tools DC Repository 3 rd party/custom apps integration Nexus Open, Modular Operating System Toolset Integration in Open NX-OS Extensible Open NX-OS Leverage Linux Toolchain for Switch Management Enhancements to existing NX-API to support objectbased, model driven APIs (RESTful XML/JSON) Pre-developed RPMs from Cisco and Partners Leverage same software tools and expertise across different IT departments New SDK enables custom application development with option for securelxc containers CPU, memory, priority controls Leverage tcpdump, ifconfig ethtool, iproute, BASH shell commands for config and troubleshooting
What Is NX-API HTTP-Based Programmatic Access to Nexus Platforms (HTTP/HTTPS) Configuration and Management Capabilities of the NX- OS CLI with webbased APIs. Generate CLIs output (off box) in XML or JSON format
NX-API Photo credit: Justin Huitema
NXAPI & Python Use Case Situation: Nexus switches are often deployed in pairs. Challenge: Configuration/parameters need to match, for example with topologies that use FabricPath or VPC Solution: o Use a Python Script to: o Call Show Commands via NXAPI o Compare the VLANs on all the switches o Configure missing VLANs. Benefits: o o Reduced time Improved efficiency FabricPath
NX-API & Python Photo credit: Justin Huitema
NX-API & Python
NX-API & Python Photo credit: Justin Huitema
Python Scripting Example Serviceability Reduce Time-to-Resolution ping Customer show ip route show ip arp show mac address-table show port-channel interface show interface IT Engineer
Python Scripting Example Serviceability Reduce Time-to-Resolution INSIEME# detailson 192.168.208.2 Details for IP Address: 192.168.208.2 +---------------+-----------------------+------------------+----------------+--------+--------+-----------------+------------+ IP Address Ping Result Next Hop MAC L3 Int L2 Int Errors Po Members +---------------+-----------------------+------------------+----------------+--------+--------+-----------------+------------+ 192.168.208.2 0.00% packet loss 10.1.1.1, ospf-1 30f7.0d9f.8801 Po1 Po1 0 input error Eth1/1(P), 0.494/3.455/15.219 ms 0 output errors Eth1/2(P) +---------------+-----------------------+------------------+----------------+--------+--------+-----------------+------------+ Customer Enter Next IP to get details on (Press 0 to exit): 10.1.1.1 Details for IP Address: 10.1.1.1 +------------+---------------------+----------+----------------+--------+--------+-----------------+------------+ IP Address Ping Result Next Hop MAC L3 Int L2 Int Errors Po Members +------------+---------------------+----------+----------------+--------+--------+-----------------+------------+ 10.1.1.1 0.00% packet loss attached 30f7.0d9f.8801 Po1 Po1 0 input error Eth1/1(P), 0.578/0.67/0.945 ms 0 output errors Eth1/2(P) +------------+---------------------+----------+----------------+--------+--------+-----------------+------------+ TAC Engineer Enter Next IP to get details on (Press 0 to exit):
Virtual Topology System
Programmable Fabric With Virtual Topology System VTS NX-API BGP-EVPN VXLAN Fabric Physical Virtual DCI/WAN Operations / Programmability & Automation Bare Metal VM VM OS OS Virtualized Automated DCI / WAN VTS for software overlay provisioning and management across Nexus 2000 Nexus 9000 (2H 2015)
Virtual Topology System (VTS) Overlay Provisioning & Management System vcenter GUI Scalable VXLAN Management MP-BGP EVPN control plane High performance virtual forwarding REST API Automated Seamless integration with Orchestrators Overlay provisioning and DCI/WAN integration Flexible Overlays Physical and virtual overlays Bare-metal and Virtualized workloads VTS Programmable Fabric Open and Programmable REST Northbound APIs Multi-protocol and Multi-hypervisor support Across Nexus Portfolio Nexus 2K 9K
Cisco VTS: Enabling a Faster and More Efficient IT Investment Protection Faster Network Provisioning Seamless Integration VTS Improved Resource Utilization High Scalability Multi-Vendor Support
Application Centric Infrastructure
ACI Solution: Agile, Open, and Secure Agile App Requirements Drive Network Deployment/Operation Open Secure Policy Automation Visibility Scale and Performance Open API s Partner Ecosystem Multi-Tenant Security Compliance Speed through Automation Physical and Virtual Endpoints with Consistent Policy Application Health Monitoring Open APIs, Open Source and Open Standards Customer Choice And Interoperability Drives Innovation Whitelist Approach Multitenant Aware Simplified Compliance
Pillars of ACI Rapid Deployment of Applications onto Open Networks with Scale, Security and Full Visibility Application Centric Infrastructure Industry Leading Technology Partnerships ACI Fabric/Nexus 9000 Application Centric Policy Open Ecosystem
ACI and Nexus 9000 Breaking Away 2,655+ Nexus 9K and ACI Customers Globally 585+ APIC Customers 36 Ecosystem Partners STORAGE SECURITY COMPUTE NETWORK APPLICATION CLOUD
Simplify Operations with Advanced Visibility APIC DASHBOARDS Fabric Usage Endpoints Bridge domains L3 contexts EPGs L4-L7 devices Per Leaf Usage MAC learned IP learned Multicast groups Policy CAM usage VLANs used Fabric Usage Endpoints Bridge domains L3 contexts EPGs L4-L7 devices Per Leaf Usage MAC learned IP learned Multicast groups Policy CAM usage VLANs used CAPACITY FABRIC HEAT MAP CONNECTIVITY TROUBLESHOOTER
Project Briefing Total Economic Impact of: Cisco Application Centric Infrastructure (ACI) Forrester Consulting Jon Erickson TEI Consulting Practice Jonathan Lipsitz TEI Consulting Practice
The Interviewed Companies Faced Many Challenges Supporting rapid growth Meeting constantly evolving business requirements Controlling costs Doing more without a bigger IT team Reducing outages and application performance problems 37
That Lead Them To Select And Implement ACI It was a bit of a no brainer. We need more infrastructure so we checked out the market for doing a classic network setup. We then asked ourselves if we should invest in the future of [software defined networks]. Basically it is the same price and brings so much more. There is no reason not to do it, and the APIs were for free on top of it. We were trying to fix a couple of problems. Firstly, we wanted a really, really good API. We were running scripts that were breaking all the time because of software upgrades. Consistency was key. Before ACI, there weren t enough people to look across the networks and manage applications. Visibility was very poor across all systems. With ACI we have fixed this and see everything in one place. 38
Which Delivered Benefits Across Several Areas Reduced IT effort implementation and ongoing operations Datacenter build out time and effort reduced by more than 50% Ongoing administration effort cut by 35% Lowered hardware costs initial datacenter build out and supporting growth Hardware costs reduced by 20% Improved user productivity from better uptime and system performance Four fewer hours of application/datacenter downtime which impact all 10,000 employees 39
And Resulted In A Strong ROI And Payback Period. Forrester looked at the financial model* in two ways. Hard benefits (reduced IT labor and hardware) Hard benefits + softer productivity gain from reduced downtime $ Hard Benefits Only Hard Benefits + Productivity $ ROI: 75% Payback**: 14 months NPV: $826 K ROI: 293% Payback**: 5 months NPV: $3.2 M Note: Both models include all costs - implementation, ACI licenses, HW, & training *Preliminary findings subject to change. **After go live. 40
ACI Symantec Delivering on Its Strategic Vision With Next-Generation, Secure Data Center Powered by Cisco ACI 5-Year Cumulative Benefits: $145M in business benefits EXPERTROI SPOTLIGHT May 2015 ROI of 441% Payback in 11 months Other Benefits: 87% faster application dev. cycle 83% more efficient network ops 40x Improvement in Bandwidth
Independent Validation of Savings with ACI vs. NSX Over 60% Up Front Savings with ACI on Networking Costs Alone When you are building an overlay, NSX or other, you are buying TWO networks Zeus, ZK Research
Summary
Extending SDN Capabilities Across the Nexus Portfolio Cisco Nexus 9000 Cisco Nexus 7000 Cisco Nexus 5000 Automation Programmability Cisco Nexus 3000 Creates a More Responsive IT Model Cisco Nexus 2000 Simplifies Operations Creating a More Flexible and Agile Network Accelerates Application Deployment and Management Choice of Platform and SDN Deployment Model Delivered with Investment Protection
Enjoy The Ride ACI, VTS, Programmability Simplify DC > Accelerate Business Disruptor, Not Disrupted Photo credit: Justin Huitema
Thank you
Complete Your Online Session Evaluation Give us your feedback to be entered into a Daily Survey Drawing. A daily winner will receive a $750 Amazon gift card. Complete your session surveys though the Cisco Live mobile app or your computer on Cisco Live Connect. Don t forget: Cisco Live sessions will be available for viewing on-demand after the event at CiscoLive.com/Online