Huawei All Cloud Network

Transcription

1 Security Level: Huawei All Cloud Network - Intend Driven Network Maximizing the Business Value Secure, Convergence, Simplicity, Openness Yang Yu Access and Enterprise Solution Director

2 Huawei at a Glance 80,000 R&D employees 14 R&D institutes / labs/centers 180,000 Employees No. 83 in the Fortune Global Countries No. 70 in Interbrand's Top 100 Best Global Brands 2

3 World-Wide Recognition No.70 in Interbrand's Top 100 Best Global Brands 2017 Top 10 in the 2017 EU Industrial R&D Investment Scoreboard 2 nd most IETF published drafts and authors in the industry No. 10 in MIT Technology Review 50 Smartest Companies 3

4 Huawei Network Organization Overview Serving Global Carriers Serving Global Enterprises and Industry Customers Carrier Business Customers' best strategic partner Enterprise Business Enabler and preferred partner of enterprise digital transformation A Global Leader of Network Solutions Access Network Transmission Network Router & Carrier Ethernet Switch & Enterprise Gateway NCE Professional Services 4

5 Global R&D and NIC Contribute Cutting-Edge Technologies Russia Santa Clara Dallas Toronto New Jersey Ireland France Germany Italy Beijing Xi an Shanghai Hangzhou Chengdu Japan Shenzhen R&D Center NIC ,000+ R&D centers Network Innovation Center (NIC) Talented R&D colleagues 5

6 Vision and Mission Bring digital to every person, home and organization for a fully connected, intelligent world 6

7 Digitalization Accelerates Industry Transformation 40x Improved Quality + 30% Improved Efficiency 3 Trillion-Dollar Industries Big Data, IoT, Intelligence 3.7% Digitalization Brings GDP Growth Source: Accenture 2016 (China) Cloud Cloud + IoT Unit: $ billion Information Industry Service Industry Real Economy Unit: $ billion Digitalization investment scale and growth rate of each industry 50% 40% 15% 20% % % ISP & Carrier M&E Government Finance Manufacturing Energy The government, finance, and manufacturing industries urgently require digital transformation 60% 50% 40% 30% 20% 10% 0% 7

8 "E 3 " Three Key Drivers Behind Digital Transformation of Enterprises Improving user experience Real-time, On-demand, All online, DIY, Social (ROADS) Source: Huawei MI Increasing operating efficiency 30% higher efficiency Source: BCG x better quality Building new ecosystem 3.7% growth in GDP as a result of digital transformation Source: Accenture 2016 (China) User interconnection Machine interconnection Service interconnection Interconnection creates values 8

9 Autonomous Network in Enterprise Digital Transformation Non-intelligent edge Cost-centric Device-centric Makes networks understand service intentions Automates complex networks Enables networks to optimize themselves Enables networks to predict threats Intelligent edge Efficiency-centric User-centric 9

10 Cloud Based Intent Driven Network Unlocks the Potential of Business Business logic/policy Intent Device-centric Reactive Digital twin Intent engine Intelligence engine User-centric Predictive Skill-dependent Automation engine Analytics engine AI/Automation Closed architecture Intent-driven automation Real-time awareness Predictive maintenance Open platform Network service Security SD-WAN On-premise intelligence Overlay network VXLAN VPNs Underlay network ETH, PON, Wi-Fi, microwave, ZigBee, RS485, DI/DO, Bluetooth, PLC, RS232, V.35, G.703, ax/ac/n, Beacon Network infrastructure 10

11 Simplified Simplified Ultra-broadband Network Infrastructure Insight IDN Ready Infrastructure Simplified Architecture Uniform architecture for the hybrid cloud or multiple clouds Overlay Network Underlay Network Simplified O&M Configuration automation, on-demand policy orchestration Ultra-broadband Connection Latency Bandwidth All-scenario Wi-Fi, connecting more people and things Superfast AI-powered lossless Ethernet network 400G DCI, 10G Wi-Fi, 10GPON Simplified Sites Wi-Fi & IoT convergence, site integration 11

12 IDN: Maximizing Your Business Value Campus network AgileCampus WAN DCN AgileWAN CloudFabric Branch interconnection SD-WAN SDSec Network security 12

13 IDN for Agile-Campus: Adopt User-Centricity and Achieve Visualized, Predictable, and Manageable Experiences for Each User, in Each Application, at Each Moment ESL SES Asset positioning BluePath Open API AAA Cloud4Wi MDM AirWatch Intelligence O&M: fault prediction and analysis based on machine learning User experiences: a VIP high-quality campus network built to guarantee key user services Cloud management Intelligent O&M Simplicity Campus Insight Fault prediction Management: full lifecycle cloud management Deployment: virtual networks and policy deployment automation Architecture: Wi-Fi & IoT convergence Configuration/Policy automation Big Data/AI Network analysis Ultra-broadband NETCONF/YANG Telemetry Industry's first 10G Wi-Fi network Industry's first 100G fully programmable modular switch Network virtualization All-wireless access Virtual production network Virtual office network Virtual security network Openness 150+ APIs Easy integration with third-party AAA systems, policy systems, and LBS systems High-density Wi-Fi inside IoT & Wi-Fi convergence Z Enterprise OA Security Industry's highest-density Wi-Fi, with performance 30% Wi-Fi & IoT convergence architecture, with TCO 50% Smart antenna, allowing signals to move with users and achieving coverage distance 20% MACSec-based end-to-end physical layer security Big Data-powered security policy automation 13

14 LIDL, CloudCampus Solution Improve Service Deployment Efficiency LIDL Need to deploy WLAN and LSW for its over Retail-shop and provide online marketing. Huawei Cloud Campus Solution Fast deployment, decreased OPEX Cloud management platform HQ DC in Germany Store network Switch NAT server Management traffic Gateway VPN VPN Switch Local DC PMS S P(X)- PWR-LI-AC 20% 8X Network construction costs reduce 1/5 Network deployment for one shop: 4 days -> 0.5 day 80% In 5 years saving the OPEX 69% AP AP4050DN-E Cloud Campus will perfume Big Data Analysis, including: terminal users service experience Service experience trend analysis Full-process tracking of user access Terminal Behavior Analysis 14

15 IDN for Cloud Fabric: Application-Centric, Network-wide All-Traffic Visibility, Proactive Risk Prediction Intelligence Pre-event: Inband Telemetry is used to implement real-time assessment, avoiding global faults. During-event: AI-powered analytics enables network fault detection in seconds. After-event: Applications and networks are intelligently associated, achieving minute-level fault locating and repairs. Controller VM Analyzer VM Simplicity Architecture: hybrid cloud; unified architecture for multiple clouds Deployment: drag-and-drop; network automation; service deployment in minutes Ultra-broadband Industry's first high-density 400G line card Superfast, lossless AI-powered Ethernet network Openness Pre-integration with 20+ cloud platforms/container platforms Security VM-level micro-segmentation 15

16 Central Bank of Russia s NPCS: 3-Level Scalability Enables Smooth Expansion Massive Data 10 million transactions per day 1,000 TB of data for settlement Current Future NPCS National Payment Card System Unified payment Unified settlement 100% secure isolation 400+ financial DCs access NPCS 20+ payment systems integration Large-capacity core switches CE12800 System-level network TRILL 64Tbps 178Tbps 12 Nodes 500+ Nodes 10-year evolution 12,000+ payment agencies 18K servers for settlement Cross-DC expansion EVN 2 DCs 32 DCs 16

17 IDN for SD-WAN: Guaranteeing Application Connectivity Experiences and Maximizing Link Efficiency Self-service portal VAS store BSS/OSS Intelligence AI-powered fault prediction, fault backtracking in minutes Application-level intelligent routing for optimized experiences and bandwidth Policy execution Controller Fault prediction and backtracking Analyzer Application and network status insight Simplicity Device plug-and-play; automatic orchestration of VAS chains Interconnection between full series of high-performance CPEs in all scenarios Openness Open ucpes (X86 & ARM64) supporting 10+ mainstream VASs Easy deployments on multiple public clouds, such as those from Microsoft, Amazon, and Huawei Branch 1 Branch 2 vfw vwoc ucpe MPLS Internet LTE vcpe vcpe Gateway ERP, Video Public cloud Private cloud HQ Security Flexible association between ucpes and Huawei or third-party vfws Encrypted transmission of services through IPSec; end-to-end secure isolation 17

18 Building a Global 100 ms-latency Circle Inside Huawei, with Optimized Connectivity and Application Experiences Challenges Benefits Global branches, with annual bandwidth costs increased by 20% Bandwidth conflicts for 600+ applications; poor experiences with cloud applications such as Office365 Traditional WAN optimization controller (WOC), timeconsuming security device deployment (> 3 months) No visibility to applications; difficult fault locating Bandwidth costs 20% 10X A mix of MPLS and Internet links increases the bandwidth utilization from 60% to 90%. Application experiences AR1000V cloud gateway collaborates with the Microsoft cloud to optimize cloud application access. VAS rollouts 30 minutes Riverbed vwoc, F5 Proxy, and other VASs are quickly rolled out. O&M costs 80% 45+ reports based on applications, links, sites, and users; fault prediction 18

19 IDN for SDSec: Situational Awareness of Network-wide Security, AI-powered Proactive Defense Policy Analyzer SDSec Controller Disposal Detection Executor Branch network Campus network DCN Intelligence AI-powered awareness of advanced threats and security policy O&M AI-powered synergy network security defense Simplicity Security services that can be obtained on demand Configuration automation; on-demand policy orchestration Ultra-broadband All-in-one gateway that integrates LAN, WAN, and security functionalities 128 VMs, 2.5T vfws Clustering of 16 firewalls Openness Adaptation to 6+ mainstream cloud platforms Huawei security alliances 19

20 Huawei Help a Famous Commercial Bank Fend Off Security Risks Through Intelligence Enhancements Big Data-capable CIS platform for security analytics Network-wide probes across HQ and branches, situational awareness of security Challenges Key information theft: leakages of user names, passwords, and bank cards Terminal hosts penetrated: Extranet access of zombie hosts in branches s infected with viruses: 19 malicious s found in 2 weeks Benefits Proactive threat detection and network-wide united action based on intelligence enhancements Early threat discovery: 2 weeks -> 2 hours 20% more advanced threats found; prevention from asset losses of up to 40% First-month findings since its debut: 8 first-of-their-kind advanced malwares, 9 servers controlled by hackers, 34 viruses for which no alarm is reported 20

21 IDN for AgileWAN: Creating All-Scenario WAN Connectivity Management Configuration delivery Network service Application Open API Controller Tool Suggestions Network information Physical and virtual networks Analyzer Telemetry for information collection Intelligence AI-like second-level network fault detection and self-healing Proactive network optimization and traffic prediction based on real-time data collection, detection, and SLA Simplicity Soft and hard pipe network architecture simplifies the network and reduces TCO by 40%. SDN-based minute-level service deployment and delivery contribute to business innovations. Ultra-broadband Industry's first 4T line card with a high level of integration Industry's first 400GE interface Security and reliability Three-level (chip-, device-, and network-level) security assurance achieves high reliability of %. Hardware BFD (with detection packets sent at intervals of 3.3 ms) and 10+ switchover technologies enable the network to run reliably. 21

22 Helping EPM in Colombia to Build a Highly Reliable Smart Grid Challenges Benefits Aged network; an urgent need to migrate SCADA and relay protection services to an IP network Coexistence of dual networks, resulting in high operating costs Many PCM devices; no unified management system for devices from multiple vendors IP hard pipe Mission-critical services are reliably carried on an IP network. Unified bearing Multiple networks are integrated into one, reducing TCO by 40%. PCM card E2E unified management increases O&M efficiency by 30%. 22

23 Openness Intelligence Openness: Joining Hands with Partners to Provide Optimal Solutions Traditional OSS Orchestrator /Third-party controller Cloud platform Big Data platform Open architecture MTOSI/CORBA RESTCONF/YANG Kafka/SFTP Open source architecture based controller Kafka architecture based Big Data analytics Manager Controller Analyzer RESTful/YANG Open API Northbound RESTCONF/YANG APIs and Third-party domain controller southbound NETCONF/Telemetry APIs, hundreds of online API developer communities SNMP/CLI/Qx NETCONF/YANG Telemetry Standard protocol Huawei Third party Interoperability with third-party network devices, Legacy SDN saving network investment 23

24 All-Scenario Ecosystem Cooperation, 50+ Partners Application Layer Cooperation Cloudification & Virtualization 50+ Partners 3 Alliances Management & Control Device Manufacturers Developer Platform Honeywell Cloud4Wi FusionSphere OpenStack MS AD GE Check Point F5 Developer community SONY Infosys VMware Microsoft Ansible Puppet Infoblox Wasion Richfit SOFTSTO NE RedHat Mirantis NSX ONOS Brocade CLOU Remote laboratory LongShine SAP KVM Xen Brocade Splunk Palo Alto Citrix Innovation tools BYOD Alliance BluePath Walkbase EasyStack CloudStack Srun Dr.COM Fortinet Riverbed 24

25 Embracing a fully connected, intelligent world Intelligence reshapes user experiences. Simplicity enables service agility. Ultra-broadband keeps network advantages. Openness & Security ushers in a win-win ecosystem. Ultra-broadband Simplicity Intelligence Security 25

26 Thank You. Copyright 2018 Huawei Technologies Co., Ltd. All Rights Reserved. The information in this document may contain predictive statements including, without limitation, statements regarding the future financial and operating results, future product portfolio, new technology, etc. There are a number of factors that could cause actual results and developments to differ materially from those expressed or implied in the predictive statements. Therefore, such information is provided for reference purpose only and constitutes neither an offer nor an acceptance. Huawei may change the information at any time without notice.