End To End Data Center Virtualization

Transcription

1 Toronto, Canada May 30, 2013 End To End Data Center Virtualization Ronnie Scott DC Technology Solutions Architect Follow us on Twitter at #CiscoConnect_TO Cisco and/or its affiliates. All rights reserved. Cisco Connect 1

2 If you can see it and it is there It s real If you can t see it but it is there It s transparent If you can see it and it is not there It s virtual If you can not see it and it is not there It s gone Setting the Stage: What s the Meaning of Virtual? 2012 Cisco and/or its affiliates. All rights reserved. Cisco Connect 2

3 2012 Cisco and/or its affiliates. All rights reserved. Cisco Connect 3

4 Humm Cisco and/or its affiliates. All rights reserved. Cisco Connect 4

5 2012 Cisco and/or its affiliates. All rights reserved. Cisco Connect 5

6 The Journey in a Nutshell Applications team Servers team Networking team Virtualisation Team Storage team Facilities team 2012 Cisco and/or its affiliates. All rights reserved. Cisco Connect 6

7 2012 Cisco and/or its affiliates. All rights reserved. Cisco Connect 7

8 Today s Agenda Data Center Virtualization Overview Front-End Data Centre Virtualization DC Edge Layer Aggregation / Spine Layer Access / Leaf Layer Virtual Networking & Cloud Network Services Virtual Access Layer: Nexus 1000v Cloud Network Services Inter DC Services: OTV & LISP Virtual Compute & IO Virtualization Unified Computing System Hypervisors & Virtual Cisco UCS Virtualised Storage & SAN Unified Fabric Virtualized SAN and Storage Software Defined Network & Orchestration SDN & Cisco Open Network Environment (ONE) Cloud Orchestration 2012 Cisco and/or its affiliates. All rights reserved. Cisco Connect 8

9 Overview 2012 Cisco and/or its affiliates. All rights reserved. Cisco Connect 9

10 WAN Edge Layer How it was DC Edge Layer (LAN & SAN) FC SAN A MDS 9500 SAN Director FC SAN B Nexus GE Core Layer 3 Layer 2-1GE Layer 2-10GE 10 GE DCB 10 GE FCoE/DCB 4/8 Gb FC Nexus GE Aggr Aggregation & Services Layer vpc+ FabricPath Network Services L3 L2 Access Layer SAN Edge MDS 9200 / 9100 FC SAN A FC SAN B Nexus 5500 FCoE Nexus B FEX Catalyst 6500 Nexus GE CBS 31xx Nexus 7000 Nexus 5500 FCoE UCS FCoE Nexus 3000 FIP-Snoop. HP Blade End-of-Row Nexus 2248 Blade switch End-of-Row Nexus 2232 Top-of-Rack IBM Blade C-class End-of-Row Top-of-Rack Center 1 GbE Server Access & 4/8Gb FC via dual HBA (SAN A // SAN B) 10Gb DCB / FCoE Server Access or 10 GbE Server Access & 4/8Gb FC via dual HBA (SAN A // SAN B) 2012 Cisco and/or its affiliates. All rights reserved. Cisco Connect 10

11 The Virtual Data Centre Approach Network Application Services must be aligned to meet the VM geometry Close interaction required between Virtualized infrastructure and Application Services supporting VMs 2012 Cisco and/or its affiliates. All rights reserved. Cisco Connect 11

12 What s Wrong With That? Virtualization (vmotion, Live Migration, etc.) are changing multiple aspects of the Data Centre design Where is the server now? Where is the access port? Where does the VLAN exist? Any VLAN Anywhere? How large do we need to scale Layer 2? Capacity planning requirements Policy boundaries (Security, QoS, acceleration, )? What about programmability and automation? Data Centre Row 1 Data Centre Row Cisco and/or its affiliates. All rights reserved. Cisco Connect 12

13 2012 Cisco and/or its affiliates. All rights reserved. Cisco Connect 13

14 2012 Cisco and/or its affiliates. All rights reserved. Cisco Connect 14

15 2012 Cisco and/or its affiliates. All rights reserved. Cisco Connect 15

16 Front-End Data Centre Virtualization 2012 Cisco and/or its affiliates. All rights reserved. Cisco Connect 16

17 Network Planes of Operation Policy Plane The business glue of the network. Rules execution, decision making, Service Manager and all the other components to make a productize service. Services Plane Management Plane Control Plane Data Plane Overlay Layer 7 application flow built on the foundation of the other layers. Dependent on the other layers. The management plane is the logical path of all traffic related to the system management of the platform. It s the brain of any networking platform and the technical glue of the network. The control plane is where all routing, switching, other protocols and control information are exchanged The data plane receives, processes, and transmits network data between network elements, and represents the bulk of network traffic that passes to and through the gear Cisco and/or its affiliates. All rights reserved. Cisco Connect 17

18 Virtual Port Channel (VPC) The Lies and Deceit Protocol L2 Si Si Non-vPC vpc Physical Topology Logical Topology Bi-sectional bandwidth with vpc Virtual Port Channel Port-channels extending across two separate physical switches Create resilient L2 topologies using Link Aggregation. Eliminates STP in the access-distribution Layer Enable seamless VM Mobility, Server HA Clusters Scale Available Layer 2 Bandwidth Dual-homed server operate in active-active mode Simplify Network Design Available on Nexus 7000, 6000, 5000, and Cisco and/or its affiliates. All rights reserved. Cisco Connect 18

19 Cisco FEXlink: Virtualized Access Switch Nexus 2200 Fabric Extender (FEX) Cisco Nexus 5500 Cisco Nexus 6000 Cisco Nexus Distributed High Density Edge Switching System Cisco Nexus 2200 FEX Cisco Nexus 2200 FEX Cisco Nexus 2200 FEX 2012 Cisco and/or its affiliates. All rights reserved. Cisco Connect 19

20 IEEE 802.1BR: Bridge Port Extension Extended Bridge Standardized Port Extender (FEX Equivalent) Port Extenders managed by controlling switch Port Extenders can be Cascaded Traffic from each Extended Port is segregated in an E-channel, identified E-channel identifier (ECID) tag Controlling Bridge + PE = Extended Bridge Single Point of Management Server PE PE PE PE Controlling Bridge PE Bridge ECID VM1 vfw PE Port Extender 2012 Cisco and/or its affiliates. All rights reserved. Cisco Connect 20

21 Logical View: Star Topology Without L2 Loops Unified Computing System (UCS) Nexus 7000 vpc+ Nexus 5500 / Nexus 2200 Virtual Access Switch POD Virtual Blade Switching (VBS) Nexus Nexus 2200 Virtual Access Switch POD Spanning Tree Still Keeping A Watchful Eye 2012 Cisco and/or its affiliates. All rights reserved. Cisco Connect 21

22 Cisco FabricPath Scaling and Simplifying Layer 2 Ethernet Networks Up to 16 Agg/ Spine switches 160+ Tbps switching capacity Traditional Spanning Tree Based Network -Blocked Links Cisco FabricPath Network -All Links Active Eliminate Spanning tree limitations Multi-pathing across all links, high cross-sectional bandwidth High resiliency, faster network re-convergence Any VLAN, any where in the fabric eliminate VLAN Scoping 2012 Cisco and/or its affiliates. All rights reserved. Cisco Connect 22

23 Logical View with FabricPath: Distributed Topology without L2 loops S10 S20 S30 S40 L5 L6 L7 L8 L1 L2 L3 L4 FabricPath L9 L10 L11 L12 S200 S100 S101 S201 vpc+ vpc+ Leaf Layer Spine Layer Virtual Access Switch POD (Nexus 7000 / 6000 / 5x00 + Nexus 2200) Virtual Blade Switching (VBS) Rack-Mount Server Unified Computing System (Cisco UCS) 2012 Cisco and/or its affiliates. All rights reserved. Cisco Connect 23

24 Virtual Networking & Cloud Network Services 2012 Cisco and/or its affiliates. All rights reserved. Cisco Connect 24

25 What Happens When We Mix Network and Server Virtualization? 2012 Cisco and/or its affiliates. All rights reserved. Cisco Connect 25 2

26 Current View of the Access Layer with VMs Boundary of network visibility Typically a trunk to the ESX server No visibility to individual traffic from each VM Unable to troubleshoot, apply policy, address performance issues Human Layer Religion Politics Budget Cisco and/or its affiliates. All rights reserved. Cisco Connect 26

27 2012 Cisco and/or its affiliates. All rights reserved. Cisco Connect 27

28 VN-Link View of the Access Layer Nexus 1000V and VN-Link provide visibility to the individual VMs Policy can be configured per-vm Policy is mobile within the ESX cluster 2012 Cisco and/or its affiliates. All rights reserved. Cisco Connect 28

29 Cisco Virtual Networking Vision Nexus 1000V Multi-Hypervisor VMWare vsphere Microsoft Windows Server 2012 KVM Xen Server Multi-Services Firewall, WAN/App optimization, ADC, Cloud Router, WAF, VM Segmentation Multi-Cloud Private, Public, Hybrid, Community 2012 Cisco and/or its affiliates. All rights reserved. Cisco Connect 29

30 Cisco Nexus 1000V Architecture VM VM VM VM VM VM VM VM VM VM VM VM Cisco Nexus 1000V VEM Hypervisor Cisco Nexus 1000V VEM Hypervisor Cisco Nexus 1000V VEM Hypervisor Server Server Server Virtual Supervisor Module (VSM) Virtual or Physical appliance running Cisco NXOS Management, monitoring, and config Tight integration with management platforms Virtual Ethernet Module (VEM) Advanced networking switch in hypervisor Dedicated switch port to each VM Collection of VEMs : 1 virtual network Distributed Switch Virtual Machine Manager Cisco Nexus 1000V VSM Ex.: vcenter, SCVMM, etc Cisco and/or its affiliates. All rights reserved. Cisco Connect 30

31 Cisco Nexus 1000v Multi-Hypervisor Support VM VM VM VM VM VM VM VM Nexus 1000V VSM Nexus 1000V VEM VMware vsphere Nexus 1000V VSM Nexus 1000V VEM Windows 8 Hyper-V VMware vcenter SCVMM Consistent architecture, feature-set & network services ensures operational transparency across multiple hypervisors Cisco and/or its affiliates. All rights reserved. Cisco Connect 31

32 Essential and Advanced Edition - Features Comparison Advanced Edition ($820 LIST) Cisco TrustSec support CISF: DHCP snooping, IP Source Guard, ARP Inspection VSG Essential Edition ($0) VLAN, ACL, QoS VXLAN, vpath LACP Multicast Netflow, ERSPAN Management vtracker vcenter Plug-in 2012 Cisco and/or its affiliates. All rights reserved. Cisco Connect 32

33 Nexus 1000v Port Profiles 1. Port Profile Created in VSM Port Profile Published to VMM 2. Server Admin selects Port Profile in VMM VMM Notifies VSM of new VM 3. VSM Instantiates now veth Port 2. VM #1 VM #2 Server 1 Nexus 1000V - VEM VM #3 VMW ESX VM #4 3. WEB Apps Port Profile: PVLAN 108, Isolated Security Policy = Port 80 and 443 Rate Limit = 100 Mbps QoS Priority = Medium 1. Virtual Machine Manager (VMM) Available Port Groups WEB Apps HR DB Compliance Nexus 1000V VSM Remote Port Mirror = Yes 2012 Cisco and/or its affiliates. All rights reserved. Cisco Connect 33

34 Virtual Extensible Local Area Network (VXLAN) Ethernet in IP overlay network Entire L2 frame encapsulated in UDP 50 bytes of overhead Include 24 bit VXLAN Identifier 16 M logical networks VXLAN can cross Layer 3 Tunnel between VEMs VMs do NOT see VXLAN ID IP multicast used for L2 broadcast/multicast, unknown unicast Technology submitted to IETF for standardization With VMware, Citrix, Red Hat and Others Outer MAC DA Outer MAC SA Outer 802.1Q Outer IP DA Outer IP SA Outer UDP VXLAN ID (24 bits) Inner MAC DA Inner MAC SA Optional Inner 802.1Q Original Ethernet Payload CRC VXLAN Encapsulation Original Ethernet Frame

35 Existing Solution: Reachability of VMs Within VLAN Limited Scalability with 4k VLANs Layer 2 (Pod 1) Layer 2 (Pod 2) VLAN 10 VM 1 VM 2 VM 3 VLAN 10 VLAN 10 Layer Cisco and/or its affiliates. All rights reserved. Cisco Connect 35

36 VXLAN: Crossing L3 Subnets within the DC Layer 2 (Pod 1) Layer 2 (Pod 2) VXLAN 5500 VM 1 VXLAN 5500 VM 2 VM 3 Layer Cisco and/or its affiliates. All rights reserved. Cisco Connect 36

37 Data Centre Virtualized Services via Contexts Physical Appliances/Modules Context Combination Example VRF VRF VRF VRF Front-End VRFs (MSFC) v5 v6 v7 v8 Firewall / ASA Service Module Contexts v105 v107 v108 ACE Module Contexts v206 v207 v208 VRF Back-End VRFs (MSFC) v105 v206 v207 v2081 v2082 v2083 Server Side VLANs T-1 T-2 T-3 T-4 vxxx = VLAN Number T-X = Tenant 2012 Cisco and/or its affiliates. All rights reserved. Cisco Connect 37

38 Layer 2 Mode Layer 3 Mode Cisco Nexus 1000V Architecture: vpath Virtual Appliance Cisco ASA 1000 V Cisco vwaas Cisco VSG VSM Virtual Service Data Path (vpath) Embedding intelligence for virtual services Service chaining (traffic steering) VEM-1 vpath VXLAN Hypervisor VEM-2 vpath VXLAN Hypervisor Fast-path offload VXLAN aware 2012 Cisco and/or its affiliates. All rights reserved. Cisco Connect 38

39 vpath VMware Integration Port-Profile Port-group Network Admin view vpath interception Nexus 1000v VSM Server Admin view vsphere client Attach Opt-port-profile to server VMs 2012 Cisco and/or its affiliates. All rights reserved. Cisco Connect 39

40 Cisco Nexus 1110 Virtual Services Appliance Enabling Physical-Virtual Consistency across Cisco and Ecosystem Partners Products vwaas ASA 1000V VM VM 3 rd party vadc Cisco Virtual Security Gateway Cisco Prime Network Analysis Module 3 rd party WAF Nexus 1000V Multi-Hypervisor UCS / Nexus Nexus 1110 Series Cloud Network Services platform Virtual Services as VM s on Multiple Hypervisors Virtual Services Deployed on Cisco Virtual Service Appliance 2012 Cisco and/or its affiliates. All rights reserved. Cisco Connect 40

41 Cisco Virtual Networking and Cloud Network Services WAN Router Virtualized/Cloud Data Centre Switches Servers vwaf (*) vadc (*) vwaas Cloud Network Services ASA 1000V Cloud Firewall Cisco Virtual Security Gateway Cloud Services Router 1000V Zone A Tenant A Physical Infrastructure vpath VXLAN Nexus 1000V Zone B Multi-Hypervisor Nexus 1000V VSG ASA 1000V vwaas Distributed switch VM-level controls Edge firewall, VPN WAN optimization NX-OS consistency Zone-based FW Protocol Inspection Application traffic Customers Shipping Shipping Shipping CSR 1000V (Cloud Router) WAN L3 gateway Routing and VPN Beta Ecosystem Services (*) Virtual ADC Web App. Firewall FUTURE 2012 Cisco and/or its affiliates. All rights reserved. Cisco Connect 41

42 Internal Zoning Virtual Firewall and Physical Network Physical Virtual Inter-Zone Virtual Intra-Zone DCI Nexus 1000V Hypervisor Nexus 1000V Hypervisor Nexus 1000V Hypervisor Cloud Virtual Data Center 2012 Cisco and/or its affiliates. All rights reserved. Cisco Connect 42

43 Overlay Transport Virtualization (OTV) OTV at a Glance Ethernet traffic between sites is encapsulated in IP: MAC in IP Dynamic encapsulation based on MAC routing table No Pseudo-Wire or Tunnel state maintained MAC MAC1 MAC2 MAC3 MAC1 MAC2 IP A IP B MAC1 MAC2 MAC1 MAC2 IF Eth1 IP B IP B Encap Decap OTV OTV IP A IP B Server 1 MAC 1 Communication between MAC1 (site 1) and MAC2 (site 2) Server 2 MAC Cisco and/or its affiliates. All rights reserved. Cisco Connect 43

44 Location Identity Separation Protocol (LISP) What Do We Mean by Location and Identity? IP core Normal IP Behavior Loc/ID Overloaded Semantic When device moves, it gets new IP IP address represents address for both Identity and Location Identity and Location IP address only represents Identity Location Is Here! IP core Only the Location Changes LISP Behavior Loc/ID Split When device moves, it keeps its IP address (Identity) 2012 Cisco and/or its affiliates. All rights reserved. Cisco Connect 44

45 A LISP Packet Walk How Does LISP Operate? 1 DNS Entry: D.abc.com A > > > > /24 LISP Site S ETR West-DC D 3 Mapping Entry ITR /24 EID-prefix: /24 Locator-set: , priority: Non-LISP 1, weight: site 50 (D1) Non-LISP site , priority: 1, weight: 50 (D2) IP Network /24 PITR EID-to-RLOC mapping This Policy Controlled by Destination Site East-DC 2012 Cisco and/or its affiliates. All rights reserved. Cisco Connect 45

46 Virtual Compute & IO Virtualisation 2012 Cisco and/or its affiliates. All rights reserved. Cisco Connect 46

47 Cisco Unified Computing System (UCS) Mgmt LAN Any IEEE Compliant LAN SAN A Any ANSI T11 Compliant SAN SAN B Any ANSI T11 Compliant SAN One Logical Chassis to Manage* LAN Connectivity SAN Networking Blade Chassis Server Blades Rack Servers Server Identity Management Monitoring, Troubleshooting etc. *160 servers supported as of UCS release Cisco and/or its affiliates. All rights reserved. Cisco Connect 47

48 UCS Service Profiles Deliver a Server as a Service NIC to Switch port Mappings QoS and Security Policies VLANs and VSANs MACs and WWNs Unify All Settings as a Service Service Profile Firmware BIOS Settings Storage Settings NIC and HBA Settings 2012 Cisco and/or its affiliates. All rights reserved. Cisco Connect 48 48

49 UCS Service Profiles Deliver a Server as a Service NIC to Switch port Mappings QoS and Security Policies VLANs and VSANs MACs and WWNs Unify All Settings as a Service Service Profile Firmware BIOS Settings Storage Settings NIC and HBA Settings 2012 Cisco and/or its affiliates. All rights reserved. Cisco Connect 49 49

50 Unified & Stateless via UCS Service Profiles Aligns People, Policy, and Configuration With Workload Unified Management App 4 UUID, MAC, WWN Boot Information LAN, SAN Config Firmware Policy 1 Storage SME Subject Matter Experts Define Policies Server SME Network SME 2 App 3 UUID, MAC, WWN Boot Information LAN, SAN Config Firmware Policy App 2 UUID, MAC, WWN Boot Information LAN, SAN Config Firmware Policy Server Policy Storage Policy Network Policy Virtualization Policy Application Profiles Policies Used in Service Profile Templates Server Name UUID, MAC, WWN Boot Information LAN, SAN Config Firmware Policy App 1 UUID, MAC, WWN Boot Information LAN, SAN Config Firmware Policy 3 Service Profile Templates Create Service Profiles 4 Associating Service Profiles with Hardware Configures Servers Automatically

51 Fabric Extender Evolution Distributed Modular System to the ToR, Server, and Virtual Machine Network Administrator Many applications require multiple interfaces IEEE 802.1BR* FEX One Network Parent Switch to Top of Rack FEX Architecture Consolidates network management FEX managed as line card of parent switch Uses Pre-standard IEEE 802.1BR Legacy *IEEE 802.1BR Pre-Standard 2012 Cisco and/or its affiliates. All rights reserved. Cisco Connect 51

52 Fabric Extender Evolution Distributed Modular System to the ToR, Server, and Virtual Machine One Network Parent Switch to Adapter Network Administrator Many applications require multiple interfaces IEEE 802.1BR * IEEE 802.1BR * FEX Adapter FEX Consolidates multiple 1Gb interface into a single 10Gb interface Extends network into server Uses Pre-standard IEEE 802.1BR Legacy Adapter FEX *IEEE 802.1BR Pre-Standard 2012 Cisco and/or its affiliates. All rights reserved. Cisco Connect 52

53 Fabric Extender Evolution Distributed Modular System to the ToR, Server, and Virtual Machine One Network Virtual Same As Physical Network Administrator IEEE 802.1BR * IEEE 802.1BR * FEX IEEE 802.1BR * VM-FEX Consolidates virtual and physical network Each VM gets a dedicated port on switch Uses Pre-standard IEEE 802.1BR Hypervisor VM network managed by Server administrator Legacy Adapter FEX VM-FEX *IEEE 802.1BR Pre-Standard 2012 Cisco and/or its affiliates. All rights reserved. Cisco Connect 53

54 Fabric Extender Evolution Distributed Modular System to the ToR, Server, and Virtual Machine Network Administrator Manage network all the way to the OS interface Physical and Virtual Legacy * IEEE 802.1BR Pre-Standard Adapter FEX IEEE 802.1BR* FEX IEEE 802.1BR* IEEE 802.1BR* Hypervisor VM FEX One Network Parent Switch to Application Single Point of Management FEX Architecture Consolidates network management FEX managed as line card of parent switch Adapter FEX Consolidates multiple 1Gb interface into a single 10Gb interface Extends network into server VM-FEX Consolidates virtual and physical network Each VM gets a dedicated port on switch 2012 Cisco and/or its affiliates. All rights reserved. Cisco Connect 54

55 Cisco UCS C-Series Adapter-FEX and VM-FEX UCS P81E & VIC 1225 Virtual Interface Card NIC partitioning to OS, 802.1BR to switch Adapter-FEX mode: up to 16 Eth vnic and 2 FC vhba VM-FEX mode: up to 96/112 vnics Adapter Failover: vnics transparently mapped to standby port on primary path failure Security and scalability: no need to trunk all VLANs to one server interface

56 Adapter-FEX at UCS C-Series Servers Network admin controls veth configuration and server NICs Support matrix at Nexus 5500 (NX-OS 5.1(3)N1(1)) and UCS C-Series Servers Nexus-5548(config)# int veth6 Nexus-5548(config-if)# shut Nexus-5548(config-if)# no shut

57 UCS B-Series: Virtual Interface Card (VIC) 1280 Dual 4x 10 GE (80 Gb per host) Customer benefits VM-FEX scale, up to 112 VM interfaces /w ESX 5.0 UCS 2208 IOM UCS 2208 IOM Dual 4x 10 GE port-channels per server slot Host connectivity PCIe Gen2 x16-32 Gbps HW Capable of 256 PCIe devices OS restriction apply 112 Maximum Usable PCIe virtualization OS independent Single OS driver for M81KR and 1280 VIC FabricFailover supported Feature details Eth hash inputs : Source MAC Address, Destination MAC Address, Source Port, Destination Port, Source IP address, Destination IP address, and VLAN FC Hash inputs: Source MAC Address, Destination MAC Address, FC SID and FC DID Side A Side B UCS 1280 VIC 256 PCIe devices 2012 Cisco and/or its affiliates. All rights reserved. Cisco Connect 57

58 Cisco Nexus 1000V vs. UCS VM-FEX Bring network to the hypervisor (Cisco Nexus 1000V Switch) Bring VM awareness to physical network (Cisco UCS VM-FEX) Cisco Nexus 1000V Hypervisor Server Hypervisor Adapter UCS Server VM-FEX* UCS VIC IEEE 802.1Q Network UCS FI or Nexus Cisco and/or its affiliates. All rights reserved. Cisco Connect 58 *Pre-standard, IEEE 802.1BR

59 Virtual Storage & SAN 2012 Cisco and/or its affiliates. All rights reserved. Cisco Connect 59

60 Unified Fabric Storage I/O Flexibility and Serialized Re-Use FCoE SAN iscsi Appliance iscsi Gateway NAS Appliance NAS Gateway Computer System Computer System Computer System Computer System Computer System Application Application Application Application Application Any server, accessing any storage, any time Serialized Re-Use: Boot from SAN / Run from NAS Virtualization requires Storage be accessible from any server File System Volume Manager SCSI Device Driver FCoE Driver NIC Ethernet FCoE Block I/O File System Volume Manager SCSI Device Driver iscsi Driver TCP/IP Stack NIC Block I/O Ethernet NIC TCP/IP Stack iscsi Layer Bus Adapter File System Volume Manager SCSI Device Driver iscsi Driver TCP/IP Stack NIC Ethernet NIC TCP/IP Stack iscsi Layer FC HBA File System I/O Redirector NFS/CIFS TCP/IP Stack NIC Ethernet NIC TCP/IP Stack File System Device Driver File I/O File System I/O Redirector NFS/CIFS TCP/IP Stack NIC Ethernet NIC TCP/IP Stack File System FC HBA FC Block I/O FC 2012 Cisco and/or its affiliates. All rights reserved. Cisco Connect 60

61 Standards for Unified I/O with FCoE I/O Consolidation with FCoE FCoE is fully defined in FC-BB-5 standard FCoE works alongside additional technologies to make I/O Consolidation a reality T11 FC IEEE Frame DCB FC on FC on other Dedicated network Media media PE PFC ETS DCBX EVB Port- Extender Lossless Ethernet Priority Grouping Configuration Verification Edge Virtual Bridge FC-BB BR 802.1Qbb 802.1Qaz 802.1Qaz 802.1Qbg Cisco and/or its affiliates. All rights reserved. Cisco Connect 61

62 FCoE Implementation - Phase 1 No Consolidated IO Last Mile Cable Consolidation I/O Consolidation with FCoE LAN SAN A SAN B LAN SAN A SAN B Nexus 5000 Ethernet FC Ethernet FC FCoE 2012 Cisco and/or its affiliates. All rights reserved. Cisco Connect 62

63 Example: Embedded FCoE in Cisco UCS From ad hoc and inconsistent to structured, but siloed, complicated and costly to simple, optimized and automated 2012 Cisco and/or its affiliates. All rights reserved. Cisco Connect 63

64 Looking forward: Full Unified Fabric SAN Separation at the Access Switch LAN/SAN traffic share switches and links FabricPath enabled All Access switches are FCoE FCF switches Fabric A Fabric B Ethernet FC Converged FCoE link Dedicated FCoE link FabricPath VE_Ports to each neighbor Access switch Shared forwarding engine (FabricPath) L3 L2 Improved (N + 1) redundancy for LAN & SAN Sharing links increases flexibility and scalability Distinct SAN A & B for zoning and multipath With FC-BB-6 on the future: Nexus 7000 Nexus ,20 FCF 20, FCF Access switches for server connectivity to behave as FDF FDF to FCF transparent failover VA_Ports to each neighbor FCF switch 10,20 20, CNA 1 CNA 2 Array1 FCoE Array2 Isolation Convergence 2012 Cisco and/or its affiliates. All rights reserved. Cisco Connect 64

65 Server-Based storage on Cisco UCS StorMagic SvSAN (Storage Virtual Appliance) VMWare Virtual Storage Appliance (VSA) Nexenta (VM-aware and scale-out) Nimble Storage CS-Series NetApp OnTap Edge Red Hat Storage Server 2012 Cisco and/or its affiliates. All rights reserved. Cisco Connect 65 65

66 Software Defined Network & Orchestration 2012 Cisco and/or its affiliates. All rights reserved. Cisco Connect 66

67 What is SDN? NETWORKWORLD SDN revolution or evolution: Impact on the IT manager SDN Google revamps networks with OpenFlow Jeda Networks proposes yet another software-defined option for the data center Deutsche Bank Research Note We share a more pragmatic view, noting Cisco (for example) is likely to view SDN as a TAM expansion opportunity Evolving SDN: tackling strategic, technology, and operational challenges 2012 Cisco and/or its affiliates. All rights reserved. Cisco Connect 67

68 Before we get started: SDN-related Definitions What Is Software Defined Network (SDN)? What Is OpenFlow? Software Defined Networking (SDN) is a network design concept in which the network control plane is centrally accessible through an API to applications wanting to better use the network open standard that enables researchers to run experimental protocols in campus networks. Provides standard hook for researchers to run experiments, without exposing internal working of vendor devices Source: wikipidea Source: What is OpenStack? What is Overlay Network? Opensource software for building public and private Clouds; includes Compute (Nova), Networking (Quantum) and Storage (Swift) services. Overlay network is created on existing network infrastructure (physical and/or virtual) using a network protocol. Examples of overlay network protocol are: MPLS, GRE, IPSEC, LISP, OTV and VXLAN Source: Cisco and/or its affiliates. All rights reserved. Cisco Connect 68

69 Physical or Virtual Network Programmability Models Current Switch/Router SDN Approach Hybrid Model Applications APIs Control Plane Applications Control Plane APIs Controller Traditional DC Mgmt. SW Control Plane Applications Applications APIs APIs Controller Controller Traditional DC Mgmt. SW Traditional DC Mgmt. SW Data Plane Data Plane Data Plane Control Plane Control Plane Data Plane Control Plane Control Plane Data Plane Data Plane Data Plane Resilient, Scalable, Secure, Rich Features, Evolutionary, Investment Protection Simpler Provisioning, Centralized Network Topology Combined Simpler Benefits, Provisioning, Evolutionary Model, Centralized Investment Network Protection Topology Openstack and Network Overlays Apply to All Models (Physical/Virtual) Custom Features Can Be Built

70 Cisco Software Defined Network (SDN) Strategy Evolving The Intelligent Network Preserve what s working Evolve for emerging requirements Resiliency Scale Rich feature-set + Operational Simplicity Programmability Application Centricity Evolve the Network for the next wave of application requirements 2012 Cisco and/or its affiliates. All rights reserved. Cisco Connect 70

71 Cisco Open Network Environment (ONE) Industry s Most Comprehensive Networking Portfolio Hardware + Software Physical + Virtual Network + Compute Applications Platform APIs Network a Virtual Overlays onepk Controllers and Agents SDN: SW Controller OpenFlow agents Nexus 1000v Enhancements Cisco and/or its affiliates. All rights reserved. Cisco Connect 71

72 Network Programmability Models: Cisco s Deeper View 2012 Cisco and/or its affiliates. All rights reserved. Cisco Connect 72

73 Selecting the BEST SERVICE PROVIDER & PUBLIC CLOUD Partner 1 L2 & L3 HYBRID CLOUD via Cisco Nexus 1000v InterCloud Partner 2 Partner 3

74 Overlay Networks & Entanglement in in DC Edge out Internal DC Zone(s) DC Core VDC (Routed) DC Aggregation Layer VDC vpc FW CLUSTER HOT vmotion! Compute Access Layer 2012 Cisco and/or its affiliates. All rights reserved. Cisco Connect 74

75 Virtualization & Cloud Amplifying Entanglement VDC1 VDC2 1 Traditional (Physical) DC 2 Virtual DC 3 Virtual Desktop Cisco VXI Internet IPsec/SSL vpc VMDC Custom DC 5 Virtual Private Cloud 6 Public Cloud PaaS 4 Internal Private Cloud SaaS Physical Virtual Private Cloud Public Cloud 2012 Cisco and/or its affiliates. All rights reserved. Cisco Connect 75

76 Conclusion 2012 Cisco and/or its affiliates. All rights reserved. Cisco Connect 76

77 2012 Cisco and/or its affiliates. All rights reserved. Cisco Connect 77

78 2012 Cisco and/or its affiliates. All rights reserved. Cisco Connect 78

79 2012 Cisco and/or its affiliates. All rights reserved. Cisco Connect 79

80 2012 Cisco and/or its affiliates. All rights reserved. Cisco Connect 80

81 2012 Cisco and/or its affiliates. All rights reserved. Cisco Connect 81

82 2012 Cisco and/or its affiliates. All rights reserved. Cisco Connect 82

83 Questions 2012 Cisco and/or its affiliates. All rights reserved. Cisco Connect 83

84 Complete Your Paper Session Evaluation Give us your feedback and you could win 1 of 2 fabulous prizes in a random draw. Complete and return your paper evaluation form to the room attendant as you leave this session. Winners will be announced today. You must be present to win!..visit them at BOOTH# 100

85 Thank you Cisco and/or its affiliates. All rights reserved. Cisco Connect 85