Automation of Application Centric Infrastructure (ACI) with Cisco UCS Director

Transcription

1

2 Automation of Application Centric Infrastructure (ACI) with Cisco UCS Director Raju Data Center Group

3 Agenda IT Complexity Solution for ACI Automation Cisco UCS Director Application Centric Infrastructure Delivery How it gets delivered (High-level) How does it actually works? Demo Co-Existence with Existing Environment. Key Takeaways 3

4 Abstract Most of todays automation tools and processes focus on virtual infrastructure. Real world applications need automation for both physical and virtual infrastructure with network, storage and compute connections. This session will cover the automation of Cisco Application-Centric Infrastructure (ACI) based Converged Infrastructures such as FlexPod, Vblock and VSPEX with Cisco UCS Director, its elements and how it actually works. This session invites you to engage on an end-to-end journey inside unified automation of ACI environments to deliver fully scalable infrastructure and dynamic applications. The full policy-based approach will augment ACI policies to deliver an adaptive system in a fully secure multi-tenant implementation of both physical and virtual in connection with storage for diverse enterprise workloads and/or serviceprovider multi-tenanct environments. Our journey will focus system management & automation and how to drive the ACI via API calls and its native Application Policy Infrastructure Controller (APIC) through a live demonstration. 4

5 Abstract Key-Take Aways: How to automate Converged Infrastructure based on Cisco Application Centric Infrastructure (ACI) Learn how UCS Director provides automation of pre-existing infrastructure and ACI based infrastructure. Unified Infrastructure Management and Automation across both Physical and Virtual Infrastructure in connection with Fulfilling the rapid deployment of infrastructure for on-demand application delivery Please "Fasten your seat belts" and join us to learn more about End-to- End Application-Centric Infrastructure Automation with UCS Director! 5

6 Data Center: Applications and Infrastructure Analytics Legacy Apps Web Apps Business Critical Dev./Test Apps Sandboxes Desktop Virtualization Infrastructure Solutions Application Drives the Shape of Infrastructure

7 New Applications, New Demands on Data Center Infrastructure Application Attributes Dynamic Instantiation/Removal Increasingly Non-Virtualized Infrastructure Independent Scale-Out/Multinode Infrastructure Demands Application Awareness Physical + Virtual + Cloud Dynamic Shared Resource Pool 1/10/40/100G Scale Multi-Cloud Models Secure Multi-Tenancy Cloud and Big Data Are Driving a Paradigm Shift

8 Application Network Profile Server Admins Complex IT Processes to Deploy Resources for App s Challenges: Manual processes Complex handoffs between teams and domains Static resource allocation Result: Days/weeks/months to deploy IT services High operational cost Rigid silos Infrastructure inefficiency and under utilization 2 1 IT Planning Define Cost Models Business Application Requirements Add Users and Groups Approvals Bare- Metal Bare- Metal Select SP s Update Create EPG Create Network Policies Create IP space NFS Mount Web Update vnic With VLAN Create VLAN Update Trunks UCS Service Profiles Create vfilers App Hyper-v Create Policy Web Configure Servers Add VLAN to Service Profile Configure SAN Zoning Add vfilers to Group Update Web Bare-Metal HYPERVISOR HYPERVISOR 8

9 Challenges How did we get Here? Manual Process Disjoined Provisioning Disruptive Growth Static Resource Allocation Seen as Different Components Element Management Virtualization Manager Today s Compute Challenges Manager Have Lead Network To Manager Manager A B C Compute A B C Network Infrastructure Tenant A Silos Operational Virtualization Complexity Architecture Rigidity Inefficiency Tenant B Tenant C Higher TCO

10 Agenda IT Complexity Solution for ACI Automation Cisco UCS Director Application Centric Infrastructure Delivery How it gets delivered (High-level) How does it actually works? Demo 1 Application Deployment Demo 2 Tenant on-boarding & Application profile definition / creation Integration / Migration with Existing Environment. Key Takeaways 10

11 Single Pane of Glass End-to-End Automation and Lifecycle Management Cisco UCS Director Turn-Key Solution Network Secure Cloud Container Compute VMs Policy-Driven Provisioning On-Demand Automated Delivery Domain Managers OS and Virtual Machines Compute VM VM Bare Metal Virtualized and Bare-Metal Compute and Hypervisor UCS Director Network A B C Network and Services Tenant A Tenant B Tenant C 11

12 Cisco UCS Director Agility and Simplicity for Virtualized and Bare-Metal IT Services Open API for Integration End Users IT Admins IT Operations Self Service Console Admin Console Dashboard UCS Director OS & VM Deployment Policy Manager Resource Pools Cisco UCS Physical Infrastructure Cisco Nexus Virtual Infrastructure Centralized Lifecycle Management of Physical and Virtualization Infrastructure 12

13 UCS Director Focus Infrastructure Mgmt Portals (Self-Service and Admin) Infrastructure API Application Software UCS Director Bare- Metal Bare- Metal Web App Hyper-V Web Web Bare-Metal HYPERVISOR HYPERVISOR D B = UCS Network (ACI or Standalone) Virtualization L4-7 Services 13

14 Cisco UCS Software Portfolio UCS Manager, Central, APIC and UCS Director UCS Director UCS Manager UCS Central APIC APIC & DFA Manage Single UCS domain Embedded Mgmt of all UCS s/w and h/w components Manage multiple UCS Domains Deliver global policies, service profiles, ID pools, and templates Embedded Management for ACI Manages ACI Fabric L4-7 Management Policies: Connectivity, Security & QoS, Compute & * Manage Compute,, Network, ACI and Virtualization Manage FlexPod, VSPEX, Vblock Support for 3 rd party heterogeneous infrastructure 14

15 Agenda IT Complexity Solution for ACI Automation Cisco UCS Director Application Centric Infrastructure Delivery How it gets delivered (High-level) How does it actually works? Demo 1 Application Deployment Demo 2 Tenant on-boarding & Application profile definition / creation Integration / Migration with Existing Environment. Key Takeaways 15

16 What is an Application? Application Contains Group of Tiers and/or Infrastructure Components 3 Tier Application (Web+App+) Web App Infrastructure Seamlessly working together in connection with Software (Eg: Oracle, 3 Tired App) What is Involved to Deliver an Application? Application Deployment Involves Physical: Compute, Network and Virtual Infrastructure: Application Model vcompute, vnetwork, Virtual Virtual Machines F/W L/B WEB L/B APP Layer 4-7 Services 16

17 End-to-End Virtual Infrastructure for Application Deployment Application Profile Compute Network F/W L/B WEB L/B APP Controllers UCS Manager vcenter / SCVMM Resource Needs: Quantity Capacity Quality Web App Compute 2 VMs, High IO 8 VMs, 10 GB 2 VMs, 50 GB Web App Network Stateful FW & LB L4-L7 services Stateless FW Connection to Application Web App Cache locally Primary IOPS Mirrored 2 High IOPS Data Mirroring WE B APP Web Tier App Tier Tier 17

18 End-to-End Virtual Infrastructure for Application Deployment Application Profile Compute Network F/W L/B WEB L/B APP Controllers UCS Manager vcenter / SCVMM Resource Needs: Quantity Capacity Quality Web App Compute 2 VMs, High IO 8 VMs, 10 GB 2 VMs, 50 GB Web App Network Stateful FW & LB L4-L7 services Stateless FW Connection to Application Web App Cache locally Primary IOPS Mirrored 2 High IOPS Data Mirroring WE B APP Web Tier App Tier Tier Application Instantiation VM Network with L4-7 Services 18

19 End-to-End Virtual Infrastructure for Application Deployment UCS Director Application Catalog Application Profile Compute Network F/W L/B WEB L/B APP Controllers UCS Manager vcenter / SCVMM Resource Needs: Quantity Capacity Quality Web App Compute 2 VMs, High IO 8 VMs, 10 GB 2 VMs, 50 GB Web App Network Stateful FW & LB L4-L7 services Stateless FW Connection to Application Web App Cache locally Primary IOPS Mirrored 2 High IOPS Data Mirroring WE B APP Web Tier App Tier Tier Application Instantiation VM Network with L4-7 Services 19

20 Agenda IT Complexity Solution for ACI Automation Cisco UCS Director Application Centric Infrastructure Delivery How it gets delivered (High-level) How does it actually works? Demo 1 Application Deployment Demo 2 Tenant on-boarding & Application profile definition / creation Integration / Migration with Existing Environment. Key Takeaways 20

21 Before going there

22 ACI policy model brings the concept of End-Point Group (EPG) EPGs are a grouping of end-points representing application or application components independent of other network constructs. EPG - Web POLICY MODEL HTTPS Service HTTPS Service HTTP Service HTTP Service HTTPS Service HTTPS Service HTTP Service HTTP Service 22

23 Application Network Profiles (ANP) what s that? Application Network profiles are a group of EPGs and the policies that define the communication between them. Application Network Profile EPG - WEB EPG - APP EPG - POLICY MODEL = Inbound/Outbound Policies Inbound/Outbound Policies 23

24 Applying Policy between EPGs: ACI contracts Contracts define the way in which EPGs interact. Unidirectional Communication EPG B Contract 02 EPG C Contract 01 Bidirectional Communication EPG A The policy model allows for both unidirectional and bidirectional policies. Ex: ACI Logical Model applied to the 3-Tier App ANP 24

25 ACI Application Network Profile (ANP) Details Application Network Application Network profile: stateless definition of application requirements Application tiers Connectivity policies WEB App Tier Tier Layer 4 7 services XML/JSON schema The application network profile (ANP) fully describes the application connectivity requirements UCS Director: ## App Network Profile: Defines Application Level Metadata (Pseudo Code Example) Abstracted ANP to the APIC Connectivity Policy Layer 4 7 Services UCS Service Profiles Provisioned VM s from Templates Updated with Correct Port Groups <Network-Profile = Production_Web> <App-Tier = Web> <Connected-To = Application_Client> <Connection-Policy = Secure_Firewall_External> <Connected-To = Application_Tier> <Connection-Policy = Secure_Firewall_Internal & High_Priority>... <App-Tier = DataBase> <Connected-To = > <Connection-Policy = NFS_TCP & High_BW_Low_Latency>... 25

26 Agenda IT Complexity Solution for ACI Automation Cisco UCS Director Application Centric Infrastructure Delivery How it gets delivered (High-level) How does it actually works? Demo 1 Application Deployment Demo 2 Tenant on-boarding & Application profile definition / creation Integration / Migration with Existing Environment. Key Takeaways 26

27 Live Demo 3 Tier Application Provisioning

28 UCS Director Demo 1 Use Case Self-Service Application Container Provisioning 100% Virtual Application Self-Service Portal 28

29 SME Define Policies Unified Management and Automation of ACI based POD Aligns People, Policy and Configuration to Business SME Virtual Infra SME Server SME Server Policy Network SME Application Network Policy Virtualization Policy Application Profiles APP SME Create EPG, BD Update SP s with VLAN s Boot Information Create Network on and Mount NFS 2 Polices Used to Define Network, L4-7 Services, Service Profile NFS and 3 Provision Virtual Infrastructure Configuration Server Name UUID, MAC, WWN Boot Information LAN, SAN Config Network Configuration Configuration 4 System is ready DvS/AVS Nexus 1000v 29

30 UCS Director brings together APIC and UCS Application Infra. provisioning with UCS-Director : 100% VMs Tenant Self- Service User Select App Catalog 1 Application Profile Compute Network F/W L/B WEB L/B APP UCS Director UCS Director Pushes App Profile Web APIC Application Network Profile App Storag e ACI Fabric Server Load Balancer L4-L7 Services 30

31 UCSM vcenter UCS Director brings together APIC and UCS Application Infra. provisioning with UCS-Director : 100% VMs Tenant Self- Service User Select App Catalog 1 UCS Director UCS Director Pushes App Profile 4a Discover VLAN to EPG/BD and FI Topology Discover VI Network 5 Update FI/SP s Virtualization Admin Deploy App Network Update SP s Publish VI Network Profile Database Port Profile/ Group End Point Group Application Network Profile Virtual Infrastructure Security/QoS Policies APP Port Profile/ Group Database Tier Application tier Web tier APP End Point Group ACI Fabric Application Network Profile Security/QoS Policies Server Load Balancer Web Port Profile/ Group WEB End Point Group L4-L7 Services 31

32 UCSM vcente r UCS Director brings together APIC and UCS Application Infra. provisioning with UCS-Director : 100% VMs Tenant Self- Service User Select App Catalog 1 Pushes App Profile F/W L/B UCS Director UCS Director WEB 8 Deploy Application 4a Discover VLAN to EPG/BD & FI Topology L/B 5 Update FI/SP s APP Discover VI Network Virtualization Admin Deploy App Network Update SP s Publish VI Network Profile Database Port Profile/ Group Database Tier Application tier Web tier End Point Group Application Network Profile Virtual Infrastructure Security/QoS Policies APP Port Profile/Grou p APP End Point Group ACI Fabric Application Network Profile Security/QoS Policies Server Load Balancer Web Port Profile/ Group WEB End Point Group L4-L7 Services 32

33 End-to-End Virtual + Bare-Metal Application Infra. Deployment UCS Director Application Catalog Application Profile Compute Network F/W L/B WEB L/B APP Controllers UCS Manager vcenter / SCVMM Resource Needs: Quantity Capacity Quality Web App Compute 2 VMs, High IO 8 VMs, 10 GB 2 VMs, 50 GB Web App Network Stateful FW & LB L4-L7 services Stateless FW Connection to Application Web App Cache locally Primary IOPS Mirrored 2 High IOPS Data Mirroring WE B APP Web Tier App Tier Tier Application Instantiation VM + Bare Metal Network with L4-7 Services 33

34 UCS Director brings together APIC and UCS Application Infra. provisioning with UCS-Director : VMs + Bare Metal Tenant Self- Service User Select App Catalog 1 Application Profile Compute Network F/W L/B WEB L/B APP UCS Director UCS Director Pushes App Profile APIC Application Network Profile Web App Storag e ACI Fabric Server Load Balancer L4-L7 Services 34

35 UCSM vcenter UCS Director brings together APIC and UCS Application Infra. provisioning with UCS-Director : VMs + Bare Metal Tenant Self- Service User VI Network Virtualization Admin Application Network Profile Virtual Infrastructure Select App Catalog 1 Pushes App Profile UCS Director UCS Director 4a Change Discovery 8 Deploy Application 5 FI & BM Updates Deploy Application Network Deploy Bare-Metal & Update SP s Publish VI Network Profile End Point Group Security/QoS Policies APP Port Profile/ Group APP End Point Group ACI Fabric Application Network Profile Security/QoS Policies Web Port Profile/ Group Database Database Tier Application tier Web tier WEB End Point Group Server Load Balancer L4-L7 Services 35

36 UCSM vcenter UCS Director brings together APIC and UCS Application Infra. provisioning with UCS-Director : VMs + Bare Metal Tenant Self- Service User Select App Catalog 1 Pushes App Profile UCS Director UCS Director F/W L/B 4a FI Topology WEB 5 8 Deploy Application L/B Update FI APP Discover VI Network Virtualization Admin Publish VI Network Profile WEB Deploy Application Network Deploy Bare-Metal & Update SP s APP End Point Group Security/QoS Policies Application Network Profile Virtual Infrastructure APP Port Profile/ Group APP End Point Group ACI Fabric Application Network Profile Security/QoS Policies Web Port Profile/ Group Database Database Tier Application tier Web tier WEB End Point Group Server Load Balancer L4-L7 Services 36

37 Agenda IT Complexity Solution for ACI Automation Cisco UCS Director Application Centric Infrastructure Delivery How it gets delivered (High-level) How does it actually works? Demo 1 Application Deployment Demo 2 Tenant on-boarding & Application profile definition / creation Integration / Migration with Existing Environment. Key Takeaways 37

38 UCS Director Demo 2 Use Cases Application Profile Definition Tenant Onboarding Secure Tenant on-boarding Application Profile Definition 38

39 Example Application: SAP HANA

40 SAP HANA Tenant Structure Infrastructure Create Port Groups Create VLAN s in & Network Update Trunks on Switches Access PP MGMT PP Nexus 1000v Tenant NFS Datastore VMDK VMkernel Shared DS for OS vsphere Cluster(s) Cisco UCS SP s Cisco UCS Nexus 50xx Network Legend Access Network MGMTNetwork Network 40 VLAN VLAN VIF NFS NFS export NFS export NFS export Infrastructure Tenant export VDM

41 SAP HANA App Instantiation with ACI Tenant Catalog to UCS Director Create Application Network Profile vcenter Creation of PortGroups Instantiate VMs Applction Catalog Access Access MGMT MGMT Map to PortGroups Tenant A Tenant B Tenant C Fabric 41

42 Agenda IT Complexity Solution for ACI Automation Cisco UCS Director Application Centric Infrastructure Delivery How it gets delivered (High-level) How does it actually works? Demo 1 Application Deployment Demo 2 Tenant on-boarding & Application profile definition / creation Integration / Migration with Existing Environment. Key Takeaways 42

43 Co-Existence of FlexPod/Vblock & ACI based POD Co-Existance Strategy for Customer Comes with UCS Nexus FlexPod, Vblock & VSPEX L3 L2 L3 N7K L2 vcenter vshield L3 N7K N5500 N5500 L2 ACI Fabric L3 L2 L2 UCS Director L3 VMware DVS APIC-sourced VMware DVS / Cisco AVS APIC-sourced VMware DVS / Cisco AVS 43 vmotion / Cold Migration

44 Agenda IT Complexity Solution for ACI Automation Cisco UCS Director Application Centric Infrastructure Delivery How it gets delivered (High-level) How does it actually works? Demo 1 Application Deployment Demo 2 Tenant on-boarding & Application profile definition / creation Integration / Migration with Existing Environment. Key Takeaways 44

45 Challenges How did we Simplify? Manual Process Disjoined Provisioning Disruptive Growth ` Static Resource Allocation Seen as Different Components Element Management Virtualization Manager An Today s Evolutionary Approach Have Lead Required Network To To Manager Drive Compute Challenges Manager Manager FLEXIBILITY Operational A B C CONSISTENCY Compute A B C Network Infrastructure Tenant A SIMPLICITY Silos Virtualization Complexity VISIBILITY Architecture ````````` Rigidity AUTOMATE Inefficiency Tenant B Tenant C OPTIMIZE Higher TCO Delivering Dynamic Application Centric Infrastructure Evolving into The Unified DC Architecture!

46 Complete Your Online Session Evaluation Give us your feedback and you could win fabulous prizes. Winners announced daily. Complete your session evaluation through the Cisco Live mobile app or visit one of the interactive kiosks located throughout the convention center. Don t forget: Cisco Live sessions will be available for viewing on-demand after the event at CiscoLive.com/Online 46

47 Continue Your Education Demos in the Cisco Campus Walk-in Self-Paced Labs Table Topics Meet the Engineer 1:1 meetings 47

48

49

50 Segue/Chapter Slide