Application Optimization and the Intelligent WAN (IWAN)

Transcription

1

2 Application Optimization and the Intelligent WAN (IWAN) Anthony Lockhart, WAAS Technical Marketing Engineer BRKRST-2514

3 Agenda How is the WAN Changing Application Optimization How WAAS Works Leveraging Akamai Connect Deploying Application Optimization Central Manager Overview Interception Overview Branch Deployment Data Center Deployment Q & A

4 WAAS Continue to be a Leader This graphic was published by Gartner, Inc. as part of a larger research document and should be evaluated in the context of the entire document. The Gartner document is available upon request from Gartner does not endorse any vendor, product or service depicted in its research publications, and does not advise technology users to select only those vendors with the highest ratings. Gartner research publications consist of the opinions of Gartner's research organization and should not be construed as statements of fact. Gartner disclaims all warranties, expressed or implied, with respect to this research, including any warranties of merchantability or fitness for a particular purpose. Gartner s Magic Quadrant for WAN Optimization Bjarne Munch, Neil Rickard, March 2015 BRKRST Cisco and/or its affiliates. All rights reserved. Cisco Public 4

5 WAAS Continue to be a Leader This graphic was published by Gartner, Inc. as part of a larger research document and should be evaluated in the context of the entire document. The Gartner document is available upon request from Gartner does not endorse any vendor, product or service depicted in its research publications, and does not advise technology users to select only those vendors with the highest ratings. Gartner research publications consist of the opinions of Gartner's research organization and should not be construed as statements of fact. Gartner disclaims all warranties, expressed or implied, with respect to this research, including any warranties of merchantability or fitness for a particular purpose. Gartner s Magic Quadrant for WAN Optimization Bjarne Munch, Neil Rickard, March 2015 BRKRST Cisco and/or its affiliates. All rights reserved. Cisco Public 5

6 Cisco Intelligent WAN Solution Components Unified Branch MPLS Private Cloud 3G/4G-LTE Virtual Private Cloud Internet Public Cloud Enterprise IWAN - IWAN-App/APIC-EM SP-IWAN - vms/nso ORCHESTRATION Transport Independent Intelligent Path Control Application Optimization Secure Connectivity Simplified Application Enhanced Application Comprehensive Hybrid WAN Aware Routing Visibility and Performance Threat Defense BRKRST Cisco and/or its affiliates. All rights reserved. Cisco Public 6

7 How is the WAN Changing

8 Why are enterprises thinking about SD-WAN? 50% of Apps accessed via Internet 70% Have either 2 or 3 WAN connections/branch 32.4% Cite management of connectivity at branch as a challenge 48.6% Cite poor application performance and latency as corporate WAN concern Source: IDC Worldwide SD-WAN Survey Special Report (May 2016) BRKRST Cisco and/or its affiliates. All rights reserved. Cisco Public 8

9 IT Priorities Focused on Business Outcomes SD-WAN is expected to achieve all the above and a lot more. BRKRST Cisco and/or its affiliates. All rights reserved. Cisco Public 9

10 Application Performance Impacts Business Productivity Abandonment Rate (%) REVENUE LOSS EMPLOYEE PRODUCTIVITY Source: Walmart Conversion Rate Population % Conversion Rate Source: Akamai Abandonment Rate iphone Source: Aberdeen Group Employee Experience 31% Decreased effectiveness of IT staff 32% Damage to brand reputation 47% Decreased responsiveness to needs 50% Lost Revenue opportunity Page Load Time (sec) >15 Page Load Time (sec) Decreased employee satisfaction 58% Slower Pages Low Conversion Rate Employee Experience BRKRST Cisco and/or its affiliates. All rights reserved. Cisco Public 10

11 HTTP/S Traffic Is Overwhelming The Enterprise I/P/SaaS, HD Video, HTTP/S Internet/Intranet/mobile app traffic growing fast 44% Percentage Of Enterprise Network Traffic Bandwidth Requirements Will Increase by 20-50% per year 25% 16% 12% 10% 4% HTTP/HTTPS CIFS/SMB FTP MS RDP SSH SMTP WHILE 60% of WAN Budgets are Flat to Declining BRKRST Cisco and/or its affiliates. All rights reserved. Cisco Public 11

12 Latency & Bandwidth Impact Web & Video Experiences BRKRST Cisco and/or its affiliates. All rights reserved. Cisco Public 12

13 Application Optimization (WAAS)

14 Building Blocks of WAAS Object DRE Cache Bandwidth LZ TCP Flow Optimization Latency AO AO AO Application Behavior BRKRST Cisco and/or its affiliates. All rights reserved. Cisco Public 14

15 How WAAS Works

16 Cisco WAAS Architecture Platform Management and Services SMB AO emapi AO HTTP AO SSL AO ICA AO TCP Proxy with Scheduler Optimizer (SO) DRE, LZ, TFO NFS AO Cisco WAAS Operating System Configuration Management System (CMS) Auto-Discovery, Policy Engine, Filter-Bypass, Intercept Method, Directed Mode Linux Kernel Disk Storage (DRE Cache, Object Cache, etc.) I/O Multiple, Independent Processes Fault Isolation and Containment BRKRST Cisco and/or its affiliates. All rights reserved. Cisco Public 16

17 Transport Flow Optimization TFO throughput improvement over standard TCP cwnd TFO TCP Slow start Congestion Avoidance Time BRKRST Cisco and/or its affiliates. All rights reserved. Cisco Public 17

18 DRE Pattern Matching DRE Byte Cache DRE Signature Database Original Message Encoded Message BRKRST Cisco and/or its affiliates. All rights reserved. Cisco Public 18

19 Adaptive DRE Cache Bi-directional Applies for traditional apps, symmetrical traffic profile Data chunk written to byte store on both WAAS devices for later re-use Only signatures cross WAN for previously seen data Data chunk available in DC WAAS byte store when file uploaded back to DC Signatures (memory) Peer1 SIGNATURE SIGNATURE SIGNATURE SIGNATURE Peer2 SIGNATURE SIGNATURE SIGNATURE SIGNATURE SIGNATURE Byte Store (disk) Peer n SIGNATURE SIGNATURE SIGNATURE SIGNATURE SIGNATURE chunk WAN doc WAAS WAAS Signatures (memory) SIGNATURE SIGNATURE SIGNATURE SIGNATURE SIGNATURE SIGNATURE SIGNATURE SIGNATURE Data Centre chunk Byte Store (disk) BRKRST Cisco and/or its affiliates. All rights reserved. Cisco Public 19

20 Adaptive DRE Cache Uni-directional Applies for VDI, video, etc., uni-directional in nature Signatures recorded both ends Data chunk written to byte store on branch WAAS only Only signatures cross WAN for previously seen data No write to DC byte store; lower disk consumption, reduced latency, probability of cache eviction = 0 Signatures (memory) Peer1 SIGNATURE SIGNATURE SIGNATURE SIGNATURE Peer2 SIGNATURE SIGNATURE SIGNATURE SIGNATURE SIGNATURE Byte Store (disk) Peer n SIGNATURE SIGNATURE SIGNATURE SIGNATURE SIGNATURE WAN video doc WAAS WAAS Signatures (memory) SIGNATURE SIGNATURE SIGNATURE SIGNATURE SIGNATURE SIGNATURE SIGNATURE SIGNATURE Data Centre video chunk Byte Store (disk) BRKRST Cisco and/or its affiliates. All rights reserved. Cisco Public 20

21 Application-Specific Acceleration Application and protocol awareness Eliminate unnecessary chatter Save WAN bandwidth Pre-populate edge cache as applicable Intelligent protocol acceleration Read-ahead prediction, and batching Safe data and metadata caching Improves application response time Provide origin server offload Safe Caching Read-ahead Prediction Batching DRE Hinting Layer 4 Optimization DRE/TFO/LZ DRE Hints Application intelligence signals to DRE & LZ whether to compress whether to cache Origin Server Offloaded BRKRST Cisco and/or its affiliates. All rights reserved. Cisco Public 21

22 HTTPS Acceleration and Caching Dual Sided Deployment send session key Client WAAS & Akamai Connect Transparent Secure Channel Server WAAS Client SSL server SSL Handshake SSL Handshake Original Data -SSL Encrypted Session: client to Optimized server WAAS & Encrypted SSL Optimized Session: core - Encrypted WAE to server BRKRST Cisco and/or its affiliates. All rights reserved. Cisco Public 22

23 HTTPS Caching Direct Internet Access Internet Client WAAS & Akamai Connect SSL Handshake Client SSL Handshake Cached Data - Encrypted Enterprise WAN DC/Headquarters BRKRST Cisco and/or its affiliates. All rights reserved. Cisco Public 23

24 Leveraging Akamai Connect

25 Akamai HTTP/S Object Caching Technology & Intelligence Integrated Into Cisco ISR-AX Routers & WAVE Appliances Data Center End-User Akamai Connect integrated into Cisco ISR-AX routers WAAS WAN Akamai Intelligent Platform ISR-AX+AC INTERNET Branch Akamai Connect accelerates HTTP/HTTPS applications, video and content in the branch, while maximizing existing enterprise network bandwidth BRKRST Cisco and/or its affiliates. All rights reserved. Cisco Public 25

26 Cisco WAAS Architecture with Akamai Platform Management and Services SMB AO emapi AO HTTP AO SSL AO ICA AO TCP Proxy with Scheduler Optimizer (SO) DRE, LZ, TFO NFS AO Cisco WAAS Operating System Configuration Management System (CMS) Auto-Discovery, Policy Engine, Filter-Bypass, Intercept Method, Directed Mode Linux Kernel Disk Storage (DRE Cache, Object Cache, Akamai, etc.) I/O BRKRST Cisco and/or its affiliates. All rights reserved. Cisco Public 26

27 WAAS and Akamai Connect Integration BRKRST Cisco and/or its affiliates. All rights reserved. Cisco Public 27

28 How To Improve Web App & Video Performance Get content as close to end-users as possible Accelerate requests/responses to data center/public cloud Optimize apps to reduce requests, bytes & accelerate rendering BRKRST Cisco and/or its affiliates. All rights reserved. Cisco Public 28

29 Use Case - Accelerate Live Video and Offload the WAN Challenges Delivering corporate live video over the enterprise network - serving 70K+ end users across 250 branches globally End-users in South America and Asia suffer from WAN congestion and video quality issues with frequent re-buffering and slow load times Without Cisco IWAN with Akamai Connect Private/Publi c Cloud WAN/Internet Branch Router Benefits Cisco IWAN with Akamai Connect caches live and on-demand HTTP video fragments Resulted in significant WAN offload while improving video quality & end-user experiences Reduced IT tickets related to corporate video webcast quality/performance issues With Cisco IWAN with Akamai Connect Private/Publi c Cloud WAN/Internet Branch ISR-AX+AC BRKRST Cisco and/or its affiliates. All rights reserved. Cisco Public 29

30 Use Case - Accelerate Live Video and Offload the WAN Challenges Delivering corporate live video over the enterprise network - serving 70K+ end users across 250 branches globally End-users in South America and Asia suffer from WAN congestion and video quality issues with frequent re-buffering and slow load times Benefits Cisco IWAN with Akamai Connect caches live and on-demand HTTP video fragments Resulted in significant WAN offload while improving video quality & end-user experiences Reduced IT tickets related to corporate video webcast quality/performance issues WAN vs LAN Throughput for Multiple Video Streams LAN Throughput WAN Throughput BRKRST Cisco and/or its affiliates. All rights reserved. Cisco Public 30

31 Software Updates Are Overwhelming The Enterprise Network BRKRST Cisco and/or its affiliates. All rights reserved. Cisco Public 31

32 Akamai Connect Use Case Software Downloads Software updates keep growing and consuming more enterprise network bandwidth ios 7 Update = ~700MB; ios 8 Update = ~ 1.1GB Windows 10 update = ~2.7GB Akamai Connect can help by caching ios, OSX, and Windows Updates updates locally Improving performance Offloading the enterprise network Content requested from download.windowsupdate.com Microsoft software updates delivered from the router in the branch Updating 3 ipads resulted in 2.67GB of WAN offload 50 0 WAN response (MB) LAN response (MB) 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public

33 Akamai Connect Part of Cisco Intelligent WAN Cisco Intelligent WAN Transport Independent Intelligent Path Control Application Optimization Secure Connectivity DMVPN/IPSec Performance Routing (PfR) Application Visibility and Control (AVC) Akamai Connect WAAS IOS Firewall/IPS Cloud Web Security Transparent Cache Dynamic URL Cache AKAMAI Connect Akamai Connected Cache Content Pre-positioning LZ Compression TCP Optimization CISCO WAAS Data De-duplication Application Specific Acceleration BRKRST Cisco and/or its affiliates. All rights reserved. Cisco Public 33

34 Object Versus Byte Caching 1st Pass Byte caching Symmetric deployment over WAN/MPLS Functions at TCP layer Object 1 Object 1 Data transferred over link End-user Data Center WAAS WAN Branch WAAS Object caching Both symmetric & asymmetric deployment over WAN/MPLS & Internet Functions at HTTP layer Data transferred Object 1 over link Object 1 End-user Data Center WAAS WAN / Internet Branch WAAS+AC BRKRST Cisco and/or its affiliates. All rights reserved. Cisco Public 34

35 Object Versus Byte Caching 2nd Pass Byte caching Symmetric deployment over WAN/MPLS Functions at TCP layer Object 1 Data transferred Object 1 over link End-user Data Center WAAS WAN Branch WAAS Object caching Both symmetric & asymmetric deployment over WAN/MPLS & Internet Functions at HTTP layer Data Center WAAS No data transferred over link WAN / Internet Object 1 Branch WAAS+AC End-user BRKRST Cisco and/or its affiliates. All rights reserved. Cisco Public 35

36 Preposition Content To Improve Performance & Offload Improve performance and optimize network utilization by prefetching content when network is under minimal load Cache Prepositioning fetches content proactively based on Predefined schedule URL and link depth level Excluded content types Can warm both byte and object caches BRKRST Cisco and/or its affiliates. All rights reserved. Cisco Public 36

37 Fully Integrated Into Cisco WAAS Central Manager One Click Enablement Easy Configuration Visualization and Reporting BRKRST Cisco and/or its affiliates. All rights reserved. Cisco Public 37

38 Cisco WAAS Form Factors

39 Physical Appliance Router Integrated Virtual Appliance WAAS Form Factors

40 Cisco Application Optimization Form Factors WAAS Appliance Application acceleration Scalable platforms for range of deployments ,000 optimized flows ISR-WAAS on ISR4K Zero footprint integration on ISR 4000 Identical features and management as other WAAS options Simple installation has you up and running in 7 minutes Seamlessly add capacity with AppNav Included in Cisco One Foundation and AX Cisco WAAS Virtual WAAS on UCS-E Virtual WAAS in the cloud For public Cloud and SaaS acceleration 200 Connection to 12K Connections Hourly based (BYOL future) Solution template for ease of deployment Ideal for hosting on UCS-E on ISR 4K with other apps Flexible hardware options for WAAS & other apps Software on-demand provisioning No forklift upgrade Included with Cisco and AX on ISR4K router WAAS NFV on ENCS Scale as you grow WAAS 200 Conn-12K conn Interop/Service Chaining with other NFVs Included in WAN Foundation BRKRST Cisco and/or its affiliates. All rights reserved. Cisco Public 40

41 Performance Appliance Family 1 Gbps 60,000 2 Gbps 150,000 WAVE-7571 WAVE Mbps 18,000 WAVE Mbps 6,000 WAVE Mbps 1,300 WAVE Mbps 400 WAVE Cisco Systems, Inc. All rights reserved. Scalability BRKRST Cisco and/or its affiliates. All rights reserved. Cisco Public 41

42 Performance vwaas Family vwaas vwaas vwaas 6000 vwaas 2500 vwaas 1300 vwaas 750 vwaas 200 vwaas 150 Scalability Hypervisors supported: Microsoft HyperV, VMWare ESXI, and KVM (RHEL and CentOS) BRKRST Cisco and/or its affiliates. All rights reserved. Cisco Public 42

43 Router Integrated Options UCS-E ISR-4xxx Series ISR-WAAS 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public

44 ISR-WAAS on ISR Customers ISR 4351 ISR-WAAS 750 ISR 4431 ISR-WAAS 1300 ISR 4451-X ISR-WAAS 2500 ISR 4331 ISR-WAAS 750 ISR 4321 ISR-WAAS 200 ISR-WAAS is virtualized WAAS running within a VM container on ISR-4K Delivering a High Quality Experience Across All Branches BRKRST Cisco and/or its affiliates. All rights reserved. Cisco Public 44

45 Performance Virtual WAAS on UCS-E Intel Xeon 4 cores 1GHz 16GB RAM 2TB (SATA, SAS, SSD) RAID 0, 1 GE: 2 internal, 1 external Intel Xeon 6 cores 2GHz 48 GB RAM 3TB (SATA, SAS, SSD) RAID 0, 1, 5 GE: 2 internal, 2 external vwaas: 150, 200, 750, 1300, 2500, 6000* Scalability BRKRST Cisco and/or its affiliates. All rights reserved. Cisco Public 45

46 Cisco WAAS & Akamai Connect Deployment Models Virtual Private Cloud vwaas Server VMs Branch Office WAAS Service Module/ UCSe Nexus 1000v VMware ESXi Server Branch Office WAAS Appliance WAN Internet CSR1000v + AppNav-XE Data Center or Private Cloud UCS /x86 Server WAAS Appliances FC SAN Branch Office WAAS Appliance ASR1K + AppNav-XE VMware ESXi vwaas Appliances Server VMs Branch Office ISR-WAAS on ISR 4000 BRKRST Cisco and/or its affiliates. All rights reserved. Cisco Public 46

47 Branch IT Device & Maintenance Consolidation Server Appl Accel ADSL Service MPLS + Voice PoE Switch 5 Power Sockets 5 Support Contracts - Lower Maintenance One Support Contract - Less Space, Less Power, Less Noise MPLS + DIA App Server App Acceleration Voice GW PoE Switch Security BRKRST Cisco and/or its affiliates. All rights reserved. Cisco Public 47

48 Sizing

49 Factors Influencing Application Optimization Design Business drivers a) New application role out (video, SaaS apps, digital signage, etc.)? b) WAN Bandwidth upgrade avoidance? c) Solve existing application performance challenge? d) BYOD / VDI initiative? Network Considerations a) Number of locations and WAN Bandwidth and latency b) Hub and spoke or full/ partial mesh topology from an application access perspective? c) Direct Internet Access? d) Existing network devices and software versions (e.g. routers, switches, etc.) e) HA requirements BRKRST Cisco and/or its affiliates. All rights reserved. Cisco Public 49

50 Factors Influencing Application Optimization Design Application Considerations a) Client and Server operating system(s) in use b) Applications in use and the protocols leveraged, including file sizes and usage characteristics c) Concurrent users / concurrent connections expected per application/ user d) Bandwidth requirements per app / user e) Encryption requirements (SSL or Application level) BRKRST Cisco and/or its affiliates. All rights reserved. Cisco Public 50

51 Optimized TCP Connections Optimized TCP Connections WAN Bandwidth Capacity Disk Capacity Disk Capacity License Number of Peers High Availability WAAS devices all have a hard upper limit based on the number of concurrent TCP connections that are being optimized. Most users tend to have upwards of TCP connections open at a given time Not all TCP connections need to be optimized generally per user require optimization AVC / NetFlow can provide rough estimates of number of connections within a given location over a period of time Microsoft Performance Monitor and also netstat (per client) can provide more granular per user data DC WAAS infrastructure should account for aggregate connection capacity requirements (AppNav is your friend here!) BRKRST Cisco and/or its affiliates. All rights reserved. Cisco Public 51

52 WAN Bandwidth Capacity Optimized TCP Connections WAN Bandwidth Capacity Disk Capacity License High Availability WAN bandwidth capacity should be measured per site and sized accordingly (redundant active/active links should be combined) Only necessary to size based on the maximum amount of optimized WAN throughput AVC / Netflow can provide data related to percentage of traffic Example: A 155Mbps WAN could only have 45Mbps of TCP traffic that s a candidate to be optimized, and as such we can size with a device capable of supporting a 45Mbps link Each WAAS platform s target WAN bandwidth is a measure of the optimized/ compressed throughput WAAS can support taken at approximately 70% compression BRKRST Cisco and/or its affiliates. All rights reserved. Cisco Public 52

53 Storage Capacity Requirements Branch Optimized TCP Connections WAN Bandwidth Capacity Disk Capacity License High Availability Dynamic cache capacity is defined as the amount of disk capacity necessary to support a history of interactive user operations The ideal cache history for DRE is about 5 7 days Example: For instance, assume a branch office with a T1 (1.544Mbps) where the WAN is 75% utilized for 50% of the day for 5 days per week Throughput: 1.544Mbps / 8Bytes/bit = 192KB/s Daily Use: 192KB/s * 60 sec/min * 60 min/hr * 24 hr/day = 16.6GB/day Weekly Use: 16.6GB/day * 5 days/week = 83GB/week 83GB * 75% utilization * 50% of each day = 31.3GB/week Assuming 75% redundancy (DRE), this location would require a compression history of approximately 8GB to support a one week compression history BRKRST Cisco and/or its affiliates. All rights reserved. Cisco Public 53

54 Storage Capacity Requirements Branch Optimized TCP Connections WAN Bandwidth Capacity Disk Capacity License High Availability Object cache capacity Akamai Connect & CIFS The ideal object cache is use case dependent Akamai Connect Example: You may have an online video training catalog with 20 GB of HD videos you want refreshed/ available in the cache for employee training. CIFS Example: Users at the remote site access their own personal shares & a collaboration share drive. The object cache should support about 2 weeks of file history Content is generally accessed interactively over a period of 1 2 weeks then generally is idle and is ok to be naturally aged out of the cache. Users generally have quotes on file shares to help limit the potential data BRKRST Cisco and/or its affiliates. All rights reserved. Cisco Public 54

55 Storage Capacity Requirements DC Optimized TCP Connections WAN Bandwidth Capacity Disk Capacity License High Availability DC WAAS resources must be designed with enough DRE cache capacity to provide 5 7 day compression history for each of the peers. DRE cache capacity is dynamic and therefore will shift to accommodate the most active connected peer branch. It s reasonable to assume some portion of the peers will not be talking at a given time. Also reasonable to assume access patterns are similar across branches, as such a 2:1 disk oversubscription is not unreasonable Uni-directional / Adaptive DRE should be leveraged to achieve efficient DC cache utilization and improve DRE throughput where applicable BRKRST Cisco and/or its affiliates. All rights reserved. Cisco Public 55

56 Storage Capacity Requirements DC Optimized TCP Connections WAN Bandwidth Capacity Disk Capacity License Object cache is generally not a consideration for the DC devices Example: A WAVE-8541 has 2TB of DRE cache. Assume a 2:1 oversubscription which yields 4TB of effective DRE for sizing purposes Per the branch example earlier that required 8GB of cache history per week a WAVE-8541 can support up to 500 of such a branch profile while providing a 5 7 day cache history High Availability BRKRST Cisco and/or its affiliates. All rights reserved. Cisco Public 56

57 License Requirements Optimized TCP Connections WAN Bandwidth Capacity Disk Capacity License Akamai Connect is a premium feature Licensing roughly aligns to WAAS device connection counts Supported platforms Appliance SM vwaas ISR-WAAS WAVE-294 SRE-700 vwaas-150 ISR-WAAS-200 (ISR- 4321) WAVE-594 SRE-900 vwaas-200 ISR-WAAS-750 (ISR / ISR-4331) WAVE-694 SRE-710 vwaas-750 ISR-WAAS-1300 (ISR-4431) High Availability SRE-910 vwaas-1300 ISR-WAAS-2500 (ISR-4451) vwaas-2500 vwaas-6000 BRKRST Cisco and/or its affiliates. All rights reserved. Cisco Public 57

58 High Availability Optimized TCP Connections WAN Bandwidth Capacity Disk Capacity License High Availability Sites that require high availability should be designed with N+1 WAAS devices where: N is the number of devices necessary to support the workload requirements of the given location +1 is an additional WAAS device to provide headroom in a failure case AppNav should be leveraged for load balancing, app specific requirements, and HA Central Manager should be deployed in a high availability fashion in environments where: High availability of management and reporting is of importance 25 or more managed devices are present BRKRST Cisco and/or its affiliates. All rights reserved. Cisco Public 58

59 Deploying Application Optimization

60 The WAAS Central Manager (CM)

61 WAAS VIRTUAL CM Family Performance vcm 2000 vcm 1000 vcm 500 vcm 100 Scalability Available for ESXi, Hyper-V or RHEL KVM BRKRST Cisco and/or its affiliates. All rights reserved. Cisco Public 61

62 Performance Appliance CM Family 2000 Nodes WAVE Nodes WAVE Nodes WAVE Cisco Systems, Inc. All rights reserved. Scalability BRKRST Cisco and/or its affiliates. All rights reserved. Cisco Public 62

63 Centralized Management Comprehensive Management Central Configuration Device Grouping Monitoring & Alerts Easy-to-use Interface Graphical U/I, Wizards IOS CLI Roles-based admin Proven Scalability Up to 2,000 nodes Redundancy and recovery BRKRST Cisco and/or its affiliates. All rights reserved. Cisco Public 63

64 Manage All Devices from a Centralized Location BRKRST Cisco and/or its affiliates. All rights reserved. Cisco Public 64

65 Device Dashboard BRKRST Cisco and/or its affiliates. All rights reserved. Cisco Public 65

66 Real Time Statistics BRKRST Cisco and/or its affiliates. All rights reserved. Cisco Public 66

67 Interception Methods

68 Pre-AppNav Deployment Challenges Branch office1 Branch Office2 Branch Office3 WAN WAE3 WAE2 WAE1 BRKRST Cisco and/or its affiliates. All rights reserved. Cisco Public 68

69 Pre-AppNav Deployment Challenges Branch office1 Branch Office2 Branch Office3 WAN WAE3 WAE2 WAE1 WAN Traditional In-Line has limited scale BRKRST Cisco and/or its affiliates. All rights reserved. Cisco Public 69

70 Pre-AppNav Deployment Challenges Branch office1 Branch Office2 Branch Office3 WAN WAE3 WAE2 WAE1 Traditional WCCP has Un-deterministic Branch to DC BRKRST Cisco and/or its affiliates. All rights reserved. Cisco Public 70

71 CPU utilization TCAM Entries Pre-AppNav Deployment Challenges Branch office1 Branch Office2 Branch Office3 WAE3 WAE2 WAN Mask based flow distribution Source/Destination IP and port Calculated Mask Mask Value Result 00:00:03:00 00:00:00:00 WAE-1 00:00:03:00 00:00:01:00 WAE-2 00:00:03:00 00:00:02:00 WAE-3 WAE1 Redirect ACL Several Hundred ACL Entries Traditional WCCP has Un-deterministic Branch to DC Heavy administration for redirect ACLs TCAM memory and high CPU utilization BRKRST Cisco and/or its affiliates. All rights reserved. Cisco Public 71

72 AppNav Solution Data Center BRKRST Cisco and/or its affiliates. All rights reserved. Cisco Public 72

73 Load Distribution AppNav Solution Data Center Optimization Redirection Interception Asymmetric Traffic and H.A. BRKRST Cisco and/or its affiliates. All rights reserved. Cisco Public 73

74 AppNav Solution Data Center Data Center AppNav BRKRST Cisco and/or its affiliates. All rights reserved. Cisco Public 74

75 AppNav Solution Data Center Data Center AppNav-XE BRKRST Cisco and/or its affiliates. All rights reserved. Cisco Public 75

76 AppNav Form Factors AppNav IOM AppNav-XE on ISR 4xxx, part of AX AppNav Appliance AppNav-XE on ASR 1K, part of AES or AIS Both part of WAAS no explicit license needed AppNav-XE on CSR, part of AX BRKRST Cisco and/or its affiliates. All rights reserved. Cisco Public 76

77 AppNav-XE vs AppNav Appliance AppNav-XE (AppNav on IOS-XE) Software Based Intercepts network traffic as a feature on an interface Supports VRF Up to 32 Service Contexts Can interoperate with many features No extra external equipment and cabling AppNav appliance (Hardware Module) Hardware based Intercepts network traffic inline or via WCCP Does not support VRF Single Service Context BRKRST Cisco and/or its affiliates. All rights reserved. Cisco Public 77

78 Key Benefits of AppNav-XE No extra external equipment and cabling WCCP/PBR No other interception protocol needed such as WCCP or PBR VRF Aware BRKRST Cisco and/or its affiliates. All rights reserved. Cisco Public 78

79 AppNav and WAAS Policy Engine WN1 WN2 WN3 HTTP AO WN4 WN5 HTTPS AO Unclassified traffic AppNav policy WN6 WN7 WN8 SN9 Unoptimized traffic Optimization policy CIFS AO MAPI AO Pass-through Unoptimized AppNav Controller WAAS AppNav policy Flow distribution policy (AppNav -> WAAS) AppNav Classmap traffic classification Per peer OR 3 tuple SRC/DST IP and DST port Mix one peer + SRC/DST IP and DST port AppNav Policy Where do I send the Packets Primary (& backup WNGs) Monitoring of Aos Nested policy Optimization policy Optimization/accelration associated with given traffic (WAAS) Optimization Classmap identifying traffic Optimization/acceleration tied to the traffic TFO LZWhat do I do with the Packets DRE (Uni, Bi, Adaptive) AO BRKRST Cisco and/or its affiliates. All rights reserved. Cisco Public 79

80 TFO and AO Load-Based Optimization Branch Office WAN Cisco AppNav Overload Feedback WAAS1 WAAS2 Data Center AO Not running (not configured, not licensed or disabled) If AO is not monitored, load refers to the maximum TFOoptimized connection limit of the WN AO running but no new connections accepted due to: Its connection/resource thresholds exceeded It is losing keepalives with policy engine (may be overloaded) Overall device connection/resource thresholds exceeded DRE processing latency is above threshold BRKRST Cisco and/or its affiliates. All rights reserved. Cisco Public 80

81 AppNav Affinity Features Branch Office_1 Branch Office_2 WAN Cisco AppNav Br3_WAAS Br2_WAAS AppNav s powerful policy engine allows for easy separation of branch traffic Branch Office_3 Branch1 Traffic Branch2 Traffic Branch3 Traffic Br1_WAAS Data Center No knowledge of IP addresses or ACLs required Branch Office Branch Office WAN HTTP Traffic SSL Traffic Cisco AppNav HTTP Cluster Other Cluster SSL Cluster Split traffic into separate application clusters Allows WAAS to easily adapt to application traffic increases and changes. Branch Office Other Traffic BRKRST Cisco and/or its affiliates. All rights reserved. Cisco Public 81

82 AppNav Cluster High Availability Each ANC gathers its own local view of the cluster. ICIMP shares local views to so a Global View becomes known to all ANCs. An operational cluster consists of ANCs that have consistent views and can all see each other. *New ANCs enter the cluster gracefully by holding the ANC down until all flow states are synchronized. HA is built in as all the ANCs share the flow states. ANCs can exit the cluster at any time with out impacting flows distribution. *AppNav-XE does not hold down router interface, recommended that for ASR 1000s to use EMM script to hold down WAN interface during cluster sync when router is rebooted BRKRST Cisco and/or its affiliates. All rights reserved. Cisco Public 82

83 WAAS Node High Availability Cisco WAAS device down Branch Office WAN WAAS_3 WAAS_2 WAAS_1 Data Center Branch Office Cisco WAAS device up WAN WAAS_3 WAAS_2 WAAS_1 Data Center BRKRST Cisco and/or its affiliates. All rights reserved. Cisco Public 83

84 Deploying Application Optimization - Branch

85 ISR 4K s Branch Use-Case Dual Router MPLS LAN Branch WAN WAAS communication AppNav communication INTERNET Challenges/Needs: Dual router, asymmetrical in the branch, router redundancy Solution: ISR4K integrated AppNav and WAAS, form single cluster Benefit: Eliminate complex configuration with integrated AppNav BRKRST Cisco and/or its affiliates. All rights reserved. Cisco Public 85

86 Single 4K Deployment Ease of deployment Simple setup No external equipment No need to register 4K / AppNav Cluster to WCM Scalable and Elastic Add capacity with UCS-E and vwaas AppNav-XE Lower TCO No VM license No extra equipment EZConfig Script can have WAAS plus AppNav-XE up and running in less than 10 minutes router# service waas enable ************************************************************************** **** Entering WAAS service interactive mode. **** **** You will be asked a series of questions, and your answers **** **** will be used to modify this device's configuration to **** **** enable a WAAS Service on this router. **** ************************************************************************** Continue? [y]: At any time:? for help, CTRL-C to exit. BRKRST Cisco and/or its affiliates. All rights reserved. Cisco Public 86

87 Single 4K Deployment - Default Configuration ip access-list extended AUTOWAAS permit tcp any any ip access-list extended CIFS permit tcp any any eq 139 permit tcp any any eq 445 ip access-list extended Citrix-CGP permit tcp any any eq 2598 ip access-list extended Citrix-ICA permit tcp any any eq 1494 ip access-list extended EPMAP permit tcp any any eq msrpc ip access-list extended HTTP permit tcp any any eq www permit tcp any any eq 3218 permit tcp any any eq 8000 permit tcp any any eq 8080 permit tcp any any eq 8088 ip access-list extended HTTPS permit tcp any any eq 443 ip access-list extended NFS permit tcp any any eq 2049 ip access-list extended RTSP permit tcp any any eq 554 permit tcp any any eq 8554 ip access-list extended SN_OR_WCM permit tcp host any permit tcp any host permit tcp host any permit tcp any host Default ACL s & Class Maps Default AppNav Policy class-map type appnav match-any RTSP match access-group name RTSP class-map type appnav match-any AUTOWAAS match access-group name AUTOWAAS class-map type appnav match-any MAPI match protocol mapi class-map type appnav match-any HTTP match access-group name HTTP class-map type appnav match-any CIFS match access-group name CIFS class-map type appnav match-any Citrix-CGP match access-group name Citrix-CGP class-map type appnav match-any EPMAP match access-group name EPMAP class-map type appnav match-any HTTPS match access-group name HTTPS class-map type appnav match-any SN_OR_WCM match access-group name SN_OR_WCM class-map type appnav match-any NFS match access-group name NFS class-map type appnav match-any Citrix-ICA match access-group name Citrix-ICA policy-map type appnav AUTOWAAS description AUTOWAAS global policy class SN_OR_WCM pass-through class HTTP distribute service-node-group AUTOWAAS-SNG monitor-load http class MAPI distribute service-node-group AUTOWAAS-SNG monitor-load mapi class HTTPS distribute service-node-group AUTOWAAS-SNG monitor-load ssl class CIFS distribute service-node-group AUTOWAAS-SNG monitor-load cifs class Citrix-ICA distribute service-node-group AUTOWAAS-SNG monitor-load ica class Citrix-CGP distribute service-node-group AUTOWAAS-SNG monitor-load ica class EPMAP distribute service-node-group AUTOWAAS-SNG monitor-load MS-port-mapper class NFS distribute service-node-group AUTOWAAS-SNG monitor-load nfs class AUTOWAAS distribute service-node-group AUTOWAAS-SNG BRKRST Cisco and/or its affiliates. All rights reserved. Cisco Public 87

88 Single 4K Deployment - Default Configuration Assign ISR-WAAS instance to a WAAS Node Group service-insertion service-node-group AUTOWAAS-SNG description "AUTOWAAS" service-node node-discovery enable! service-insertion appnav-controller-group AUTOWAAS-SCG description "AUTOWAAS" appnav-controller ! service-insertion service-context waas/1 appnav-controller-group AUTOWAAS-SCG service-node-group AUTOWAAS-SNG service-policy AUTOWAAS vrf default enable VRF default = intercept traffic for all VRFs Assign 4K to AppNav Controller group Bind AppNav policy to the AppNav Service Context to activate. Enable interception on the WAN Interfaces ISR-WAAS instance config interface VirtualPortGroup31 ip unnumbered GigabitEthernet0/0/1 no mop enabled no mop sysid! interface GigabitEthernet0/0/0 description WAN Interface ip address ip vrf forwarding INET-PUBLCI1 service-insertion waas! interface GigabitEthernet0/0/1 description LAN Interface ip address ! Tunnel 10 description DMVPN Tunnel ip address service-insertion waas! interface AppNav-Compress1 ip unnumbered GigabitEthernet0/0/1 no keepalive! interface AppNav-UnCompress1 ip unnumbered GigabitEthernet0/0/1 no keepalive! virtual-service AUTOWAAS profile ISR-WAAS-750 vnic gateway VirtualPortGroup31 guest ip address activate ip route VirtualPortGroup31 BRKRST Cisco and/or its affiliates. All rights reserved. Cisco Public 88

89 Dual 4K Deployment -- Configure CLI mode Run EZConfig on both Routers Modify the service-node-group on each router to include the other ISR-WAAS Modify the appnav-controller group on each router to include the other ISR-4K Benefit = Saves resources on your WCM Disadvantage = CLI administration for changes and troubleshooting Router 1 service-insertion service-node-group AUTOWAAS-SNG description "AUTOWAAS" service-node service-node node-discovery enable! service-insertion appnav-controller-group AUTOWAAS-SCG description "AUTOWAAS" appnav-controller appnav-controller Router 2 Assign ISR-WAAS to WAAS Node Group on each other Assign 4K to AppNav Controller group on each other service-insertion service-node-group AUTOWAAS-SNG description "AUTOWAAS" service-node service-node node-discovery enable! service-insertion appnav-controller-group AUTOWAAS-SCG description "AUTOWAAS" appnav-controller appnav-controller BRKRST Cisco and/or its affiliates. All rights reserved. Cisco Public 89

90 Dual 4K Deployment -- Verify CLI mode Router-1#show service-insertion appnav-controller-group All AppNav Controller Groups in service context Appnav Controller Group : AUTOWAAS-SCG Member Appnav Controller Count : 2 Members: IP Address AppNav Controller : Local AppNav Controller : Yes Current status of AppNav Controller : Alive Time current status was reached : Mon Apr 6 01:15: Cluster protocol ICIMP version : 1.1 Cluster protocol Incarnation Number : 1 Cluster protocol Last Sent Sequence Number : 0 Cluster protocol Last Received Sequence Number : 0 Current AC View of AppNav Controller IP Address Current SN View of AppNav Controller IP Address BRKRST Cisco and/or its affiliates. All rights reserved. Cisco Public 90

91 Dual 4K Deployment -- GUI mode Run EZConfig on both Routers to install ISR-WAAS (don t specify interface for intercept) Register Both Routers to WCM (enable http secure server & ssh on routers) Run AppNav Wizard Benefit = Single view of interception & optimization, easier troubleshooting & customization ip domain-name cisco.local username admin privilege 15 password 0 default ip http secure-server ip http authentication local line vty 0 15 transport input ssh BRKRST Cisco and/or its affiliates. All rights reserved. Cisco Public 91

92 AppNav Cluster Creation Wizard Graphical overview of AppNav deployment and configuration Quick, at-a-glance statistics and load information Data-driven tooltips and status indicators that give quick access to device health. Support for viewing 8 AppNav Controllers for IOM and 4 for XE and 32 WAAS Nodes BRKRST Cisco and/or its affiliates. All rights reserved. Cisco Public 92

93 Dual 4K Deployment -- GUI mode BRKRST Cisco and/or its affiliates. All rights reserved. Cisco Public 93

94 Dual 4K Deployment -- GUI mode BRKRST Cisco and/or its affiliates. All rights reserved. Cisco Public 94

95 Dual 4K Deployment -- GUI mode BRKRST Cisco and/or its affiliates. All rights reserved. Cisco Public 95

96 Dual 4K Deployment -- GUI mode BRKRST Cisco and/or its affiliates. All rights reserved. Cisco Public 96

97 Dual 4K Deployment -- GUI mode BRKRST Cisco and/or its affiliates. All rights reserved. Cisco Public 97

98 Dual 4K Deployment -- GUI mode BRKRST Cisco and/or its affiliates. All rights reserved. Cisco Public 98

99 Dual 4K Deployment -- GUI mode BRKRST Cisco and/or its affiliates. All rights reserved. Cisco Public 99

100 Dual 4K Deployment -- GUI mode BRKRST Cisco and/or its affiliates. All rights reserved. Cisco Public 100

101 Deploying Application Optimization - DC

102 AppNav XE Deployment (ASR or CSR) BRKRST Cisco and/or its affiliates. All rights reserved. Cisco Public 102

103 AppNav XE Deployment (ASR or CSR) BRKRST Cisco and/or its affiliates. All rights reserved. Cisco Public 103

104 AppNav XE Deployment (ASR or CSR) BRKRST Cisco and/or its affiliates. All rights reserved. Cisco Public 104

105 AppNav XE Deployment (ASR or CSR) BRKRST Cisco and/or its affiliates. All rights reserved. Cisco Public 105

106 AppNav XE Deployment (ASR or CSR) BRKRST Cisco and/or its affiliates. All rights reserved. Cisco Public 106

107 AppNav XE Deployment (ASR or CSR) BRKRST Cisco and/or its affiliates. All rights reserved. Cisco Public 107

108 AppNav XE Deployment (ASR or CSR) BRKRST Cisco and/or its affiliates. All rights reserved. Cisco Public 108

109 AppNav XE Deployment (ASR or CSR) BRKRST Cisco and/or its affiliates. All rights reserved. Cisco Public 109

110 AppNav XE Deployment (ASR or CSR) BRKRST Cisco and/or its affiliates. All rights reserved. Cisco Public 110

111 AppNav XE Deployment (ASR or CSR) BRKRST Cisco and/or its affiliates. All rights reserved. Cisco Public 111

112 AppNav XE Deployment (ASR or CSR) BRKRST Cisco and/or its affiliates. All rights reserved. Cisco Public 112

113 AppNav XE Deployment (ASR or CSR) BRKRST Cisco and/or its affiliates. All rights reserved. Cisco Public 113

114 Recommended Reading BRKRST Cisco and/or its affiliates. All rights reserved. Cisco Public 114

115 Complete Your Online Session Evaluation Please complete your Online Session Evaluations after each session Complete 4 Session Evaluations & the Overall Conference Evaluation (available from Thursday) to receive your Cisco Live T-shirt All surveys can be completed via the Cisco Live Mobile App or the Communication Stations Don t forget: Cisco Live sessions will be available for viewing on-demand after the event at CiscoLive.com/Online BRKRST Cisco and/or its affiliates. All rights reserved. Cisco Public 115

116 Continue Your Education Demos in the Cisco campus Walk-in Self-Paced Labs Lunch & Learn Meet the Engineer 1:1 meetings Related sessions BRKRST Cisco and/or its affiliates. All rights reserved. Cisco Public 116

117 Q & A

118 Thank You

119