Next Generation Data Centers Networks Consolidation and Virtualization

Size: px

Start display at page:

Download "Next Generation Data Centers Networks Consolidation and Virtualization"

Darleen Louise Henry
6 years ago
Views:

1 Next Generation Data Centers Networks Consolidation and Virtualization Samuel TAYLOR Directeur Technique Channel - WCA samtaylo@cisco.com 1

2 70 % of CIOs would increase spending on virtualization even if they had to cut back on IT spending. - Merrill Lynch, June 08 Presentation_ID% Cisco Systems, Inc. All All rights rights reserved. reserved. Cisco Cisco Restricted Public 2 DC3 Launch/os

3 Data Center Economics Forcing an Architectural Reckoning Ops & maintenance now ~80% of IT budgets and growing Spending (US$B) $300 $250 $200 $150 $100 $50 $0 Power and cooling costs Server mgmt. and admin. costs New server spending Physical server installed base (millions) Logical server installed base (millions) 40 Virtualization 35 Management Gap Virtualization Flattens Cap-Ex But Heightens Crisis of Complexity Source: IDC 3

4 Data Center 3.0 Evolution Path Location Freedom Unified Computing HW Freedom Provisioning Freedom Consolidation Virtualization Automation Utility Market Inter-Cloud Private Clouds Unified Computing Unified Fabric a Center Networking 4

5 Data Center Solutions Portfolio DC Interconnect Solutions DC Edge Routing WAN Optimization Optical Family Nexus and Catalyst Switching Solutions Unified Computing Solutions Catalyst Family Nexus Family DC Services Solutions DC Storage Solutions ASA and ACE Families. MDS 9000 Family Nexus UC Family 5

Expanding Role of Server Virtualisation Server Consolidation And Virtualisation Are

workloads virtualised in 2008; forecast to be 50%- 60% in next 5 years Source:

Multiplicative Increase in Complexity Source: Cisco Desktop Virtualisation Gaining

6 Expanding Role of Server Virtualisation Server Consolidation And Virtualisation Are #1 And #2 Spending Priorities Source: Goldman Sachs CIO Survey 10% of server workloads virtualised in 2008; forecast to be 50%- 60% in next 5 years Source: Industry analyst reports Increasing Use of otion and DRS resulting in Multiplicative Increase in Complexity Source: Cisco Desktop Virtualisation Gaining Traction as Tool to Address Desktop Manageability, Security and Cost Source: Goldman Sachs IT Spending Survey 6

7 Technology Introduction Timeline Nexus 7000 Data Center Ethernet Nexus 5000 Unified Fabric Nexus 1000v VN-Link Nexus 2000 Fabric Extender Cloud Q1 Q2 Q3 Q4 Q

Nexus: An Unmatched Rate of Innovation Platform 2008 1K Cisco Nexus

performance Cisco Nexus 5000 Delivered DCE and FCoE Cisco Nexus 1000V

gy NX-OS Unified OS for the data center Data Center Ethernet Lossless

and FC VN-Link Virtual Machine Aware Network, Storage and Unified

8 Nexus: An Unmatched Rate of Innovation Platform K Cisco Nexus 1000V x86 Cisco Nexus 7000 Raised the bar for availability and performance Cisco Nexus 5000 Delivered DCE and FCoE Cisco Nexus 1000V Revolutionized virtual machine networking 2008 Jan Sep 2009 Technolog gy NX-OS Unified OS for the data center Data Center Ethernet Lossless 10Gb transport Fibre Channel over Ethernet Unified transport for LAN and FC VN-Link Virtual Machine Aware Network, Storage and Unified Fabric Portfolio Enhancement Portfolio Expansion Network Services Strategies 8

MDS 9000 N7000 Unified V V V V V V V V Fabric Virtualization ti N5000 Platform Servers N1000

Network Platform DC LAN GbE/10GbE ACE E-mail Security VPN Data Center Management Data Center Services

9 Cisco Data Center 3.0 Portfolio Virtualization Compute Storage Network Network Server Access Network Network Services SAN MDS 9000 N7000 Unified V V V V V V V V Fabric Virtualization ti N5000 Platform Servers N1000 Application Delivery WAAS Security ASA Storage N5000 CBS3100 C49xx C6500 N7000 Compute Platform N7000 Network Platform DC LAN GbE/10GbE ACE Security VPN Data Center Management Data Center Services and Leading Practices Data Center Network Manager Topology Visualization and Provisioning Cisco Services and Support ANM Advanced L4-7 Services Module Management Cisco Data Center Assurance Program 9

Network Network Services Storage SAN Virtualization ti and N7000 Unified V Fabric

Application Delivery Security Application Partners ASA WAAS Storage CBS3100 C49xx

Management Data Center Best Practices and Services Data Center Network Manager

10 Cisco Data Center 3.0 Ecosystem Data Center Virtualization ti Solution Storage Network Server Access Network Network Services Storage SAN Virtualization ti and N7000 Unified V Fabric Partners Unified Fabric Partners V V V V V V V N5000 N1000 MDS 9000 Servers Application Delivery Security Application Partners ASA WAAS Storage CBS3100 C49xx C6500 N5000 N7000 ACE Security N7000 DC LAN GbE/10GbE VPN Data Center Management Data Center Best Practices and Services Data Center Network Manager ANM Advanced d L4-7 7Services Topology Visualization and Provisioning Module Management Cisco Services and Support Cisco Data Center Assurance Program 10

11 Data Center Networking Environment Multi-Core CPU architectures and server virtualization is driving the need for more bandwidth per server Higher dependency of Application performance on network performance Bandwidth and Latency matter Packet drop affects most traffic types Flat Networks are common in the Data Center 11

12 Server Virtualization is Changing the Game Virtual networks growing faster and larger than physical Network admins are getting involved in virtual interface deployments Network access layer needs to evolve to support consolidation and mobility Multi-core Computing driving Virtualization & new networking needs Di Driving i SAN attach rates higher h (10% 40% Growing) Driving users to plan now for 10GE server interfaces Network Virtualization enables CPU & I/O Intensive Workloads to be Virtualized Enable broader adoption of x86 class servers 12

13 Technology Introduction Timeline Nexus 7000 Data Center Ethernet Nexus 5000 Unified Fabric Nexus 1000v VN-Link Nexus 2000 Fabric Extender Cloud Q1 Q2 Q3 Q4 Q

14 10G FCoE Unified Fabric Standards Wire speed 10GE Data Center Ethernet FCoE Virtualization LAN SAN A SAN B Ethernet LAN LAN LAN MAC A MAC B A & B C N5000 N5000 N5000 MAC A MAC B MAC C End nodes 10GE L2 non-blocking, lossless, low latency switch Standards based Ethernet extensions Unified fabric for LAN, SAN, HPC/IPC -optimized networking Ecosystem Partners Presentation_ID September 16, 2008 Cisco Systems, Inc. All rights reserved. Cisco Cisco Inc., Public Company Confidential - NDA Required 14 14

15 Data Center Vision: A Unified Fabric with Cisco DCE LAN SAN Internet/ Intranet Storage RDMA/IPC Unified Fabric IPC LAN SAN IPC Today Multiple I/O Higher Capex Higher Opex Multiple Mgmt mechanisms With DCE Single L2 Transport L2 Multipathing thi Unified & Virtualized I/O Built-in Interoperability 15

16 FC over Ethernet (FCoE) FCoE Benefits Mapping of FC Frames over Ethernet Enables FC to Run on a Lossless Ethernet Network Ethernet Fibre Channel Traffic Fewer Cables Both block I/O & Ethernet traffic co-exist on same cable Fewer adapters needed Overall less power Interoperates with existing SAN s No Gateway Stateless end to end Fibre Channel session 16

17 Consolidated I/O around 10GE ESX Host 1 ESX Host 2 Storage otion 10gigE Interface optimized for VI traffic Traffic Types otion Traffic Management HA Heartbeats Traffic NFS / iscsi FCoE Storage otion Availability* VI supports over 7 different traffic types today Storage otion More traffic types are just around the corner NFS iscsi FC SSL Encrypted otion Traffic Virtual Center VI I/O infrastructure must be performance optimized for all types Presentation_ID September 16, 2008 Cisco Systems, Inc. All rights reserved. Cisco Cisco Inc., Public Company Confidential - NDA Required 17 17

18 Nexus 5000 Top of Rack Fabric Extender N5000 Fabric Extender SAN A LAN SAN B 1GE or 10GE version 10GE ports Uplinks N5000 Cost effective Scalable 1GE and 10GE version RJ-45 connectivity it for 1GE, SFP+ for 10GE 10GE Fabric Extender Fabric Extender Single Management Domain Feature consistency with Nexus 5000 High density server aggregation LAN, SAN and HPC/IPC support Low Latency 10GE or 1GE Server Server Server Combines pass thru & switch benefits Fewer management points 1 RU, no local switching Presentation_ID September 16, 2008 Cisco Systems, Inc. All rights reserved. Cisco Cisco Inc., Public Company Confidential - NDA Required 18 18

19 Unified Fabric with Fabric Extender (Remote Line Card ) End of Row Deployment Multiple l points of management FC Ethernet Blade switches High cable count Fabric Extender Unified fabric with Fabric extender Single point of management Reduced cables Fiber between racks Copper in racks Presentation_ID September 16, 2008 Cisco Systems, Inc. All rights reserved. Cisco Cisco Inc., Public Company Confidential - NDA Required 19 19

20 Key Benefits of Unified Fabric Reduces overall data power consumption Extends the lifecycle of current data center Wire hosts once to connect to any network - SAN, LAN, HPC. Faster rollout of new apps and services. Every host will be able to mount any storage target. Drives storage consolidation and improves overall utilization. Data Center portability becomes easier. 20

21 Technology Introduction Timeline Nexus 7000 Data Center Ethernet Nexus 5000 Unified Fabric Nexus 1000v VN-Link Nexus 2000 Fabric Extender Cloud Q1 Q2 Q3 Q4 Q

22 Linking Network Services to Infrastructure Scale with Demand Virtual appliances, appliances, integrated data planes Execute in the best place to support workload - mobile workloads Converge to a common O/S and programming model Efficient implementation Visibility + WAAS ACE Monitoring ASA, FWSM NAM Appl. Delivery Security 22

Networking Challenges to Scaling Server Virtualisation Security and Policy

policy for s in motion Operations and Management Lack of visibility,

effectively troubleshoot Organizational Structure Muddled ownership as server

23 Networking Challenges to Scaling Server Virtualisation Security and Policy Enforcement Applied at physical server not the individual Impossible to enforce policy for s in motion Operations and Management Lack of visibility, accountability, and consistency Inefficient management model and inability to effectively troubleshoot Organizational Structure Muddled ownership as server admin must configure virtual network Organizational redundancy creates compliance challenges 23

physical ports policy must follow Impossible to

traffic VLAN 101 Cannot correlate traffic on

24 What Problems Need to be Addressed? otion Problems: otion may move s across physical ports policy must follow Impossible to view or apply policy to locally switched traffic VLAN 101 Cannot correlate traffic on physical links from multiple s Virtual Network Link (VN-Link): Extends network to the Consistent services Coordinated, coherent management Continuum of deployment options 24

25 VN-Link in very simple terms Virtual Network Link (VN-Link) is about: -level network granularity Mobility of network and security properties (follow the ) Policy-based configuration of interfaces (Port Profiles) VN-Link with Nexus 1000V Hypervisor switch with Cisco modular switch (software) VN-Link with Nexus 5000 Uses Network Interfaces Virtualization VNIC VNIC Hypervisor VETH VETH 25

Server #1 #2 #3 #4 #5 #6 #7 #8 W ESX Cisco VN-Link W ESX Defined Policies WEB Apps HR DB

26 VN-Link Capabilities Faster Deployment Cisco VN-Link Virtual Network Link Policy-Based Connectivity Mobility of Network & Security Properties Non-Disruptive Operational Model Server Server #1 #2 #3 #4 #5 #6 #7 #8 W ESX Cisco VN-Link W ESX Defined Policies WEB Apps HR DB Compliance Virtual Center Connection Policy Defined in the network Applied in Virtual Center Linked to UUID 26

27 Policy Based Connectivity: Virtualization Admin Benefits Accelerate & Simplify deployment of new ESX hosts Network Admin provisions physical switch trunks & ESX host PNICs in a uniform and consistent way (takes care of both sides of physical connection) Virtualization Admin 1) plugs in a new ESX host, 2) assigns PNICs to Cisco vnetwork Distributed Switch in vcenter, 3) ESX PNIC configuration (including vmotion & Console) automatically assigned and enabled, 4) ESX host ready for s Ensure proper connectivity & networking safeguards are in place Virtualization Admin leverages existing workflow (vcenter & Port Groups) to assign VNIC policy. Network Admin responsible for ensuring Port Groups provide proper VLAN access & DC network security policy Cisco Nexus 1000V extends networking to include IP/Port security rules, multi-host PVLAN, Flow Statistics, Quality of Service. 27

28 VN-Link Capabilities Richer Network Services VN-Link: Virtualizing the Network Domain Policy-Based Connectivity Mobility of Network & Security Properties Non-Disruptive Operational Model #1 #2 Server #3 #4 #1 #5 Server #2 #3 #6 #7 #4 #8 W ESX Cisco VN-Link W ESX s Need to Move otion DRS SW Upgrade/Patch Hardware Failure Virtual Center VN-Link Property Mobility otion for the network Ensures security Maintains connection state 28

29 Mobility of Network & Security Properties Virtualization Admin Benefits Prevent ESX host/network config discrepancies from impacting vmotion vmotion domains can be configured once and the vswitch parameters across the cluster will always be consistent with the physical network Gain consistent visibility into -level I/O Virtual applications can be diagnosed using the same tools and method NOCs currently use in the physical environment. 1 consistent operations model provides faster MTTR of virtual applications Secure I/O to s located in the DMZ The use of IP/Port security rules (also know as Access Control Lists) can lock down traffic to/from a particular. For instance, a Web server in a DMZ can have traffic limited only to Port 80 to support a Web Server. This rule set is applied to the VNIC and moves with the during vmotion 29

30 VN-Link Capabilities Increase Operational Efficiency i VN-Link: Virtualizing the Network Domain Policy-Based Connectivity Mobility of Network & Security Properties Non-Disruptive Operational Model Server Server #1 #2 #3 #4 #5 #6 #7 #8 Server Benefits Maintains existing mgmt Reduces deployment time Improves scalability Reduces operational workload Enables -level visibilityvirtual Center Cisco VN-Link W ESX W ESX Network Benefits Unifies network mgmt and ops Improves operational security Enhances network features Ensures policy persistence Enables -level visibility 30

31 Non-Disruptive Operational Model Virtualization Admin Benefits workflow doesn t change Virtualization administrator continues to leverage vcenter for creation, maintenance, monitoring ESX vswitch configuration & management responsibility offloaded vswitch and Port Groups now provisioned along with the physical network infrastructure ensuring consistency, virtualization administrator subscribes s to available Port Groups and vswitch is dynamically provisioned Equip Data Center operations teams to respond to applications issues By extending the data center network operations model and troubleshooting toolkit down to the virtualization infrastructure, customers can leverage physical world tools and diagnostic procedures res for their -based applications 1 consistent model for the whole data center 31

32 VN-Link Solutions Software VN-Link Cisco switch for W ESX #1 (Nexus 1000V) Server #2 #3 #4 Compatible with any switching VNIC platform VETH N1KV VEM Leverages Virtual Center for server admin; Cisco CLI W for ESX network admin N1KV VSM NIC LAN NIC May 2009 FCS Hardware VN-Link (Nexus 5000) Server Scalable, hardware based, high performance #1 #2 solution #3 #4 Standards driven W approach ESX to delivering hardware based Initiator networking VNIC Combines & physical network operations VETH into 1 managed node California i & Nexus 5000 N5K: Q Availability (Target) 32

Cisco Nexus 1000V Three New Features that Make a Difference Encapsulated Remote SPAN (ERSPAN) Mirror interface

to maintain Follows your with otion or DRS NetFlow v.

host Export aggregate stats to dedicated collector for DC-wide view Follows your with otion or DRS Private

33 Cisco Nexus 1000V Three New Features that Make a Difference Encapsulated Remote SPAN (ERSPAN) Mirror interface traffic to a remote sniffer Identify root cause for connectivity issues No host-based sniffer virtual appliance to maintain Follows your with otion or DRS NetFlow v.9 with Data Export View flow-based stats for individual s Captures multi-tiered app traffic inside a single ESX host Export aggregate stats to dedicated collector for DC-wide view Follows your with otion or DRS Private VLANs (PVLANs) Great for mixed use ESX clusters Segment s w/o burning IP addresses Supports isolated, community and promiscuous trunk ports Follows your with otion or DRS 33

34 Technology Introduction Timeline Nexus 7000 Data Center Ethernet Nexus 5000 Unified Fabric Nexus 1000v VN-Link Nexus 2000 Fabric Extender Cloud Q1 Q2 Q3 Q4 Q

infrastructure t Low-latency lossless Virtualization aware Standards-based d d Server

35 Cisco Systems Data Center 3.0 Technology Roadmap Unified Fabric Nexus 5K, 2K-FEX ToR server access Wire once infrastructure t Low-latency lossless Virtualization aware Standards-based d d Server Virtualization VN-Link, Nexus 1K Virtualization aware access layer Compatible with switching platforms Combine and physical network ops Standards-based 35

36 36

Agenda Registration & Coffee

Agenda Registration & Coffee Agenda 09.15 Registration & Coffee 09:45 Welcome & Overview - Paul D'Cruz Data Centre Systems Engineering Manager 10:00 Unified Fabric - Virtualising the Network and Storage Domain - Gordon Hirst DC CSE