主題 :Cisco Data Tetration Solution - 思科大數據維運解決方案 公司名稱 :Cisco Systems

Transcription

1 主題 :Cisco Data Tetration Solution - 思科大數據維運解決方案 公司名稱 :Cisco Systems 主講人 : 大中華區數據中心事業部 首席技術顧問錢小山

2 Tetration Addition Multiplication Exponentiation Tetration a + n = a n a x n = a + a a n a n = a x a x... x a n a = a a n a.. a n X X X X X X X X X X X X X X X = = = Infinity = = 1.966x (1.966x10 ) = Infinity = = 1x Infinity

3 It s a Hybrid IT World 81% Evaluating or Using Public Cloud 73% Have a Hybrid Cloud Strategy 84% Will Use Multiple Clouds Source: Source: IDC InfoBrief, sponsored by Cisco, Cloud Going Mainstream. All Are Trying, Some Are Benefiting; Few Are Maximizing Value. September 2016

4 LoB requirements Closing the Gap Cloud Applications Cloud Gap Between what cloud applications require Traditional Applications IT capabilities People Processes Tools and what IT is capable of reliably and confidently supporting today. Time

5

6 Cisco Digital Network Architecture Network-enabled Applications Cloud Service Management Principles Open APIs Developers Environment Automation Abstraction and Policy Control from Core to Edge Policy Orchestration Open and Programmable Standards-Based Virtualization Analytics Network Data, Contextual Insights Physical and Virtual Infrastructure App Hosting Cloud-enabled Software-delivered Insights and Experiences Automation and Assurance Security and Compliance

7 What if you could actually look at every data packet that has ever traversed the Data Center

8 大數據維運 (FCAPS) 的三大需求 Continous & Always-On On Demand Checking Health and Compliance 持續? 無數據遺失? 專家系統?

9 Cisco Tetration Analytics Pervasive Sensor Framework Provides correlation of data sources across entire application infrastructure Enables identification of point events and provides insight into overall systems behavior Monitors end-to-end lifecycle of application connectivity

10 Datacenter/Cloud Wide Traffic Flow Visibility Detail information about the flow Information about Consumer Provider and type of traffic

11 Traditional Model : Siloed Architecture Configuration, Accounting, Performance, Security Fault, Analytics Tools Data Collection Network Production Network ParStream CSA Nexus 3000 Nexus 3100 Nexus 3500 Nexus 9300 Nexus Cisco Nexus Data Broker Software SPAN or Tapping On-demand Data Collecting Analyze Data

12 New Model : Operational Big Data & Analytics Configuration, Accounting, Performance, Security Fault, Analytics Tools Data Collection Network Production Network 大數據維運專家系統 Nexus 3000 Nexus 3100 Nexus 3500 Nexus 9300 Nexus Cisco Nexus Data Broker Software Cisco Tetration Analytics Platform Real-time Data Collecting Under 1 Second Real-time Data Analytics Forensics: Every Packet, Every Flow, Every Speed Application Insight Policy Simulation and Impact Assessment Automated Whitelist Policy Generation Policy Compliance and Auditability

13 Cisco Tetration Analytics Architecture Data Collection Analytics Engine Visualization and Reporting Host Sensors Tetration Telemetry Web GUI Network Sensors Cisco Nexus 92160YC-X Cisco Nexus 93180YC-EX Cisco Tetration Analytics Platform REST API Third-Party Metadata Sources Configuration Data Push Events

14 Cisco Tetration Analytics Forensics: Every Packet, Every Flow, Every Speed Application Insight Policy Simulation and Impact Assessment Automated Whitelist Policy Generation Policy Compliance and Auditability

15 Data Replay & Forensics Replay flow details like a DVR Information mapped across 25 different dimensions Thick lines indicate common flows Faint lines indicate uncommon flows

16 Application Group Discovery (ADM) BM BM Cisco Nexus 9000 Series Network-only sensors, host-only sensors, or both (preferred) Bare-metal,, & switch telemetry Application Group M BM BM BM Brownfield Bare-metal & telemetry Cisco Tetration Analytics Platform BM BM Bare metal and BM BM BM On-premises and cloud workloads (AWS) telemetry (AMI ) Unsupervised machine learning Behavior analysis BM BM

17 White List Recommendation Application Discovery Web Tier App Tier DB Tier Storage Storage Whitelist Policy Recommendation (Available in JSON, XML, and YAML) Policy Enforcement (Future Roadmap)

18 Real-Time and Historical Data Policy Simulating BM BM BM Cisco Tetration Analytics Platform Validating policy impact assessment in real time Simulating policy changes over historic traffic View traffic outliers for quick intelligence Audit becomes a function of continuous machine learning

19 Compliance Testing BM BM BM BM Cisco Tetration Analytics Platform Identify policy deviations in real-time Review and update whitelist policy with one click Policy lifecycle management

20 Interact with SDN Controller UCS Tetration Analytics App Policy APIC UCS Application Policy Recommendation Data Real Time Network Policy Import Policy using ACI Toolkit Automatic creation of EPGs and Contracts Cisco Nexus 9000 Series

21 Interact with Cloud Orchestrator Tetration Analytics App Policy Cloud Center App Level Policy Enforcement / Visibility Data Real Time App Policy Self-documenting Network Real time detection & closed loop automation Nexus 9K Amazon Web Services Microsoft Azure Google Cloud

22 Use Case : SDN-Based Data Analytic Services 图 应 Cisco Nexus Data Broker Analytics Engine Cisco Tetration Analytics Platform 络换 Cisco Nexus) Data from SPAN port 络 Public Internet Unidirectional optical tap OpenFlow

23

24

25

26

27

28 What if you could actually look at every data packet that has ever traversed the WAN network network without sampling?

29 constantly learning, adapting, protecting

30 Cisco DNA Center - A Closed loop automation Network Assurance on DNA Center Automation (APIC-EM) Telemetry, alerts, violations Network inventory, topology, and configuration Analytics (Network Data Platform (NDP)) Network and telemetry configuration Streaming telemetry & network data

31 What if you want to extract the data for further processing or take some actionable insight from the network?

32 What Is Cisco Kinetic? A Streamline IoT Operatios Platform

33 Empowering the Edge Compute Inside the Network Data Center / Cloud IoT Applications Management Business Applications Analytic Systems Billing Microservices Edge / Fog Processing Optimized hardware footprint No need for separate compute machinery Integrated security Edge / Fog Processing Empowered edge processing Reduced latency & bandwidth cost

34 Cisco Kinetic How Does It Work? Zero Touch Deployment Predictive Maintenance Technician Toolkit Machine Analytics New Service Creation 1 Gateway Power On 9 2 Field Tech App App App App App App App Cisco Data Connect 3 Scanning / Claiming 4 Call Home / Register 5 Gateway Provisioning Edge / Fog App Download 7 Connect to Devices / Sensors 8 Container 1 SIM Gateway 7 8 Data Gathering, Processing, API to Applications 9 Cisco or 3 rd Party Applications

35 Cisco Kinetic Services for the IoT Network Data Distribution Routing By Source By Content By Rules By Policy IoT Services Gateway Management (covered in earlier slides) Remote Access Application Management Data Routing Fog Computing Fabric IP Network Distributed Computing Built into the Network, Served by the Cloud

36 Next Steps Learn more about ASAP Data Center Learn more about DNA

37 Q & A

38 提醒填寫本場議程問卷! 利用電子票卡進行線上填寫並請保留完成後的 QRcode 畫面, 至該場次入口服務處兌換問卷禮, 謝謝! Thank You.