2018 Cisco and/or its affiliates. All rights reserved.

Transcription

1

2 Beyond Data Center A Journey to self-driving Data Center with Analytics, Intelligent and Assurance Mohamad Imaduddin Systems Engineer Cisco Oct 2018

3 App is the new Business Developer is the new Customer Multicloud is the new Data Center 2018 Cisco and/or C its Cisco affiliates. and/or All its rights affiliates. reserved. All rights reserved

4 Challenges for IT New apps New users New attack surfaces Average enterprise has at least 13 cloud-native business apps 20M developers today growing to 25M by months to detect breach 3 Complexity Compliance Compromise

5 Intent-Based Data Center CANDID ACI Cisco ACI Network Optimization and Automation Network Security, Availability Multicloud Network Tetration Analytics Workload Security (zero trust) Application Dependency Mapping /Policy Discovery Real-Time Visibility/Insight Network Assurance Engine Real Time Change Analysis Verification of Network Wide Behavior Assure Network Security Policy and Compliance

6 Cisco ACI solves the problem Interfaces, protocols, TCAM, etc all represented in an object model, and ALL accessible through an XML/JSON API

7 Fabric Management and Automation Single, large logical switch across multiple datacenters Zero Touch Provisioning Single network overlay and underlay Integrated monitoring and troubleshooting VXLAN made easy Automated Downgrade/Upgrade L4/L7 traffic automation ANY APPLIANCE.

8 Future-Proof your Network One solution for Bare-metal (DBs, Big Data, HPC) ESXi Hyper-V (Watch for the Azure Stack wave) RHEV K Openstack Kubernetes OpenShift \ MultiCloud

9 ACI Anywhere - Vision Any Workload, Any Location, Any Cloud ACI Anywhere Remote Leaf / Virtual PoD APIC / Multi-Site Multi-Cloud Extensions IP WAN IP WAN Remote Location On Premise Public Cloud Security Everywhere Analytics Everywhere Policy Everywhere

10 ACI Multi-Site Multi-Site Site A Site C Site B Site D Policy Consistency Single Point Of Orchestration Availability Fault Isolation Scale

11 ACI: Physical Remote Leaf Extend ACI to Satellite Data Centers IP Network (WAN Core IPv4, MPLS, SR, etc ) Port Speed: 1/10/40/100G Site A Zero Touch Auto Discovery of Remote Leaf Remote Location Pair Of Remote Leafs Per Location Stretch EPG, BD, VRF, Tenant, Contract etc. Visibility & Troubleshooting

12 Cisco ACI Virtual Edge Decoupled From Hypervisor Kernel API Dependencies ACI Virtual Edge Q2 FY18 Q1 CY18 Legacy AVS Cisco AVE (Q1 CY18) AVE AVE Policy Enforcement, Services, Telemetry ACI Virtual Edge (AVE) AVS Switching + Policy Enforcement Native vswitch Hypervisor Dependent Hypervisor Agnostic Next Generation of Cisco AVS Distributed Firewall & Micro-segmentation AVS/AVE Parity Feature VXLAN Overlay

13 ACI: Virtual PoD Extend ACI To Bare-metal Cloud IP Network Logical Connection To Spine (VXLAN) Virtual Pod vspine vleaf vleaf ACI Virtual Edge On-Premise Remote Location Hypervisor Bare Metal Clouds Remote Data Centers Colo Facilities BrownField Deployments

14 ACI Public Cloud Extensions APIC: AWS Cloud Multi-Site GA: Q1 CY 19 Site A On-Premise Public Cloud Site B EPG Web Contract EPG APP Contract EPG DB IP Network SG Web SG Rule SG APP SG Rule SG DB AWS Region Common Governance Discovery & Visibility Policy Translation Monitoring & Troubleshooting Single Point Of Orchestration Operational Consistency

15 Intent Assurance The confidence that the infrastructure is doing what you intended it to do Intent Encompasses Data Center Operations Configs, Changes, Routing, s, Security, Compliance, Audits

16 Introducing Cisco Network Assurance Engine Based on mathematical models of the network Continuously verifies and validates the entire network Proactively delivers the confidence that the network is operating correctly Comprehensive, Intelligent, Continuous

17 Cisco Network Assurance Engine: How It Works Data Collection Captures all non-packet data: intent, policy, state across data center network Comprehensive Network Modeling Mathematically accurate models spanning underlay, overlay and virtualization layers Intelligent Analysis domain knowledge-based error scenarios built-in, codified remediation steps

18 Use Cases & Benefits Making Operations Fundamentally Proactive PREDICT THE IMPACT OF CHANGES Drive change agility Minimize human errors and eliminate configuration drift Accelerate migrations PROACTIVELY VERIFY NETWORK-WIDE BEHAVIOR Ensure connectivity Proactively eliminate potential network outages or vulnerabilities Enhance SLAs ASSURE NETWORK SECURITY POLICY AND COMPLIANCE Reduce security risk Achieve provable compliance by design, continuously Cisco and/or its affiliates. All rights reserved.

19 User Interface: Centered Around Smart Events Change Management Search and Visualization Incidence and Problem Management Smart Events: What, Where, Why, and How

20