Cisco on Cisco. Defining the NG Cloud & Data Center Services. Oren Seliger IT Theater Leader EMEAR South. Nov 2014

Transcription

1 Cisco on Cisco Defining the NG Cloud & Data Center Services Oren Seliger IT Theater Leader EMEAR South Nov 2014

2 Agenda Introductions Who am I and What is Cisco on Cisco? 2 Current Landscape What are the Market Trends? Connected Workplace The Work from Anywhere Methodology 4 Resiliency Overview A Review of Cisco s Resiliency & DRP Virtualizing DC Services A Review & Demonstration of CITEIS 6 Next Generation Data Center: A Review of Cisco s ACI

3 Who Am I? Responsible for Cisco IT Services in Southern European Markets IT Theatre Leader EMEAR-South High Touch Local IT management Asset Management Procurement Cisco on Cisco Events Support Global, Local Technology Pilots and deployment service Local Relationship with Service Providers Mobility Services IT Escalation Management Medium Touch Video services Print Services New employee Orientation Exec Admin productivity trainings New Employee Orientation Who am I Really? Low Touch Software licensing/compliance Cisco Home (Virtual) Office Campus onsite event support Data backup Webex and Collaboration Unique Services Executive Support Models Connected Ops Engagement

4 What Is Cisco on Cisco The adventures of our IT journey How we use our own technologies to solve business challenges, create opportunities, and communicate lessons learned VALUE PROPOSITION Trusted Advisor to Customer Deep Understanding of Cisco Technologies for Customers Sharing of Lessons Learned John Chambers : A key competitive advantage for Cisco is how we use our own technology to drive productivity. 4

5 Cisco Faces the same Challenges As Its Customers Versatility Enabling Innovation Environment / Green Functionality Performance Cost of Ownership Security Ease of Operation and Maintenance

6 Why Cisco, and Why Cisco IT? Global Enterprise 74,616 Employees 470+ Locations worldwide 16 DC s Labs 48.6 B$ Revenues ~50 B$ Cash end of FY14 Cisco Powered 3780 Routers 4697 Switches Access Points 36,300 CVO Teleworker Routers 1056 MDS (Multilayer Director Switches) 5 CallManager clusters 17 IPCC sites (IP Contact Centers) Telepresence Rooms Huge Global Enterprise Unique combination of Cisco solutions First customer for most DC and UC solutions First Customer ACI /SDN UCS Nexus Jabber (IM/Voice/Video) Cisco Prime Catalogue CUPC, Presence & Mobility Telepresence MVDC Collaborative tools Cisco Virtual Office Cisco Connected Workplace Mobile EasyApps Cisco Security Solutions Virtualization (CITEIS) VDC s (Virtual Data Centers).. And more 6

7 Connected Workplace Collaborative Work from Anywhere Methodology

8 Cisco Connected Workplace: WLAN + IPT ( + different furniture and culture) Collaborative Office Home Office Space reduction per person: 30% Mobile Office CAPEX for furniture: - 55% INTERNET Prefer environment: + 77% Improved communications: + 82% Workforce satisfaction: + 82% Financials CAPEX for cabling, infrastructure: - 55% Power usage per person: - 58% People 12K 15K 36K employees Home Offices Ease of finding quiet space: at any + time 62% Flexibility, Resilience Performance Ease of finding meeting room: + 80%

9 Mobile / Softphone + Remote Access / Wireless = Productivity + Globalization + Resilience + Cost Savings Video Everywhere Extension Mobility BYOD Services For ios & Android Hardware VPN (always on, wireless) Software VPN Jabber: Soft phone/video Wireless Everywhere

10 Home Office / Small Office: Cisco Virtual Office Supporting home hardware Video phones Voice / video QoS Supporting over 36K Cisco employees Productivity Metrics: CVO users typically work 3 full days at home per week CVO users gain 2 hours 45 minutes productive work hours per week typically spent commuting to/from a Cisco office. 35M commuting miles avoided per year and 17K tons CO2 emissions reduced. Benefit mentioned by new hires

11 A Typical Cisco Employee Home Office

12 The History of Computing The Journey from the Mainframe to the Data Center The Personal Computer Generation 2001 The Mobile Generation

13 The History of Computing The Journey from the Mainframe to the Data Center

14 The Truth is, We ve Come Full Circle

15 Cisco Resiliency Overview A Review of Cisco s Data Center Resiliency & DRP

16 Resiliency What & Why Cisco's Business Continuity Plans (BCPs): Designed to recover critical business processes identified in our Business Impact Analysis. The BIA is used by our CFO to determine financial and non-financial impacts from disruptions to a business function or process. These impacts are measured against time. Resiliency What & Why Service Resiliency Plans (SRPs) focus on recovering IT services that support critical business processes. They are centered on their criticality as identified by the BIA BCP BIA SRP

17 Resiliency Framework Criticality Levels Criticality Definitions - The Service Attribute that describes the Impact to the Business when the Service Is Not Behaving as Required. C-Level Term Impact Description C1 Mission Imperative Any outage that results in immediate cessation of a primary function, equivalent to immediate and critical impact to revenue generation, brand name and/or customer satisfaction; no downtime is acceptable under any circumstances C2 Mission Critical Any outage results in immediate cessation of a primary function, equivalent to major impact to revenue generation, brand name and/or customer satisfaction C3 Business Critical Any outage results in cessation over time or an immediate reduction of a primary function, equivalent to minor impact to revenue generation, brand name and/or customer satisfaction C4 Business Operational A sustained outage results in cessation or reduction of a primary function C5 Business Administrative A sustained outage has little to no impact on a primary function

18 Criticality Matrix Operational Continuity (Planned downtime) Disaster Recovery (Unplanned downtime) Criticality Level Acceptable Recovery Time (hrs) Acceptable Data Loss (hrs) Recovery Time Objective (hrs) Recovery Point Objective (hrs) C1 ~0 ~0 n/a n/a C C C C5 Best Effort 1wk Best Effort 1wk

19 How to Determine RTO (Recovery Time Objective) The RTO is determined based on the six impact types: Financial - Loss of Revenue Financial - Delayed Revenue Customer Service Experience Legal and Regulatory Requirements Brand Image

20 Resiliency Adoption Requirements For IT to Action C1-C2-C3 C4 C5 Not Started Single Prod DC Single Prod DC Single Prod DC Data Protection Data Protection Data Protection? Disaster Recovery Disaster Recovery Metro Pair (MVDC)

21 Introducing Metro Virtual Data Center (MVDC) The First Architecture to Deliver True Operational Continuity DC1 DC2 Failure of a Single-DC leads to full recovery Within the metro pair Any service or critical business process that is MVDC-enabled can automatically recover in the other DC including service failures, application failures, up to and including loss of an entire Data Center

22 MVDC Business Benefits Rapid Service Recovery Within Metro Pair DC1 DC2 Any IT Application or Service that is MVDC-enabled Can Automatically Fail Over and Recover in the Other Data Center Critical business services are designed to run in BOTH data centers at the same time (Active Active), giving very high availability (up to %) Built in protection against unplanned failures of key business services, shared services up to and including an entire data center Built in protection from most planned outages for changes such as upgrades, fixes and releases

23 What Are MVDC Architectures Used At Cisco?? MVDC Metro Virtual Data Center RVDC Regional Virtual Data Center GVDC Global Virtual Data Center

24 High Availability Data Centers Richardson, Texas Allen, Texas ~80 Km Metro Virtual Data Center (MVDC) MVDC is a Logical Pairing of Two (or more) Physical Data Centers Into a Single Virtual Data Center.

25 Distributed Virtual Data Center Architecture & C1 applications Varying distance/latency Distributed Global Variation I: Global Virtual DC (GVDC) supporting C1 apps Presence in two or more continents Clients: Diversified businesses, content, communication and collaboration Examples: DNS, Authentication, Active Directory Cisco.com static content Regional Variation II: Regional Virtual DC (RVDC) aka DR Active from multiple DCs over high latency within one continent Clients: Diversity at low cost Examples: FTP.cisco.com, GDCP Migration, Cisco.com content Metro Variation III: Metro Virtual DC (MVDC) Leveraging Metro-based DC pair + remote DR Clients: Business transactional services Examples: Integrated Commerce Workplace (ICW), Enterprise Resource Planning (ERP)

26 MVDC Service In Action MS Exchange

27 i Growth -- Applications: 26% Y/Y Storage: 50+% Y/Y 48+ PB (ACI will resolve) Virtualization about 90% (business production). Goal: 95% 2013 Target Global Data 2x Amsterdam Center Presence TBD B production Iron Port B Amsterdam B Cisco apps now run B on Nexus / UCS. B 11,000+ UCS servers deployed 2x Texas Key: SJ B worldwide B WebEx so far in Nexus / FCOE / UCS environment. Provides 27% TCO Richardson RTP Tier-III (Redundant) improvements. Linksys CROS 40% reduction Scientific in Cable 1x APAC/TBD costs. A Dedicated building Atlanta 2x = Dual DC, sync capable Data Center build / migration to state of the art MVDC pair in Texas. All business New automation from Cisco Intelligent Automation for Cloud drops provisioning time: 3 weeks 15 minutes. Agile cloud computing for B years. B Seed & Scale Software-as-a-Service (SaaS): Resilient, Scalable, Cost-effective Presence in Each Continent Data Centers Business Data Center Tier-II (Less Redundant) Existing buildings Product Development Latency-Sensitive Big Data applications (on UCS) Software already Development providing Business Intelligence new revenue opportunities. Globally Centralized: Continental Hub: Continental Hub: Traditional Business Model Traditional Business Apps Order Processing, Comms Communications Application Centric Infrastructure ACI has been installed in our SJ data center and is being rolled out to all Cisco data centers globally. New Business Models Engineering R&D Data Center

28 Virtualizing DC Services A Review & Demonstration of CITEIS

29 Introducing CITEIS Concept A Framework for Providing Infrastructure as a Service Architect it Architect it Design it Design it Where can we put it? Procure it Install it Manual Configure it Secure it CITEIS Is it ready? Automated Self-service On-demand Where can we put it? Procure it Install it Configure it Secure it Is it ready? Before CITEIS After CITEIS Machine-oriented Manual provisioning Hard to control utilization Service-oriented Self-service; automated provisioning Elasticity (capacity-on-demand) High provisioning & ops cost Extended provisioning time Configuration risk Optimized provisioning & ops cost Rapid provisioning Increased Resiliency and Availability

30

31

32

33

34 Automatically linked from Enterprise Directory Services Automatically added to Enterprise Directory Services

35 Selection impacts cost Choose the closest physical DC Choose the appropriate VDC size for your project Selection impacts cost

36 How/Who should have access to your VDC? Internal? Partner? Customer?

37

38

39 VM/vApp Order Form Automatically linked from Enterprise Directory Services

40 An almost unlimited number of vapp images. Or upload your own image Limited lease period guarantees no stale CITEIS resources!

41 Information security policy enforced What resourced do I need for my VM?

42

43

44 SLA vs Actual Eight Minutes from Start to Finish

45

46 Introducing CITEIS Concept A Framework for Providing Infrastructure as a Service Architect it Architect it Design it Design it Where can we put it? Procure it Install it Manual CITEIS Configure it Secure it Is it ready? Automated Self-service On-demand Where can we put it? Procure it Install it Configure it Secure it Is it ready? Before CITEIS After CITEIS Machine-oriented Manual provisioning Hard to control utilization Service-oriented Self-service; automated provisioning Elasticity (capacity-on-demand) High provisioning & ops cost Extended provisioning time Configuration risk Optimized provisioning & ops cost Rapid provisioning Increased Resiliency and Availability

47 Data Center Transformation Infrastructure TCO Over the Years TCO ($/Qtr.) Virt. Rate (%) 100% 75% E2E Prov. (Days) $ E2E = 45 days -45% TCO ($ Per Qtr) Virtualization Rate (%) 70% 85% Virtualization 95% $ $ % 25% 0% % Circa 2009 (Legacy) $ E2E = 17 days -24% $ E2E = 5 days CITEIS/Compute = 15 mins. -21% $ Fully Self Provisioned Q4 CY10 Q4 CY12 Q2 CY13 $ $ $0 Legacy Bare Metals based Data Center Focus UCS Adoption All Virtualization on UCS Focus Workflow automation PaaS Enablement Storage Optimization Focus Process Transformation Infrastructure/ Platform Optimization Source: Cisco IT GIS September 2012

48 Private Cloud Orchestration (CIAC) Reduces VM provisioning time, provides self service deployment Architect It Design It Where Can We Put It? Procure It Install Automated It Self-Service Configure It Secure It Is It Ready? On-Demand Manual Service-Oriented Self-Service; Automated Provisioning Elasticity (Capacity-on- Demand)

49 Next Generation Data Center A Review of Cisco s Application Centric Infrastructure

50 Challenges of the Current Data Center Strategies Until now, no agreement on what the best cloud management solution is Network, data center, storage and security admins are getting overwhelmed Complexity is making solving issues very challenging User experience is poor Sometimes the applications respond, sometimes they don t

51 Why ACI happened for Cisco IT Business Drivers & Technical Opportunities Out of Control Data Center Growth Reduce IT Costs: OpEx, CapEx Faster Business Support Better Security And Compliance Cisco IT was drowning trying to manage the configurations Provides a and Business faster policies deployment Drivers for Improved and centralized Controls Cost hundreds by reducing of of: applications We needed to build a set of new Cisco s the state-of-the-art leadership and services, and - Firewalls data centers security profiling across cost of the HW and requiring a vastly around the world, to handle: demanded less improved Cisco Technical more administrator services The business needed a Controls growth - by resources by centralizing Access and Control end-user Lists experience Focus Areas entire network maximizing effective (From Executive Leadership) - 26% growth in - Content use of all the number but at lower of applications costs and faster rollout of new operations across all global checking DC s systems we our resources across supported, year over - Intrusion all DC s year Cloud actually detection cut and IT the as prevention a IT Service budget. resources and services with Fast IT around the globe systems. less downtime for - 50% growth in - Switches storage, and year routers over year. maintenance and upgrades. MVDC estore CITEIS And additional security C i s cdevices o I T Dneeded e l i v eto r e d be constantly added. Virtualization Automation & Orchestration IaaS PaaS and SDaaS ACI Intercloud*

52 What is a web application and how does it work? The challenge is to meet Very these Complex, standards but manageable while working a securely, single data cheaply center and seamlessly with few across many applications data centers and with thousands of applications?!?

53 ACI: A Complete Rethink of the Entire Network Based on Three Primary Concepts

54 The ACI Application Network & Security Profile High Level The network & security policy is attached to the application for its entire journey through the network

55 The ACI Application Policy Infrastructure Controller Drilldown

56 How Does A single web application work with ACI?

57 Cisco IT Has Moved to ACI for Speed and Agility through an Adaptive infrastructure is a key enabler for Fast IT Adaptive User Experience: Reduces downtimes for planned changes, and provides resiliency for unplanned outages Adaptive Security: The policy model provides a higher level of network security and simplifies management, as well as a Unified Policy Model for our Hybrid Clouds

58 ACI Program Quarterly Objectives: FY15 SJC-K Engineering DC on N9K (standalone) 1 Migrate SJC-K to Fabric Cisco IT Private Cloud on ACI RTP1 DC 3 Allen & RCDN9: Traditional Application Migration to ACI (production apps wave 1) 5 Where We Are Today FY14Q3 FY14Q4 FY15Q1 FY14Q3 FY14Q4 FY15Q1 FY15Q2 FY15Q3 FY15Q4 2 ACI Design and ACI Automation (finalization) 4 Cisco IT Private Cloud on ACI Allen DC RTP1: Traditional Application Migration (non-prod) 6 Allen & RCDN9: production apps wave 2 FY15: +/ VMs on ACI All workloads on ACI: migration of 2-3 years 58

59 Thank You

60